last executing test programs: 12m23.567575927s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12m22.878138661s ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x2c}}, 0xc0c4) 12m22.294717967s ago: executing program 2 (id=12): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[]) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000000)) 12m19.19187699s ago: executing program 2 (id=15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x8c7, &(0x7f0000000240)={0x0, 0xad04, 0x1000, 0x2, 0x40002003}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 12m10.049672988s ago: executing program 2 (id=35): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff000, 0x101, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_route(r1, 0x0, 0x8011) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r6, 0x0, 0x0, 0x400) r7 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x640) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0x5, {0x2, 0x0, 0x0, 0x100}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x41) 11m54.290570473s ago: executing program 32 (id=35): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff000, 0x101, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_route(r1, 0x0, 0x8011) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r6, 0x0, 0x0, 0x400) r7 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x640) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0x5, {0x2, 0x0, 0x0, 0x100}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x41) 14.702736943s ago: executing program 5 (id=1461): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3, 0xbd}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4048814}, 0x24048800) 13.603415204s ago: executing program 3 (id=1464): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 12.91632792s ago: executing program 3 (id=1467): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$sg(0x0, 0xa, 0x531601) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xfffffffffffffde0, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x5, 0xd, 0x4, 0x2, 0xf, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x16}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 10.237617281s ago: executing program 3 (id=1478): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) 9.682839508s ago: executing program 0 (id=1480): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9.637947226s ago: executing program 3 (id=1481): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r2, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 8.991675148s ago: executing program 0 (id=1482): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$sndseq(r0, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) 8.781803895s ago: executing program 1 (id=1483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0x7, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x4, 0xfffffffffffffc00, 0x400, 0x400000ffff], 0x100000, 0x20346}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) 8.557564465s ago: executing program 0 (id=1484): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 8.071039958s ago: executing program 5 (id=1485): r0 = syz_open_dev$loop(0x0, 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 8.070265127s ago: executing program 1 (id=1486): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9f", 0xea, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r5 = getpgid(r0) fcntl$setown(r1, 0x8, r5) tkill(r0, 0x13) 7.801219875s ago: executing program 5 (id=1487): openat$nullb(0xffffff9c, &(0x7f0000000000), 0x187001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) unshare(0x22020400) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4622, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a3000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.680517002s ago: executing program 0 (id=1488): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x0) 7.568940398s ago: executing program 4 (id=1489): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$sg(0x0, 0xa, 0x531601) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xfffffffffffffde0, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x5, 0xd, 0x4, 0x2, 0xf, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x16}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 7.5518193s ago: executing program 1 (id=1490): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000dd2b4256822c9e1c000098110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008012}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000580)={0x2, @sliced={0xff63, [0x0, 0x6, 0x7, 0xa, 0x1, 0x5, 0x7, 0x8, 0x9, 0x1, 0x1, 0x6, 0x0, 0x5, 0x113, 0xbe4c, 0x3, 0x40, 0x7, 0x7, 0x401, 0x3, 0x5, 0xffff, 0x4, 0x8, 0xfff8, 0xf, 0x800, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x100, 0x2, 0xc0, 0xff, 0x8000, 0x3, 0x4, 0x7fff, 0x4c, 0x2, 0xf8ff, 0x81, 0x2, 0x7fff], 0xe6}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000000c0)={r5, 0x73ae, 0x0, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 6.901760217s ago: executing program 0 (id=1491): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x12, 0x3a, 0xe, 0xa, 0x7, 0x5, 0x1, 0x8010000, 0xe755a3d832dace16}}) 5.739622193s ago: executing program 5 (id=1492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) accept$packet(r2, 0x0, &(0x7f00000004c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xe8) close(r4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000011140113000000000008000008004a0002000000080003000400000008004b"], 0x38}, 0x1, 0x0, 0x0, 0x480d1}, 0x40800) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000003c0)={0x8005, 0xffffffffffffffff, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.326795126s ago: executing program 3 (id=1493): syz_open_dev$video4linux(0x0, 0x100000000009, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) gettid() eventfd(0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x9, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.397190666s ago: executing program 4 (id=1494): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write$sndseq(r0, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) 3.691925402s ago: executing program 0 (id=1495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x2820920) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080000000a14030600"], 0x28}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) 3.691204922s ago: executing program 4 (id=1496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3.647544518s ago: executing program 1 (id=1497): r0 = syz_open_dev$loop(0x0, 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 3.361699724s ago: executing program 1 (id=1498): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 2.171986472s ago: executing program 1 (id=1499): socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800000000000b8"], 0x18}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 1.96413864s ago: executing program 4 (id=1500): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9f", 0xea, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r5 = getpgid(r0) fcntl$setown(r1, 0x8, r5) tkill(r0, 0x13) 1.678372868s ago: executing program 5 (id=1501): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @bt={0x6, 0x8001, 0x8, 0x7, 0x7, 0x1, 0x5}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040011}, 0x20000800) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x1, 0x0) getsockname$qrtr(r1, &(0x7f0000000140), &(0x7f0000000340)=0xc) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x8084) 1.577861685s ago: executing program 4 (id=1502): openat$nullb(0xffffff9c, &(0x7f0000000000), 0x187001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) unshare(0x22020400) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4622, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a3000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.292165853s ago: executing program 5 (id=1503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0004000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100)=ANY=[@ANYBLOB="bc"]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000000)={0x7}) 480.874287ms ago: executing program 3 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 0s ago: executing program 4 (id=1505): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010603010000000200002b"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) kernel console output (not intermixed with test programs): 112.393780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.394953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.396135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.396758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.397321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.839826][ T6019] block device autoloading is deprecated and will be removed. [ 116.989730][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 117.903419][ T6027] tmpfs: Unknown parameter 'quot' [ 119.295917][ T6036] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 120.497558][ T6036] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 122.881350][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 122.894119][ T6058] : entered promiscuous mode [ 126.276415][ T6062] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.276435][ T6062] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 126.460494][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.751374][ T1229] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 126.799823][ T6062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.799846][ T6062] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 127.018577][ T1229] usb 4-1: No LPM exit latency info found, disabling LPM. [ 127.062517][ T1229] usb 4-1: string descriptor 0 read error: -22 [ 127.062700][ T1229] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 127.062724][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.099343][ T1229] usb 4-1: config 0 descriptor?? [ 127.705315][ T6091] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 127.736053][ T6062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.736483][ T6062] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 127.799230][ T6091] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.406718][ T6062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.406743][ T6062] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.441865][ T6062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.441891][ T6062] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 131.885985][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 132.012756][ T6120] : entered promiscuous mode [ 132.319515][ T1229] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 132.416302][ T1229] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 132.416366][ T1229] dib0700: firmware download failed at 7 with -22 [ 134.473009][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 135.132377][ T5935] usb 4-1: USB disconnect, device number 2 [ 135.310503][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.470555][ T5850] usb 5-1: device descriptor read/64, error -71 [ 135.710957][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.850567][ T5850] usb 5-1: device descriptor read/64, error -71 [ 135.978721][ T5850] usb usb5-port1: attempt power cycle [ 136.350506][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.381403][ T5850] usb 5-1: device descriptor read/8, error -71 [ 136.650726][ T5850] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.675047][ T5850] usb 5-1: device descriptor read/8, error -71 [ 136.821367][ T5850] usb usb5-port1: unable to enumerate USB device [ 138.502137][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.502231][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.025192][ T6177] tipc: Started in network mode [ 139.025223][ T6177] tipc: Node identity 321d47edad89, cluster identity 4711 [ 139.025970][ T6177] tipc: Enabled bearer , priority 0 [ 139.042153][ T6181] syzkaller0: entered promiscuous mode [ 139.042188][ T6181] syzkaller0: entered allmulticast mode [ 139.456425][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 139.717593][ T6181] tipc: Resetting bearer [ 140.053939][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.072021][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.078462][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.099661][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.110793][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.132457][ T5924] tipc: Node number set to 2677295085 [ 140.184131][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.184662][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.185745][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.201161][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.203574][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.224090][ T6181] tipc: Disabling bearer [ 142.470152][ T5844] Bluetooth: hci5: command tx timeout [ 144.450656][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.546957][ T5844] Bluetooth: hci5: command tx timeout [ 144.580638][ T44] usb 4-1: device descriptor read/64, error -71 [ 145.030664][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.229739][ T44] usb 4-1: device descriptor read/64, error -71 [ 145.349831][ T44] usb usb4-port1: attempt power cycle [ 145.920591][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.943727][ T44] usb 4-1: device descriptor read/8, error -71 [ 146.310755][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 146.620521][ T5844] Bluetooth: hci5: command tx timeout [ 146.861595][ T6269] syz.3.75 (6269) used greatest stack depth: 18968 bytes left [ 146.918383][ T2220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.089635][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 147.142241][ T6259] : entered promiscuous mode [ 148.719413][ T5844] Bluetooth: hci5: command tx timeout [ 149.236245][ T2220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.402597][ T2220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.562762][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 150.972539][ T2220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.682391][ T6313] syz.3.85 (6313) used greatest stack depth: 18472 bytes left [ 152.700641][ T5924] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.830654][ T5924] usb 2-1: device descriptor read/64, error -71 [ 153.060724][ T31] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 153.070912][ T5924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.178608][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.178741][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.178980][ T6211] bridge_slave_0: entered allmulticast mode [ 153.195237][ T6211] bridge_slave_0: entered promiscuous mode [ 153.219116][ T31] usb 4-1: No LPM exit latency info found, disabling LPM. [ 153.230668][ T5924] usb 2-1: device descriptor read/64, error -71 [ 153.249490][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.249660][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.250252][ T6211] bridge_slave_1: entered allmulticast mode [ 153.251796][ T31] usb 4-1: string descriptor 0 read error: -22 [ 153.252007][ T31] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 153.252032][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.341889][ T5924] usb usb2-port1: attempt power cycle [ 153.376101][ T31] usb 4-1: config 0 descriptor?? [ 153.389540][ T6211] bridge_slave_1: entered promiscuous mode [ 153.544864][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 153.627999][ T31] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 153.640108][ T31] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.640144][ T31] dib0700: firmware download failed at 7 