last executing test programs: 33.309455215s ago: executing program 1 (id=71): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5d6c}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 31.893105659s ago: executing program 4 (id=75): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x400000, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 30.796156877s ago: executing program 1 (id=76): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 30.654955491s ago: executing program 0 (id=77): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x284, 0x2e, 0x1, 0xc, 0x0, "", [@nested={0x274, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @nested={0x265, 0x67, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @u32=0x1}, @nested={0x111, 0x121, 0x0, 0x1, [@generic="a27dedcc42df1754c8d95ca1c7a0eea6e999d99a48e0efb597850349e03ce2ca412bb692411028fd7942cc7da7a242a02b94a07b13d380109802569ef79860ec1339c90215699d74520ae8cfe3c8612617c92ad7473573598f2c50396bddf85acecec66c04f18fecb5411f76abf8f76f0f7c4be13c63c2091cf2c25a3e1f09b49547b801ec520d463c317277d0d2b3c2db219debd532d6091250e205e5b11e97acdc3da80b616651b5a0b2ae3e022acf9f10dc05ecc024f20e9a015689e4d0ebaed615a4c7c6a9c4", @generic="5c176f3c1a85830049568f02d3fcf40a2b5d84650e17c91c2ba28bff20af6a452e", @generic="de12862bb0c07bc1cab37165f1487e52cedb49f6de79dea4c4d47df6fd9e43df21149f24"]}, @generic="769ddec48a75acc00617cd00340a87bf9227efcee5d5b89ab7ec4fe539a943b1aaeb6b1609d9ea440505343bfe677134068f118e4305765db9eddb690235f2e3a1ddd839bf9c8c9c21b0e6447f55d3f8b9b37087a02a95cf1fa8cf13a84aba29eb57b89fcdc3030a1c", @nested={0xdb, 0x71, 0x0, 0x1, [@nested={0x4, 0x8e}, @nested={0x4, 0x1b}, @nested={0x4, 0xa6}, @generic="982ac885ee8cf2eb04f5ee3b183c7a8ff61962c45014de6c3d753b413ca92d2b5d18c0fb0a40c576604756c83e0acb6617500646f3efcc5c2a5eaa39ac18ae81857f4cf9c08dfda5ae43121f3b17c332bbdce1369a01f695959e861ad23154f8fff30d860516f0624ce37e0b9615f52ee33c0a15d42a1e38704eb155cfcfae1701bfc2502c90620cf0804736f34db29770d6717a8ac924e71047408fd6f182e484f6546f025c0f5ed8ac05f56e8cb233743753127e9ca322ffcde41e62a1557d16e472976bdfe818f652b3"]}]}]}]}, 0x284}, {&(0x7f0000000000)={0x1c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xc, 0xfb, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x1c}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000fb9900000008000300", @ANYRES32=r5, @ANYBLOB="0c00238006"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 20.740069876s ago: executing program 2 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap']) creat(&(0x7f0000000300)='./file0\x00', 0x0) 20.53237522s ago: executing program 4 (id=81): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xfffffffe, @my=0x1}, 0x10) 20.424041153s ago: executing program 2 (id=83): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r1, 0x241d, 0x2dab, 0x1, &(0x7f0000000000)={[0xb381]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) 17.170973012s ago: executing program 0 (id=85): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!\a'], 0x0}, 0x0) 17.006640836s ago: executing program 2 (id=86): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xfffffffe, @my=0x1}, 0x10) 16.414886451s ago: executing program 1 (id=87): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r1, 0x241d, 0x2dab, 0x1, &(0x7f0000000000)={[0xb381]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) listen(0xffffffffffffffff, 0x0) 14.32945407s ago: executing program 4 (id=88): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x100000000, 0x8000000000000000, 0x4}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x959d78de5e5403a9, r2}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe94a, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x100, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0xb, 0xb, 0x8, 0x2fac39c4794555e0}, @alu={0x4, 0x1, 0x2, 0xb, 0x8, 0x100, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xff, 0x3f, &(0x7f0000000100)=""/63, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x457, 0xfffffeff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r5, 0x1, 0xffffffffffffffff, r6, 0x1], &(0x7f00000004c0)=[{0x1, 0x2, 0x2, 0xa}, {0x4, 0x3, 0x1, 0xc}, {0x5, 0x1, 0x6, 0xc}, {0x2, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x9, 0xb}, {0x5, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x4, 0x4, 0x6, 0x7}], 0x10, 0x45d1}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13.821440089s ago: executing program 0 (id=90): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x29, &(0x7f0000000080)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x8, 0xf008, 0x1, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4e, "73b08074d01362de3b47dab386729c54"}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13.590888642s ago: executing program 2 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r5, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) 12.37769449s ago: executing program 1 (id=93): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) creat(&(0x7f0000000300)='./file0\x00', 0x0) 10.473460807s ago: executing program 3 (id=94): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x8042, 0x10c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)=0x8) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 10.16519958s ago: executing program 2 (id=95): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xc, 0xfb, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000fb9900000008000300", @ANYRES32=r5, @ANYBLOB="0c00238006"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 10.080951199s ago: executing program 1 (id=96): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 7.577864373s ago: executing program 3 (id=97): openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) 7.034511609s ago: executing program 0 (id=98): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x8042, 0x10c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)=0x8) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 5.653522312s ago: executing program 1 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xd}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 5.012583214s ago: executing program 0 (id=100): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xfffffffffffffd63, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000001a00)=[{{&(0x7f0000000440)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000800)=""/192, 0xc0}], 0x2, &(0x7f0000000700)=""/82, 0x75}, 0xc}, {{&(0x7f00000008c0)=@nl, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001b00)=""/188, 0xba}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)=""/29, 0x1d}], 0x3, &(0x7f0000000b00)=""/163, 0xa3}, 0xffff0000}, {{&(0x7f0000000bc0)=@qipcrtr, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/145, 0x91}, {&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000000d40)=""/245, 0xf5}, {&(0x7f0000000e40)=""/216, 0xffffffffffffff0f}, {&(0x7f0000000f40)=""/248, 0xf8}], 0x5, &(0x7f00000010c0)=""/215, 