last executing test programs: 5m28.308544681s ago: executing program 0 (id=824): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4a800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5m28.151988551s ago: executing program 0 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f00000002c0)="0a000001f00001000290d9184ffc4ea6d951cdf070099fa1d204e15815ba8dab0b71be7c818c9738a43d1e682cd8dfd0749d357e7467592dedaf6f79d42cd3818d2c3bd649c98cc35179f8b4f3f2718af7fb7b1d0a52ff4d98c3d2ee69f963a751a7d80892301abe08defda8f047c2839b9b9ec00d8c50d9b965180afe523a529ac182b3135c0b0852f353b9fa", 0x8d) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@local, @private=0xa010102, 0x1, "f8cc081f11e6ec3992be6b511045397a36822ef2cb55a910f6655c0f100b6d55", 0x9, 0x2, 0x2, 0x8}, 0x3c) 5m25.888454604s ago: executing program 0 (id=834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x53, &(0x7f0000000000)=r3, 0x4) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 5m24.794309741s ago: executing program 0 (id=837): r0 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f00000001c0)=ANY=[], 0xd2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x35a, 0x200, 0x3, 0xbfdff7fc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="320200007d00000005f100000000000005"], 0x232) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bind$llc(0xffffffffffffffff, 0x0, 0x0) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r2) 5m24.364014254s ago: executing program 0 (id=841): unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r7 = io_uring_setup(0x177c, &(0x7f00000002c0)={0x0, 0x9c77, 0x4, 0x2, 0x1}) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x2) (async) close_range(r7, 0xffffffffffffffff, 0x200000000000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000580)={'wg1\x00', @random="14278a7e0d1e"}) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r8 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) syz_io_uring_setup(0x239, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x0, 0xb9}, &(0x7f0000000100), &(0x7f00000001c0)) 5m24.130327514s ago: executing program 0 (id=844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 'queue0\x00', 0x9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) write$sndseq(r2, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2000]}}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x4}, 0x9, 0x64, &(0x7f0000000180)="2caf57d988f7a86d992b0ecff60bcb90231c98024d0e3b7d5f09a86daa5b417ca279d0ae30e4fdde3975768101dde732ab3d2b4e265dc0de3b4e7bd9dff2f48985d2a4434ee4c5a85092798510ebe2ad9380c4b54a7ddd39641bc8714a4b7888213aa4fed7cb98608843551f1b", 0x6d, 0x4, 0x81, 0x0, 0x7, 0x8001, &(0x7f0000000380)="d7716ee48b7f19bc4a41daa19f29062fb7f73ca7ac99f9faa677f745eb3a3ce837e8ebec3fbb2794f11bc77eef9500cf40ae5d054d6507f3007a016c57753ffb33c755edf13a8b02d8a75dbd66f3862ecb71a0f8ec37a70768d894ceab238c1e4502af6755981abe015899ce29828a9292ab3d8b777c6c7595738ce792a6ea86cd50cda2b20a109c03ef355789202085d1e02de2ff52376fab63ebb738b38aa2608ba7aafceab9f79424f1"}) clock_adjtime(0x0, &(0x7f0000000280)={0xa627, 0xff, 0x5, 0x4, 0x0, 0x3, 0x2, 0x0, 0x800000000000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x3}) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) 5m8.436406302s ago: executing program 32 (id=844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 'queue0\x00', 0x9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) write$sndseq(r2, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2000]}}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x4}, 0x9, 0x64, &(0x7f0000000180)="2caf57d988f7a86d992b0ecff60bcb90231c98024d0e3b7d5f09a86daa5b417ca279d0ae30e4fdde3975768101dde732ab3d2b4e265dc0de3b4e7bd9dff2f48985d2a4434ee4c5a85092798510ebe2ad9380c4b54a7ddd39641bc8714a4b7888213aa4fed7cb98608843551f1b", 0x6d, 0x4, 0x81, 0x0, 0x7, 0x8001, &(0x7f0000000380)="d7716ee48b7f19bc4a41daa19f29062fb7f73ca7ac99f9faa677f745eb3a3ce837e8ebec3fbb2794f11bc77eef9500cf40ae5d054d6507f3007a016c57753ffb33c755edf13a8b02d8a75dbd66f3862ecb71a0f8ec37a70768d894ceab238c1e4502af6755981abe015899ce29828a9292ab3d8b777c6c7595738ce792a6ea86cd50cda2b20a109c03ef355789202085d1e02de2ff52376fab63ebb738b38aa2608ba7aafceab9f79424f1"}) clock_adjtime(0x0, &(0x7f0000000280)={0xa627, 0xff, 0x5, 0x4, 0x0, 0x3, 0x2, 0x0, 0x800000000000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x3}) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) 4m34.202173891s ago: executing program 2 (id=990): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10000000100009250000008000000000"], 0x10}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x200, 0xa, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000000c0)=""/111) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r9, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) 4m31.52829518s ago: executing program 2 (id=996): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), 0x4) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800107a, r0, 0x0) 4m30.655218251s ago: executing program 2 (id=999): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4a800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4m30.022260432s ago: executing program 2 (id=1002): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r5 = socket(0xa, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0], 0x34}}, 0x0) 4m28.070138212s ago: executing program 2 (id=1006): r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000480)={0xfff, 0x5, 0x1d4e2218, 0x6}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r5, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00337c644584d466a100"}) r6 = syz_open_pts(r4, 0xc401) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="c97fb7fc44b5868b7372db9c0926d9882ba2d91f8eda3d0620c7c4acce12bd478a216767a3160eae6405f5301217cb6bb7e1b49cec6fc60113979f53cfb80aa8fbe56fe110d3332a5d6d53a618e18aa14b357587d8c17fd1aa1a641a9856a4a734ca810be0025c", 0x67}, {&(0x7f0000000300)="48c1dfe5c4511ba4ecfb1665f3b508b79c6754593654b4d40ede88afe9b4825fd664815d768563a9447e4e01863a725a87b839292427df8d8a83af6c3cad1ea539b1a5091b91eec5e57220", 0x4b}, {&(0x7f0000000080)="de77c9d755b33d46e862b575e9eddb2302525f2ac23be86f4e182834de72892d2a427bb295", 0x25}], 0x3, 0x0, 0x0, 0x20000040}, 0x4040080) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x4, 0x38f, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x4) close(r3) splice(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x87ffffe, 0x6, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x4, 0x20}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000440)={r7, 0xb}, 0x8) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x8000000001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4m25.634160134s ago: executing program 2 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001a40)={0x3b, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x1, 0x9, 0x4000074}, 0x2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001700), &(0x7f0000001740)=0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="2c0004000000000000267af242307c89d94fc836cfbb31f0aaa488000b00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x9d}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0x4, "8d1a2e0d"}, 0x0, 0x0, 0x0, 0x0}) 4m10.15740643s ago: executing program 33 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001a40)={0x3b, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x1, 0x9, 0x4000074}, 0x2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001700), &(0x7f0000001740)=0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="2c0004000000000000267af242307c89d94fc836cfbb31f0aaa488000b00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x9d}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0x4, "8d1a2e0d"}, 0x0, 0x0, 0x0, 0x0}) 2m32.282113077s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 2m2.521641404s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m41.698339618s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m33.011077612s ago: executing program 1 (id=1562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x17, 0x114, 0x2, {0x2, 0x7}}], 0x18, 0x400c8c5}, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="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", @ANYRESOCT, @ANYRES8=r1], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = syz_usb_connect$uac1(0x5, 0xb6, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x0, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xd2}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x6, 0x0, "fa3d"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4, 0x3, "7d0cbea317680d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x8, 0x1, "775cbedd18fa0e821f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xdc, 0x3, 0x3, 0x7f, "35878aba4bdb88ecf9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xb, 0xff, {0x7, 0x25, 0x1, 0x81, 0x1, 0x309b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x3, 0xf, {0x7, 0x25, 0x1, 0x80, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x21, 0x0, 0xaf, 0x5}, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x0, 0xf0f, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x9, 0x3, 0x1}]}, 0x6, [{0x90, &(0x7f0000000200)=@string={0x90, 0x3, "859a8ed6010b3957fa23b347f6cfc155263055109ebc6720f21bff11effb5d9a5e5d6c8bbe99576d9e2bfece7ca2ad53c7890b9189fb6571f7d7c32a26606fb081e30c8aa7e35f3864b9e42a7f36a8bc084b4dc898235137c7eaafa672aa64eda4732769cd9a89484d5cfa9939c49bcc5e1ba41c9615651baf6cf68f3580831c701a3bb6c40d95037ad0b6437227"}}, {0xc8, &(0x7f0000000300)=@string={0xc8, 0x3, "4bc2ccf22a73b45196ee7a1f85d3d2e9d3e5ef8a91949bf5cdb16f7b1b0467249458282b722314aaad94a24cac2d76082944837b3ff20adb76111e13649c20061796699a140cb07901743ccc6023ca7b89ce8e82024ccfbd3d736f0d234c6ff0e0afdd008364ed63ecde1d5340f7ae08b45a78f16dbd341a163a28e9c4e6f8fdf27aea4de28795bf36976c5e3e887d5265dd9a590743a9df152b8a7e1a1db6965513a5f1a6dc3145ad0a14d380a0803990c65c8b334e8dc563b41b633d3e1097c03b7552e325"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0xdf, &(0x7f00000004c0)=@string={0xdf, 0x3, "cd2005dd2665a036304873954ae30c2a978602a0fab35f8583c65d5d0594fa9e827d40e7e5e05f1ac2ce3acc5bf01682cd0068fe001cdf2ec8bd9be2223f6b1b372edb8b2c5eace04eac33346d35bc05721b6e3b98d463b3e6f8e6e1ed0a22eba16d4704f97914fa3a5ef120310b8730170b8e7265df8c7452179c4b5f942488abe9437968f3760d4ba9cfa107e66a5100c23491495f7a67794ddc918b2e5ae6e6fd4e45fa41290b4c9b40fffdfdb2a1f2b50a4bfb37f474a37760c6b1d6c64e023ea69babf1a8c1d5e112ced4283ccebfb757d403aed630d9dd841b26"}}, {0xa0, &(0x7f00000005c0)=@string={0xa0, 0x3, "6268d42e2cf22d94b2b96476e28d01168c829c51a48e6eb4c3d99f6ec246afa9de48037fa61d43a91baa5e43830b141dc03b04ee1561fed08fa6e020087c649736b2006f76550cd94a5069ee8f90600f795403120b41cecb43b1465602d475bb32ba4d297f5288ead108e8aabb62bc53ff198a319e0911cef2205a9d3ad0454ebf7768d5d299ff8044138afe8420870750d93e942ef99716aa95bc9db219"}}]}) (rerun: 64) syz_usb_control_io$uac1(r4, &(0x7f0000000a00)={0x14, &(0x7f0000000f40)=ANY=[@ANYBLOB="002cd7000000d722fce01e93a286f771fbe69cb80243b9da956ce17270eab359cc09faa7fbda9d8dd639c3a469448078f193fc90805d1a4a5911c37d775c1a70db5ab3b7a810e7bd08e59f5c9b9c62ab3f1a8f74944773bcfa7c49cd64cb04de1dfa96c555b24c7f332443ba6dbeeed4fbbe4aa698d6798e5355ac6181f7ad0f29363f9d7e9aec055bcc266d0f3cdddc1257c69f502f79947b1b8726fbf3c6fa2340c87c5f0b8349d6ad5a84e12f4b1ac3af9d3fb7b82d6f7e0ddb52b621c918ce2a9ed4da7282cc54b79b0b6b699babd34702f404ee3757b82fdd58dc3fefd2d53a5a41886a"], &(0x7f00000008c0)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "5160711c34581cc6dea2191ff923a2054738bf1ff349bc655077d31ced78e61d9d90dc619506cf6d8ea6ea267947be7dd7eb673814c461a8145200d842fce31754d851d7a76cc18e52c2607a0d9ffa3a51ffa174ee97c7352ae3d575cbb190fc216ff660ea8f9d71ad0fdd0c80a31bc49e2d209c86f409b2b541648207b4ab024f21bdf4c2db364859db589226eac41a48dcc096dc57ccce6542b86b708fc6b0c896a2cfcbee31cab67271a1e0a71267ddda486f43addb3dde"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000a40)={0x20, 0x0, 0xbd, "6e58a0a34cd98d5ba485a99dab8bfeb0de8966befac4bc4c304f3139905c469c2341e67a4934c87bfe95e30feb10b8ef7d62ac534872426bd5f0185dcb5550d0a5c90121a873bb0dfc9f7e51cfe871413167164790a8af59321c5a4b4acb60c114ff1797ced6f1633319d7eaba5bb41df1a1767651a588369bbd96611c0542269254c86ef03ba8884ba38fbdad2370a7ed06a2ddc1e49b95a64b139093d06e86ad72ae56bbcb8ee8e622d96625cd679a826139941d0993cf9f7bfe7894"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000bc0)={0x20, 0x81, 0x2, 'Rd'}, &(0x7f0000000c00)={0x20, 0x82, 0x3, "17bac9"}, &(0x7f0000000c40)={0x20, 0x83, 0x2, "f4bf"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "23b2"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "8738e4"}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x9d}}) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000e40), 0x4000000000042, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) (async) write$binfmt_aout(r6, 0x0, 0xffffffdb) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, &(0x7f0000000e00)={0x2, 0xffffffff, 0x1, 0x4, 0x8, 0xfff}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0x4, "8d1a2e0d"}, 0x0, 0x0, 0x0, 0x0}) 1m32.390205442s ago: executing program 1 (id=1563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m32.009716097s ago: executing program 1 (id=1565): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x801, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, r2, 0xd108}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xa}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x64}}, 0x4048880) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r3 = syz_usbip_server_init(0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) syz_usbip_server_init(0x3) r5 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd=r3, 0x5, 0x7fffffff, 0x9, 0xa, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x7330, 0x0, 0x0, 0x0, 0x0) 1m29.87318122s ago: executing program 1 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = socket(0x1e, 0x1, 0x0) sendto$rxrpc(r7, &(0x7f0000000000)="fb5a0c5a28bff4d1eabc9b5e1b002907e42f898086b6bd3a0e8ac1187bc611911486c8bac2fbe135179cc1af68b7b1b77ef66df43b71636ab0f3e86a90855ff090e2ed7b1f446091934082de9b302cdf509d5038867b833afdd95183930c0ab8ccdc74c131f83b97caa6739b434bdf1c79cfa3aea786da52fdbc9f2d859ef00734561d6187f22814213c69a30a45e2ba854e1c3455", 0xfffffffffffffd67, 0xc0, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040040}, 0x0) r10 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 1m28.568275622s ago: executing program 1 (id=1573): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf00}, 0x0) 1m27.555787585s ago: executing program 1 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x1, 0xc, 0x0, 0x800002}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x3ff}]}, 0x0) socket(0x2, 0x80805, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(r9, 0x0, 0x0, 0x0) 1m18.253777671s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m12.247260955s ago: executing program 34 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x1, 0xc, 0x0, 0x800002}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x3ff}]}, 0x0) socket(0x2, 0x80805, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(r9, 0x0, 0x0, 0x0) 45.952732645s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 15.104154372s ago: executing program 4 (id=1781): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x0, 0x19, 0x0, 0x0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}, {0x2000000}}, @common=@inet=@tos={{0x28}, {0x2, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffff00, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x7fff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000280)) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 14.58710269s ago: executing program 5 (id=1368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) dup3(r0, r3, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 14.496644759s ago: executing program 4 (id=1785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x900, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 12.865298566s ago: executing program 4 (id=1789): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010d4220315000000000001090224000100000000090400000103000000092105000001220500090581030002000005f1a5fee575f21232c1b64922458122a3cd050fa31c14a57713cf93cac060353ad5bc8ed315fc173d2f910ca3900a0f51c47bcb45aaef788d7331931430c8d9dba79c2463b76717cd76ec78bc44344df5bc682dc73973720d2980d79e58c861fdfbc6f4bddcec432e14bd396db2174f6a4aae8e5728b38af22be2e0a6bdf7cc7bd7347ba11f9eea6d7554"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb81100, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x442002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.236471364s ago: executing program 6 (id=1794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f000001b040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000001b000)={&(0x7f00000002c0)={0x24, r1, 0x514c6b957406d25c, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = open_tree(0xffffffffffffffff, 0x0, 0x81901) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) mount_setattr(r5, 0x0, 0x18100, &(0x7f0000001dc0)={0x100001, 0xf0, 0x180000, {r6}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x2, 0x80805, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x5, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 10.491438577s ago: executing program 6 (id=1797): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0xfffffffe, 0x49323159, 0xf00, 0x870, 0x2, @discrete={0x86, 0x6}}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0xa43, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r4 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x805, 0x3a, 0xfffffffffffeffff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 10.422337535s ago: executing program 4 (id=1798): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x11, 0x148, 0x148, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth0_vlan\x00', 0x0, 0x0, 0xf9e, 0x5, 0x8, 0x9, {0xb}, {0x8}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getpid() socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r4, 0x5501) close(0x3) setreuid(0xee01, 0x0) setns(0xffffffffffffffff, 0x24020000) 9.415615128s ago: executing program 4 (id=1801): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="2057ff581d8033f9b0037c5c5db9f93d2519ec503e2375f248db7dcad13dc13b8efc80e0f2840417c26f5738783d8c75950e65cfdc1b2c71fd320713355c1437e2680d9a96efe6d1eb3ed4aa4014e63f29a5f51f85d41845362355b0bebdcb3dc15575bf8182b7ef6d30997ea9e1fa4253ff2c5945d759b2eac2b2e1f1fca0681e53aae9fdda8064abed3f875301d4d97436a08dcede894fad79f4600f935e43b1145626854b01533f27dc5ec4b5d25380eff96d62a6b39384"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="6e33a20cd60b2a39dc5fc9cdc0052caa54756b37ad575285f8cccd17e47036a4cff3a98655de39e8144c2deb7fcd46ac4c67fadb4c5f433bb3544b7e5e77a30fcf87af388efbb263dce75940675cded7f1c7b92d10016bd8661644a1843ca15523d605fd7b3925fbffffffffffffffcda6286fd648fed31869dba38a08dc2bcaaa784e5b83c6f504dc08f6a24188d0a17043969d4cd38007b385231b075c925e44"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x1, r6, 0x0, 0x3a0b, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x26, 0x8, 0x403) close_range(r1, 0xffffffffffffffff, 0x0) 8.965402716s ago: executing program 7 (id=1802): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x140b, 0x1, 0x74bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x5, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r5], 0x2dc}, 0x1, 0x0, 0x0, 0x4045}, 0x80000) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x8000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x1, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x16}}, ["", "", "", ""]}, 0x24}}, 0x40844) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.850162796s ago: executing program 6 (id=1803): socket$netlink(0x10, 0x3, 0xc) futex_waitv(&(0x7f0000001d40)=[{0xc43d, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x85) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0xf) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000011c0), &(0x7f0000000180)=0x8) sendfile(r4, 0xffffffffffffffff, 0x0, 0x201efd) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) 5.278376271s ago: executing program 3 (id=1804): r0 = fsopen(&(0x7f00000003c0)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='sys_enter\x00', r2}, 0x18) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) tkill(0x0, 0x13) 5.05960998s ago: executing program 3 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000580)=ANY=[]) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x80000f41, 0x4) sendto$packet(r3, &(0x7f0000000100)="3f0302000000000000001e00a000", 0xe, 0x4800, &(0x7f0000000540)={0xc9, 0x1749191bef107f84, r4, 0x1, 0x1, 0x6, @remote}, 0x14) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x0, 0x8, 0x82, "4387669a69c28f8fc5dfd06835b85eda05271341d31ea6aebd24750306559aa7d290e526871262af844ba34993bf180b7f07a6fc7e6518daa8c1fed5fed2fe2d1cf20b80916958367292d0f297d9f3ac6a9744a0e2f79a426d3ff99a0b899f10fd86c90fd6ea7af6babc193e22a845941a0bfe34652f970941db714ada5f9a08239d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xffffffff) capset(0x0, 0x0) socket(0x25, 0x5, 0x0) 3.74941134s ago: executing program 4 (id=1806): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x600, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 3.012974631s ago: executing program 7 (id=1807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f000001b040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000001b000)={&(0x7f00000002c0)={0x24, r1, 0x514c6b957406d25c, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = open_tree(0xffffffffffffffff, 0x0, 0x81901) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) mount_setattr(r5, 0x0, 0x18100, &(0x7f0000001dc0)={0x100001, 0xf0, 0x180000, {r6}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x5, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.906036971s ago: executing program 6 (id=1808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x55, 0xac1ccf5b918582a) syz_open_dev$sndmidi(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x8000000, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) preadv(r3, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x1, 0x0) io_setup(0x2278, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) 2.394966474s ago: executing program 3 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f000082a000/0x4000)=nil, 0x4000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 1.830912027s ago: executing program 7 (id=1810): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x4007, 0x2, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x44, 0x0) 1.666319528s ago: executing program 7 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004600), r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 1.607292839s ago: executing program 3 (id=1812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f805", 0x8}], 0x1, 0x0, 0x0, 0x80000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1.406355889s ago: executing program 3 (id=1813): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x140b, 0x1, 0x74bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x5, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r5], 0x2dc}, 0x1, 0x0, 0x0, 0x4045}, 0x80000) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x8000) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.345000021s ago: executing program 7 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40042) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x2, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000344000480240001800b000100736f636b6574000014000280080002400000000308000140000000011c0001800a00010071756575650000000c00028008000440000000100900010073797a30000000000900020073797a3200010000000000000000000000000adba5b76e9fcd57187a507a4ad9530f6dcdfd73928e05c84bcd87d563357f2a24eedddb5df4d988c2ba4eaeb64f2a9b95463e7fb0c39df1911342c700376307f41db6dd"], 0x98}}, 0x0) socket$kcm(0x21, 0x2, 0xa) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$kcm(0x21, 0x2, 0xa) 197.0508ms ago: executing program 6 (id=1815): r0 = fsopen(&(0x7f00000003c0)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='sys_enter\x00', r2}, 0x18) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(0x0, 0x13) 74.963787ms ago: executing program 3 (id=1816): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000005c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000440)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f1e600000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="04001300060012004a02000006001000fd0000000600be0010c100000a000600021100000200000600bd00cb000000005705e7a1c82ec3263f4b10d49dc09fd9f688edf2d0c164956b8ba4473e2a0dbce22fc7dc27f64482e2ed9367697cbe0609402713dfdc8306620f"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x44) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000200)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x10, [0x3, 0x1, 0x3f7, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x787, 0x10000000, 0x5, 0x0, 0x0, 0xf3b0, 0x4, 0x0, 0x7, 0x1, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x74e, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x1, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7d7, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffe6], [0xffffffff, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0xfffffffc, 0x44, 0x4000400, 0xfffffffc, 0x3, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000010, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x2, 0x0, 0x0, 0xfffffe01, 0x80000000]}, 0x45c) socket$inet(0x2, 0x2, 0x1) 1.509427ms ago: executing program 6 (id=1817): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x2, 0xffffff80, {0x0}, {0xffffffffffffffff}, 0x101, 0x2}) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x9, 0x2, 0x408, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="00c7f33e", 0x4}], 0x1}, 0x44000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000000)=0x97b3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004080)=ANY=[@ANYBLOB="04040a0000000000001e"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000200000061117c00000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=1818): socket$netlink(0x10, 0x3, 0xc) futex_waitv(&(0x7f0000001d40)=[{0xc43d, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x85) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0xf) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000011c0), &(0x7f0000000180)=0x8) sendfile(r4, 0xffffffffffffffff, 0x0, 0x201efd) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): own main item tag 0x0 [ 491.114739][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.236246][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.244008][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.255177][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.262684][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.272472][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.279925][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.287538][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.295700][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.303902][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.311496][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.890011][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.921841][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.929270][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.953682][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.964707][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 491.980361][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.001770][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.019561][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.041720][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.064207][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.084542][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.098591][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.107012][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.114942][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.124525][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.132110][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.139685][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.147296][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.155038][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.164101][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.171717][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.188791][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.196350][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.204004][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.211437][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.219421][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.228076][T14006] nbd3: detected capacity change from 0 to 4294967296 [ 492.235724][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.243221][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.251236][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.253433][T14005] block nbd3: shutting down sockets [ 492.264889][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.272509][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.279933][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.287472][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.294946][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.302480][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.309909][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.318106][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.325637][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.335033][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.342579][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.349997][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.357496][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.365111][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.372594][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.380004][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.387555][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.395062][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.402554][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.409966][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.417655][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.425577][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.433049][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.440498][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.447999][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.455489][ T5896] hid-generic 0000:0007:0000.000F: unknown main item tag 0x0 [ 492.476933][ T5896] hid-generic 0000:0007:0000.000F: hidraw0: HID v0.06 Device [syz0] on syz1 [ 492.503443][ T5838] Bluetooth: hci0: command tx timeout [ 492.664712][ T13] team0 (unregistering): Port device team_slave_1 removed [ 492.718485][ T13] team0 (unregistering): Port device team_slave_0 removed [ 493.786481][ T24] hid (null): invalid report_size -1358781365 [ 494.640937][ T24] hid-generic 0001:0009:0001.0010: unknown main item tag 0x3 [ 494.650829][T13818] chnl_net:caif_netlink_parms(): no params data found [ 494.737678][ T24] hid-generic 0001:0009:0001.0010: unknown main item tag 0x6 [ 494.793924][ T24] hid-generic 0001:0009:0001.0010: invalid report_size -1358781365 [ 494.839643][ T24] hid-generic 0001:0009:0001.0010: item 0 4 1 7 parsing failed [ 495.011808][ T24] hid-generic 0001:0009:0001.0010: probe with driver hid-generic failed with error -22 [ 495.022047][ T92] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 495.207607][ T92] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 495.237410][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.257044][ T92] usb 7-1: Product: syz [ 495.266031][ T92] usb 7-1: Manufacturer: syz [ 495.276181][ T92] usb 7-1: SerialNumber: syz [ 495.318040][ T92] usb 7-1: can't set config #1, error -71 [ 495.320391][T14161] 9pnet_fd: Insufficient options for proto=fd [ 495.335716][ T92] usb 7-1: USB disconnect, device number 15 [ 495.588160][T13818] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.613513][T13818] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.657009][T13818] bridge_slave_0: entered allmulticast mode [ 495.721717][T13818] bridge_slave_0: entered promiscuous mode [ 495.851240][T13818] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.912241][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.925735][T13818] bridge_slave_1: entered allmulticast mode [ 495.972885][T13818] bridge_slave_1: entered promiscuous mode [ 496.290701][T13818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.326774][T13818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.915801][T14238] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1409'. [ 496.932045][T14238] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1409'. [ 497.196442][T14253] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1410'. [ 497.290026][T13818] team0: Port device team_slave_0 added [ 497.300245][ T5838] Bluetooth: hci4: unexpected event for opcode 0x041c [ 497.325467][T13818] team0: Port device team_slave_1 added [ 497.332739][T14218] netlink: 'syz.4.1407': attribute type 3 has an invalid length. [ 497.340888][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 497.365871][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 497.638783][T14273] netlink: 'syz.6.1413': attribute type 24 has an invalid length. [ 497.659254][T13818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.691531][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.717542][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.777831][T13818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.904348][T13818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.943321][T14311] hub 8-0:1.0: USB hub found [ 497.950571][T14311] hub 8-0:1.0: 1 port detected [ 498.109317][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.142011][T14313] 9pnet_fd: Insufficient options for proto=fd [ 498.160002][T13818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.528286][T13818] hsr_slave_0: entered promiscuous mode [ 498.544218][ T92] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 498.783343][T13818] hsr_slave_1: entered promiscuous mode [ 499.022061][ T92] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 499.082877][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.306716][ T92] usb 4-1: config 0 has no interface number 0 [ 499.333947][ T92] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 499.403428][ T92] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.477661][ T92] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 499.523007][T14411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.542110][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.571840][ T92] usb 4-1: Product: syz [ 499.576105][ T92] usb 4-1: Manufacturer: syz [ 499.580717][ T92] usb 4-1: SerialNumber: syz [ 500.037520][ T92] usb 4-1: config 0 descriptor?? [ 500.146010][T14438] FAULT_INJECTION: forcing a failure. [ 500.146010][T14438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.181538][T14438] CPU: 0 UID: 0 PID: 14438 Comm: syz.6.1423 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 500.181568][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.181578][T14438] Call Trace: [ 500.181585][T14438] [ 500.181594][T14438] dump_stack_lvl+0x189/0x250 [ 500.181622][T14438] ? __pfx____ratelimit+0x10/0x10 [ 500.181646][T14438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.181668][T14438] ? __pfx__printk+0x10/0x10 [ 500.181697][T14438] should_fail_ex+0x414/0x560 [ 500.181722][T14438] _copy_to_user+0x31/0xb0 [ 500.181741][T14438] bpf_verifier_vlog+0x3ba/0x900 [ 500.181760][T14438] ? btf_parse_type_sec+0x9ef/0x24a0 [ 500.181786][T14438] __btf_verifier_log+0xd4/0x120 [ 500.181812][T14438] ? __pfx___btf_verifier_log+0x10/0x10 [ 500.181845][T14438] __btf_verifier_log_type+0x360/0x630 [ 500.181878][T14438] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 500.181898][T14438] ? rcu_is_watching+0x15/0xb0 [ 500.181920][T14438] ? btf_parse_type_sec+0x9ef/0x24a0 [ 500.181935][T14438] ? trace_kmalloc+0x1f/0xd0 [ 500.181952][T14438] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 500.181971][T14438] ? btf_parse_type_sec+0x9ef/0x24a0 [ 500.181991][T14438] btf_parse_type_sec+0x2272/0x24a0 [ 500.182031][T14438] btf_new_fd+0x40e/0xc90 [ 500.182057][T14438] ? __pfx_btf_new_fd+0x10/0x10 [ 500.182075][T14438] ? bpf_token_put+0x143/0x160 [ 500.182094][T14438] ? bpf_btf_load+0x126/0x190 [ 500.182118][T14438] __sys_bpf+0x635/0x860 [ 500.182140][T14438] ? __pfx___sys_bpf+0x10/0x10 [ 500.182173][T14438] ? ksys_write+0x22a/0x250 [ 500.182193][T14438] ? __pfx_ksys_write+0x10/0x10 [ 500.182209][T14438] ? rcu_is_watching+0x15/0xb0 [ 500.182238][T14438] __x64_sys_bpf+0x7c/0x90 [ 500.182257][T14438] do_syscall_64+0xfa/0x3b0 [ 500.182279][T14438] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.182301][T14438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.182315][T14438] ? clear_bhb_loop+0x60/0xb0 [ 500.182344][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.182360][T14438] RIP: 0033:0x7fe88978e929 [ 500.182376][T14438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.182391][T14438] RSP: 002b:00007fe88a687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.182409][T14438] RAX: ffffffffffffffda RBX: 00007fe8899b5fa0 RCX: 00007fe88978e929 [ 500.182422][T14438] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 500.182432][T14438] RBP: 00007fe88a687090 R08: 0000000000000000 R09: 0000000000000000 [ 500.182443][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.182453][T14438] R13: 0000000000000000 R14: 00007fe8899b5fa0 R15: 00007fffc24773e8 [ 500.182497][T14438] [ 500.953144][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.959796][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.126839][T14455] 9pnet_fd: Insufficient options for proto=fd [ 501.425530][T14468] overlay: ./file0 is not a directory [ 502.142698][ T24] IPVS: starting estimator thread 0... [ 502.207620][ T92] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input24 [ 502.260167][ T92] usb 4-1: USB disconnect, device number 36 [ 502.291849][T14470] IPVS: using max 36 ests per chain, 86400 per kthread [ 502.329616][T14481] netlink: 'syz.6.1430': attribute type 10 has an invalid length. [ 502.410550][T14481] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 502.437221][T13818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.504756][T13818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.544877][T14506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.554588][T13818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.569206][T14504] tun0: tun_chr_ioctl cmd 1074025677 [ 502.576623][T14504] tun0: linktype set to 805 [ 502.581463][T13818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.792040][ T5896] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 502.956464][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 503.016309][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 503.123774][T14527] bridge0: entered promiscuous mode [ 503.129552][T14527] macvlan2: entered promiscuous mode [ 503.136017][T14526] €Â0: renamed from bond_slave_1 (while UP) [ 503.153363][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 503.195484][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 503.425517][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 503.745802][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 504.029006][ T5896] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 504.039990][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.060154][ T5896] usb 7-1: Product: syz [ 504.092218][ T5896] usb 7-1: Manufacturer: syz [ 504.096876][ T5896] usb 7-1: SerialNumber: syz [ 504.157146][ T5896] usb 7-1: config 0 descriptor?? [ 504.228774][T13818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.328554][T14547] 9pnet_fd: Insufficient options for proto=fd [ 504.710163][T13818] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.368391][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.380512][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.387713][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.406751][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.437664][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.481226][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.550229][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.822045][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.878123][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.879940][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.891346][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.920830][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 505.942751][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.012970][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.033147][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.040775][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.052826][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.059668][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.066741][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.073615][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.080008][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.089330][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 506.099006][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.107576][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'. [ 506.124815][ T5896] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 506.149632][ T5896] input input25: Timeout waiting for response from device. [ 506.169421][ T5896] usb 7-1: USB disconnect, device number 16 [ 506.260184][T14576] syz.4.1444 (14576): attempted to duplicate a private mapping with mremap. This is not supported. [ 506.382561][ T30] audit: type=1326 audit(1750742026.280:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14571 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9f8e929 code=0x7ffc0000 [ 506.696471][ T30] audit: type=1326 audit(1750742026.280:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14571 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9f8e929 code=0x7ffc0000 [ 506.718042][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.861922][ T30] audit: type=1326 audit(1750742026.310:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14571 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f18a9f8e929 code=0x7ffc0000 [ 506.884808][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.940908][ T30] audit: type=1326 audit(1750742026.790:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14571 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9f8e929 code=0x7ffc0000 [ 506.964575][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.111935][ T30] audit: type=1326 audit(1750742026.790:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14571 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9f8e929 code=0x7ffc0000 [ 507.136253][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.496451][T14603] 9pnet_fd: Insufficient options for proto=fd [ 507.540097][T13818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.632534][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 507.663596][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 508.355005][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 509.272114][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 509.421195][T13818] veth0_vlan: entered promiscuous mode [ 509.446437][T13818] veth1_vlan: entered promiscuous mode [ 509.453098][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 509.460694][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 509.486037][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.488557][T13818] veth0_macvtap: entered promiscuous mode [ 509.503865][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.515844][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.526537][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.540201][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.552574][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.562193][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 509.564446][T13818] veth1_macvtap: entered promiscuous mode [ 509.610087][T13818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.646783][T13818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.685820][T13818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.703321][T13818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.714879][T13818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.741983][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.755358][T13818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.767085][ T5896] usb 2-1: config 0 has no interfaces? [ 509.842374][ T5896] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 509.912773][ T24] usb 5-1: usb_control_msg returned -32 [ 509.972756][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.001468][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.027198][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.040661][ T24] usbtmc 5-1:16.0: can't read capabilities [ 510.249497][ T5896] usb 2-1: config 0 descriptor?? [ 510.420772][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.444508][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.531398][ T43] usb 2-1: USB disconnect, device number 23 [ 510.588405][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.605232][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.802160][T14681] 9pnet_fd: Insufficient options for proto=fd [ 510.995423][ T1094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.021962][T14690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 511.103490][ T1094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.235202][ T1094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.648831][ T1094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.883416][T14695] FAULT_INJECTION: forcing a failure. [ 511.883416][T14695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.932775][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.1.1465 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 511.932801][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.932812][T14695] Call Trace: [ 511.932819][T14695] [ 511.932827][T14695] dump_stack_lvl+0x189/0x250 [ 511.932854][T14695] ? __pfx____ratelimit+0x10/0x10 [ 511.932876][T14695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.932898][T14695] ? __pfx__printk+0x10/0x10 [ 511.932927][T14695] should_fail_ex+0x414/0x560 [ 511.932952][T14695] _copy_to_user+0x31/0xb0 [ 511.932971][T14695] simple_read_from_buffer+0xe1/0x170 [ 511.932997][T14695] proc_fail_nth_read+0x1df/0x250 [ 511.933023][T14695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.933047][T14695] ? rw_verify_area+0x258/0x650 [ 511.933064][T14695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.933087][T14695] vfs_read+0x200/0x980 [ 511.933110][T14695] ? __pfx___mutex_lock+0x10/0x10 [ 511.933134][T14695] ? __pfx_vfs_read+0x10/0x10 [ 511.933153][T14695] ? __fget_files+0x2a/0x420 [ 511.933175][T14695] ? __fget_files+0x3a0/0x420 [ 511.933205][T14695] ? __fget_files+0x2a/0x420 [ 511.933233][T14695] ksys_read+0x145/0x250 [ 511.933253][T14695] ? __pfx_ksys_read+0x10/0x10 [ 511.933268][T14695] ? rcu_is_watching+0x15/0xb0 [ 511.933295][T14695] ? do_syscall_64+0xbe/0x3b0 [ 511.933323][T14695] do_syscall_64+0xfa/0x3b0 [ 511.933345][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.933360][T14695] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 511.933375][T14695] ? clear_bhb_loop+0x60/0xb0 [ 511.933395][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.933411][T14695] RIP: 0033:0x7fd8f218d33c [ 511.933426][T14695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 511.933439][T14695] RSP: 002b:00007fd8f30a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.933457][T14695] RAX: ffffffffffffffda RBX: 00007fd8f23b5fa0 RCX: 00007fd8f218d33c [ 511.933469][T14695] RDX: 000000000000000f RSI: 00007fd8f30a50a0 RDI: 0000000000000006 [ 511.933480][T14695] RBP: 00007fd8f30a5090 R08: 0000000000000000 R09: 0000000000000000 [ 511.933490][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.933499][T14695] R13: 0000000000000000 R14: 00007fd8f23b5fa0 R15: 00007ffe1d8b8cf8 [ 511.933526][T14695] [ 512.210545][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.241183][ T5896] usb 5-1: USB disconnect, device number 40 [ 512.558111][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.569475][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.579410][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.590626][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.651777][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.711924][ T5896] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 513.117410][T14724] lo speed is unknown, defaulting to 1000 [ 513.293985][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 513.632233][ T5896] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.651780][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.725910][ T5896] usb 5-1: config 0 descriptor?? [ 514.079702][ T5896] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 514.137984][ T1094] bridge_slave_1: left allmulticast mode [ 514.157594][ T1094] bridge_slave_1: left promiscuous mode [ 514.204508][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.255566][ T1094] bridge_slave_0: left allmulticast mode [ 514.297033][ T1094] bridge_slave_0: left promiscuous mode [ 514.322294][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.382802][ T5896] usb 5-1: USB disconnect, device number 41 [ 514.692178][ T92] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 514.747967][ T5838] Bluetooth: hci0: command tx timeout [ 514.832831][T14790] Cannot find add_set index 0 as target [ 515.462555][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.478241][ T92] usb 2-1: config 0 has no interfaces? [ 515.484977][ T92] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 515.496943][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.509367][ T92] usb 2-1: config 0 descriptor?? [ 516.058098][ T92] hid (null): unknown global tag 0xc [ 516.071059][ T92] hid-generic 0005:0009:0006.0011: unknown global tag 0xc [ 516.112803][ T92] hid-generic 0005:0009:0006.0011: item 0 0 1 12 parsing failed [ 516.127112][ T92] hid-generic 0005:0009:0006.0011: probe with driver hid-generic failed with error -22 [ 516.165808][T14804] 9pnet_fd: Insufficient options for proto=fd [ 516.201136][T14804] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 516.215859][T14804] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 516.260985][T14804] vhci_hcd vhci_hcd.0: Device attached [ 516.358505][T14811] vhci_hcd: connection closed [ 516.362642][ T2968] vhci_hcd: stop threads [ 516.379395][ T2968] vhci_hcd: release socket [ 516.386701][ T2968] vhci_hcd: disconnect device [ 516.412142][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.430175][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.450822][ T1094] bond0 (unregistering): Released all slaves [ 516.656285][ T5896] usb 2-1: USB disconnect, device number 24 [ 516.850061][ T5838] Bluetooth: hci0: command tx timeout [ 517.542004][T14918] sctp: [Deprecated]: syz.3.1481 (pid 14918) Use of int in maxseg socket option. [ 517.542004][T14918] Use struct sctp_assoc_value instead [ 518.373314][T14724] chnl_net:caif_netlink_parms(): no params data found [ 518.767760][T14975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.901947][ T5838] Bluetooth: hci0: command tx timeout [ 