with -22 [ 153.680706][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.702719][ T5924] usb 2-1: device descriptor read/8, error -71 [ 153.707725][ T31] usb 4-1: USB disconnect, device number 7 [ 153.961497][ T5924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.986340][ T5924] usb 2-1: device descriptor read/8, error -71 [ 154.090923][ T5924] usb usb2-port1: unable to enumerate USB device [ 154.408099][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.582940][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.689109][ T6342] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 155.512332][ T6350] tmpfs: Unknown parameter 'quot' [ 156.576537][ T6211] team0: Port device team_slave_0 added [ 156.771913][ T6211] team0: Port device team_slave_1 added [ 157.721318][ T2220] bridge_slave_1: left allmulticast mode [ 157.722699][ T2220] bridge_slave_1: left promiscuous mode [ 157.725255][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.831895][ T2220] bridge_slave_0: left allmulticast mode [ 157.831929][ T2220] bridge_slave_0: left promiscuous mode [ 157.832204][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.198415][ T6373] fuse: Unknown parameter '0x0000000000000003' [ 160.342484][ T6013] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.511363][ T6013] usb 1-1: device descriptor read/64, error -71 [ 160.770603][ T6013] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.900652][ T6013] usb 1-1: device descriptor read/64, error -71 [ 161.010961][ T6013] usb usb1-port1: attempt power cycle [ 161.376227][ T6013] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.391309][ T6013] usb 1-1: device descriptor read/8, error -71 [ 161.640571][ T6013] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.669989][ T6013] usb 1-1: device descriptor read/8, error -71 [ 161.771919][ T6013] usb usb1-port1: unable to enumerate USB device [ 162.291436][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.381246][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.532350][ T2220] bond0 (unregistering): Released all slaves [ 162.822858][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.822871][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.822891][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.825216][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.825231][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.825253][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.342303][ T6211] hsr_slave_0: entered promiscuous mode [ 164.346654][ T6211] hsr_slave_1: entered promiscuous mode [ 164.351791][ T6211] debugfs: 'hsr0' already exists in 'hsr' [ 164.351821][ T6211] Cannot create hsr debugfs directory [ 166.500442][ T2220] hsr_slave_0: left promiscuous mode [ 166.574318][ T2220] hsr_slave_1: left promiscuous mode [ 166.575210][ T2220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.575283][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.731109][ T2220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.731135][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.170916][ T2220] veth1_macvtap: left promiscuous mode [ 167.171192][ T2220] veth0_macvtap: left promiscuous mode [ 167.171535][ T2220] veth1_vlan: left promiscuous mode [ 167.171877][ T2220] veth0_vlan: left promiscuous mode [ 168.800599][ T6013] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.932269][ T6013] usb 2-1: device descriptor read/64, error -71 [ 169.180633][ T6013] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.312158][ T6013] usb 2-1: device descriptor read/64, error -71 [ 169.422565][ T6013] usb usb2-port1: attempt power cycle [ 169.770756][ T6013] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.794913][ T6013] usb 2-1: device descriptor read/8, error -71 [ 169.866187][ T6442] fuse: Bad value for 'fd' [ 170.050601][ T6013] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.064822][ T6013] usb 2-1: device descriptor read/8, error -71 [ 170.172667][ T6013] usb usb2-port1: unable to enumerate USB device [ 170.861614][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 171.788435][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 172.075507][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 175.266518][ T6468] tmpfs: Unknown parameter 'quot' [ 176.332761][ T6472] fuse: Bad value for 'fd' [ 178.605376][ T6211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.752009][ T6211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.922281][ T6211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.017475][ T6211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.325951][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.499389][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.548354][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.548677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.763051][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.778137][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.871419][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 181.980599][ T38] audit: type=1326 audit(1756205951.175:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980655][ T38] audit: type=1326 audit(1756205951.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980699][ T38] audit: type=1326 audit(1756205951.185:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980750][ T38] audit: type=1326 audit(1756205951.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980804][ T38] audit: type=1326 audit(1756205951.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980844][ T38] audit: type=1326 audit(1756205951.185:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980882][ T38] audit: type=1326 audit(1756205951.185:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980941][ T38] audit: type=1326 audit(1756205951.185:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.980985][ T38] audit: type=1326 audit(1756205951.185:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 181.981031][ T38] audit: type=1326 audit(1756205951.185:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6176dcebe9 code=0x7ffc0000 [ 182.160650][ T6539] input: syz0 as /devices/virtual/input/input5 [ 183.301832][ T6549] fuse: Bad value for 'fd' [ 183.329169][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.406608][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 183.407700][ T6552] openvswitch: : Dropping previously announced user features [ 186.118491][ T6570] sctp: [Deprecated]: syz.0.142 (pid 6570) Use of int in maxseg socket option. [ 186.118491][ T6570] Use struct sctp_assoc_value instead [ 186.636553][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 187.760092][ T6211] veth0_vlan: entered promiscuous mode [ 187.857796][ T6211] veth1_vlan: entered promiscuous mode [ 188.012434][ T6211] veth0_macvtap: entered promiscuous mode [ 188.097595][ T6211] veth1_macvtap: entered promiscuous mode [ 188.453350][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.489268][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.756674][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.758999][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.803657][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.830038][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.776494][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 190.902297][ T6627] openvswitch: : Dropping previously announced user features [ 190.934143][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.934373][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.762239][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.762259][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.945901][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 192.364931][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 196.162940][ T31] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 196.394883][ T31] usb 4-1: No LPM exit latency info found, disabling LPM. [ 196.445293][ T31] usb 4-1: string descriptor 0 read error: -22 [ 196.445585][ T31] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 196.445612][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.482437][ T31] usb 4-1: config 0 descriptor?? [ 199.127484][ T6690] trusted_key: syz.4.163 sent an empty control message without MSG_MORE. [ 199.588296][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.588412][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.581110][ T31] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 201.583001][ T31] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 201.583037][ T31] dib0700: firmware download failed at 7 with -22 [ 203.073630][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 203.100507][ C1] vcan0: j1939_session_tx_dat: 0xffff888031ae5800: queue data error: -100 [ 203.142396][ T6707] trusted_key: encrypted_key: key user:syz not found [ 203.817429][ T5849] usb 4-1: USB disconnect, device number 8 [ 205.200514][ T6709] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.352596][ T6709] usb 4-1: Using ep0 maxpacket: 16 [ 205.369380][ T6709] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 205.369411][ T6709] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 205.369432][ T6709] usb 4-1: Product: syz [ 205.369447][ T6709] usb 4-1: Manufacturer: syz [ 205.369461][ T6709] usb 4-1: SerialNumber: syz [ 205.457595][ T6709] usb 4-1: config 0 descriptor?? [ 205.831773][ T6709] usb 4-1: USB disconnect, device number 9 [ 207.073255][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.179'. [ 211.208172][ T6803] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 211.712639][ T6280] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.860639][ T6280] usb 5-1: Using ep0 maxpacket: 16 [ 211.866001][ T6280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.866026][ T6280] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.866062][ T6280] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.866084][ T6280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.943339][ T6280] usb 5-1: config 0 descriptor?? [ 212.247438][ T6820] netlink: 'syz.1.193': attribute type 10 has an invalid length. [ 212.247462][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 212.286811][ T6820] batman_adv: batadv0: Adding interface: vlan1 [ 212.286829][ T6820] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.286863][ T6820] batman_adv: batadv0: Interface activated: vlan1 [ 213.314664][ T6837] tmpfs: Unknown parameter 'quot' [ 215.478895][ T6856] sctp: [Deprecated]: syz.3.198 (pid 6856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.478895][ T6856] Use struct sctp_sack_info instead [ 217.145193][ T6280] usb 5-1: USB disconnect, device number 6 [ 219.594336][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.968130][ T6923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.985918][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.215'. [ 222.997494][ T6929] : entered promiscuous mode [ 223.523645][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 225.993428][ T6948] loop2: detected capacity change from 0 to 7 [ 226.014762][ T6948] Dev loop2: unable to read RDB block 7 [ 226.014809][ T6948] loop2: unable to read partition table [ 226.015045][ T6948] loop2: partition table beyond EOD, truncated [ 226.015076][ T6948] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.152656][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 228.156427][ T6974] openvswitch: : Dropping previously announced user features [ 229.858610][ T6981] vivid-000: ================= START STATUS ================= [ 229.858737][ T6981] vivid-000: Test Pattern: 75% Colorbar [ 229.858772][ T6981] vivid-000: Fill Percentage of Frame: 100 [ 229.889010][ T6981] vivid-000: Horizontal Movement: No Movement [ 229.889059][ T6981] vivid-000: Vertical Movement: No Movement [ 229.889078][ T6981] vivid-000: OSD Text Mode: All [ 229.889102][ T6981] vivid-000: Show Border: false [ 229.889120][ T6981] vivid-000: Show Square: false [ 229.889137][ T6981] vivid-000: Sensor Flipped Horizontally: false [ 229.889156][ T6981] vivid-000: Sensor Flipped Vertically: false [ 229.889173][ T6981] vivid-000: Insert SAV Code in Image: false [ 229.889195][ T6981] vivid-000: Insert EAV Code in Image: false [ 229.889213][ T6981] vivid-000: Insert Video Guard Band: false [ 229.889232][ T6981] vivid-000: Reduced Framerate: false [ 229.889268][ T6981] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 229.889290][ T6981] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 229.889309][ T6981] vivid-000: Enable Capture Cropping: true [ 229.889328][ T6981] vivid-000: Enable Capture Composing: true [ 229.889347][ T6981] vivid-000: Enable Capture Scaler: true [ 229.889366][ T6981] vivid-000: Timestamp Source: End of Frame [ 229.889385][ T6981] vivid-000: Colorspace: sRGB [ 229.889403][ T6981] vivid-000: Transfer Function: Default [ 229.889422][ T6981] vivid-000: Y'CbCr Encoding: Default [ 229.889440][ T6981] vivid-000: HSV Encoding: Hue 0-179 [ 229.889459][ T6981] vivid-000: Quantization: Default [ 229.889476][ T6981] vivid-000: Apply Alpha To Red Only: false [ 229.889495][ T6981] vivid-000: Standard Aspect Ratio: 4x3 [ 229.889514][ T6981] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 229.889538][ T6981] vivid-000: DV Timings: 640x480p59 inactive [ 229.889561][ T6981] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 230.059036][ T6981] vivid-000: Maximum EDID Blocks: 2 [ 230.059068][ T6981] vivid-000: Limited RGB Range (16-235): false [ 230.059088][ T6981] vivid-000: Rx RGB Quantization Range: Automatic [ 230.059108][ T6981] vivid-000: Power Present: 0x00000001 [ 230.059143][ T6981] tpg source WxH: 320x240 (Y'CbCr) [ 230.059157][ T6981] tpg field: 1 [ 230.059165][ T6981] tpg crop: (0,0)/320x240 [ 230.059178][ T6981] tpg compose: (0,0)/320x240 [ 230.059192][ T6981] tpg colorspace: 8 [ 230.059200][ T6981] tpg transfer function: 0/0 [ 230.059211][ T6981] tpg Y'CbCr encoding: 0/0 [ 230.059221][ T6981] tpg quantization: 0/0 [ 230.059231][ T6981] tpg RGB range: 0/2 [ 230.059241][ T6981] vivid-000: ================== END STATUS ================== [ 231.420491][ T6986] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 231.793695][ T6991] sctp: [Deprecated]: syz.4.230 (pid 6991) Use of int in maxseg socket option. [ 231.793695][ T6991] Use struct sctp_assoc_value instead [ 231.799472][ T6986] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 232.502356][ T7001] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 233.196666][ T7001] team0: Port device netdevsim0 added [ 234.290533][ T6280] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.463940][ T6280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.463970][ T6280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.464011][ T6280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.464035][ T6280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.605175][ T6280] usb 2-1: config 0 descriptor?? [ 234.761919][ T7013] ALSA: mixer_oss: invalid OSS volume '' [ 234.982108][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 239.980752][ T6280] usb 2-1: string descriptor 0 read error: -110 [ 240.241513][ T6245] usb 2-1: USB disconnect, device number 10 [ 241.023722][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.245'. [ 241.023787][ T7047] bridge_slave_1: left allmulticast mode [ 241.023808][ T7047] bridge_slave_1: left promiscuous mode [ 241.026134][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.290264][ T7049] input: syz0 as /devices/virtual/input/input6 [ 241.583758][ T7047] bridge_slave_0: left allmulticast mode [ 241.583785][ T7047] bridge_slave_0: left promiscuous mode [ 241.583993][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.777520][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 