0xd7}, 0x1fe8}, {{&(0x7f00000011c0)=@phonet, 0x80, &(0x7f0000001700)=[{&(0x7f0000001240)=""/77, 0x56}, {&(0x7f00000012c0)=""/125, 0x7d}, {&(0x7f0000001340)=""/183, 0xb7}, {&(0x7f0000001400)=""/105, 0x69}, {&(0x7f0000001480)=""/130, 0x82}, {&(0x7f0000001540)=""/116, 0xb6}, {&(0x7f00000015c0)=""/53, 0x35}, {&(0x7f0000001600)=""/241, 0xf6}], 0x8, &(0x7f0000001900)=""/230, 0xe6}, 0x2}], 0x4, 0x2, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x1f, {0x1f, 0x1, "81e82c183b025b0995dc5bab24b0a9869476e5a63d55aaa838ab49ae6b"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000240)={0x0, 0x17, 0xd1, "20281e333abd9758db2a92bc105d30c8316b82e4e30f0c6b8948037b17065604fe939c5ae7895e19b363b3310ff60a80f52e2294f8887c35fea56608526605ea89f705ecd82f6c1fa57f86dfc52894be203ded5bd3942ac9391688e68af38eeccded58ea2ff3f8d0236e6ca6fffb3e6dde9d1d1f422073c49f2e019657bf32f0bec761ae3dffb64421d6a8c19276e765587169a4c97ba0968dec13573e029c91a602a27273e0f671f0d5a7f175a192316bc0ae9c9bc24c05a980461db7faa9a3395b6af55020ef75ddb1ebfbfe7c86defb"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}}) 4.230303861s ago: executing program 2 (id=101): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x1c, 0x2e, 0x1, 0xc, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x1c}, {&(0x7f0000000000)={0x20, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x10, 0xfb, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0x8, 0x151, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x20}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000fb9900000008000300", @ANYRES32=r6, @ANYBLOB="0c00238006"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 3.62593802s ago: executing program 4 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESOCT]) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x145b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3fb}, @ib={0x1b, 0xffff, 0x0, {"0000000002000000001393000000dd00"}, 0x8074, 0x0, 0x7fff}}}, 0x118) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xdddd0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xdddd1000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x2, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x2000}, 0xddf8ffdb, 0x0, 0x0, 0x124102, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000000)=""/97, 0x10}, {&(0x7f00000000c0)=""/64}], 0x2}, 0x3}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) clock_gettime(0x6, &(0x7f0000000380)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000160001002bbd70000000000000000000000000000000000000000001ffffffff000000000000000000ff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000ff7f0000080016000a000000"], 0x100}}, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) 3.621534119s ago: executing program 3 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) r4 = dup3(r3, r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@bloom_filter={0x1e, 0xfffffffa, 0x9, 0x3ff, 0x0, r1, 0x80, '\x00', 0x0, r4, 0x0, 0x2, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000900000000000000050000001832000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000009650000d9aa000018630000050000000000000006000000181f0000", @ANYRES32=r5, @ANYBLOB="0000000000001f0000009510000000000000000000f5a900"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x4e, &(0x7f00000004c0)=""/78, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x5, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x81, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000540)=[{0x0, 0x2, 0x2}, {0x0, 0x3, 0x1, 0x7}, {0x4, 0x2, 0x10}, {0x4, 0x1, 0x8}], 0x10, 0x2}, 0x94) 3.151822226s ago: executing program 4 (id=104): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.0267724s ago: executing program 3 (id=105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) 1.454834461s ago: executing program 3 (id=106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r1, 0x241d, 0x2dab, 0x1, &(0x7f0000000000)={[0xb381]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) 1.233305897s ago: executing program 0 (id=107): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x8042, 0x10c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000240), 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)=0x8) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 28.931575ms ago: executing program 4 (id=108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in6=@dev, 0x4d2, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0x407}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}, 0x16}}]}, 0x184}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42060200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x457}, &(0x7f0000000340)=0x8) 0s ago: executing program 3 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x807, 0x5, 0x3, 0x9d]) r2 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff6}, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x8811}, 0x8800) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000280)=0x40000002) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 89.597604][ T5824] cgroup: Unknown subsys name 'net' [ 89.835987][ T5824] cgroup: Unknown subsys name 'cpuset' [ 89.900826][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.902254][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.954583][ T1231] cfg80211: failed to load regulatory.db [ 94.932462][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.938726][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.952069][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.952818][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.957777][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.959847][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.962506][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.963328][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.965833][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.966789][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.968567][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.969428][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.970854][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.974215][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.974825][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.975343][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.978574][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.979245][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.982082][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.982378][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.983115][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.985209][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.985682][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.012722][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.018433][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.113280][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 