518.925966][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 518.953668][T15020] FAULT_INJECTION: forcing a failure. [ 518.953668][T15020] name failslab, interval 1, probability 0, space 0, times 0 [ 518.957758][ T1094] hsr_slave_0: left promiscuous mode [ 518.990091][T15020] CPU: 1 UID: 0 PID: 15020 Comm: syz.1.1488 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 518.990118][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.990128][T15020] Call Trace: [ 518.990135][T15020] [ 518.990143][T15020] dump_stack_lvl+0x189/0x250 [ 518.990172][T15020] ? __pfx____ratelimit+0x10/0x10 [ 518.990196][T15020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.990218][T15020] ? __pfx__printk+0x10/0x10 [ 518.990237][T15020] ? __pfx___might_resched+0x10/0x10 [ 518.990259][T15020] ? fs_reclaim_acquire+0x7d/0x100 [ 518.990286][T15020] should_fail_ex+0x414/0x560 [ 518.990311][T15020] should_failslab+0xa8/0x100 [ 518.990333][T15020] __kmalloc_noprof+0xcb/0x4f0 [ 518.990351][T15020] ? __d_alloc+0x31/0x6f0 [ 518.990372][T15020] ? __d_alloc+0xb7/0x6f0 [ 518.990398][T15020] __d_alloc+0xb7/0x6f0 [ 518.990426][T15020] d_alloc_parallel+0xe0/0x14e0 [ 518.990458][T15020] ? stack_depot_save_flags+0x40/0x900 [ 518.990482][T15020] ? smack_log+0xef/0x3f0 [ 518.990506][T15020] ? __pfx_d_alloc_parallel+0x10/0x10 [ 518.990527][T15020] ? __raw_spin_lock_init+0x45/0x100 [ 518.990547][T15020] ? __init_waitqueue_head+0xa9/0x150 [ 518.990569][T15020] __lookup_slow+0x116/0x3d0 [ 518.990596][T15020] ? __pfx___lookup_slow+0x10/0x10 [ 518.990635][T15020] ? down_read+0x1ad/0x2e0 [ 518.990654][T15020] lookup_one_unlocked+0x127/0x250 [ 518.990668][T15020] ? ovl_lookup_index+0x1d4/0x790 [ 518.990686][T15020] lookup_one_positive_unlocked+0x26/0xb0 [ 518.990702][T15020] ovl_lookup_index+0x27a/0x790 [ 518.990722][T15020] ? ovl_lookup_layer+0x377/0x450 [ 518.990738][T15020] ? __pfx_ovl_lookup_index+0x10/0x10 [ 518.990755][T15020] ? trace_kmalloc+0x1f/0xd0 [ 518.990771][T15020] ? ovl_lookup+0x5f7/0x1bc0 [ 518.990790][T15020] ovl_lookup+0x13f1/0x1bc0 [ 518.990821][T15020] ? d_alloc_parallel+0x13d0/0x14e0 [ 518.990853][T15020] ? __pfx_ovl_lookup+0x10/0x10 [ 518.990869][T15020] ? __lock_acquire+0xab9/0xd20 [ 518.990890][T15020] ? __pfx_d_alloc_parallel+0x10/0x10 [ 518.990904][T15020] ? look_up_lock_class+0x74/0x170 [ 518.990931][T15020] ? __raw_spin_lock_init+0x45/0x100 [ 518.990949][T15020] ? __init_waitqueue_head+0xa9/0x150 [ 518.990971][T15020] __lookup_slow+0x297/0x3d0 [ 518.990996][T15020] ? __pfx___lookup_slow+0x10/0x10 [ 518.991027][T15020] ? bpf_lsm_inode_permission+0x9/0x20 [ 518.991045][T15020] ? security_inode_permission+0xb7/0x310 [ 518.991069][T15020] ? down_read+0x1ad/0x2e0 [ 518.991086][T15020] lookup_slow+0x53/0x70 [ 518.991102][T15020] walk_component+0x2d2/0x400 [ 518.991123][T15020] ? path_lookupat+0x156/0x430 [ 518.991148][T15020] path_lookupat+0x163/0x430 [ 518.991178][T15020] filename_lookup+0x212/0x570 [ 518.991199][T15020] ? kasan_save_track+0x4f/0x80 [ 518.991222][T15020] ? __pfx_filename_lookup+0x10/0x10 [ 518.991277][T15020] ? __might_fault+0xb0/0x130 [ 518.991302][T15020] do_linkat+0x120/0x560 [ 518.991332][T15020] ? __pfx_do_linkat+0x10/0x10 [ 518.991347][T15020] ? strncpy_from_user+0x150/0x290 [ 518.991371][T15020] ? getname_flags+0x1e5/0x540 [ 518.991397][T15020] __x64_sys_link+0x82/0x90 [ 518.991417][T15020] do_syscall_64+0xfa/0x3b0 [ 518.991439][T15020] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.991468][T15020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.991484][T15020] ? clear_bhb_loop+0x60/0xb0 [ 518.991505][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.991520][T15020] RIP: 0033:0x7fd8f218e929 [ 518.991540][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.991552][T15020] RSP: 002b:00007fd8f30a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 518.991568][T15020] RAX: ffffffffffffffda RBX: 00007fd8f23b5fa0 RCX: 00007fd8f218e929 [ 518.991580][T15020] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 518.991590][T15020] RBP: 00007fd8f30a5090 R08: 0000000000000000 R09: 0000000000000000 [ 518.991599][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.991608][T15020] R13: 0000000000000000 R14: 00007fd8f23b5fa0 R15: 00007ffe1d8b8cf8 [ 518.991634][T15020] [ 519.427204][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.439999][ T1094] hsr_slave_1: left promiscuous mode [ 519.446818][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.454995][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.463918][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.464339][T15020] overlayfs: failed inode index lookup (ino=1850, key=00fb210001c9acb43992374a6db3fb2d7f7a44b810d6dd288e3a07000000000000, err=-12); [ 519.464339][T15020] overlayfs: mount with '-o index=off' to disable inodes index. [ 519.472232][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.536668][ T1094] veth1_macvtap: left promiscuous mode [ 519.543995][ T1094] veth0_macvtap: left promiscuous mode [ 519.549692][ T1094] veth1_vlan: left promiscuous mode [ 519.608745][ T1094] veth0_vlan: left promiscuous mode [ 519.701680][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 519.734142][ T24] usb 7-1: config 2 has an invalid interface number: 142 but max is 0 [ 519.747891][ T24] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 519.759309][ T24] usb 7-1: config 2 has an invalid descriptor of length 16, skipping remainder of the config [ 519.771371][ T24] usb 7-1: config 2 has no interface number 0 [ 519.779401][ T24] usb 7-1: config 2 interface 142 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 520.030528][ T24] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 520.146677][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.240646][ T24] usb 7-1: Product: syz [ 520.250766][ T24] usb 7-1: Manufacturer: syz [ 520.257586][ T24] usb 7-1: SerialNumber: syz [ 520.780111][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 520.791959][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 520.974143][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.982424][ T5838] Bluetooth: hci0: command tx timeout [ 520.992402][ T9] usb 4-1: config 0 has no interfaces? [ 520.998607][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 521.011503][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.024111][ T9] usb 4-1: config 0 descriptor?? [ 521.091418][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 521.143569][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 521.557993][ T9] usb 7-1: USB disconnect, device number 17 [ 521.813375][T14724] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.836843][T14724] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.846244][T14724] bridge_slave_0: entered allmulticast mode [ 521.860558][T14724] bridge_slave_0: entered promiscuous mode [ 521.870957][T14724] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.884956][T14724] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.896058][T14724] bridge_slave_1: entered allmulticast mode [ 521.907691][T14724] bridge_slave_1: entered promiscuous mode [ 521.970590][T15051] bridge_slave_1: left allmulticast mode [ 521.980943][T15051] bridge_slave_1: left promiscuous mode [ 521.987630][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.204388][ T5838] Bluetooth: hci5: connection err: -111 [ 522.537871][T15051] bridge_slave_0: left allmulticast mode [ 522.544221][T15051] bridge_slave_0: left promiscuous mode [ 522.550033][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.576705][T15051] bridge0 (unregistering): left allmulticast mode [ 522.657828][ T92] usb 4-1: USB disconnect, device number 37 [ 522.716598][T14724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.857818][T14724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.175364][T15121] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 523.469515][T14724] team0: Port device team_slave_0 added [ 523.481277][T14724] team0: Port device team_slave_1 added [ 523.557717][T15121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.597009][T14724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.604427][T14724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.643202][T14724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.658097][T14724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.686841][T14724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.745090][T14724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.772276][T15203] vivid-001: ================= START STATUS ================= [ 523.782243][T15203] vivid-001: Radio HW Seek Mode: Bounded [ 523.787896][T15203] vivid-001: Radio Programmable HW Seek: false [ 523.794187][T15203] vivid-001: RDS Rx I/O Mode: Block I/O [ 523.799907][T15203] vivid-001: Generate RBDS Instead of RDS: false [ 523.807038][T15203] vivid-001: RDS Reception: true [ 523.812518][T15203] vivid-001: RDS Program Type: 0 inactive [ 523.819220][T15203] vivid-001: RDS PS Name: inactive [ 523.824595][T15203] vivid-001: RDS Radio Text: inactive [ 523.830332][T15203] vivid-001: RDS Traffic Announcement: false inactive [ 523.837197][T15203] vivid-001: RDS Traffic Program: false inactive [ 523.844130][T15203] vivid-001: RDS Music: false inactive [ 523.849871][T15203] vivid-001: ================== END STATUS ================== [ 524.347011][T14724] hsr_slave_0: entered promiscuous mode [ 524.367387][T14724] hsr_slave_1: entered promiscuous mode [ 524.382225][T15240] veth1_to_team: entered promiscuous mode [ 524.738379][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1506'. [ 524.927357][T15256] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073072017407) [ 524.942100][T15256] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 525.126954][T15239] veth1_to_team: left promiscuous mode [ 526.274874][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.302746][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.372805][T14746] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 526.533443][T14746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.552861][ T92] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 526.599680][T14746] usb 4-1: config 0 has no interfaces? [ 526.659300][T14746] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 526.698842][T14746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.712060][ T92] usb 2-1: device descriptor read/64, error -71 [ 526.712661][T14746] usb 4-1: config 0 descriptor?? [ 526.971971][ T92] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 526.989840][ T9] usb 4-1: USB disconnect, device number 38 [ 527.017937][T14724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 527.055152][T14724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 527.091288][T14724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 527.120532][T14724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 527.134201][ T92] usb 2-1: device descriptor read/64, error -71 [ 527.264849][ T92] usb usb2-port1: attempt power cycle [ 527.292238][T14724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.329619][T14724] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.766731][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.773916][T14802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.822323][ T92] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 527.860172][ T92] usb 2-1: device descriptor read/8, error -71 [ 527.883963][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.891846][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.123713][ T92] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 528.163282][ T92] usb 2-1: device descriptor read/8, error -71 [ 528.286796][ T92] usb usb2-port1: unable to enumerate USB device [ 528.561424][T14724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.642646][T15398] overlayfs: conflicting options: userxattr,metacopy=on [ 529.388307][T15409] 9pnet_fd: Insufficient options for proto=fd [ 529.650071][T14724] veth0_vlan: entered promiscuous mode [ 529.687866][T14724] veth1_vlan: entered promiscuous mode [ 529.765932][T14724] veth0_macvtap: entered promiscuous mode [ 529.786817][T14724] veth1_macvtap: entered promiscuous mode [ 529.847239][T14724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.881383][T14724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.897065][T14724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.908630][T14724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.920010][T14724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.952569][T14724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.961807][ T92] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 530.158676][ T92] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 530.176594][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.186879][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.234580][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.237031][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.269038][ T92] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 530.291836][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.307191][ T92] usb 2-1: config 0 descriptor?? [ 530.332045][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.369565][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.393011][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 530.592673][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 530.600555][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.616248][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 530.626131][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.635242][ T9] usb 5-1: Product: syz [ 530.639630][ T9] usb 5-1: Manufacturer: syz [ 530.644547][ T9] usb 5-1: SerialNumber: syz [ 530.652974][ T9] usb 5-1: config 0 descriptor?? [ 530.708135][ T5832] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 530.869715][T15433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.884957][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.890093][T15433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.899152][ T5832] usb 7-1: config 0 has no interfaces? [ 530.923681][ T5832] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 530.934796][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.959245][ T5832] usb 7-1: config 0 descriptor?? [ 531.072811][ T5832] usb 5-1: USB disconnect, device number 42 [ 531.997450][ T92] usb 2-1: string descriptor 0 read error: -71 [ 532.027353][ T92] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 532.064602][ T92] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 532.098352][ T92] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 532.338807][ T92] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 532.388931][ T92] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 532.510211][ T92] usb 2-1: USB disconnect, device number 29 [ 532.610867][ T2968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.659741][ T5832] usb 7-1: USB disconnect, device number 18 [ 532.759954][ T2968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.874257][T15515] trusted_key: encrypted_key: insufficient parameters specified [ 532.901911][T15516] syzkaller1: left promiscuous mode [ 532.921725][T15516] syzkaller1: left allmulticast mode [ 533.251746][T14746] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 533.437120][T15529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'. [ 533.808794][ T2968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.932456][T15525] kvm: kvm [15524]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 533.942330][T14746] usb 2-1: device descriptor read/64, error -71 [ 533.979070][T15525] kvm: kvm [15524]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x80 [ 534.106592][T15534] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 534.120171][T15534] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1538'. [ 534.168810][T15534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 534.181952][T14746] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 534.322574][T14746] usb 2-1: device descriptor read/64, error -71 [ 534.494826][T14746] usb usb2-port1: attempt power cycle [ 534.496711][ T2968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.613647][T15538] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1537'. [ 534.739409][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.758493][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.769473][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.778250][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.787768][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.921697][T14746] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 534.953137][T14746] usb 2-1: device descriptor read/8, error -71 [ 534.959183][T15539] lo speed is unknown, defaulting to 1000 [ 535.207139][T15564] 9pnet_fd: Insufficient options for proto=fd [ 535.223816][T14746] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 535.242137][ T5832] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 535.267163][T14746] usb 2-1: device descriptor read/8, error -71 [ 535.317417][ T2968] bridge_slave_1: left allmulticast mode [ 535.331903][ T2968] bridge_slave_1: left promiscuous mode [ 535.352277][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.379354][ T2968] bridge_slave_0: left allmulticast mode [ 535.396131][T14746] usb usb2-port1: unable to enumerate USB device [ 535.402776][ T2968] bridge_slave_0: left promiscuous mode [ 535.416112][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.542295][ T5828] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 535.710877][ T5828] usb 4-1: config index 0 descriptor too short (expected 38, got 36) [ 535.731817][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.753136][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.767817][ T5828] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 535.778323][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.797418][ T5828] usb 4-1: config 0 descriptor?? [ 535.975521][T15520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.183036][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.195043][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.205602][ T2968] bond0 (unregistering): Released all slaves [ 536.392280][ T5832] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 536.590425][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.706508][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 536.717348][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 536.901714][ T5838] Bluetooth: hci0: command tx timeout [ 537.146895][ T5828] usb 4-1: string descriptor 0 read error: -71 [ 537.172435][ T5832] usb 5-1: config 0 has no interfaces? [ 537.179126][ T5832] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 537.191776][ T5828] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 537.201480][ T5828] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 537.336192][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.351718][ T5828] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 537.482827][ T5828] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 537.491066][ T5828] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 537.517184][ T5832] usb 5-1: config 0 descriptor?? [ 537.525475][ T5828] usb 4-1: USB disconnect, device number 39 [ 537.769029][ T24] usb 5-1: USB disconnect, device number 44 [ 537.946919][T15746] delete_channel: no stack [ 538.026701][ T2968] hsr_slave_0: left promiscuous mode [ 538.049242][ T2968] hsr_slave_1: left promiscuous mode [ 538.069890][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.109464][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.150196][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.175478][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.232080][ T5828] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 538.279167][ T2968] veth1_macvtap: left promiscuous mode [ 538.292465][ T2968] veth0_macvtap: left promiscuous mode [ 538.322051][ T2968] veth1_vlan: left promiscuous mode [ 538.329770][ T2968] veth0_vlan: left promiscuous mode [ 538.422037][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 538.442927][ T5828] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.981781][ T5838] Bluetooth: hci0: command tx timeout [ 539.094380][ T5828] usb 7-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 8.68 [ 539.111872][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.121239][ T5828] usb 7-1: Product: syz [ 539.143176][ T5828] usb 7-1: Manufacturer: syz [ 539.148132][ T5828] usb 7-1: SerialNumber: syz [ 539.179740][ T5828] usb 7-1: config 0 descriptor?? [ 539.193360][ T5828] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 539.701891][ T5828] gspca_sn9c2028: read1 error -110 [ 539.702325][ T5828] gspca_sn9c2028: read1 error -32 [ 539.703082][ T5828] gspca_sn9c2028: read1 error -32 [ 539.703155][ T5828] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 540.204254][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 540.319788][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 541.061746][ T5838] Bluetooth: hci0: command tx timeout [ 541.369145][T14746] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 541.450369][T15823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 541.457212][T15823] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 541.468783][T15823] vhci_hcd vhci_hcd.0: Device attached [ 541.478122][T15823] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 541.484937][T15823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.496825][T15823] vhci_hcd vhci_hcd.0: Device attached [ 541.505757][T15823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.529913][T15823] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 541.537183][T15823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 541.543289][T14746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.552063][T15823] vhci_hcd vhci_hcd.0: Device attached [ 541.575935][T15823] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 541.578639][T14746] usb 5-1: config 0 has no interfaces? [ 541.583087][T15823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 541.604847][T14746] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 541.607083][T15823] vhci_hcd vhci_hcd.0: Device attached [ 541.629379][T14746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.652298][T14746] usb 5-1: config 0 descriptor?? [ 541.659902][ T5828] vhci_hcd: vhci_device speed not set [ 541.666946][T15832] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 541.674991][T15832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 541.693656][T15832] vhci_hcd vhci_hcd.0: Device attached [ 541.722401][ T5828] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 541.787283][T15832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.801865][T15832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.811624][T15832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.833406][T15832] vhci_hcd vhci_hcd.0: port 0 already used [ 541.938567][T15539] chnl_net:caif_netlink_parms(): no params data found [ 541.998119][T15823] veth0_vlan: left promiscuous mode [ 542.029411][T15786] delete_channel: no stack [ 542.035497][ T92] usb 7-1: USB disconnect, device number 19 [ 542.041969][T15823] vlan0: entered promiscuous mode [ 542.047208][T15823] veth0_vlan: entered promiscuous mode [ 542.069836][T15835] vhci_hcd: connection closed [ 542.070272][T15826] vhci_hcd: connection closed [ 542.071153][T15830] vhci_hcd: connection closed [ 542.079186][ T24] usb 5-1: USB disconnect, device number 45 [ 542.095691][T11252] vhci_hcd: stop threads [ 542.100046][T11252] vhci_hcd: release socket [ 542.105953][T11252] vhci_hcd: disconnect device [ 542.115209][T15828] vhci_hcd: connection closed [ 542.120598][T11252] vhci_hcd: stop threads [ 542.128673][T15824] vhci_hcd: connection reset by peer [ 542.167483][T11252] vhci_hcd: release socket [ 542.173413][T11252] vhci_hcd: disconnect device [ 542.208490][T11252] vhci_hcd: stop threads [ 542.218237][T11252] vhci_hcd: release socket [ 542.225296][T11252] vhci_hcd: disconnect device [ 542.236408][T11252] vhci_hcd: stop threads [ 542.240882][T11252] vhci_hcd: release socket [ 542.248851][T11252] vhci_hcd: disconnect device [ 542.266777][T11252] vhci_hcd: stop threads [ 542.274476][T11252] vhci_hcd: release socket [ 542.279293][T11252] vhci_hcd: disconnect device [ 542.986909][ T5838] Bluetooth: hci1: connection err: -111 [ 543.085088][T15539] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.104497][T15539] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.144576][ T5838] Bluetooth: hci0: command tx timeout [ 543.164225][T15539] bridge_slave_0: entered allmulticast mode [ 543.175169][T15539] bridge_slave_0: entered promiscuous mode [ 543.185180][T15539] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.193048][T15539] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.200679][T15539] bridge_slave_1: entered allmulticast mode [ 543.209721][T15539] bridge_slave_1: entered promiscuous mode [ 543.727521][T15938] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1568'. [ 543.821419][T15539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.013169][T15539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.950570][T15539] team0: Port device team_slave_0 added [ 544.975917][T15539] team0: Port device team_slave_1 added [ 545.076720][T15539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.093269][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.122475][ T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 545.140366][T15539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.166537][T15539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.179921][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.212787][T15539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.299040][ T24] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 545.302690][T15539] hsr_slave_0: entered promiscuous mode [ 545.315369][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.320719][T15539] hsr_slave_1: entered promiscuous mode [ 545.339317][ T24] usb 4-1: Product: syz [ 545.348342][ T24] usb 4-1: Manufacturer: syz [ 545.359539][ T24] usb 4-1: SerialNumber: syz [ 545.365852][ T122] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 545.378806][ T24] usb 4-1: config 0 descriptor?? [ 545.391228][ T24] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 545.530060][ T122] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 545.546015][ T122] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 545.555445][ T122] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 545.565747][ T122] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.579266][ T122] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 545.614872][ T122] usb 7-1: config 0 has no interface number 0 [ 545.624651][ T122] usb 7-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.642657][ T122] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.653771][ T122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.667146][ T122] usb 7-1: Product: syz [ 545.672736][ T122] usb 7-1: Manufacturer: syz [ 545.678622][ T122] usb 7-1: SerialNumber: syz [ 545.686816][ T122] usb 7-1: config 0 descriptor?? [ 545.919089][ T122] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 545.983204][ T122] usb 7-1: MIDIStreaming interface descriptor not found [ 546.125529][T16130] netlink: 'syz.4.1575': attribute type 1 has an invalid length. [ 546.714600][ T122] usb 7-1: USB disconnect, device number 20 [ 546.775424][T14746] usb 4-1: USB disconnect, device number 40 [ 546.812031][ T5828] vhci_hcd: vhci_device speed not set [ 546.907555][T15539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.044853][T15539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.087156][T15539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.125073][T15539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.991826][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 548.017044][T16222] 9pnet_fd: Insufficient options for proto=fd [ 548.177902][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.344289][ T24] usb 5-1: config 0 has no interfaces? [ 548.350411][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 548.476965][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.594142][ T5832] usb usb36-port1: attempt power cycle [ 548.649946][ T24] usb 5-1: config 0 descriptor?? [ 548.737512][T15539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.808121][T15539] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.837789][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.845724][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.930533][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.938841][T10310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.033675][ T5828] usb 5-1: USB disconnect, device number 46 [ 549.203083][ T5832] usb usb36-port1: unable to enumerate USB device [ 550.843185][T15539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.961012][T16292] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 552.167877][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 552.232094][T16332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 552.241108][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 552.271888][T16332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 552.401744][T16332] netlink: 'syz.3.1591': attribute type 6 has an invalid length. [ 552.621946][T16339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1592'. [ 553.231333][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 553.414579][T15539] veth0_vlan: entered promiscuous mode [ 553.478387][T15539] veth1_vlan: entered promiscuous mode [ 553.769606][T16345] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1594'. [ 553.893204][T16343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.898123][T15539] veth0_macvtap: entered promiscuous mode [ 553.934586][T15539] veth1_macvtap: entered promiscuous mode [ 553.966628][T15539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.091966][ T122] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 554.144751][T16343] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 554.145589][T15539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.208353][T15539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.221883][T15539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.231229][T15539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.267813][T15539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.303407][ T122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.331812][ T122] usb 4-1: config 0 has no interfaces? [ 554.367188][ T122] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 554.433739][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.530215][ T122] usb 4-1: config 0 descriptor?? [ 554.599606][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.633643][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.686382][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.720292][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.787400][ T9] usb 4-1: USB disconnect, device number 41 [ 555.401325][ T2968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.876123][ T2968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.234533][ T2968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.368556][ T2968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.311181][ T2968] bridge_slave_1: left allmulticast mode [ 557.503778][ T2968] bridge_slave_1: left promiscuous mode [ 557.510753][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.530368][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.553095][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.566883][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.597123][ T2968] bridge_slave_0: left allmulticast mode [ 557.609197][T16421] FAULT_INJECTION: forcing a failure. [ 557.609197][T16421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.624938][T16421] CPU: 1 UID: 0 PID: 16421 Comm: syz.3.1602 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 557.624971][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.624982][T16421] Call Trace: [ 557.624989][T16421] [ 557.624997][T16421] dump_stack_lvl+0x189/0x250 [ 557.625026][T16421] ? __pfx____ratelimit+0x10/0x10 [ 557.625050][T16421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.625068][T16421] ? __pfx__printk+0x10/0x10 [ 557.625081][T16421] ? fs_reclaim_acquire+0x7d/0x100 [ 557.625108][T16421] should_fail_ex+0x414/0x560 [ 557.625132][T16421] prepare_alloc_pages+0x213/0x610 [ 557.625159][T16421] __alloc_frozen_pages_noprof+0x123/0x370 [ 557.625181][T16421] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.625201][T16421] ? get_il_weight+0x1f7/0x260 [ 557.625238][T16421] alloc_pages_bulk_noprof+0x560/0x710 [ 557.625267][T16421] ? alloc_pages_noprof+0xbe/0x190 [ 557.625290][T16421] kasan_populate_vmalloc+0xba/0x1a0 [ 557.625313][T16421] alloc_vmap_area+0xd51/0x1490 [ 557.625347][T16421] ? __pfx_alloc_vmap_area+0x10/0x10 [ 557.625365][T16421] ? __kasan_kmalloc+0x93/0xb0 [ 557.625384][T16421] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 557.625402][T16421] ? __get_vm_area_node+0x13f/0x300 [ 557.625425][T16421] ? htab_map_alloc+0x3d1/0xc70 [ 557.625442][T16421] __get_vm_area_node+0x1f8/0x300 [ 557.625468][T16421] __vmalloc_node_range_noprof+0x301/0x12f0 [ 557.625489][T16421] ? htab_map_alloc+0x3d1/0xc70 [ 557.625514][T16421] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 557.625537][T16421] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 557.625562][T16421] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 557.625581][T16421] ? pcpu_alloc_noprof+0xf85/0x16b0 [ 557.625606][T16421] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 557.625638][T16421] bpf_map_area_alloc+0x12d/0x180 [ 557.625659][T16421] ? htab_map_alloc+0x3d1/0xc70 [ 557.625678][T16421] htab_map_alloc+0x3d1/0xc70 [ 557.625704][T16421] map_create+0x900/0x1150 [ 557.625728][T16421] ? security_bpf+0x7e/0x300 [ 557.625753][T16421] __sys_bpf+0x67e/0x860 [ 557.625774][T16421] ? __pfx___sys_bpf+0x10/0x10 [ 557.625807][T16421] ? ksys_write+0x22a/0x250 [ 557.625828][T16421] ? __pfx_ksys_write+0x10/0x10 [ 557.625844][T16421] ? rcu_is_watching+0x15/0xb0 [ 557.625872][T16421] __x64_sys_bpf+0x7c/0x90 [ 557.625890][T16421] do_syscall_64+0xfa/0x3b0 [ 557.625912][T16421] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.625935][T16421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.625957][T16421] ? clear_bhb_loop+0x60/0xb0 [ 557.625977][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.625992][T16421] RIP: 0033:0x7fb7efd8e929 [ 557.626008][T16421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.626023][T16421] RSP: 002b:00007fb7f0b35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.626041][T16421] RAX: ffffffffffffffda RBX: 00007fb7effb5fa0 RCX: 00007fb7efd8e929 [ 557.626053][T16421] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000 [ 557.626064][T16421] RBP: 00007fb7f0b35090 R08: 0000000000000000 R09: 0000000000000000 [ 557.626075][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.626085][T16421] R13: 0000000000000000 R14: 00007fb7effb5fa0 R15: 00007ffdddd399a8 [ 557.626113][T16421] [ 557.627931][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.011638][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.058399][ T2968] bridge_slave_0: left promiscuous mode [ 558.080544][T16425] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 558.089244][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.581109][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.616146][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.637383][ T2968] bond0 (unregistering): Released all slaves [ 559.733495][T16425] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 559.777107][T16416] lo speed is unknown, defaulting to 1000 [ 560.101894][ T5834] Bluetooth: hci0: command tx timeout [ 561.409277][T16462] FAULT_INJECTION: forcing a failure. [ 561.409277][T16462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.476365][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.4.1612 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 561.476395][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.476405][T16462] Call Trace: [ 561.476412][T16462] [ 561.476420][T16462] dump_stack_lvl+0x189/0x250 [ 561.476450][T16462] ? __pfx____ratelimit+0x10/0x10 [ 561.476476][T16462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.476500][T16462] ? __pfx__printk+0x10/0x10 [ 561.476529][T16462] should_fail_ex+0x414/0x560 [ 561.476555][T16462] _copy_to_user+0x31/0xb0 [ 561.476573][T16462] bpf_test_finish+0x1ab/0x700 [ 561.476599][T16462] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 561.476621][T16462] ? __pfx_bpf_test_finish+0x10/0x10 [ 561.476644][T16462] ? bpf_test_init+0x133/0x170 [ 561.476677][T16462] bpf_prog_test_run_xdp+0x79a/0x1000 [ 561.476710][T16462] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 561.476733][T16462] ? __fget_files+0x2a/0x420 [ 561.476760][T16462] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 561.476778][T16462] bpf_prog_test_run+0x2c7/0x340 [ 561.476861][T16462] __sys_bpf+0x4a4/0x860 [ 561.476894][T16462] ? __pfx___sys_bpf+0x10/0x10 [ 561.476926][T16462] ? ksys_write+0x22a/0x250 [ 561.476947][T16462] ? __pfx_ksys_write+0x10/0x10 [ 561.476963][T16462] ? rcu_is_watching+0x15/0xb0 [ 561.476993][T16462] __x64_sys_bpf+0x7c/0x90 [ 561.477012][T16462] do_syscall_64+0xfa/0x3b0 [ 561.477034][T16462] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.477056][T16462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.477072][T16462] ? clear_bhb_loop+0x60/0xb0 [ 561.477091][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.477107][T16462] RIP: 0033:0x7f18a9f8e929 [ 561.477123][T16462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.477136][T16462] RSP: 002b:00007f18aae2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.477152][T16462] RAX: ffffffffffffffda RBX: 00007f18aa1b5fa0 RCX: 00007f18a9f8e929 [ 561.477163][T16462] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 561.477172][T16462] RBP: 00007f18aae2c090 R08: 0000000000000000 R09: 0000000000000000 [ 561.477181][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.477190][T16462] R13: 0000000000000000 R14: 00007f18aa1b5fa0 R15: 00007ffda1e49718 [ 561.477215][T16462] [ 562.226337][ T5838] Bluetooth: hci0: command tx timeout [ 562.282080][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.299774][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.310883][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.321152][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.332236][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.348895][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.355987][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.924212][T16471] lo speed is unknown, defaulting to 1000 [ 564.262602][ T5140] Bluetooth: hci0: command tx timeout [ 564.421970][ T5140] Bluetooth: hci3: command tx timeout [ 564.798697][ T2968] hsr_slave_0: left promiscuous mode [ 565.013981][ T2968] hsr_slave_1: left promiscuous mode [ 565.156916][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.178063][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.434359][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.461371][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.725580][ T2968] veth1_macvtap: left promiscuous mode [ 565.756270][ T2968] veth0_macvtap: left promiscuous mode [ 565.785729][ T2968] veth1_vlan: left promiscuous mode [ 565.821029][ T2968] veth0_vlan: left promiscuous mode [ 566.342448][ T5140] Bluetooth: hci0: command tx timeout [ 566.501731][ T5140] Bluetooth: hci3: command tx timeout [ 567.242716][ T5828] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 567.261888][ T122] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 567.380400][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 567.407925][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 567.436534][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 567.446498][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.446556][ T122] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.470185][ T122] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 567.472803][ T5828] usb 5-1: config 9 has too many interfaces: 76, using maximum allowed: 32 [ 567.488902][ T122] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 567.499220][ T5828] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 567.500605][ T122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.510036][ T5828] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 76 [ 567.513288][ T5828] usb 5-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 567.538361][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.539991][ T122] usb 7-1: config 0 descriptor?? [ 567.547406][ T5828] usb 5-1: Product: syz [ 567.557126][ T5828] usb 5-1: Manufacturer: syz [ 567.562379][ T5828] usb 5-1: SerialNumber: syz [ 567.590249][ T122] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 567.608807][ T122] dvb-usb: bulk message failed: -22 (3/0) [ 567.635203][ T122] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 567.644745][ T122] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 567.652629][ T122] usb 7-1: media controller created [ 567.660224][ T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.689295][ T122] dvb-usb: bulk message failed: -22 (6/0) [ 567.696951][ T122] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 567.708163][ T122] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 567.726703][ T122] dvb-usb: schedule remote query interval to 150 msecs. [ 567.734130][ T122] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 567.881737][ T122] dvb-usb: bulk message failed: -22 (1/0) [ 567.887842][ T122] dvb-usb: error while querying for an remote control event. [ 568.014322][T16641] dibusb: i2c wr: len=61 is too big! [ 568.014322][T16641] [ 568.052845][ T122] dvb-usb: bulk message failed: -22 (1/0) [ 568.059019][ T122] dvb-usb: error while querying for an remote control event. [ 568.227239][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 568.238280][ T5883] dvb-usb: error while querying for an remote control event. [ 568.401717][ T122] dvb-usb: bulk message failed: -22 (1/0) [ 568.408677][ T122] dvb-usb: error while querying for an remote control event. [ 568.562703][T16626] bond0: entered promiscuous mode [ 568.570533][T16626] bond_slave_0: entered promiscuous mode [ 568.579840][T16626] €Â0: entered promiscuous mode [ 568.581823][ T5140] Bluetooth: hci3: command tx timeout [ 568.592477][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 568.598272][ T5883] dvb-usb: error while querying for an remote control event. [ 568.616527][T16626] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 568.635493][T16626] hsr1: entered promiscuous mode [ 568.734506][ T5828] usb 5-1: USB disconnect, device number 47 [ 568.747470][T16416] chnl_net:caif_netlink_parms(): no params data found [ 568.771854][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 569.077880][ T5883] dvb-usb: error while querying for an remote control event. [ 569.251868][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 569.258058][ T5883] dvb-usb: error while querying for an remote control event. [ 569.335168][T16721] kvm: kvm [16699]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8040600 [ 569.444957][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 569.457044][ T5883] dvb-usb: error while querying for an remote control event. [ 569.584851][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.617859][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.631705][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 569.638065][ T5883] dvb-usb: error while querying for an remote control event. [ 569.777319][T16416] bridge_slave_0: entered allmulticast mode [ 569.798565][T16416] bridge_slave_0: entered promiscuous mode [ 569.818279][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.825798][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.833654][T16416] bridge_slave_1: entered allmulticast mode [ 569.846497][T16416] bridge_slave_1: entered promiscuous mode [ 569.886267][ T5828] usb 7-1: USB disconnect, device number 21 [ 569.940506][ T5828] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 570.025561][T16416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.236901][T16416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.671734][ T5140] Bluetooth: hci3: command tx timeout [ 571.098039][ T2968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.137341][ T2968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.151686][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 571.216071][T16416] team0: Port device team_slave_0 added [ 571.238050][T16416] team0: Port device team_slave_1 added [ 571.348503][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 571.366118][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 571.390060][ T9] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 571.429577][ T9] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 571.444764][ T9] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 571.449289][ T2968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.458085][ T9] usb 7-1: config 128 has no interface number 0 [ 571.479690][ T9] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 571.480579][ T2968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.517480][ T9] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.537012][ T9] usb 7-1: config 128 interface 127 has no altsetting 0 [ 571.554562][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 571.564397][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.574403][ T9] usb 7-1: Product: syz [ 571.578614][ T9] usb 7-1: Manufacturer: syz [ 571.584947][ T9] usb 7-1: SerialNumber: syz [ 571.621390][ T2968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.633030][ T2968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.655245][T16416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.664086][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.691961][T16416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.709694][T16471] chnl_net:caif_netlink_parms(): no params data found [ 571.744300][T16416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.755938][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.828440][T16416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.996379][ T9] usb 7-1: USB disconnect, device number 22 [ 573.420265][ T2968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.479817][ T2968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 573.581050][T17042] syz.6.1642(17042): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 573.587361][T16416] hsr_slave_0: entered promiscuous mode [ 573.623528][T16416] hsr_slave_1: entered promiscuous mode [ 573.871693][ T5883] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 574.025906][ T5883] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 574.044848][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.052458][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.067501][ T5883] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.068150][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.076917][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.076941][ T5883] usb 5-1: SerialNumber: syz [ 574.097659][ T5828] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 574.107830][T16471] bridge_slave_0: entered allmulticast mode [ 574.116284][T16471] bridge_slave_0: entered promiscuous mode [ 574.134725][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.145321][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.153384][T16471] bridge_slave_1: entered allmulticast mode [ 574.161158][T16471] bridge_slave_1: entered promiscuous mode [ 574.254475][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.277785][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.918750][T16471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.940236][T16471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.951886][ T5828] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.962151][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.971899][ T5828] usb 7-1: Product: syz [ 574.988450][ T5828] usb 7-1: Manufacturer: syz [ 575.012049][ T5828] usb 7-1: SerialNumber: syz [ 575.245018][ T5828] usb 7-1: 0:2 : does not exist [ 575.266992][ T5828] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 575.316945][ T5828] usb 7-1: USB disconnect, device number 23 [ 575.534327][T17040] delete_channel: no stack [ 575.558506][ T5883] usb 5-1: 0:2 : does not exist [ 575.566086][ T5883] usb 5-1: unit 5 not found! [ 575.599537][ T5883] usb 5-1: USB disconnect, device number 48 [ 575.852736][T17251] bad cache= option: no%e [ 575.852736][T17251] [ 575.859718][T17251] CIFS: VFS: bad cache= option: no%e [ 575.926485][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.937653][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.951016][ T2968] bond0 (unregistering): Released all slaves [ 576.085591][ T2968] bond1 (unregistering): Released all slaves [ 576.265599][ T2968] bond2 (unregistering): Released all slaves [ 576.281085][ T2968] bond3 (unregistering): Released all slaves [ 576.302610][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 576.304015][T16471] team0: Port device team_slave_0 added [ 576.327411][T16471] team0: Port device team_slave_1 added [ 576.380355][T17232] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 576.390813][T17232] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 576.976060][T16471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.990372][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.067022][T16471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.110880][T16471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.133247][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.193585][T16471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.502016][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 577.677045][ T24] usb 7-1: config index 0 descriptor too short (expected 38, got 36) [ 577.695776][T16471] hsr_slave_0: entered promiscuous mode [ 577.713955][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.725775][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.744949][ T24] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 577.754176][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.767137][T16471] hsr_slave_1: entered promiscuous mode [ 577.768212][ T24] usb 7-1: config 0 descriptor?? [ 577.791926][T16471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.811656][T16471] Cannot create hsr debugfs directory [ 578.030711][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.051252][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.059479][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.070774][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.107550][ T2968] veth1_macvtap: left promiscuous mode [ 578.113458][ T2968] veth0_macvtap: left promiscuous mode [ 578.119150][ T2968] veth1_vlan: left promiscuous mode [ 578.291640][ T5832] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 578.442923][ T5832] usb 4-1: device descriptor read/64, error -71 [ 578.682558][ T5832] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 578.831844][ T5832] usb 4-1: device descriptor read/64, error -71 [ 578.888123][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 578.939529][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 578.944840][ T5832] usb usb4-port1: attempt power cycle [ 579.291921][ T5832] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 579.329043][ T5832] usb 4-1: device descriptor read/8, error -71 [ 579.559733][T17385] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 579.580805][ T5832] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 579.590230][T17385] netlink: 'syz.4.1660': attribute type 2 has an invalid length. [ 579.618867][ T5828] lo speed is unknown, defaulting to 1000 [ 579.621186][ T24] usb 7-1: string descriptor 0 read error: -71 [ 579.628355][ T5828] infiniband syz0: ib_query_port failed (-19) [ 579.639913][ T5832] usb 4-1: device descriptor read/8, error -71 [ 579.679991][ T24] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 579.718567][ T24] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 579.739535][ T24] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 579.758917][ T5832] usb usb4-port1: unable to enumerate USB device [ 579.759431][ T24] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 579.774462][ T24] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 579.817687][ T24] usb 7-1: USB disconnect, device number 24 [ 580.007651][T16416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 580.020901][T16416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 580.059020][T16416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 580.085297][ T2968] IPVS: stop unused estimator thread 0... [ 580.129244][T16416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 580.281749][T16471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 580.304058][T16471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 580.347494][T16471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 580.387633][T16471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 580.574451][T16471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.611474][T16471] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.629193][T17496] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 580.630125][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.644528][T17496] overlayfs: missing 'lowerdir' [ 580.645144][T10310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.665972][T16416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.710349][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.717575][T10310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.898959][T16416] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.940234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.947475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.014711][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.021918][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.334691][T17510] block nbd0: server does not support multiple connections per device. [ 581.367981][T17510] block nbd0: shutting down sockets [ 581.506620][T16471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.963560][T17530] loop9: detected capacity change from 0 to 8 [ 582.050849][T17531] /dev/nullb0: Can't open blockdev [ 582.740691][T17530] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 582.749778][T17530] loop9: partition table partially beyond EOD, truncated [ 582.760837][T17530] loop9: p1 size 81768186 extends beyond EOD, truncated [ 582.863143][T17526] FAULT_INJECTION: forcing a failure. [ 582.863143][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 582.877880][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.4.1671 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 582.877895][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.877901][T17526] Call Trace: [ 582.877906][T17526] [ 582.877910][T17526] dump_stack_lvl+0x189/0x250 [ 582.877930][T17526] ? __pfx____ratelimit+0x10/0x10 [ 582.877945][T17526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.877958][T17526] ? __pfx__printk+0x10/0x10 [ 582.877971][T17526] ? __pfx___might_resched+0x10/0x10 [ 582.877985][T17526] ? fs_reclaim_acquire+0x7d/0x100 [ 582.878001][T17526] should_fail_ex+0x414/0x560 [ 582.878015][T17526] should_failslab+0xa8/0x100 [ 582.878029][T17526] kmem_cache_alloc_noprof+0x73/0x3c0 [ 582.878040][T17526] ? io_submit_one+0x11f/0x1310 [ 582.878056][T17526] io_submit_one+0x11f/0x1310 [ 582.878076][T17526] ? __pfx_io_submit_one+0x10/0x10 [ 582.878089][T17526] ? __might_fault+0xb0/0x130 [ 582.878107][T17526] ? __might_fault+0xb0/0x130 [ 582.878120][T17526] __se_sys_io_submit+0x185/0x2f0 [ 582.878132][T17526] ? __pfx___se_sys_io_submit+0x10/0x10 [ 582.878142][T17526] ? ksys_write+0x22a/0x250 [ 582.878159][T17526] ? do_syscall_64+0xbe/0x3b0 [ 582.878175][T17526] do_syscall_64+0xfa/0x3b0 [ 582.878189][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.878198][T17526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 582.878206][T17526] ? clear_bhb_loop+0x60/0xb0 [ 582.878217][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.878226][T17526] RIP: 0033:0x7f18a9f8e929 [ 582.878236][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.878244][T17526] RSP: 002b:00007f18aae2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 582.878255][T17526] RAX: ffffffffffffffda RBX: 00007f18aa1b5fa0 RCX: 00007f18a9f8e929 [ 582.878268][T17526] RDX: 0000200000003800 RSI: 0000000000000001 RDI: 00007f18aadda000 [ 582.878274][T17526] RBP: 00007f18aae2c090 R08: 0000000000000000 R09: 0000000000000000 [ 582.878280][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.878285][T17526] R13: 0000000000000000 R14: 00007f18aa1b5fa0 R15: 00007ffda1e49718 [ 582.878300][T17526] [ 583.148021][T16416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.660125][ T5832] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 583.843773][ T5832] usb 7-1: config index 0 descriptor too short (expected 38, got 36) [ 583.887252][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.944598][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.966782][ T5832] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 583.986677][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.000474][ T5832] usb 7-1: config 0 descriptor?? [ 584.689594][T16471] veth0_vlan: entered promiscuous mode [ 584.720312][T16471] veth1_vlan: entered promiscuous mode [ 584.867703][T16471] veth0_macvtap: entered promiscuous mode [ 585.031084][T16471] veth1_macvtap: entered promiscuous mode [ 585.104713][T16471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.120353][T16416] veth0_vlan: entered promiscuous mode [ 585.131164][T16471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.169897][T16416] veth1_vlan: entered promiscuous mode [ 585.186178][T16471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.200890][T16471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.424694][T16471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.444011][T16471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.588113][T17590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1678'. [ 585.597668][T17590] netlink: 'syz.3.1678': attribute type 2 has an invalid length. [ 585.605991][T17590] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 585.614261][T17590] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1678'. [ 585.685755][ T10] IPVS: starting estimator thread 0... [ 585.782392][T17591] IPVS: using max 27 ests per chain, 64800 per kthread [ 586.061070][T16416] veth0_macvtap: entered promiscuous mode [ 586.132418][T16416] veth1_macvtap: entered promiscuous mode [ 586.205078][T16416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.233456][T16416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.345942][T16416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.442734][T16416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.452473][T16416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.461647][T16416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.512037][T17605] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 586.518955][T17605] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 586.542679][ T5832] usb 7-1: string descriptor 0 read error: -71 [ 586.623010][ T5832] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #200: -71 [ 586.659462][ T5832] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 586.662665][T17605] vhci_hcd vhci_hcd.0: Device attached [ 586.694754][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.715691][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.774409][T17610] vhci_hcd: connection closed [ 586.779153][ T5832] uclogic 0003:256C:006D.0015: failed probing pen v2 parameters: -71 [ 586.794801][ T1326] vhci_hcd: stop threads [ 586.798191][ T5832] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 586.808107][ T1326] vhci_hcd: release socket [ 586.826735][ T1326] vhci_hcd: disconnect device [ 586.867547][ T5832] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 586.912119][ T5832] usb 7-1: USB disconnect, device number 25 [ 586.951095][T10310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.970028][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.975172][T10310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.017313][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 587.026408][ T5834] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 587.046947][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.107915][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.122272][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.702225][ T122] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 587.816877][ T2968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.898657][ T122] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.921117][ T122] usb 8-1: config 0 has no interfaces? [ 587.931433][ T122] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 587.955768][ T122] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.969009][ T2968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.975991][ T122] usb 8-1: config 0 descriptor?? [ 588.132755][ T2968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.217317][ T2968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.235017][ T5883] usb 8-1: USB disconnect, device number 2 [ 588.703702][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1688'. [ 588.721832][ T2968] bridge_slave_1: left allmulticast mode [ 588.731914][ T2968] bridge_slave_1: left promiscuous mode [ 588.748844][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.793950][ T2968] bridge_slave_0: left allmulticast mode [ 588.821668][ T2968] bridge_slave_0: left promiscuous mode [ 588.828177][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.161148][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 589.176171][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 589.203286][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.217188][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 589.227348][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.491324][T17714] netlink: 'syz.6.1693': attribute type 5 has an invalid length. [ 590.287952][ T5140] Bluetooth: hci4: connection err: -111 [ 590.325175][T17738] input: syz1 as /devices/virtual/input/input29 [ 590.362182][ T122] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 590.562863][ T122] usb 4-1: Using ep0 maxpacket: 32 [ 590.852571][ T122] usb 4-1: config 7 has an invalid interface number: 37 but max is 0 [ 590.922290][ T122] usb 4-1: config 7 has no interface number 0 [ 590.949032][ T122] usb 4-1: config 7 interface 37 has no altsetting 0 [ 590.995273][ T122] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=7b.71 [ 591.039625][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.059446][ T122] usb 4-1: Product: syz [ 591.070717][ T122] usb 4-1: Manufacturer: syz [ 591.123372][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 591.141745][ T122] usb 4-1: SerialNumber: syz [ 591.306560][ T5140] Bluetooth: hci0: command tx timeout [ 591.367414][ T5828] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 591.441014][T17726] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 591.473558][ T122] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 591.538538][ T5828] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.538576][ T122] gspca_m5602: Failed to find a sensor [ 591.566236][ T5828] usb 7-1: config 0 has no interfaces? [ 591.583996][ T5828] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 591.597363][ T122] ALi m5602 4-1:7.37: ALi m5602 webcam failed [ 591.633017][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.647571][ T5828] usb 7-1: config 0 descriptor?? [ 591.658542][ T122] usb 4-1: USB disconnect, device number 46 [ 592.319443][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.345091][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.393183][ T2968] bond0 (unregistering): Released all slaves [ 592.639674][ T5883] usb 7-1: USB disconnect, device number 26 [ 593.392522][ T5140] Bluetooth: hci0: command tx timeout [ 593.850284][T17814] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1708'. [ 594.556015][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1709'. [ 594.948968][ T5883] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 595.209026][ T5883] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 595.220482][ T2968] hsr_slave_0: left promiscuous mode [ 595.232375][ T2968] hsr_slave_1: left promiscuous mode [ 595.239364][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.446659][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.447433][T17852] input: syz1 as /devices/virtual/input/input30 [ 595.691614][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.691733][ T5140] Bluetooth: hci0: command tx timeout [ 595.741802][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.766728][ T5883] usb 5-1: config 0 descriptor?? [ 595.782164][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.828252][ T5883] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 595.862734][ T2968] veth1_macvtap: left promiscuous mode [ 595.871908][ T2968] veth0_macvtap: left promiscuous mode [ 595.882275][ T2968] veth1_vlan: left promiscuous mode [ 595.899741][ T2968] veth0_vlan: left promiscuous mode [ 596.050430][ T5883] gp8psk: usb in 128 operation failed. [ 596.277188][T17867] binder: 17862:17867 ioctl c0306201 200000000100 returned -14 [ 596.308064][ T5883] gp8psk: FW Version = 107.255.166 (0x6bffa6) Build 2064/41/152 [ 597.070465][T17822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.214704][T17822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.781653][ T5140] Bluetooth: hci0: command tx timeout [ 597.904669][ T5883] gp8psk: usb in 149 operation failed. [ 597.953279][ T5883] gp8psk: failed to get FPGA version [ 597.965814][ T5883] gp8psk: usb in 138 operation failed. [ 597.999379][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 598.021700][ T5883] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 598.048575][ T5883] usb 5-1: USB disconnect, device number 49 [ 598.242513][ T5896] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 598.358971][ T10] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 598.434848][ T5896] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.445678][ T5896] usb 8-1: config 0 has no interfaces? [ 598.464409][ T5896] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 598.482133][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.505867][ T5896] usb 8-1: config 0 descriptor?? [ 598.528101][ T10] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 598.563561][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.791742][ T10] usb 4-1: config 0 descriptor?? [ 598.886870][T17904] input: syz1 as /devices/virtual/input/input31 [ 598.915056][ T5828] usb 8-1: USB disconnect, device number 3 [ 598.922737][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 599.109391][ T10] gp8psk: usb in 128 operation failed. [ 599.230313][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 599.246051][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 599.300807][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 599.374766][ T10] gp8psk: FW Version = 107.255.166 (0x6bffa6) Build 2064/41/152 [ 599.518860][T17922] netlink: 15 bytes leftover after parsing attributes in process `syz.7.1722'. [ 599.599768][T17896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.626575][T17896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.651227][ T10] gp8psk: usb in 149 operation failed. [ 599.670853][ T10] gp8psk: failed to get FPGA version [ 599.678962][ T10] gp8psk: usb in 138 operation failed. [ 599.687137][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 599.740897][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 599.769512][T17930] input: syz1 as /devices/virtual/input/input32 [ 600.162984][ T10] usb 4-1: USB disconnect, device number 47 [ 600.361083][T17943] netlink: 'syz.7.1724': attribute type 63 has an invalid length. [ 600.969247][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1725'. [ 600.980421][T17945] nbd: must specify at least one socket [ 601.240277][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1727'. [ 601.802416][T18043] block nbd0: server does not support multiple connections per device. [ 601.829256][T18043] block nbd0: shutting down sockets [ 601.832589][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 601.891394][T17707] chnl_net:caif_netlink_parms(): no params data found [ 602.031793][ T10] usb 8-1: device descriptor read/64, error -71 [ 602.291708][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 