247.204493][ T6245] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.373607][ T6245] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.373641][ T6245] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.373681][ T6245] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.373787][ T6245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.383167][ T6245] usb 4-1: config 0 descriptor?? [ 248.285042][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.254'. [ 248.463420][ T7091] trusted_key: encrypted_key: key user:syz not found [ 250.047785][ T6245] usb 4-1: string descriptor 0 read error: -71 [ 250.072425][ T6245] usb 4-1: USB disconnect, device number 10 [ 257.228695][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 257.360516][ T6280] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.430447][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 257.433036][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.433088][ T5904] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 257.433112][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.493872][ T5904] usb 6-1: config 0 descriptor?? [ 257.573177][ T6280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.573205][ T6280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.573254][ T6280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.573277][ T6280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.722487][ T6280] usb 2-1: config 0 descriptor?? [ 259.042736][ T7138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.270'. [ 259.681159][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 259.681188][ T7145] IPVS: Unknown mcast interface: vcan0 [ 259.763163][ T5904] usbhid 6-1:0.0: can't add hid device: -71 [ 259.763300][ T5904] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 260.074650][ T6280] usb 2-1: string descriptor 0 read error: -71 [ 260.150552][ T6280] usb 2-1: USB disconnect, device number 11 [ 260.151104][ T5904] usb 6-1: USB disconnect, device number 2 [ 260.285399][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 260.552977][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.492302][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.492382][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.580835][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 272.549343][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 272.611936][ T7199] process 'syz.5.285' launched './file0' with NULL argv: empty string added [ 274.092055][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 274.457593][ T7206] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 274.635032][ T7206] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 275.768130][ T7206] veth3: entered promiscuous mode [ 275.772560][ T7206] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 276.278206][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 276.330775][ T7217] openvswitch: : Dropping previously announced user features [ 276.474049][ T6013] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 276.950610][ T6013] usb 4-1: device descriptor read/64, error -71 [ 277.290542][ T6013] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 277.490928][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'. [ 277.490957][ T7213] IPVS: Unknown mcast interface: vcan0 [ 277.560436][ T6013] usb 4-1: device descriptor read/64, error -71 [ 277.680478][ T6013] usb usb4-port1: attempt power cycle [ 278.210858][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'. [ 278.211999][ T7230] wg1: entered promiscuous mode [ 278.212028][ T7230] wg1: entered allmulticast mode [ 278.660421][ T1229] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 278.810458][ T1229] usb 5-1: Using ep0 maxpacket: 16 [ 278.837849][ T1229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.837903][ T1229] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 278.837927][ T1229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.895208][ T1229] usb 5-1: config 0 descriptor?? [ 281.391810][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.430850][ T1229] usbhid 5-1:0.0: can't add hid device: -71 [ 281.430956][ T1229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 281.523818][ T1229] usb 5-1: USB disconnect, device number 7 [ 281.540998][ T7245] netlink: 'syz.5.297': attribute type 72 has an invalid length. [ 281.541018][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.297'. [ 284.498328][ T1229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.650483][ T1229] usb 1-1: device descriptor read/64, error -71 [ 284.890567][ T1229] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 285.040751][ T1229] usb 1-1: device descriptor read/64, error -71 [ 285.151136][ T1229] usb usb1-port1: attempt power cycle [ 285.490664][ T1229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 285.512704][ T1229] usb 1-1: device descriptor read/8, error -71 [ 285.760563][ T1229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 285.783751][ T1229] usb 1-1: device descriptor read/8, error -71 [ 285.890827][ T1229] usb usb1-port1: unable to enumerate USB device [ 286.510596][ T1229] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 286.662097][ T1229] usb 1-1: Using ep0 maxpacket: 16 [ 286.665367][ T1229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.665417][ T1229] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 286.665441][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.732060][ T1229] usb 1-1: config 0 descriptor?? [ 289.443831][ T1229] usbhid 1-1:0.0: can't add hid device: -71 [ 289.444325][ T1229] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 289.474075][ T1229] usb 1-1: USB disconnect, device number 10 [ 290.619771][ T7304] tipc: Started in network mode [ 290.619798][ T7304] tipc: Node identity 0a1bf9b2c482, cluster identity 4711 [ 290.624149][ T7304] tipc: Enabled bearer , priority 0 [ 290.625233][ T7304] syzkaller0: entered promiscuous mode [ 290.625252][ T7304] syzkaller0: entered allmulticast mode [ 290.997832][ T7309] tipc: Resetting bearer [ 291.195378][ T7303] tipc: Resetting bearer [ 291.589039][ T7303] tipc: Disabling bearer [ 291.621627][ T1229] tipc: Node number set to 3466197426 [ 293.462853][ T7329] xfrm0: entered promiscuous mode [ 293.462885][ T7329] xfrm0: entered allmulticast mode [ 296.967980][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 297.430623][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 297.613076][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.613096][ T5917] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.613122][ T5917] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.613138][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.633640][ T5917] usb 6-1: config 0 descriptor?? [ 297.966584][ T7367] netlink: 32 bytes leftover after parsing attributes in process `syz.5.327'. [ 298.666945][ T5917] usb 6-1: string descriptor 0 read error: -71 [ 298.673195][ T5917] usb 6-1: USB disconnect, device number 3 [ 299.223348][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.660473][ T1229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.790637][ T1229] usb 5-1: device descriptor read/64, error -71 [ 301.030648][ T1229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 301.174616][ T1229] usb 5-1: device descriptor read/64, error -71 [ 301.292848][ T1229] usb usb5-port1: attempt power cycle [ 301.706102][ T1229] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 301.721231][ T1229] usb 5-1: device descriptor read/8, error -71 [ 302.209251][ T1229] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 302.221829][ T1229] usb 5-1: device descriptor read/8, error -71 [ 302.386756][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.387968][ T1229] usb usb5-port1: unable to enumerate USB device [ 304.100458][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.837013][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.842644][ T7413] ALSA: mixer_oss: invalid OSS volume '' [ 305.069426][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.680825][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.863662][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.863690][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.863729][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.863752][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.868776][ T9] usb 4-1: config 0 descriptor?? [ 306.320211][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.440351][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.348'. [ 306.441166][ T7424] IPVS: Unknown mcast interface: vcan0 [ 307.240226][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.340407][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 307.476586][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.347'. [ 309.369280][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 309.441000][ T9] usb 4-1: string descriptor 0 read error: -71 [ 309.449978][ T9] usb 4-1: USB disconnect, device number 14 [ 309.931009][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 311.217195][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 311.826391][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 311.826502][ T7470] IPVS: Unknown mcast interface: vcan0 [ 312.982441][ T7474] fuse: Unknown parameter 'grou00000000000000000000' [ 315.185815][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 315.185830][ T38] audit: type=1326 audit(1756206084.415:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7495 comm="syz.0.369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72e8dfebe9 code=0x0 [ 316.451495][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.372'. [ 316.451605][ T7503] IPVS: Unknown mcast interface: vcan0 [ 317.198933][ T7505] fuse: Unknown parameter 'grou00000000000000000000' [ 317.312770][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.375'. [ 318.801830][ T7528] wg1: entered promiscuous mode [ 318.802002][ T7528] wg1: entered allmulticast mode [ 320.004674][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.040470][ T6279] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 320.305961][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.048867][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.318642][ T6279] usb 2-1: No LPM exit latency info found, disabling LPM. [ 321.380544][ T6709] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 321.514751][ T6279] usb 2-1: string descriptor 0 read error: -22 [ 321.514930][ T6279] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 321.514955][ T6279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.537574][ T6279] usb 2-1: config 0 descriptor?? [ 321.553050][ T6709] usb 6-1: device descriptor read/64, error -71 [ 321.820472][ T6709] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 321.950500][ T6709] usb 6-1: device descriptor read/64, error -71 [ 322.061187][ T6709] usb usb6-port1: attempt power cycle [ 322.400520][ T6709] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 322.473037][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.473196][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.555943][ T6709] usb 6-1: device descriptor read/8, error -71 [ 322.889717][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.890194][ T6709] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 323.110458][ T6709] usb 6-1: device not accepting address 7, error -71 [ 323.111727][ T6709] usb usb6-port1: unable to enumerate USB device [ 323.620563][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.734372][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 323.734483][ T7549] IPVS: Unknown mcast interface: vcan0 [ 324.858294][ T7551] fuse: Unknown parameter 'grou00000000000000000000' [ 325.791220][ T7555] tipc: Enabling of bearer rejected, failed to enable media [ 326.784674][ T6279] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 326.787118][ T6279] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 326.787168][ T6279] dib0700: firmware download failed at 7 with -22 [ 327.612891][ T7567] netlink: 'syz.5.389': attribute type 21 has an invalid length. [ 327.690272][ T1229] usb 2-1: USB disconnect, device number 12 [ 329.791896][ T7585] mmap: syz.4.395 (7585) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.097840][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'. [ 331.097951][ T7594] IPVS: Unknown mcast interface: vcan0 [ 332.355326][ T7599] fuse: Unknown parameter 'group_i00000000000000000000' [ 333.323576][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.401'. [ 333.534225][ T7609] team1: entered promiscuous mode [ 333.534256][ T7609] team1: entered allmulticast mode [ 334.257174][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.405'. [ 334.949809][ T7625] tipc: Started in network mode [ 334.949832][ T7625] tipc: Node identity 9efc1544d77a, cluster identity 4711 [ 334.950123][ T7625] tipc: Enabled bearer , priority 0 [ 334.972555][ T7625] syzkaller0: entered promiscuous mode [ 334.972576][ T7625] syzkaller0: entered allmulticast mode [ 335.001564][ T7627] fuse: Unknown parameter 'group_i00000000000000000000' [ 335.018362][ T7625] tipc: Resetting bearer [ 335.069970][ T7624] tipc: Resetting bearer [ 335.361130][ T7624] tipc: Disabling bearer [ 335.422922][ T7631] fuse: Unknown parameter 'group_i00000000000000000000' [ 335.844690][ T7635] IPv6: sit1: Disabled Multicast RS [ 337.687190][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 338.283676][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 339.178701][ T7662] fuse: Unknown parameter 'group_i00000000000000000000' [ 339.322751][ T7660] openvswitch: : Dropping previously announced user features [ 339.964753][ T7668] fuse: Unknown parameter 'group_i00000000000000000000' [ 341.560154][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 341.560265][ T7690] IPVS: Unknown mcast interface: vcan0 [ 342.567055][ T7692] tmpfs: Unknown parameter 'quot' [ 344.599752][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 345.419408][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.444'. [ 348.134910][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 348.181124][ T7758] team1: entered promiscuous mode [ 348.181156][ T7758] team1: entered allmulticast mode [ 348.442781][ T7761] fuse: Unknown parameter 'group_id00000000000000000000' [ 349.520582][ T6280] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 349.753204][ T6280] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.753984][ T6280] usb 2-1: not running at top speed; connect to a high speed hub [ 349.755241][ T6280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.755263][ T6280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.761197][ T6280] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.761225][ T6280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.761245][ T6280] usb 2-1: Product: syz [ 349.761259][ T6280] usb 2-1: Manufacturer: syz [ 349.761273][ T6280] usb 2-1: SerialNumber: syz [ 352.548760][ T6280] usb 2-1: 0:2 : does not exist [ 352.548852][ T6280] usb 2-1: unit 4 not found! [ 352.615265][ T6280] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 352.624504][ T6280] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 353.092592][ T6280] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 353.144008][ T6280] usb 2-1: USB disconnect, device number 13 [ 353.934243][ T7211] udevd[7211]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.859388][ T7805] tipc: Enabling of bearer rejected, failed to enable media [ 354.963580][ T7809] fuse: Bad value for 'fd' [ 355.634108][ T7791] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 355.636174][ T7791] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 