96.218392][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.230802][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.367894][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.443061][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.072178][ T5853] Bluetooth: hci4: command tx timeout [ 97.072302][ T5853] Bluetooth: hci3: command tx timeout [ 97.072381][ T5853] Bluetooth: hci0: command tx timeout [ 97.073790][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.074636][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.075273][ T5837] bridge_slave_0: entered allmulticast mode [ 97.078294][ T5837] bridge_slave_0: entered promiscuous mode [ 97.090880][ T5852] Bluetooth: hci2: command tx timeout [ 97.150197][ T5852] Bluetooth: hci1: command tx timeout [ 97.324061][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.324210][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.324398][ T5837] bridge_slave_1: entered allmulticast mode [ 97.326314][ T5837] bridge_slave_1: entered promiscuous mode [ 97.732143][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.732312][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.732513][ T5834] bridge_slave_0: entered allmulticast mode [ 97.735432][ T5834] bridge_slave_0: entered promiscuous mode [ 97.739846][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.740135][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.740340][ T5835] bridge_slave_0: entered allmulticast mode [ 97.791074][ T5835] bridge_slave_0: entered promiscuous mode [ 98.071605][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.071754][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.071944][ T5834] bridge_slave_1: entered allmulticast mode [ 98.075343][ T5834] bridge_slave_1: entered promiscuous mode [ 98.077219][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.077363][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.077542][ T5835] bridge_slave_1: entered allmulticast mode [ 98.126345][ T5835] bridge_slave_1: entered promiscuous mode [ 98.127419][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.127533][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.127706][ T5836] bridge_slave_0: entered allmulticast mode [ 98.129596][ T5836] bridge_slave_0: entered promiscuous mode [ 98.167059][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.473579][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.473826][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.474028][ T5836] bridge_slave_1: entered allmulticast mode [ 98.477025][ T5836] bridge_slave_1: entered promiscuous mode [ 98.483557][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.516104][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.516252][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.516481][ T5838] bridge_slave_0: entered allmulticast mode [ 98.519441][ T5838] bridge_slave_0: entered promiscuous mode [ 98.824288][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.824458][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.824670][ T5838] bridge_slave_1: entered allmulticast mode [ 98.827564][ T5838] bridge_slave_1: entered promiscuous mode [ 98.843346][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.857987][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.104186][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.106829][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.111839][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.117766][ T5837] team0: Port device team_slave_0 added [ 99.150179][ T5852] Bluetooth: hci2: command tx timeout [ 99.150211][ T5852] Bluetooth: hci0: command tx timeout [ 99.150235][ T5852] Bluetooth: hci3: command tx timeout [ 99.150258][ T5852] Bluetooth: hci4: command tx timeout [ 99.230176][ T5853] Bluetooth: hci1: command tx timeout [ 99.385235][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.388463][ T5837] team0: Port device team_slave_1 added [ 99.577489][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.885472][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.887772][ T5834] team0: Port device team_slave_0 added [ 99.897246][ T5835] team0: Port device team_slave_0 added [ 100.094100][ T5834] team0: Port device team_slave_1 added [ 100.097256][ T5835] team0: Port device team_slave_1 added [ 100.099608][ T5836] team0: Port device team_slave_0 added [ 100.104157][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.104175][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.104205][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.335260][ T5836] team0: Port device team_slave_1 added [ 100.336618][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.336633][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.336662][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.339995][ T5838] team0: Port device team_slave_0 added [ 100.572506][ T5838] team0: Port device team_slave_1 added [ 100.573786][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.573800][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.573828][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.784164][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.784182][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.784211][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.971689][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.971705][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.971724][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.973924][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.973935][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.973954][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.975109][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.975120][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.975138][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.143097][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.143114][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.143143][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.144670][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.144685][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.144713][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.240443][ T5853] Bluetooth: hci4: command tx timeout [ 101.240480][ T5853] Bluetooth: hci3: command tx timeout [ 101.240503][ T5853] Bluetooth: hci0: command tx timeout [ 101.240521][ T5853] Bluetooth: hci2: command tx timeout [ 101.262389][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.262404][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.262427][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.310214][ T5852] Bluetooth: hci1: command tx timeout [ 101.436649][ T5837] hsr_slave_0: entered promiscuous mode [ 101.437781][ T5837] hsr_slave_1: entered promiscuous mode [ 101.594272][ T5834] hsr_slave_0: entered promiscuous mode [ 101.595582][ T5834] hsr_slave_1: entered promiscuous mode [ 101.596469][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.596573][ T5834] Cannot create hsr debugfs directory [ 101.966593][ T5835] hsr_slave_0: entered promiscuous mode [ 101.967682][ T5835] hsr_slave_1: entered promiscuous mode [ 101.968576][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 101.968600][ T5835] Cannot create hsr debugfs directory [ 102.081585][ T5836] hsr_slave_0: entered promiscuous mode [ 102.083002][ T5836] hsr_slave_1: entered promiscuous mode [ 102.083984][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 102.084010][ T5836] Cannot create hsr debugfs directory [ 102.272742][ T5838] hsr_slave_0: entered promiscuous mode [ 102.274914][ T5838] hsr_slave_1: entered promiscuous mode [ 102.275837][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 102.275860][ T5838] Cannot create hsr debugfs directory [ 103.310457][ T5853] Bluetooth: hci0: command tx timeout [ 103.310498][ T5853] Bluetooth: hci3: command tx timeout [ 103.310525][ T5853] Bluetooth: hci4: command tx timeout [ 103.310550][ T5852] Bluetooth: hci2: command tx timeout [ 103.390699][ T5841] Bluetooth: hci1: command tx timeout [ 103.969188][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.036047][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.058746][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.116445][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.261832][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.303990][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.348304][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.408291][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.552435][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.619774][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.657315][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.711750][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.937328][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.977926][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.029752][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.083486][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.267432][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.277756][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.312287][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.367563][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.409522][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.514448][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.574756][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.599607][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.600348][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.648451][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.648675][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.727825][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.749465][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.815159][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.816581][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.874456][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.874636][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.953850][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.008931][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.009093][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.044944][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.083035][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.083230][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.233539][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.294910][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.307077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.308501][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.433838][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.434709][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.542507][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.578903][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.579162][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.658895][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.660331][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.735555][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.048194][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.244697][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.503137][ T5834] veth0_vlan: entered promiscuous mode [ 107.592220][ T5834] veth1_vlan: entered promiscuous mode [ 107.667698][ T5835] veth0_vlan: entered promiscuous mode [ 107.748252][ T5835] veth1_vlan: entered promiscuous mode [ 107.787309][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.854193][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.857513][ T5834] veth0_macvtap: entered promiscuous mode [ 107.889260][ T5837] veth0_vlan: entered promiscuous mode [ 107.912309][ T5834] veth1_macvtap: entered promiscuous mode [ 107.974922][ T5837] veth1_vlan: entered promiscuous mode [ 108.018710][ T5835] veth0_macvtap: entered promiscuous mode [ 108.048978][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.079967][ T5835] veth1_macvtap: entered promiscuous mode [ 108.103720][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.162707][ T5836] veth0_vlan: entered promiscuous mode [ 108.164803][ T3031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.175519][ T3031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.203066][ T3031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.234464][ T3031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.241965][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.258506][ T5838] veth0_vlan: entered promiscuous mode [ 108.327958][ T5836] veth1_vlan: entered promiscuous mode [ 108.335814][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.336478][ T5837] veth0_macvtap: entered promiscuous mode [ 108.417980][ T5837] veth1_macvtap: entered promiscuous mode [ 108.439340][ T5838] veth1_vlan: entered promiscuous mode [ 108.450989][ T992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.468477][ T992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.557919][ T992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.604499][ T992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.786625][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.818845][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.818874][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.892876][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.936284][ T5836] veth0_macvtap: entered promiscuous mode [ 108.961810][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.984064][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.029821][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.034112][ T5836] veth1_macvtap: entered promiscuous mode [ 