355.684693][ T7813] tmpfs: Unknown parameter 'quot' [ 356.367661][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 356.854550][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 356.917539][ T7828] team2: entered promiscuous mode [ 356.917570][ T7828] team2: entered allmulticast mode [ 357.020507][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 358.799760][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 358.799874][ T7843] IPVS: Unknown mcast interface: vcan0 [ 359.480415][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 359.764915][ T7847] fuse: Bad value for 'user_id' [ 359.764936][ T7847] fuse: Bad value for 'user_id' [ 360.847096][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.481'. [ 360.847249][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 360.902034][ T7853] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 361.946607][ T7870] tmpfs: Unknown parameter 'quot' [ 362.165637][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 363.075412][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.490'. [ 363.445246][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 363.450211][ T7884] openvswitch: : Dropping previously announced user features [ 366.490545][ T6279] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 366.710906][ T6279] usb 6-1: config 0 has no interfaces? [ 366.893895][ T6279] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.893928][ T6279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.893949][ T6279] usb 6-1: Product: syz [ 366.893964][ T6279] usb 6-1: Manufacturer: syz [ 366.893979][ T6279] usb 6-1: SerialNumber: syz [ 367.144560][ T6279] usb 6-1: config 0 descriptor?? [ 368.209267][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 369.504857][ T7914] tmpfs: Unknown parameter 'quot' [ 370.293819][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.395302][ T10] usb 6-1: USB disconnect, device number 8 [ 376.001773][ T7953] tipc: Started in network mode [ 376.001807][ T7953] tipc: Node identity f2f99b071bcc, cluster identity 4711 [ 376.001986][ T7953] tipc: Enabled bearer , priority 0 [ 376.058306][ T7953] syzkaller0: entered promiscuous mode [ 376.058330][ T7953] syzkaller0: entered allmulticast mode [ 376.169275][ T7953] tipc: Resetting bearer [ 376.424332][ T7952] tipc: Resetting bearer [ 376.701798][ T7952] tipc: Disabling bearer [ 377.418937][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 377.710557][ T7961] IPVS: Unknown mcast interface: vcan0 [ 379.730448][ T5904] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 379.956192][ T5904] usb 1-1: No LPM exit latency info found, disabling LPM. [ 379.991360][ T5904] usb 1-1: string descriptor 0 read error: -22 [ 379.991513][ T5904] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 379.991536][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.222772][ T5904] usb 1-1: config 0 descriptor?? [ 380.381798][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 380.381818][ T7995] IPVS: Unknown mcast interface: vcan0 [ 383.909289][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.911556][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.972383][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 385.342099][ T5904] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 385.343782][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 385.394744][ T5904] dib0700: firmware download failed at 7 with -22 [ 386.540006][ T6280] usb 1-1: USB disconnect, device number 11 [ 387.120118][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.530'. [ 388.140664][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.533'. [ 388.327872][ T8036] team2: entered promiscuous mode [ 388.327904][ T8036] team2: entered allmulticast mode [ 393.121706][ T6280] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 393.349991][ T8078] fuse: Bad value for 'fd' [ 393.425738][ T6280] usb 5-1: No LPM exit latency info found, disabling LPM. [ 393.480171][ T6280] usb 5-1: string descriptor 0 read error: -22 [ 393.481460][ T6280] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 393.481489][ T6280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.518408][ T6280] usb 5-1: config 0 descriptor?? [ 394.191385][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 398.621316][ T6280] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 398.725613][ T6280] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 398.725666][ T6280] dib0700: firmware download failed at 7 with -22 [ 399.108521][ T5904] usb 5-1: USB disconnect, device number 12 [ 399.676543][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 400.240373][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 400.397473][ T8096] team1: entered promiscuous mode [ 400.397505][ T8096] team1: entered allmulticast mode [ 400.454232][ T10] usb 5-1: config 1 has an invalid interface number: 175 but max is 0 [ 400.454253][ T10] usb 5-1: config 1 has no interface number 0 [ 400.454275][ T10] usb 5-1: config 1 interface 175 has no altsetting 0 [ 400.456544][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=e7a5, bcdDevice=5d.f4 [ 400.456563][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.456575][ T10] usb 5-1: Product: syz [ 400.456585][ T10] usb 5-1: Manufacturer: syz [ 400.456594][ T10] usb 5-1: SerialNumber: syz [ 401.398925][ T10] usb 5-1: USB disconnect, device number 13 [ 402.762535][ T8122] tmpfs: Unknown parameter 'quot' [ 403.626131][ T8128] fuse: Bad value for 'fd' [ 404.516446][ T8140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.933555][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.563'. [ 407.805685][ T8163] fuse: Bad value for 'fd' [ 407.860482][ T5904] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 407.952400][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 408.013523][ T5904] usb 1-1: config 1 has an invalid interface number: 175 but max is 0 [ 408.013552][ T5904] usb 1-1: config 1 has no interface number 0 [ 408.013586][ T5904] usb 1-1: config 1 interface 175 has no altsetting 0 [ 408.016946][ T5904] usb 1-1: New USB device found, idVendor=05ac, idProduct=e7a5, bcdDevice=5d.f4 [ 408.016976][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.016997][ T5904] usb 1-1: Product: syz [ 408.017011][ T5904] usb 1-1: Manufacturer: syz [ 408.017026][ T5904] usb 1-1: SerialNumber: syz [ 408.080126][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 408.507274][ T8171] team3: entered promiscuous mode [ 408.507296][ T8171] team3: entered allmulticast mode [ 408.911731][ T5904] usb 1-1: USB disconnect, device number 12 [ 410.280964][ T8192] netlink: 'syz.0.576': attribute type 9 has an invalid length. [ 410.280987][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 411.336792][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 412.207770][ T8210] fuse: Invalid rootmode [ 412.565005][ T8216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.583'. [ 413.580531][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 414.442165][ T8235] tmpfs: Unknown parameter 'quot' [ 416.364867][ T8247] fuse: Invalid rootmode [ 416.500493][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 416.623687][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.595'. [ 416.654838][ T5904] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.654868][ T5904] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 416.654888][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.654943][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 416.654971][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 416.657477][ T5904] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.657507][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.657527][ T5904] usb 5-1: Product: syz [ 416.657552][ T5904] usb 5-1: Manufacturer: syz [ 416.767771][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 416.780402][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 416.797111][ T8253] tipc: Enabling of bearer rejected, failed to enable media [ 416.834749][ T5904] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 416.834783][ T5904] cdc_wdm 5-1:1.0: Unknown control protocol [ 417.263638][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.597'. [ 419.392174][ T1229] usb 5-1: USB disconnect, device number 14 [ 419.688821][ T8287] fuse: Invalid rootmode [ 420.190189][ T8293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.607'. [ 422.325306][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.611'. [ 422.842401][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880354e5400: rx timeout, send abort [ 422.845454][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880354e7800: rx timeout, send abort [ 422.845707][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880354e5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 422.845795][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880354e7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 423.096982][ T8299] syzkaller0: entered promiscuous mode [ 423.097003][ T8299] syzkaller0: entered allmulticast mode [ 424.083801][ T8326] fuse: Bad value for 'rootmode' [ 424.134005][ T8323] netlink: 'syz.4.616': attribute type 9 has an invalid length. [ 424.134029][ T8323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 425.155821][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.619'. [ 426.464805][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.474130][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'. [ 426.491410][ T8362] tipc: Enabled bearer , priority 0 [ 426.492587][ T8362] syzkaller0: entered promiscuous mode [ 426.492617][ T8362] syzkaller0: entered allmulticast mode [ 426.850807][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.394481][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.510740][ T8359] tipc: Resetting bearer [ 427.857159][ T8359] tipc: Disabling bearer [ 429.089426][ T8384] netlink: 'syz.4.633': attribute type 21 has an invalid length. [ 429.522733][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 429.858872][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.636'. [ 431.988293][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.488677][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.480885][ T8413] input: syz0 as /devices/virtual/input/input13 [ 433.816656][ T8416] tipc: Enabled bearer , priority 0 [ 433.817319][ T8416] syzkaller0: entered promiscuous mode [ 433.817337][ T8416] syzkaller0: entered allmulticast mode [ 434.273085][ T8414] tipc: Resetting bearer [ 434.537120][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 434.666886][ T8414] tipc: Disabling bearer [ 437.001982][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.5.653'. [ 440.165178][ T8494] input: syz0 as /devices/virtual/input/input14 [ 440.760621][ T8494] input: failed to attach handler evdev to device input14, error: -4 [ 443.085322][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.198940][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.311269][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.721728][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.908792][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.347516][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.347593][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.538732][ T8524] netlink: 'syz.3.671': attribute type 21 has an invalid length. [ 446.749094][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.895191][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.533717][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.124750][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.074043][ T8564] input: syz0 as /devices/virtual/input/input15 [ 449.341860][ T8568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'. [ 452.329329][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 455.381297][ T8609] netlink: 'syz.5.694': attribute type 21 has an invalid length. [ 455.950555][ T1229] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 456.124245][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 456.192738][ T1229] usb 1-1: No LPM exit latency info found, disabling LPM. [ 456.208835][ T1229] usb 1-1: string descriptor 0 read error: -22 [ 456.208993][ T1229] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 456.209016][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.249644][ T1229] usb 1-1: config 0 descriptor?? [ 458.184141][ T8613] binder: 8611:8613 unknown command 0 [ 458.184167][ T8613] binder: 8611:8613 ioctl c0306201 200000000080 returned -22 [ 458.203722][ T8613] binder: BINDER_SET_CONTEXT_MGR already set [ 458.203737][ T8613] binder: 8611:8613 ioctl 4018620d 200000000040 returned -16 [ 458.206250][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 459.949924][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.023447][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.260738][ T1229] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 461.264707][ T1229] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 461.264739][ T1229] dib0700: firmware download failed at 7 with -22 [ 462.936636][ T5904] usb 1-1: USB disconnect, device number 13 [ 463.472677][ T8666] input: syz0 as /devices/virtual/input/input16 [ 464.549303][ T8677] syz.1.706 (8677) used greatest stack depth: 17464 bytes left [ 468.154501][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.709'. [ 468.306250][ T8697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.711'. [ 469.304310][ T8708] fuse: Unknown parameter 'user_id00000000000000000000' [ 469.827739][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.961777][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.484480][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.602846][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.955393][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 474.590208][ T8752] input: syz0 as /devices/virtual/input/input17 [ 475.251257][ T8757] fuse: Unknown parameter 'user_id00000000000000000000' [ 479.713482][ T8787] @: renamed from vlan0 (while UP) [ 480.199933][ T8796] fuse: Unknown parameter 'user_id00000000000000000000' [ 483.701065][ T8827] input: syz0 as /devices/virtual/input/input18 [ 485.741350][ T8843] fuse: Bad value for 'fd' [ 487.073640][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.495410][ T8886] fuse: Bad value for 'fd' [ 492.503543][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.767'. [ 493.192119][ T8899] input: syz0 as /devices/virtual/input/input19 [ 494.776199][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.699260][ T8928] fuse: Bad value for 'fd' [ 498.083084][ T8937] sctp: [Deprecated]: syz.4.779 (pid 8937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.083084][ T8937] Use struct sctp_sack_info instead [ 500.663580][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.720443][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.041971][ T8950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.782'. [ 502.988522][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.410487][ T6280] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 505.563112][ T6280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.563146][ T6280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.563170][ T6280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.563213][ T6280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.563237][ T6280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.662316][ T6280] usb 4-1: config 0 descriptor?? [ 506.320432][ T6280] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 506.784671][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.784723][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.508845][ T3119] usb 4-1: USB disconnect, device number 15 [ 511.624174][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.798'. [ 512.337140][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 516.150800][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.329385][ T9072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.812'. [ 524.165787][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.825'. [ 524.815872][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 524.815995][ T9119] IPVS: Unknown mcast interface: vcan0 [ 526.187228][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.388668][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.827'. [ 528.362767][ T9147] fuse: Unknown parameter '0x0000000000000003' [ 528.605459][ T9141] sctp: failed to load transform for md5: -4 [ 529.462123][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 529.462233][ T9162] IPVS: Unknown mcast interface: vcan0 [ 530.682186][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.838'. [ 534.206808][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.551688][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.978367][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.215261][ T3119] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 535.701306][ T3119] usb 4-1: No LPM exit latency info found, disabling LPM. [ 535.721292][ T3119] usb 4-1: string descriptor 0 read error: -22 [ 535.721484][ T3119] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 535.721502][ T3119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.739906][ T3119] usb 4-1: config 0 descriptor?? [ 536.355392][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 536.355501][ T9204] IPVS: Unknown mcast interface: vcan0 [ 536.827778][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.098744][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.590765][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.850'. [ 538.707150][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 538.768386][ T9217] team1: entered promiscuous mode [ 538.768415][ T9217] team1: entered allmulticast mode [ 540.860839][ T3119] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 540.863080][ T3119] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 540.863113][ T3119] dib0700: firmware download failed at 7 with -22 [ 541.158103][ T3119] usb 4-1: USB disconnect, device number 16 [ 543.060912][ T9227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 545.133664][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 545.133695][ T9251] IPVS: Unknown mcast interface: vcan0 [ 548.680698][ T9268] @: renamed from vlan0 (while UP) [ 549.900457][ T6013] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 550.245434][ T6013] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.245456][ T6013] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.245468][ T6013] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.245505][ T6013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.273550][ T6013] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.274798][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.275577][ T6013] usb 6-1: Product: syz [ 550.280400][ T6013] usb 6-1: Manufacturer: syz [ 550.837271][ T6013] cdc_wdm 6-1:1.0: skipping garbage [ 550.837287][ T6013] cdc_wdm 6-1:1.0: skipping garbage [ 550.845033][ T6013] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 550.845057][ T6013] cdc_wdm 6-1:1.0: Unknown control protocol [ 552.491073][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 553.754993][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 553.755099][ T9306] IPVS: Unknown mcast interface: vcan0 [ 555.396525][ T9253] usb 6-1: USB disconnect, device number 9 [ 555.944329][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 557.086614][ T3119] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 557.915258][ T9334] input: syz0 as /devices/virtual/input/input20 [ 560.751017][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 562.270965][ T3119] usb 1-1: device descriptor read/64, error -110 [ 562.285329][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 562.285438][ T9355] IPVS: Unknown mcast interface: vcan0 [ 563.110434][ T3119] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 563.178774][ T9358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 563.240436][ T3119] usb 1-1: device descriptor read/64, error -32 [ 563.396184][ T3119] usb usb1-port1: attempt power cycle [ 563.760382][ T3119] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 563.780675][ T3119] usb 1-1: device descriptor read/8, error -32 [ 564.606871][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.890'. [ 566.234559][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.291961][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.440763][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.439663][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.556660][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.896'. [ 567.556773][ T9402] IPVS: Unknown mcast interface: vcan0 [ 567.911782][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.143208][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.377250][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.377331][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.650813][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.897'. [ 571.920574][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.903'. [ 574.554814][ T9439] syz.5.908 uses obsolete (PF_INET,SOCK_PACKET) [ 576.034481][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.4.910'. [ 576.160427][ T1229] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 576.350414][ T1229] usb 2-1: Using ep0 maxpacket: 32 [ 576.354000][ T1229] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 576.354028][ T1229] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 576.354049][ T1229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 576.354072][ T1229] usb 2-1: config 1 has no interface number 0 [ 576.354126][ T1229] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.354154][ T1229] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 576.354181][ T1229] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.354225][ T1229] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 576.354249][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.365269][ T9443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.393982][ T1229] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 576.422010][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 576.572511][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 576.605815][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 576.614526][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 576.614637][ T31] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 576.614663][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.683947][ T31] usb 6-1: config 0 descriptor?? [ 576.837653][ T9443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.891389][ T1229] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 577.102064][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 577.102331][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 577.265155][ T31] usb 6-1: USB disconnect, device number 10 [ 577.336240][ T6013] usb 2-1: USB disconnect, device number 14 [ 577.389611][ T6013] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 577.760507][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 577.910533][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 577.914601][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 577.914641][ T31] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 577.914668][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.962207][ T31] usb 6-1: config 0 descriptor?? [ 578.533762][ T31] hid (null): invalid report_count 61715 [ 578.607926][ T31] uclogic 0003:5543:0522.0002: invalid report_count 61715 [ 578.607954][ T31] uclogic 0003:5543:0522.0002: item 0 2 1 9 parsing failed [ 578.691083][ T31] uclogic 0003:5543:0522.0002: parse failed [ 578.691202][ T31] uclogic 0003:5543:0522.0002: probe with driver uclogic failed with error -22 [ 578.940322][ T31] usb 6-1: USB disconnect, device number 11 [ 579.404612][ T9486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.923'. [ 580.231924][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 580.885894][ T9494] IPVS: Unknown mcast interface: vcan0 [ 582.753183][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.937'. [ 583.185066][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.301403][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 583.301512][ T9529] IPVS: Unknown mcast interface: vcan0 [ 583.949721][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.448203][ T9542] input: syz0 as /devices/virtual/input/input21 [ 586.085514][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.944'. [ 586.689376][ T9551] sctp: [Deprecated]: syz.1.946 (pid 9551) Use of int in maxseg socket option. [ 586.689376][ T9551] Use struct sctp_assoc_value instead [ 587.148216][ T9559] lo: entered promiscuous mode [ 587.148967][ T9559] tunl0: entered promiscuous mode [ 587.149591][ T9559] gre0: entered promiscuous mode [ 587.159644][ T9559] gretap0: entered promiscuous mode [ 587.186372][ T9559] erspan0: entered promiscuous mode [ 587.218890][ T9559] ip_vti0: entered promiscuous mode [ 587.219978][ T9559] ip6_vti0: entered promiscuous mode [ 587.221160][ T9559] sit0: entered promiscuous mode [ 587.224711][ T9559] ip6tnl0: entered promiscuous mode [ 587.225530][ T9559] ip6gre0: entered promiscuous mode [ 587.226224][ T9559] syz_tun: entered promiscuous mode [ 587.226901][ T9559] ip6gretap0: entered promiscuous mode [ 587.298372][ T9559] bond0: entered promiscuous mode [ 587.298396][ T9559] bond_slave_0: entered promiscuous mode [ 587.298614][ T9559] bond_slave_1: entered promiscuous mode [ 587.330340][ T9559] team0: entered promiscuous mode [ 587.330363][ T9559] team_slave_0: entered promiscuous mode [ 587.330612][ T9559] team_slave_1: entered promiscuous mode [ 587.417517][ T9559] dummy0: entered promiscuous mode [ 587.569441][ T9559] nlmon0: entered promiscuous mode [ 587.710453][ T9559] caif0: entered promiscuous mode [ 587.710482][ T9559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.437140][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 589.437251][ T9574] IPVS: Unknown mcast interface: vcan0 [ 593.745779][ T9601] netlink: 36 bytes leftover after parsing attributes in process `syz.5.961'. [ 594.700087][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.964'. [ 594.700275][ T9613] IPVS: Unknown mcast interface: vcan0 [ 594.907276][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.186066][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.066095][ T9627] input: syz0 as /devices/virtual/input/input22 [ 596.439734][ T9630] netlink: 'syz.4.968': attribute type 21 has an invalid length. [ 596.717844][ T9633] netlink: 340 bytes leftover after parsing attributes in process `syz.3.970'. [ 598.183579][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.974'. [ 598.530391][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 598.788548][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 598.791364][ T31] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 598.791383][ T31] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 598.791396][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 598.791410][ T31] usb 1-1: config 1 has no interface number 0 [ 598.791469][ T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.791488][ T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 598.791524][ T31] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 598.791554][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 598.791570][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.930789][ T9648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 598.935060][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 599.144097][ T9648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 599.147503][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 599.924374][ T6280] usb 1-1: USB disconnect, device number 18 [ 600.063275][ T6280] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 601.725454][ T9681] program syz.5.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.708680][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 603.321705][ T9690] team2: entered promiscuous mode [ 603.321727][ T9690] team2: entered allmulticast mode [ 603.392751][ T9692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.985'. [ 604.749234][ T9714] input: syz0 as /devices/virtual/input/input23 [ 608.643473][ T9744] tmpfs: Unknown parameter 'quot' [ 608.647888][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.085321][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.341711][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.317252][ T9759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1000'. [ 613.472510][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.604674][ T9784] tmpfs: Unknown parameter 'quot' [ 613.624365][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.907884][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.076670][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.521695][ T9787] input: syz0 as /devices/virtual/input/input24 [ 619.049938][ T9825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1019'. [ 619.712721][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.841376][ T9830] tmpfs: Unknown parameter 'quot' [ 619.855931][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.457080][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.405330][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.520963][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 623.177689][ T9845] IPVS: Unknown mcast interface: vcan0 [ 623.728088][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 624.324766][ T9853] team3: entered promiscuous mode [ 624.324788][ T9853] team3: entered allmulticast mode [ 625.446361][ T9865] netlink: 'syz.3.1028': attribute type 21 has an invalid length. [ 628.607080][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1036'. [ 629.330148][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 629.330323][ T9891] IPVS: Unknown mcast interface: vcan0 [ 629.751951][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.821630][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.837821][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.066928][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.546403][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 632.243393][ T9906] team2: entered promiscuous mode [ 632.243417][ T9906] team2: entered allmulticast mode [ 632.979247][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.088509][ T9919] tmpfs: Unknown parameter 'quot' [ 633.102049][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.776612][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.701776][ T5935] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 635.890302][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 635.895757][ T5935] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 635.895785][ T5935] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 635.895805][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 635.895826][ T5935] usb 4-1: config 1 has no interface number 0 [ 635.895878][ T5935] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.895905][ T5935] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 635.895931][ T5935] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 635.895974][ T5935] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 635.895997][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.910346][ T9933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 636.042738][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1051'. [ 636.068731][ T5935] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 636.133410][ T9933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 636.164659][ T5935] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 636.616173][ T5935] usb 4-1: USB disconnect, device number 17 [ 636.618061][ T5935] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 637.712734][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 637.743918][ T9958] team1: entered promiscuous mode [ 637.743939][ T9958] team1: entered allmulticast mode [ 638.118647][ T9962] tmpfs: Unknown parameter 'quot' [ 639.902942][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.496526][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.535633][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.584632][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.110942][ T9922] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 645.260287][ T9922] usb 5-1: Using ep0 maxpacket: 32 [ 645.262815][ T9922] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 645.262842][ T9922] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 645.262863][ T9922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 645.262884][ T9922] usb 5-1: config 1 has no interface number 0 [ 645.262987][ T9922] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.263014][ T9922] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 645.263041][ T9922] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 645.263082][ T9922] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 645.263112][ T9922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.382981][T10005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.389360][ T9922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 645.726919][ T9922] snd_usb_pod 5-1:1.1: set_interface failed [ 645.727233][ T9922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 645.727518][ T9922] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 645.772663][ T9922] usb 5-1: USB disconnect, device number 15 [ 646.160577][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 646.160600][T10009] IPVS: Unknown mcast interface: vcan0 [ 646.772728][T10018] tmpfs: Unknown parameter 'quot' [ 647.940018][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 648.221514][T10028] team3: entered promiscuous mode [ 648.221545][T10028] team3: entered allmulticast mode [ 654.142765][T10067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 654.703810][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.818779][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 654.818819][T10077] IPVS: Unknown mcast interface: vcan0 [ 655.641213][T10068] syz.5.1082: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 655.641479][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.5.1082 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 655.641497][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.641512][T10068] Call Trace: [ 655.641518][T10068] [ 655.641524][T10068] dump_stack_lvl+0x189/0x250 [ 655.641554][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.641577][T10068] ? __pfx__printk+0x10/0x10 [ 655.641594][T10068] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 655.641610][T10068] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 655.641628][T10068] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 655.641646][T10068] warn_alloc+0x22e/0x3b0 [ 655.641677][T10068] ? __pfx_warn_alloc+0x10/0x10 [ 655.641706][T10068] ? __get_vm_area_node+0x2bc/0x350 [ 655.641729][T10068] ? vb2_vmalloc_alloc+0xef/0x340 [ 655.641753][T10068] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 655.641797][T10068] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 655.641821][T10068] ? vb2_vmalloc_alloc+0xb2/0x340 [ 655.641843][T10068] ? __kasan_kmalloc+0x93/0xb0 [ 655.641864][T10068] vmalloc_user_noprof+0xad/0xf0 [ 655.641886][T10068] ? vb2_vmalloc_alloc+0xef/0x340 [ 655.641907][T10068] vb2_vmalloc_alloc+0xef/0x340 [ 655.641928][T10068] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 655.641950][T10068] __vb2_queue_alloc+0x9bf/0x15a0 [ 655.641995][T10068] vb2_core_reqbufs+0xc31/0x1420 [ 655.642028][T10068] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 655.642048][T10068] ? vb2_reqbufs+0x317/0x630 [ 655.642066][T10068] ? vb2_reqbufs+0x3a9/0x630 [ 655.642091][T10068] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 655.642129][T10068] __video_do_ioctl+0xc9b/0xdb0 [ 655.642156][T10068] ? __pfx___video_do_ioctl+0x10/0x10 [ 655.642190][T10068] video_usercopy+0x86e/0x14f0 [ 655.642217][T10068] ? __pfx___video_do_ioctl+0x10/0x10 [ 655.642236][T10068] ? __pfx_video_usercopy+0x10/0x10 [ 655.642255][T10068] ? smack_file_ioctl+0x2ac/0x340 [ 655.642284][T10068] ? __fget_files+0x2a/0x420 [ 655.642303][T10068] ? __fget_files+0x3a6/0x420 [ 655.642325][T10068] v4l2_ioctl+0x190/0x1e0 [ 655.642345][T10068] ? __pfx_v4l2_ioctl+0x10/0x10 [ 655.642363][T10068] __se_sys_ioctl+0xfc/0x170 [ 655.642381][T10068] do_syscall_64+0xfa/0x3b0 [ 655.642399][T10068] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.642417][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.642430][T10068] ? clear_bhb_loop+0x60/0xb0 [ 655.642447][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.642463][T10068] RIP: 0033:0x7fe996dbebe9 [ 655.642479][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.642490][T10068] RSP: 002b:00007fe994fdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.642504][T10068] RAX: ffffffffffffffda RBX: 00007fe996fe6180 RCX: 00007fe996dbebe9 [ 655.642514][T10068] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000006 [ 655.642524][T10068] RBP: 00007fe996e41e19 R08: 0000000000000000 R09: 0000000000000000 [ 655.642533][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.642541][T10068] R13: 00007fe996fe6218 R14: 00007fe996fe6180 R15: 00007ffe9a33c908 [ 655.642562][T10068] [ 655.642570][T10068] Mem-Info: [ 655.642579][T10068] active_anon:260 inactive_anon:6056 isolated_anon:0 [ 655.642579][T10068] active_file:5940 inactive_file:37560 isolated_file:0 [ 655.642579][T10068] unevictable:768 dirty:124 writeback:0 [ 655.642579][T10068] slab_reclaimable:11643 slab_unreclaimable:102619 [ 655.642579][T10068] mapped:31982 shmem:1360 pagetables:1365 [ 655.642579][T10068] sec_pagetables:0 bounce:0 [ 655.642579][T10068] kernel_misc_reclaimable:0 [ 655.642579][T10068] free:1332503 free_pcp:6463 free_cma:0 [ 655.642616][T10068] Node 0 active_anon:1040kB inactive_anon:24224kB active_file:23556kB inactive_file:150240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127928kB dirty:496kB writeback:0kB shmem:3904kB kernel_stack:13140kB pagetables:5308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 655.642647][T10068] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 655.642676][T10068] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.642718][T10068] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 655.642743][T10068] Node 0 DMA32 free:1412872kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:24180kB active_file:22544kB inactive_file:150172kB unevictable:1536kB writepending:496kB present:3129332kB managed:2572332kB mlocked:0kB bounce:0kB free_pcp:25848kB local_pcp:14088kB free_cma:0kB [ 655.642783][T10068] lowmem_reserve[]: 0 0 1 1 1 [ 655.642806][T10068] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1012kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 655.642843][T10068] lowmem_reserve[]: 0 0 0 0 0 [ 655.642865][T10068] Node 1 Normal free:3901780kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.642904][T10068] lowmem_reserve[]: 0 0 0 0 0 [ 655.642926][T10068] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 655.643152][T10068] Node 0 DMA32: 14*4kB (UM) 234*8kB (ME) 306*16kB (ME) 231*32kB (UME) 136*64kB (UME) 67*128kB (UM) 28*256kB (UM) 36*512kB (UME) 6*1024kB (ME) 3*2048kB (UM) 328*4096kB (UM) = 1412872kB [ 655.643261][T10068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.643329][T10068] Node 1 Normal: 233*4kB (UE) 52*8kB (UME) 35*16kB (UME) 215*32kB (UME) 104*64kB (UME) 32*128kB (UME) 17*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3901780kB [ 655.643435][T10068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.643446][T10068] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 655.643457][T10068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.643467][T10068] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 655.643478][T10068] 44837 total pagecache pages [ 655.643488][T10068] 0 pages in swap cache [ 655.643492][T10068] Free swap = 124996kB [ 655.643498][T10068] Total swap = 124996kB [ 655.643503][T10068] 2097051 pages RAM [ 655.643508][T10068] 0 pages HighMem/MovableOnly [ 655.643513][T10068] 422070 pages reserved [ 655.643517][T10068] 0 pages cma reserved [ 659.407419][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 659.541869][T10102] team3: entered promiscuous mode [ 659.541901][T10102] team3: entered allmulticast mode [ 660.869889][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 660.869912][T10114] IPVS: Unknown mcast interface: vcan0 [ 665.043004][T10138] binder: 10136:10138 unknown command 0 [ 665.043025][T10138] binder: 10136:10138 ioctl c0306201 200000000080 returned -22 [ 665.504379][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805de9a400: rx timeout, send abort [ 665.504508][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803846b000: rx timeout, send abort [ 665.504662][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805de9a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 665.504990][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803846b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 665.851905][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 667.793853][T10161] fuse: Bad value for 'fd' [ 669.543648][T10193] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1113'. [ 671.972295][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 672.059828][T10205] team4: entered promiscuous mode [ 672.059866][T10205] team4: entered allmulticast mode [ 673.855166][T10225] fuse: Bad value for 'fd' [ 677.707598][T10239] netlink: 'syz.1.1123': attribute type 21 has an invalid length. [ 681.159463][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 681.178128][T10276] team5: entered promiscuous mode [ 681.178150][T10276] team5: entered allmulticast mode [ 682.744494][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024695400: rx timeout, send abort [ 683.142156][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c14b800: rx timeout, send abort [ 683.244614][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024695400: abort rx timeout. Force session deactivation [ 683.642294][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c14b800: abort rx timeout. Force session deactivation [ 686.392342][T10310] netlink: 'syz.4.1140': attribute type 21 has an invalid length. [ 689.705286][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.315119][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 690.410847][T10335] team4: entered promiscuous mode [ 690.410869][T10335] team4: entered allmulticast mode [ 691.108658][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.108908][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.276062][T10370] netlink: 'syz.3.1156': attribute type 21 has an invalid length. [ 698.111502][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1162'. [ 701.172677][T10414] binder: 10405:10414 unknown command 0 [ 701.172693][T10414] binder: 10405:10414 ioctl c0306201 200000000080 returned -22 [ 701.173716][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 703.259733][T10441] netlink: 'syz.1.1174': attribute type 21 has an invalid length. [ 703.565663][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.367857][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'. [ 708.853456][T10476] binder: 10474:10476 unknown command 0 [ 708.853472][T10476] binder: 10474:10476 ioctl c0306201 200000000080 returned -22 [ 708.898901][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 709.528377][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 709.595635][T10505] team5: entered promiscuous mode [ 709.595664][T10505] team5: entered allmulticast mode [ 711.190465][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.333596][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1192'. [ 714.230360][ T5935] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 714.390303][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 714.393380][ T5935] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 714.393415][ T5935] usb 2-1: config 0 has no interface number 0 [ 714.486036][ T5935] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 714.486066][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.486086][ T5935] usb 2-1: Product: syz [ 714.486099][ T5935] usb 2-1: Manufacturer: syz [ 714.486113][ T5935] usb 2-1: SerialNumber: syz [ 714.561056][ T5935] usb 2-1: config 0 descriptor?? [ 714.566927][ T5935] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 714.566958][ T5935] usb 2-1: selecting invalid altsetting 1 [ 714.566975][ T5935] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 714.617609][ T5935] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 714.618216][ T5935] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 714.618274][ T5935] usb 2-1: media controller created [ 714.671033][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.861082][ T5935] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 715.871266][ T5935] zl10353_read_register: readreg error (reg=127, ret==-110) [ 715.976107][T10531] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 715.980530][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 715.997903][ T5935] usb 2-1: USB disconnect, device number 15 [ 716.170336][ T31] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.170366][ T31] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 716.170385][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.170437][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 716.170463][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 716.177543][ T31] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 716.177571][ T31] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 716.177589][ T31] usb 6-1: Product: syz [ 716.177601][ T31] usb 6-1: Manufacturer: syz [ 716.278989][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 716.279010][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 716.279125][ T31] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 717.540510][ T6709] usb 6-1: USB disconnect, device number 12 [ 719.216535][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030bd2c00: rx timeout, send abort [ 719.216716][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030bd0800: rx timeout, send abort [ 719.716798][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030bd0800: abort rx timeout. Force session deactivation [ 720.760361][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 720.797458][T10574] team6: entered promiscuous mode [ 720.797503][T10574] team6: entered allmulticast mode [ 721.800023][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 724.194959][T10593] input: syz0 as /devices/virtual/input/input25 [ 