109.048351][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.056223][ T5838] veth0_macvtap: entered promiscuous mode [ 109.060700][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.060725][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.205039][ T5838] veth1_macvtap: entered promiscuous mode [ 109.287166][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.287190][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.443566][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.555059][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.574616][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.574760][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.574779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.705805][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.735884][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.754284][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.754427][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.754439][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.786649][ T992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809394][ T992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.855001][ T992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.893983][ T992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.904998][ T992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.995230][ T1021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.071658][ T5963] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 110.127028][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.127050][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.129960][ T5964] Zero length message leads to an empty skb [ 110.188237][ T5963] team0: Port device dummy0 added [ 110.614413][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.614437][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.841553][ T5972] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 111.874452][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 113.188508][ T5980] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 113.250507][ T5981] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 115.381405][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.381428][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.147204][ T6012] hub 9-0:1.0: USB hub found [ 116.154565][ T6012] hub 9-0:1.0: 1 port detected [ 116.895916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.895940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.292829][ T6020] 9pnet_fd: Insufficient options for proto=fd [ 118.662646][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.663960][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.760372][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.942655][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.942721][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.942747][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.967635][ T9] usb 2-1: config 0 descriptor?? [ 118.997092][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 119.418880][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 119.432326][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 119.435319][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 119.437371][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 119.440823][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 119.443018][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 119.445329][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 119.450483][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 119.455474][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 119.456514][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 119.460470][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 119.466027][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 119.491841][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 119.701866][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 119.703140][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 119.765855][ T9] pwc: Registered as video103. [ 119.806460][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 119.955829][ T9] usb 2-1: USB disconnect, device number 2 [ 119.985465][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.028082][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.370937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.579809][ T6083] hub 9-0:1.0: USB hub found [ 122.589716][ T6083] hub 9-0:1.0: 1 port detected [ 122.691962][ T3031] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.694704][ T3031] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.695964][ T3031] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.696174][ T3031] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.789777][ T6016] syz.0.12 (6016) used greatest stack depth: 18456 bytes left [ 122.839461][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.839483][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.422147][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 123.710149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.710898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.181499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.181535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.359252][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.085398][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.085478][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.085503][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.470289][ T31] usb 4-1: config 0 descriptor?? [ 125.507858][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 126.587029][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.113407][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.205975][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.300520][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.383822][ T31] pwc: recv_control_msg error -71 req 02 val 2b00 [ 127.384826][ T31] pwc: recv_control_msg error -71 req 02 val 2700 [ 127.385295][ T31] pwc: recv_control_msg error -71 req 02 val 2c00 [ 127.385772][ T31] pwc: recv_control_msg error -71 req 04 val 1000 [ 127.386252][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 127.387176][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 127.387681][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 127.388218][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.388715][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.410118][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.419429][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.422017][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.707105][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.719628][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.720184][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.722130][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.722612][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.755191][ T31] pwc: Registered as video103. [ 128.758846][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 128.762992][ T6118] hub 9-0:1.0: USB hub found [ 128.827104][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.863269][ T6118] hub 9-0:1.0: 1 port detected [ 129.016268][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.848588][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.999153][ T31] usb 4-1: USB disconnect, device number 2 [ 130.302784][ T6135] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.454278][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.712216][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.734355][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.575490][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.863528][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.108662][ T6149] lo speed is unknown, defaulting to 1000 [ 132.110445][ T6149] lo speed is unknown, defaulting to 1000 [ 132.168269][ T6149] lo speed is unknown, defaulting to 1000 [ 132.289513][ T6149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.481207][ T6149] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 132.858042][ T6149] lo speed is unknown, defaulting to 1000 [ 132.861370][ T6149] lo speed is unknown, defaulting to 1000 [ 132.864860][ T6149] lo speed is unknown, defaulting to 1000 [ 132.867905][ T6149] lo speed is unknown, defaulting to 1000 [ 132.870910][ T6149] lo speed is unknown, defaulting to 1000 [ 133.698787][ T6152] netlink: 52 bytes leftover after parsing attributes in process `syz.3.32'. [ 134.090512][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.261918][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 134.264479][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.264507][ T31] usb 2-1: config 0 has no interface number 0 [ 134.268752][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.268781][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.268801][ T31] usb 2-1: Product: syz [ 134.268816][ T31] usb 2-1: Manufacturer: syz [ 134.268831][ T31] usb 2-1: SerialNumber: syz [ 134.345053][ T31] usb 2-1: config 0 descriptor?? [ 134.377853][ T31] smsc95xx v2.0.0 [ 134.553681][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.853727][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.853788][ T5928] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.853814][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.183726][ T5928] usb 4-1: config 0 descriptor?? [ 135.196908][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 135.660640][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.664891][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.903318][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.904260][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.908622][ T5928] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.923201][ T5928] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.932723][ T5928] pwc: recv_control_msg error -32 req 02 val 2100 [ 135.939297][ T5928] pwc: recv_control_msg error -32 req 04 val 1500 [ 135.940654][ T5928] pwc: recv_control_msg error -32 req 02 val 2500 [ 135.942259][ T5928] pwc: recv_control_msg error -32 req 02 val 2400 [ 136.681402][ T6175] hub 9-0:1.0: USB hub found [ 136.686661][ T6175] hub 9-0:1.0: 1 port detected [ 137.372094][ T5928] pwc: recv_control_msg error -32 req 02 val 2600 [ 137.373473][ T5928] pwc: recv_control_msg error -32 req 02 val 2900 [ 137.374508][ T5928] pwc: recv_control_msg error -32 req 02 val 2800 [ 138.041969][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.042211][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.103922][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.439539][ T5928] pwc: Registered as video103. [ 139.480196][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -110 [ 139.480665][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -110 [ 139.634593][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 139.735418][ T5928] usb 4-1: USB disconnect, device number 3 [ 142.730249][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.892117][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.892158][ T977] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.892175][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.951694][ T977] usb 1-1: config 0 descriptor?? [ 142.988464][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 143.394721][ T977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 143.397870][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 143.398878][ T977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 143.399870][ T977] pwc: recv_control_msg error -32 req 04 val 1000 [ 143.433467][ T977] pwc: recv_control_msg error -32 req 04 val 1300 [ 143.434263][ T977] pwc: recv_control_msg error -32 req 04 val 1400 [ 143.435019][ T977] pwc: recv_control_msg error -32 req 02 val 2000 [ 143.435832][ T977] pwc: recv_control_msg error -32 req 02 val 2100 [ 143.436595][ T977] pwc: recv_control_msg error -32 req 04 val 1500 [ 143.437354][ T977] pwc: recv_control_msg error -32 req 02 val 2500 [ 143.437962][ T977] pwc: recv_control_msg error -32 req 02 val 2400 [ 143.438506][ T977] pwc: recv_control_msg error -32 req 02 val 2600 [ 143.439285][ T977] pwc: recv_control_msg error -32 req 02 val 2900 [ 143.642532][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 143.642936][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 143.646308][ T977] pwc: Registered as video103. [ 143.648558][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 143.680982][ T977] usb 1-1: USB disconnect, device number 2 [ 143.850374][ T5955] usb 2-1: USB disconnect, device number 3 [ 152.240387][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 152.380406][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.397537][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.397586][ T10] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 152.397612][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.418711][ T10] usb 5-1: config 0 descriptor?? [ 152.583379][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.583405][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.583421][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.583452][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.583468][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.780945][ T5907] usb 2-1: config 0 descriptor?? [ 153.307015][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 153.307236][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.418379][ T10] usb 5-1: USB disconnect, device number 2 [ 153.467426][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 153.467580][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.532475][ T5907] usb 2-1: USB disconnect, device number 4 [ 