724.868075][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.954321][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.085553][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.386200][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.467009][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.716488][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.837102][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.082903][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.271128][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.418113][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.474776][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.701547][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.834666][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.919825][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.000677][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.085817][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.166183][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.365125][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.437047][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.297838][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.442038][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1227'. [ 736.897330][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.360613][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 737.360644][T10673] IPVS: Unknown mcast interface: vcan0 [ 737.574827][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.158020][T10687] input: syz0 as /devices/virtual/input/input26 [ 740.235463][T10686] netlink: 'syz.5.1236': attribute type 11 has an invalid length. [ 745.669775][T10730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1247'. [ 746.316864][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1249'. [ 747.030353][ T6709] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 747.184874][ T6709] usb 6-1: Using ep0 maxpacket: 32 [ 747.219107][ T6709] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 747.219138][ T6709] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 747.219159][ T6709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 747.219181][ T6709] usb 6-1: config 1 has no interface number 0 [ 747.219230][ T6709] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.219258][ T6709] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.219281][ T6709] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 747.219341][ T6709] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 747.219366][ T6709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.543137][ T6709] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 747.772415][ T6709] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 747.772724][ T6709] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 747.775009][ T6709] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 748.000685][T10748] Invalid logical block size (7) [ 748.063877][ T6280] usb 6-1: USB disconnect, device number 13 [ 748.510357][ T6245] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 748.739008][ T6245] usb 2-1: No LPM exit latency info found, disabling LPM. [ 749.446487][ T6245] usb 2-1: string descriptor 0 read error: -22 [ 749.446636][ T6245] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 749.446661][ T6245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.513588][ T6245] usb 2-1: config 0 descriptor?? [ 752.544423][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.544560][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.434243][T10778] @: renamed from vlan0 (while UP) [ 754.540561][ T6245] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 754.542111][ T6245] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 754.550811][ T6245] dib0700: firmware download failed at 7 with -22 [ 754.716329][ T10] usb 2-1: USB disconnect, device number 16 [ 756.221016][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 756.221037][T10797] IPVS: Unknown mcast interface: vcan0 [ 757.400267][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 757.698354][ T10] usb 4-1: config 0 has no interfaces? [ 757.710936][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 757.710961][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.710975][ T10] usb 4-1: Product: syz [ 757.710984][ T10] usb 4-1: Manufacturer: syz [ 757.710993][ T10] usb 4-1: SerialNumber: syz [ 757.718452][ T10] usb 4-1: config 0 descriptor?? [ 760.470348][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 760.629854][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 760.632290][ T31] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 760.632309][ T31] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 760.632323][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 760.632338][ T31] usb 2-1: config 1 has no interface number 0 [ 760.632373][ T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.632393][ T31] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 760.632423][ T31] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 760.632440][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.807860][ T31] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 760.975537][ T31] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 761.349094][ T6245] usb 2-1: USB disconnect, device number 17 [ 761.351192][ T6245] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 761.700513][ T5935] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 761.797180][ T6280] usb 4-1: USB disconnect, device number 18 [ 761.897698][ T5935] usb 6-1: No LPM exit latency info found, disabling LPM. [ 762.119820][ T5935] usb 6-1: string descriptor 0 read error: -22 [ 762.119931][ T5935] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 762.119948][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.196794][ T5935] usb 6-1: config 0 descriptor?? [ 764.077076][T10851] input: syz0 as /devices/virtual/input/input27 [ 767.280331][ T5935] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 767.285661][ T5935] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 767.285711][ T5935] dib0700: firmware download failed at 7 with -22 [ 767.978850][ T9922] usb 6-1: USB disconnect, device number 14 [ 769.828059][ T9256] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 770.000275][ T9256] usb 6-1: Using ep0 maxpacket: 32 [ 770.003126][ T9256] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 770.003154][ T9256] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 770.003175][ T9256] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 770.003195][ T9256] usb 6-1: config 1 has no interface number 0 [ 770.003244][ T9256] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.003271][ T9256] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 770.003314][ T9256] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 770.003443][ T9256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.114029][ T9256] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 770.327800][ T9256] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 770.785776][ T9922] usb 6-1: USB disconnect, device number 15 [ 770.787595][ T9922] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 771.877586][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 771.917017][T10910] : entered promiscuous mode [ 772.646762][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'. [ 772.646784][T10921] IPVS: Unknown mcast interface: vcan0 [ 776.333948][T10938] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 776.357723][T10942] @: renamed from vlan0 (while UP) [ 776.961913][ T9922] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 777.120293][ T9922] usb 5-1: Using ep0 maxpacket: 32 [ 777.124484][ T9922] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 777.124504][ T9922] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 777.124518][ T9922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 777.124533][ T9922] usb 5-1: config 1 has no interface number 0 [ 777.124568][ T9922] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.124586][ T9922] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 777.124616][ T9922] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 777.124632][ T9922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.326349][ T9922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 777.516142][ T9922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 777.846465][ T31] usb 5-1: USB disconnect, device number 16 [ 777.960370][ T31] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 780.269049][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 782.103584][T11003] input: syz0 as /devices/virtual/input/input28 [ 782.980524][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 783.110255][ T10] usb 5-1: device descriptor read/64, error -71 [ 783.500277][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 783.630375][ T10] usb 5-1: device descriptor read/64, error -71 [ 783.750771][ T10] usb usb5-port1: attempt power cycle [ 784.310331][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 784.331365][ T10] usb 5-1: device descriptor read/8, error -71 [ 784.380329][ T6280] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 784.536942][ T6280] usb 4-1: No LPM exit latency info found, disabling LPM. [ 784.566813][ T6280] usb 4-1: string descriptor 0 read error: -22 [ 784.567017][ T6280] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 784.567044][ T6280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.579943][ T6280] usb 4-1: config 0 descriptor?? [ 784.612152][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 784.631590][ T10] usb 5-1: device descriptor read/8, error -71 [ 784.740861][ T10] usb usb5-port1: unable to enumerate USB device [ 787.635603][T11042] fuse: Bad value for 'group_id' [ 787.637506][T11042] fuse: Bad value for 'group_id' [ 789.532018][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 789.664845][ T6280] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 789.669958][ T6280] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 789.669992][ T6280] dib0700: firmware download failed at 7 with -22 [ 789.746751][ T31] usb 4-1: USB disconnect, device number 19 [ 791.671608][ T6280] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 791.747355][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 791.844221][ T6280] usb 4-1: device descriptor read/64, error -71 [ 792.140266][ T6280] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 792.300340][ T6280] usb 4-1: device descriptor read/64, error -71 [ 792.410770][ T6280] usb usb4-port1: attempt power cycle [ 792.780549][ T6280] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 792.801431][ T6280] usb 4-1: device descriptor read/8, error -71 [ 793.040223][ T6280] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 793.069591][ T6280] usb 4-1: device descriptor read/8, error -71 [ 793.170925][ T6280] usb usb4-port1: unable to enumerate USB device [ 793.200359][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 793.361167][ T31] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 793.361207][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.361236][ T31] usb 6-1: Product: syz [ 793.361253][ T31] usb 6-1: Manufacturer: syz [ 793.361271][ T31] usb 6-1: SerialNumber: syz [ 793.417802][ T31] usb 6-1: config 0 descriptor?? [ 793.980277][ T6709] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 794.068296][ T31] usb 6-1: Firmware version (0.0) predates our first public release. [ 794.068325][ T31] usb 6-1: Please update to version 0.2 or newer [ 794.132022][ T6709] usb 5-1: Using ep0 maxpacket: 32 [ 794.134635][ T6709] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 794.134672][ T6709] usb 5-1: config 0 has no interface number 0 [ 794.139828][ T6709] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 794.139857][ T6709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.139878][ T6709] usb 5-1: Product: syz [ 794.139893][ T6709] usb 5-1: Manufacturer: syz [ 794.139908][ T6709] usb 5-1: SerialNumber: syz [ 794.212304][ T6709] usb 5-1: config 0 descriptor?? [ 794.230784][ T6709] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 794.230811][ T6709] usb 5-1: selecting invalid altsetting 1 [ 794.230828][ T6709] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 794.266662][ T6709] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 794.267209][ T6709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 794.267260][ T6709] usb 5-1: media controller created [ 794.387126][ T6709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.457846][ T31] usb 6-1: USB disconnect, device number 16 [ 795.527167][ T6709] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 795.527240][ T6709] zl10353_read_register: readreg error (reg=127, ret==-110) [ 795.540729][T11092] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 795.684202][ T6709] usb 5-1: USB disconnect, device number 21 [ 796.282890][T11112] netlink: 'syz.5.1350': attribute type 11 has an invalid length. [ 796.460676][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 796.627692][ T10] usb 1-1: No LPM exit latency info found, disabling LPM. [ 796.644428][ T10] usb 1-1: string descriptor 0 read error: -22 [ 796.644532][ T10] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 796.644549][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.734415][ T10] usb 1-1: config 0 descriptor?? [ 797.524097][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1354'. [ 800.868034][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 801.050675][ T6280] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 801.181291][ T6280] usb 2-1: device descriptor read/64, error -71 [ 801.442508][ T6280] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 801.570243][ T6280] usb 2-1: device descriptor read/64, error -71 [ 801.827295][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 801.842700][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 801.842756][ T10] dib0700: firmware download failed at 7 with -22 [ 801.921288][ T6280] usb usb2-port1: attempt power cycle [ 801.961343][ T10] usb 1-1: USB disconnect, device number 19 [ 802.300367][ T6280] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 802.324330][ T6280] usb 2-1: device descriptor read/8, error -71 [ 802.580321][ T6280] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 802.607467][ T6280] usb 2-1: device descriptor read/8, error -71 [ 802.693796][T11152] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1361'. [ 802.710789][ T6280] usb usb2-port1: unable to enumerate USB device [ 807.798197][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 809.161978][T11206] lo: entered promiscuous mode [ 809.162990][T11206] tunl0: entered promiscuous mode [ 809.167377][T11206] gre0: entered promiscuous mode [ 809.171069][T11206] gretap0: entered promiscuous mode [ 809.171919][T11206] erspan0: entered promiscuous mode [ 809.176325][T11206] ip_vti0: entered promiscuous mode [ 809.177271][T11206] ip6_vti0: entered promiscuous mode [ 809.178422][T11206] sit0: entered promiscuous mode [ 809.179330][T11206] ip6tnl0: entered promiscuous mode [ 809.180399][T11206] ip6gre0: entered promiscuous mode [ 809.181280][T11206] syz_tun: entered promiscuous mode [ 809.183781][T11206] ip6gretap0: entered promiscuous mode [ 809.185920][T11206] bridge0: entered promiscuous mode [ 809.189461][T11206] bond0: entered promiscuous mode [ 809.189492][T11206] bond_slave_0: entered promiscuous mode [ 809.190728][T11206] bond_slave_1: entered promiscuous mode [ 809.198805][T11206] team0: entered promiscuous mode [ 809.198916][T11206] team_slave_0: entered promiscuous mode [ 809.199147][T11206] team_slave_1: entered promiscuous mode [ 809.200935][T11206] dummy0: entered promiscuous mode [ 809.201903][T11206] nlmon0: entered promiscuous mode [ 809.460413][T11206] caif0: entered promiscuous mode [ 809.470519][T11206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.480399][ T9256] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 811.620331][ T9256] usb 4-1: device descriptor read/64, error -71 [ 811.860345][ T9256] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 811.990283][ T9256] usb 4-1: device descriptor read/64, error -71 [ 812.109044][ T9256] usb usb4-port1: attempt power cycle [ 812.470488][ T9256] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 812.492036][ T9256] usb 4-1: device descriptor read/8, error -71 [ 812.730304][ T9256] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 812.752826][ T9256] usb 4-1: device descriptor read/8, error -71 [ 812.860812][ T9256] usb usb4-port1: unable to enumerate USB device [ 813.892108][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.129266][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.129348][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.183731][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.428828][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.657826][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 816.374411][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.445329][T11256] binder: 11252:11256 ioctl 40044591 0 returned -22 [ 816.642895][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1391'. [ 817.810287][ T6709] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 817.996211][ T6709] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 817.996233][ T6709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.996248][ T6709] usb 2-1: Product: syz [ 817.996258][ T6709] usb 2-1: Manufacturer: syz [ 817.996268][ T6709] usb 2-1: SerialNumber: syz [ 818.048669][ T6709] usb 2-1: config 0 descriptor?? [ 818.775878][ T6709] usb 2-1: Firmware version (0.0) predates our first public release. [ 818.775906][ T6709] usb 2-1: Please update to version 0.2 or newer [ 819.000284][ T6280] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 819.164291][ T6280] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 819.164321][ T6280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.164342][ T6280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 819.164397][ T6280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.169561][ T6280] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 819.169592][ T6280] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 819.169614][ T6280] usb 5-1: Product: syz [ 819.169630][ T6280] usb 5-1: Manufacturer: syz [ 819.295676][ T6280] cdc_wdm 5-1:1.0: skipping garbage [ 819.295690][ T6280] cdc_wdm 5-1:1.0: skipping garbage [ 819.472782][ T6280] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 819.472805][ T6280] cdc_wdm 5-1:1.0: Unknown control protocol [ 820.027700][T11299] input: syz0 as /devices/virtual/input/input29 [ 820.674743][ T6709] usb 2-1: USB disconnect, device number 22 [ 822.874452][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 823.200239][ T6280] usb 5-1: USB disconnect, device number 22 [ 825.130596][T11345] fuse: Unknown parameter 'grou00000000000000000000' [ 825.314532][T11347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1416'. [ 826.599467][T11371] input: syz0 as /devices/virtual/input/input30 [ 827.769571][T11385] fuse: Unknown parameter 'grou00000000000000000000' [ 828.741740][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 829.112959][T11395] team2: entered promiscuous mode [ 829.113060][T11395] team2: entered allmulticast mode [ 829.578023][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 832.797664][T11434] binder: 11430:11434 ioctl 40044591 0 returned -22 [ 834.326941][T11453] input: syz0 as /devices/virtual/input/input31 [ 834.890295][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 835.047150][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 835.047173][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.047188][ T31] usb 5-1: Product: syz [ 835.047198][ T31] usb 5-1: Manufacturer: syz [ 835.047208][ T31] usb 5-1: SerialNumber: syz [ 835.086795][ T31] usb 5-1: config 0 descriptor?? [ 835.727253][ T31] usb 5-1: Firmware version (0.0) predates our first public release. [ 835.727273][ T31] usb 5-1: Please update to version 0.2 or newer [ 836.395640][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.405293][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 836.414994][T11465] IPVS: Unknown mcast interface: vcan0 [ 836.460705][ T31] usb 5-1: USB disconnect, device number 23 [ 838.390363][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 838.559575][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.559596][ T31] usb 1-1: config 0 has no interfaces? [ 838.562685][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 838.562708][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.562722][ T31] usb 1-1: Product: syz [ 838.562732][ T31] usb 1-1: Manufacturer: syz [ 838.562743][ T31] usb 1-1: SerialNumber: syz [ 838.635319][ T31] usb 1-1: config 0 descriptor?? [ 839.003796][ T31] usb 1-1: USB disconnect, device number 20 [ 839.210665][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1461'. [ 839.210794][T11493] openvswitch: netlink: Flow actions attr not present in new flow. [ 839.709826][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 839.801154][T11503] IPVS: Unknown mcast interface: vcan0 [ 840.620429][ T3119] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 840.780893][ T3119] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 840.780918][ T3119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.780933][ T3119] usb 4-1: Product: syz [ 840.780943][ T3119] usb 4-1: Manufacturer: syz [ 840.780953][ T3119] usb 4-1: SerialNumber: syz [ 840.790612][ T3119] usb 4-1: config 0 descriptor?? [ 841.522669][ T3119] usb 4-1: Firmware version (0.0) predates our first public release. [ 841.522697][ T3119] usb 4-1: Please update to version 0.2 or newer [ 842.040713][ T3119] usb 4-1: USB disconnect, device number 28 [ 842.988315][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 842.988341][T11544] IPVS: Unknown mcast interface: vcan0 [ 844.643525][T11561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.978086][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 845.978115][T11586] IPVS: Unknown mcast interface: vcan0 [ 846.160302][ T9256] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 846.594809][ T9256] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 846.594842][ T9256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.594863][ T9256] usb 5-1: Product: syz [ 846.594879][ T9256] usb 5-1: Manufacturer: syz [ 846.594894][ T9256] usb 5-1: SerialNumber: syz [ 846.603823][ T9256] usb 5-1: config 0 descriptor?? [ 847.233219][ T9256] usb 5-1: Firmware version (0.0) predates our first public release. [ 847.233246][ T9256] usb 5-1: Please update to version 0.2 or newer [ 847.402921][ T9256] usb 5-1: USB disconnect, device number 24 [ 847.835033][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1492'. [ 848.046234][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 848.445177][T11605] team3: entered promiscuous mode [ 848.445221][T11605] team3: entered allmulticast mode [ 849.530654][T11611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 849.531142][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 849.728494][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.361105][T11614] bond0: (slave syz_tun): Releasing backup interface [ 852.510620][T11641] fuse: Unknown parameter 'fd0000000000000000000001600000000000000000000' [ 853.178575][T11647] [ 853.178590][T11647] ====================================================== [ 853.178600][T11647] WARNING: possible circular locking dependency detected [ 853.178619][T11647] syzkaller #0 Not tainted [ 853.178631][T11647] ------------------------------------------------------ [ 853.178640][T11647] syz.4.1505/11647 is trying to acquire lock: [ 853.178653][T11647] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 853.178718][T11647] [ 853.178718][T11647] but task is already holding lock: [ 853.178726][T11647] ffffffff8efa6608 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 853.178780][T11647] [ 853.178780][T11647] which lock already depends on the new lock. [ 853.178780][T11647] [ 853.178789][T11647] [ 853.178789][T11647] the existing dependency chain (in reverse order) is: [ 853.178797][T11647] [ 853.178797][T11647] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 853.178828][T11647] lock_acquire+0x120/0x360 [ 853.178856][T11647] rt_write_lock+0x6a/0x110 [ 853.178876][T11647] smc_hash_sk+0x8f/0x2a0 [ 853.178897][T11647] smc_sk_init+0x5a1/0x7f0 [ 853.178919][T11647] __smc_create+0x10d/0x280 [ 853.178948][T11647] __sock_create+0x4b3/0x9f0 [ 853.178970][T11647] __sys_socket+0xd7/0x1b0 [ 853.178990][T11647] __x64_sys_socket+0x7a/0x90 [ 853.179013][T11647] do_syscall_64+0xfa/0x3b0 [ 853.179048][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.179069][T11647] [ 853.179069][T11647] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 853.179100][T11647] validate_chain+0xb9b/0x2140 [ 853.179131][T11647] __lock_acquire+0xab9/0xd20 [ 853.179157][T11647] reacquire_held_locks+0x127/0x1d0 [ 853.179189][T11647] lock_release+0x1b4/0x3e0 [ 853.179215][T11647] __local_bh_enable_ip+0x10c/0x270 [ 853.179240][T11647] sock_i_ino+0xa9/0xc0 [ 853.179270][T11647] smc_diag_dump_proto+0xa4c/0x1fb0 [ 853.179293][T11647] smc_diag_dump+0x27/0xa0 [ 853.179314][T11647] netlink_dump+0x6e4/0xe90 [ 853.179335][T11647] __netlink_dump_start+0x5cb/0x7e0 [ 853.179358][T11647] smc_diag_handler_dump+0x178/0x210 [ 853.179380][T11647] sock_diag_rcv_msg+0x4c9/0x600 [ 853.179401][T11647] netlink_rcv_skb+0x205/0x470 [ 853.179423][T11647] netlink_unicast+0x843/0xa10 [ 853.179443][T11647] netlink_sendmsg+0x805/0xb30 [ 853.179467][T11647] __sock_sendmsg+0x219/0x270 [ 853.179487][T11647] ____sys_sendmsg+0x508/0x820 [ 853.179515][T11647] ___sys_sendmsg+0x21f/0x2a0 [ 853.179543][T11647] __x64_sys_sendmsg+0x1a1/0x260 [ 853.179572][T11647] do_syscall_64+0xfa/0x3b0 [ 853.179600][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.179620][T11647] [ 853.179620][T11647] other info that might help us debug this: [ 853.179620][T11647] [ 853.179627][T11647] Possible unsafe locking scenario: [ 853.179627][T11647] [ 853.179634][T11647] CPU0 CPU1 [ 853.179642][T11647] ---- ---- [ 853.179649][T11647] rlock(smc_v4_hashinfo.lock); [ 853.179665][T11647] lock((softirq_ctrl.lock)); [ 853.179682][T11647] lock(smc_v4_hashinfo.lock); [ 853.179699][T11647] lock((softirq_ctrl.lock)); [ 853.179714][T11647] [ 853.179714][T11647] *** DEADLOCK *** [ 853.179714][T11647] [ 853.179720][T11647] 3 locks held by syz.4.1505/11647: [ 853.179733][T11647] #0: ffff88804ce54908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 853.179788][T11647] #1: ffffffff8efa6608 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 853.179843][T11647] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 853.179894][T11647] [ 853.179894][T11647] stack backtrace: [ 853.179907][T11647] CPU: 0 UID: 0 PID: 11647 Comm: syz.4.1505 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 853.179932][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.179946][T11647] Call Trace: [ 853.179954][T11647] [ 853.179964][T11647] dump_stack_lvl+0x189/0x250 [ 853.179999][T11647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.180032][T11647] ? __pfx__printk+0x10/0x10 [ 853.180065][T11647] ? print_lock_name+0xde/0x100 [ 853.180087][T11647] print_circular_bug+0x2ee/0x310 [ 853.180109][T11647] check_noncircular+0x134/0x160 [ 853.180145][T11647] validate_chain+0xb9b/0x2140 [ 853.180176][T11647] ? validate_chain+0x897/0x2140 [ 853.180217][T11647] __lock_acquire+0xab9/0xd20 [ 853.180247][T11647] reacquire_held_locks+0x127/0x1d0 [ 853.180279][T11647] ? __local_bh_disable_ip+0x264/0x400 [ 853.180308][T11647] lock_release+0x1b4/0x3e0 [ 853.180333][T11647] ? __local_bh_enable_ip+0x100/0x270 [ 853.180362][T11647] __local_bh_enable_ip+0x10c/0x270 [ 853.180389][T11647] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 853.180420][T11647] ? rt_read_unlock+0x65/0xa0 [ 853.180441][T11647] ? sock_i_ino+0x24/0xc0 [ 853.180472][T11647] sock_i_ino+0xa9/0xc0 [ 853.180502][T11647] smc_diag_dump_proto+0xa4c/0x1fb0 [ 853.180538][T11647] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 853.180564][T11647] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 853.180602][T11647] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 853.180634][T11647] ? __phys_addr+0xd3/0x180 [ 853.180666][T11647] ? __kasan_kmalloc_large+0x85/0xa0 [ 853.180694][T11647] ? rcu_is_watching+0x15/0xb0 [ 853.180726][T11647] ? rcu_is_watching+0x15/0xb0 [ 853.180759][T11647] ? trace_kmalloc+0x1f/0xd0 [ 853.180786][T11647] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 853.180820][T11647] ? __build_skb_around+0x257/0x3e0 [ 853.180851][T11647] smc_diag_dump+0x27/0xa0 [ 853.180873][T11647] netlink_dump+0x6e4/0xe90 [ 853.180905][T11647] ? __pfx_netlink_dump+0x10/0x10 [ 853.180928][T11647] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 853.180955][T11647] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.180991][T11647] __netlink_dump_start+0x5cb/0x7e0 [ 853.181019][T11647] smc_diag_handler_dump+0x178/0x210 [ 853.181054][T11647] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 853.181080][T11647] ? __pfx_smc_diag_dump+0x10/0x10 [ 853.181104][T11647] ? sock_diag_lock_handler+0x19/0x290 [ 853.181128][T11647] ? sock_diag_lock_handler+0x19/0x290 [ 853.181153][T11647] sock_diag_rcv_msg+0x4c9/0x600 [ 853.181178][T11647] netlink_rcv_skb+0x205/0x470 [ 853.181203][T11647] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 853.181226][T11647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.181255][T11647] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.181283][T11647] netlink_unicast+0x843/0xa10 [ 853.181306][T11647] ? __pfx_netlink_unicast+0x10/0x10 [ 853.181330][T11647] ? netlink_sendmsg+0x642/0xb30 [ 853.181353][T11647] ? skb_put+0x11b/0x210 [ 853.181381][T11647] netlink_sendmsg+0x805/0xb30 [ 853.181411][T11647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.181441][T11647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 853.181463][T11647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.181489][T11647] __sock_sendmsg+0x219/0x270 [ 853.181513][T11647] ____sys_sendmsg+0x508/0x820 [ 853.181546][T11647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.181581][T11647] ? import_iovec+0x74/0xa0 [ 853.181605][T11647] ___sys_sendmsg+0x21f/0x2a0 [ 853.181636][T11647] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.181683][T11647] ? __fget_files+0x2a/0x420 [ 853.181715][T11647] ? __fget_files+0x3a6/0x420 [ 853.181750][T11647] __x64_sys_sendmsg+0x1a1/0x260 [ 853.181782][T11647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.181819][T11647] ? rcu_is_watching+0x15/0xb0 [ 853.181854][T11647] ? do_syscall_64+0xbe/0x3b0 [ 853.181885][T11647] do_syscall_64+0xfa/0x3b0 [ 853.181913][T11647] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.181939][T11647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.181961][T11647] ? clear_bhb_loop+0x60/0xb0 [ 853.181985][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.182006][T11647] RIP: 0033:0x7f03d5fdebe9 [ 853.182027][T11647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.182055][T11647] RSP: 002b:00007f03d423e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.182079][T11647] RAX: ffffffffffffffda RBX: 00007f03d6205fa0 RCX: 00007f03d5fdebe9 [ 853.182097][T11647] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 853.182112][T11647] RBP: 00007f03d6061e19 R08: 0000000000000000 R09: 0000000000000000 [ 853.182126][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.182140][T11647] R13: 00007f03d6206038 R14: 00007f03d6205fa0 R15: 00007fff14c66bb8 [ 853.182164][T11647]