153.662105][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.722895][ T6252] hub 9-0:1.0: USB hub found [ 153.729367][ T6252] hub 9-0:1.0: 1 port detected [ 153.830118][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 153.832223][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 153.832243][ T31] usb 4-1: config 0 has no interface number 0 [ 153.834584][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.834604][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.834618][ T31] usb 4-1: Product: syz [ 153.834628][ T31] usb 4-1: Manufacturer: syz [ 153.834638][ T31] usb 4-1: SerialNumber: syz [ 153.896234][ T31] usb 4-1: config 0 descriptor?? [ 153.914056][ T31] smsc95xx v2.0.0 [ 156.379570][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 156.400118][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 156.442807][ T31] usb 4-1: USB disconnect, device number 4 [ 158.560166][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.650644][ T5907] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.710245][ T10] usb 5-1: device descriptor read/64, error -71 [ 158.800610][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 158.804087][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.805680][ T5907] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 158.805703][ T5907] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 158.805723][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.812600][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.812633][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.812656][ T5907] usb 3-1: Product: syz [ 158.812674][ T5907] usb 3-1: Manufacturer: syz [ 158.812691][ T5907] usb 3-1: SerialNumber: syz [ 158.989222][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.190171][ T10] usb 5-1: device descriptor read/64, error -71 [ 159.308825][ T10] usb usb5-port1: attempt power cycle [ 159.349904][ T5907] usb 3-1: 0:2 : does not exist [ 159.539904][ T5907] usb 3-1: USB disconnect, device number 2 [ 159.668846][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.710265][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.741001][ T10] usb 5-1: device descriptor read/8, error -71 [ 160.000180][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.192246][ T10] usb 5-1: device descriptor read/8, error -71 [ 160.197974][ T6284] hub 9-0:1.0: USB hub found [ 160.198721][ T6284] hub 9-0:1.0: 1 port detected [ 160.300943][ T10] usb usb5-port1: unable to enumerate USB device [ 161.919818][ T6292] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 161.961680][ T6292] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 163.223093][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.322282][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 164.326818][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.326942][ T31] usb 4-1: config 0 has no interface number 0 [ 164.752786][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.752821][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.752841][ T31] usb 4-1: Product: syz [ 164.752863][ T31] usb 4-1: Manufacturer: syz [ 164.752878][ T31] usb 4-1: SerialNumber: syz [ 164.855634][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 165.022202][ T31] usb 4-1: config 0 descriptor?? [ 172.750579][ T31] usb 4-1: can't set config #0, error -110 [ 172.875777][ T5926] usb 4-1: USB disconnect, device number 5 [ 173.314340][ T6323] 9pnet_fd: Insufficient options for proto=fd [ 177.178146][ T1231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.320122][ T1231] usb 1-1: device descriptor read/64, error -71 [ 177.560259][ T1231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.690252][ T1231] usb 1-1: device descriptor read/64, error -71 [ 177.802552][ T1231] usb usb1-port1: attempt power cycle [ 179.070332][ T1231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.091498][ T1231] usb 1-1: device descriptor read/8, error -71 [ 179.330187][ T1231] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.352521][ T1231] usb 1-1: device descriptor read/8, error -71 [ 179.527774][ T1231] usb usb1-port1: unable to enumerate USB device [ 182.798723][ T5926] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.650854][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 183.660624][ T5926] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 183.660650][ T5926] usb 1-1: config 0 has no interface number 0 [ 183.660701][ T5926] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.660729][ T5926] usb 1-1: config 0 interface 85 has no altsetting 0 [ 183.728326][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 183.728367][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.728388][ T5926] usb 1-1: Product: syz [ 183.728402][ T5926] usb 1-1: Manufacturer: syz [ 183.728417][ T5926] usb 1-1: SerialNumber: syz [ 183.774987][ T5926] usb 1-1: config 0 descriptor?? [ 185.208425][ T5926] appletouch 1-1:0.85: Failed to read mode from device. [ 185.208674][ T5926] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 185.862111][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.011224][ T5926] usb 1-1: USB disconnect, device number 7 [ 186.663501][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.523382][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.609856][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.834818][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.980637][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.981520][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.270449][ T5842] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.420184][ T5842] usb 1-1: device descriptor read/64, error -71 [ 189.660137][ T5842] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.790279][ T5842] usb 1-1: device descriptor read/64, error -71 [ 189.910513][ T5842] usb usb1-port1: attempt power cycle [ 190.260105][ T5842] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.281003][ T5842] usb 1-1: device descriptor read/8, error -71 [ 190.292110][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.342856][ T6406] tmpfs: Bad value for 'mpol' [ 190.362812][ T6406] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 190.414236][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.488123][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 190.525005][ T5842] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.541174][ T5842] usb 1-1: device descriptor read/8, error -71 [ 190.650698][ T5842] usb usb1-port1: unable to enumerate USB device [ 191.152981][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.355230][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.381830][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.208868][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.249790][ T6436] ------------[ cut here ]------------ [ 195.249806][ T6436] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 195.250316][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.250601][ T6436] WARNING: CPU: 1 PID: 6436 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 195.250655][ T6436] Modules linked in: [ 195.250703][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.250728][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.250745][ T6436] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 195.250775][ T6436] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 19 4c be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 40 d6 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 195.250793][ T6436] RSP: 0018:ffffc9000c52fae0 EFLAGS: 00010246 [ 195.250811][ T6436] RAX: 7e6890b59062a300 RBX: 1ffff11028576c01 RCX: 0000000000080000 [ 195.250827][ T6436] RDX: ffffc90010fad000 RSI: 00000000000006bb RDI: 00000000000006bc [ 195.250849][ T6436] RBP: ffffc9000c52fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 195.250864][ T6436] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142b9d000 [ 195.250880][ T6436] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 195.250896][ T6436] FS: 00007feb22cc16c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 195.250915][ T6436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.250929][ T6436] CR2: 00007f11b1d646c7 CR3: 000000003ec6c000 CR4: 00000000003526f0 [ 195.250946][ T6436] Call Trace: [ 195.250955][ T6436] [ 195.250968][ T6436] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 195.250999][ T6436] ? __pfx_autoremove_wake_function+0x10/0x10 [ 195.251030][ T6436] ? rt_spin_unlock+0x65/0x80 [ 195.251066][ T6436] ? drm_vblank_get+0x148/0x260 [ 195.251093][ T6436] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 195.251124][ T6436] drm_fb_helper_ioctl+0x116/0x140 [ 195.251156][ T6436] do_fb_ioctl+0x45c/0x750 [ 195.251187][ T6436] ? __pfx_do_fb_ioctl+0x10/0x10 [ 195.251230][ T6436] ? smk_tskacc+0x2fc/0x370 [ 195.251277][ T6436] ? __pfx_smack_file_ioctl+0x10/0x10 [ 195.251315][ T6436] ? __fget_files+0x3a6/0x420 [ 195.251346][ T6436] ? __fget_files+0x2a/0x420 [ 195.251382][ T6436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.251408][ T6436] ? __pfx_fb_ioctl+0x10/0x10 [ 195.251433][ T6436] __se_sys_ioctl+0xff/0x170 [ 195.251461][ T6436] do_syscall_64+0xfa/0x3b0 [ 195.251482][ T6436] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.251515][ T6436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.251537][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 195.251563][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.251584][ T6436] RIP: 0033:0x7feb24ebec29 [ 195.251611][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.251629][ T6436] RSP: 002b:00007feb22cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.251650][ T6436] RAX: ffffffffffffffda RBX: 00007feb25106270 RCX: 00007feb24ebec29 [ 195.251667][ T6436] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 195.251680][ T6436] RBP: 00007feb24f41e41 R08: 0000000000000000 R09: 0000000000000000 [ 195.251693][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.251704][ T6436] R13: 00007feb25106308 R14: 00007feb25106270 R15: 00007ffd78075728 [ 195.251739][ T6436] [ 195.251757][ T6436] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.251773][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.251798][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.251810][ T6436] Call Trace: [ 195.251849][ T6436] [ 195.251859][ T6436] dump_stack_lvl+0x99/0x250 [ 195.251893][ T6436] ? __asan_memcpy+0x40/0x70 [ 195.251917][ T6436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.251951][ T6436] ? __pfx__printk+0x10/0x10 [ 195.251989][ T6436] vpanic+0x281/0x750 [ 195.252022][ T6436] ? __pfx__printk+0x10/0x10 [ 195.252044][ T6436] ? __pfx_vpanic+0x10/0x10 [ 195.252076][ T6436] ? is_bpf_text_address+0x26/0x2b0 [ 195.252119][ T6436] panic+0xb9/0xc0 [ 195.252152][ T6436] ? __pfx_panic+0x10/0x10 [ 195.252197][ T6436] __warn+0x31b/0x4b0 [ 195.252226][ T6436] ? drm_wait_one_vblank+0x571/0x5b0 [ 195.252257][ T6436] ? drm_wait_one_vblank+0x571/0x5b0 [ 195.252287][ T6436] report_bug+0x2be/0x4f0 [ 195.252318][ T6436] ? drm_wait_one_vblank+0x571/0x5b0 [ 195.252347][ T6436] ? drm_wait_one_vblank+0x571/0x5b0 [ 195.252367][ T6436] ? drm_wait_one_vblank+0x573/0x5b0 [ 195.252387][ T6436] handle_bug+0x84/0x160 [ 195.252405][ T6436] exc_invalid_op+0x1a/0x50 [ 195.252421][ T6436] asm_exc_invalid_op+0x1a/0x20 [ 195.252444][ T6436] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 195.252466][ T6436] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 19 4c be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 40 d6 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 195.252478][ T6436] RSP: 0018:ffffc9000c52fae0 EFLAGS: 00010246 [ 195.252492][ T6436] RAX: 7e6890b59062a300 RBX: 1ffff11028576c01 RCX: 0000000000080000 [ 195.252503][ T6436] RDX: ffffc90010fad000 RSI: 00000000000006bb RDI: 00000000000006bc [ 195.252514][ T6436] RBP: ffffc9000c52fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 195.252524][ T6436] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142b9d000 [ 195.252536][ T6436] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 195.252563][ T6436] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 195.252585][ T6436] ? __pfx_autoremove_wake_function+0x10/0x10 [ 195.252607][ T6436] ? rt_spin_unlock+0x65/0x80 [ 195.252631][ T6436] ? drm_vblank_get+0x148/0x260 [ 195.252650][ T6436] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 195.252672][ T6436] drm_fb_helper_ioctl+0x116/0x140 [ 195.252694][ T6436] do_fb_ioctl+0x45c/0x750 [ 195.252716][ T6436] ? __pfx_do_fb_ioctl+0x10/0x10 [ 195.252746][ T6436] ? smk_tskacc+0x2fc/0x370 [ 195.252780][ T6436] ? __pfx_smack_file_ioctl+0x10/0x10 [ 195.252806][ T6436] ? __fget_files+0x3a6/0x420 [ 195.252829][ T6436] ? __fget_files+0x2a/0x420 [ 195.252859][ T6436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.252878][ T6436] ? __pfx_fb_ioctl+0x10/0x10 [ 195.252896][ T6436] __se_sys_ioctl+0xff/0x170 [ 195.252916][ T6436] do_syscall_64+0xfa/0x3b0 [ 195.252930][ T6436] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.252954][ T6436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.252970][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 195.252989][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.253004][ T6436] RIP: 0033:0x7feb24ebec29 [ 195.253016][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.253029][ T6436] RSP: 002b:00007feb22cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.253043][ T6436] RAX: ffffffffffffffda RBX: 00007feb25106270 RCX: 00007feb24ebec29 [ 195.253055][ T6436] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 195.253064][ T6436] RBP: 00007feb24f41e41 R08: 0000000000000000 R09: 0000000000000000 [ 195.253074][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.253083][ T6436] R13: 00007feb25106308 R14: 00007feb25106270 R15: 00007ffd78075728 [ 195.253109][ T6436] [ 195.253287][ T6436] Kernel Offset: disabled