602.301200][T17707] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.312654][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.326866][T17707] bridge_slave_0: entered allmulticast mode [ 602.340035][T17707] bridge_slave_0: entered promiscuous mode [ 602.382732][T17707] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.410901][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.446621][T17707] bridge_slave_1: entered allmulticast mode [ 602.452199][ T10] usb 8-1: device descriptor read/64, error -71 [ 602.461120][T17707] bridge_slave_1: entered promiscuous mode [ 602.569439][ T10] usb usb8-port1: attempt power cycle [ 602.654212][ T5883] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 602.659659][T18147] x_tables: duplicate underflow at hook 2 [ 602.667717][T17707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.904466][T17707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.013562][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.061108][ T5883] usb 5-1: config 0 has no interfaces? [ 603.083475][ T5883] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 603.096287][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.102000][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 603.139639][ T5883] usb 5-1: config 0 descriptor?? [ 603.292249][ T10] usb 8-1: device descriptor read/8, error -71 [ 603.474044][T18165] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1734'. [ 603.617590][ T5828] usb 5-1: USB disconnect, device number 50 [ 603.654654][T17707] team0: Port device team_slave_0 added [ 603.681745][T17707] team0: Port device team_slave_1 added [ 603.765851][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 603.794095][ T10] usb 8-1: device descriptor read/8, error -71 [ 603.809823][T17707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.824359][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.887088][T17707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.902275][ T10] usb usb8-port1: unable to enumerate USB device [ 603.903330][T17707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.925995][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.060512][T17707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.133359][T18218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1738'. [ 604.628388][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'. [ 604.700870][T17707] hsr_slave_0: entered promiscuous mode [ 604.710857][T17707] hsr_slave_1: entered promiscuous mode [ 605.317125][T18288] x_tables: duplicate underflow at hook 2 [ 607.054092][ T5140] Bluetooth: hci4: connection err: -111 [ 607.721699][ T92] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 607.765612][T18289] xt_connbytes: Forcing CT accounting to be enabled [ 607.773667][T18289] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 607.832256][ T5828] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 607.895885][ T92] usb 8-1: Using ep0 maxpacket: 8 [ 607.912463][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 607.935816][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.966969][ T92] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.002548][ T92] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.028992][ T92] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.067001][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.076269][T17707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 608.088602][ T92] usb 8-1: config 0 interface 0 has no altsetting 0 [ 608.095524][ T5828] usb 5-1: config 0 has no interfaces? [ 608.101353][ T5828] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 608.112828][ T92] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 608.122333][ T10] usb 4-1: device descriptor read/64, error -71 [ 608.129120][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.138238][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.152280][T17707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 608.161011][ T5828] usb 5-1: config 0 descriptor?? [ 608.167597][ T92] usb 8-1: config 0 descriptor?? [ 608.187577][T17707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 608.226411][T17707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.336166][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1753'. [ 608.372440][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 608.388072][ T24] usb 5-1: USB disconnect, device number 51 [ 608.412902][T17707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.451367][T17707] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.467200][T11252] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.475288][T11252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.500499][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.508157][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.542141][ T10] usb 4-1: device descriptor read/64, error -71 [ 608.676701][ T10] usb usb4-port1: attempt power cycle [ 609.091997][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 609.182541][ T92] ryos 0003:1E7D:3232.0016: item fetching failed at offset 2/5 [ 609.198602][ T10] usb 4-1: device descriptor read/8, error -71 [ 609.211352][ T92] ryos 0003:1E7D:3232.0016: parse failed [ 609.240659][ T92] ryos 0003:1E7D:3232.0016: probe with driver ryos failed with error -22 [ 609.475895][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 609.588049][ T10] usb 4-1: device descriptor read/8, error -71 [ 609.657612][T18450] x_tables: duplicate underflow at hook 2 [ 609.714873][ T10] usb usb4-port1: unable to enumerate USB device [ 610.073100][T17707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.107160][ T5896] usb 8-1: USB disconnect, device number 8 [ 612.283392][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 612.509726][T17707] veth0_vlan: entered promiscuous mode [ 612.569157][T17707] veth1_vlan: entered promiscuous mode [ 613.312839][T17707] veth0_macvtap: entered promiscuous mode [ 613.331612][T17707] veth1_macvtap: entered promiscuous mode [ 613.477499][T18514] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1769'. [ 614.078170][T17707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.131144][T17707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.260069][T18521] input: syz1 as /devices/virtual/input/input33 [ 614.632360][T17707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.737732][T18524] input: syz1 as /devices/virtual/input/input34 [ 614.942649][T17707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.104951][T17707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.114693][T17707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.558931][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.587741][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.016701][ T9371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.053529][ T9371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.114050][T18595] input: syz1 as /devices/virtual/input/input35 [ 619.233952][T18594] Invalid logical block size (2304) [ 619.277940][ T1094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.808303][ T1094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.964129][ T1094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.988611][T18591] netlink: 'syz.6.1783': attribute type 2 has an invalid length. [ 620.000657][T18591] netlink: 'syz.6.1783': attribute type 1 has an invalid length. [ 620.014905][T18591] netlink: 'syz.6.1783': attribute type 1 has an invalid length. [ 620.048040][ T1094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.175326][ T1094] bridge_slave_1: left allmulticast mode [ 620.182209][ T1094] bridge_slave_1: left promiscuous mode [ 620.192018][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.208593][ T1094] bridge_slave_0: left allmulticast mode [ 620.217708][ T1094] bridge_slave_0: left promiscuous mode [ 620.225591][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.031804][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 621.231756][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 621.253862][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.298633][ T10] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 621.343967][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.391218][ T10] usb 5-1: config 0 descriptor?? [ 621.560370][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 621.573379][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 621.599881][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 621.620883][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 621.651917][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.843218][ T10] glorious 0003:22D4:1503.0017: unknown main item tag 0x0 [ 621.871628][ T10] glorious 0003:22D4:1503.0017: unknown main item tag 0x0 [ 621.879049][ T10] glorious 0003:22D4:1503.0017: unknown main item tag 0x0 [ 621.882260][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.906235][ T10] glorious 0003:22D4:1503.0017: unknown main item tag 0x0 [ 621.940575][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.953728][ T10] glorious 0003:22D4:1503.0017: unknown main item tag 0x0 [ 621.962085][ T10] glorious 0003:22D4:1503.0017: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.4-1/input0 [ 621.988431][ T1094] bond0 (unregistering): Released all slaves [ 622.165425][ T24] usb 5-1: USB disconnect, device number 52 [ 623.345940][T18704] input: syz1 as /devices/virtual/input/input36 [ 623.787003][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.794582][ T5834] Bluetooth: hci0: command tx timeout [ 623.804382][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.351657][ T5828] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 624.531708][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 624.544000][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.555561][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 624.577080][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.604512][ T5828] usb 5-1: config 0 descriptor?? [ 624.684969][T18740] netlink: 'syz.7.1802': attribute type 63 has an invalid length. [ 625.072883][ T5828] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 625.861994][ T5834] Bluetooth: hci0: command tx timeout [ 626.378885][ T30] audit: type=1326 audit(2000000005.810:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18727 comm="syz.4.1801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18a9f8e929 code=0x0 [ 626.451939][ T5828] gspca_vc032x: reg_w err -110 [ 626.457394][ T5828] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 626.596309][T18748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.944185][ T5834] Bluetooth: hci0: command tx timeout [ 628.034362][ T1094] hsr_slave_0: left promiscuous mode [ 628.040648][ T1094] hsr_slave_1: left promiscuous mode [ 628.049093][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.057710][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.067945][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.077203][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.116081][ T1094] veth1_macvtap: left promiscuous mode [ 628.132205][ T1094] veth0_macvtap: left promiscuous mode [ 628.140152][ T1094] veth1_vlan: left promiscuous mode [ 628.146499][ T1094] veth0_vlan: left promiscuous mode [ 628.791639][ T122] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 628.969530][ T122] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.991592][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.043108][ T122] usb 4-1: config 0 descriptor?? [ 629.062670][ T122] cp210x 4-1:0.0: cp210x converter detected [ 629.473764][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 629.508340][ T122] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 629.551857][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 629.620628][ T5883] usb 5-1: USB disconnect, device number 53 [ 629.792493][ T122] usb 4-1: cp210x converter now attached to ttyUSB0 [ 629.984908][ T5883] usb 4-1: USB disconnect, device number 52 [ 629.997527][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 630.021676][ T5834] Bluetooth: hci0: command tx timeout [ 630.046833][ T5883] cp210x 4-1:0.0: device disconnected [ 630.330408][T18740] macsec0: entered promiscuous mode [ 630.336128][T18740] macsec0: entered allmulticast mode [ 630.341919][T18740] veth1_macvtap: entered allmulticast mode [ 631.113878][T18845] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 631.253262][T18845] vivid-002: ================= START STATUS ================= [ 631.262324][T18845] vivid-002: Radio HW Seek Mode: Bounded [ 631.268655][T18845] vivid-002: Radio Programmable HW Seek: false [ 631.278885][T18845] vivid-002: RDS Rx I/O Mode: Block I/O [ 631.285556][T18845] vivid-002: Generate RBDS Instead of RDS: false [ 631.293096][T18845] vivid-002: RDS Reception: true [ 631.299866][T18845] vivid-002: RDS Program Type: 0 inactive [ 631.307219][T18845] vivid-002: RDS PS Name: inactive [ 631.313524][T18845] vivid-002: RDS Radio Text: inactive [ 631.319975][T18845] vivid-002: RDS Traffic Announcement: false inactive [ 631.328272][T18845] vivid-002: RDS Traffic Program: false inactive [ 631.335290][T18845] vivid-002: RDS Music: false inactive [ 631.342050][T18845] vivid-002: ================== END STATUS ================== [ 631.714234][T18638] chnl_net:caif_netlink_parms(): no params data found [ 632.225246][T18954] netlink: 'syz.3.1813': attribute type 63 has an invalid length. [ 633.185795][T18638] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.220635][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.247632][T18638] bridge_slave_0: entered allmulticast mode [ 633.263499][T18638] bridge_slave_0: entered promiscuous mode [ 633.278450][T18956] macsec0: entered promiscuous mode [ 633.285489][T18956] macsec0: entered allmulticast mode [ 633.447943][T18638] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.458430][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.472524][T18638] bridge_slave_1: entered allmulticast mode [ 633.486156][T18638] bridge_slave_1: entered promiscuous mode [ 633.592198][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 634.075835][ T5834] Bluetooth: hci5: connection err: -111 [ 634.583761][T18981] ------------[ cut here ]------------ [ 634.589846][T18981] WARNING: CPU: 0 PID: 18981 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 634.602095][T18981] Modules linked in: [ 634.607944][T18981] CPU: 0 UID: 0 PID: 18981 Comm: syz.3.1816 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 634.620050][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.632692][T18981] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 634.639535][T18981] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 e8 8b 00 cc e8 52 22 ea f6 90 0f 0b 90 eb e1 e8 47 22 ea f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 634.661897][T18981] RSP: 0018:ffffc90004fc6ff0 EFLAGS: 00010283 [ 634.668538][T18981] RAX: ffffffff8ad629d9 RBX: ffff8880216d0000 RCX: 0000000000080000 [ 634.678109][T18981] RDX: ffffc9000cc5b000 RSI: 00000000000035b4 RDI: 00000000000035b5 [ 634.687722][T18981] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ad624f3 [ 634.697780][T18981] R10: dffffc0000000000 R11: ffffed10042da031 R12: 1ffff110042da00a [ 634.705977][T18981] R13: ffff888077f28e40 R14: 0000000000000001 R15: ffffffff8ad624f3 [ 634.715094][T18981] FS: 00007fb7f0b356c0(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 634.725710][T18981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.733077][T18981] CR2: 00007fc75f9b8f98 CR3: 0000000031c30000 CR4: 00000000003526f0 [ 634.742841][T18981] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.753751][T18981] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 634.764757][T18981] Call Trace: [ 634.770499][T18981] [ 634.777328][T18981] rate_control_rate_init_all_links+0x109/0x1a0 [ 634.784516][T18981] sta_apply_auth_flags+0x1c2/0x400 [ 634.790041][T18981] sta_apply_parameters+0xe4b/0x15b0 [ 634.798210][T18981] ieee80211_add_station+0x424/0x6a0 [ 634.804483][T18981] rdev_add_station+0x108/0x290 [ 634.810182][T18981] nl80211_new_station+0x1723/0x1b40 [ 634.815979][T18981] ? __pfx_nl80211_new_station+0x10/0x10 [ 634.824028][T18981] ? netdev_run_todo+0xe1d/0xea0 [ 634.829432][T18981] ? nl80211_pre_doit+0x4f1/0x930 [ 634.834540][T18981] genl_family_rcv_msg_doit+0x215/0x300 [ 634.840655][T18981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.847764][T18981] ? bpf_lsm_capable+0x9/0x20 [ 634.852772][T18981] ? security_capable+0x7e/0x2e0 [ 634.860172][T18981] genl_rcv_msg+0x60e/0x790 [ 634.866253][T18981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.871625][T18981] ? ref_tracker_free+0x63a/0x7d0 [ 634.877240][T18981] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 634.883570][T18981] ? __pfx_nl80211_new_station+0x10/0x10 [ 634.890997][T18981] ? __pfx_nl80211_post_doit+0x10/0x10 [ 634.894604][T18638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.896957][T18981] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.912900][T18981] netlink_rcv_skb+0x208/0x470 [ 634.918483][T18981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.923765][T18981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.929716][T18981] ? down_read+0x1ad/0x2e0 [ 634.935403][T18981] genl_rcv+0x28/0x40 [ 634.940304][T18981] netlink_unicast+0x75b/0x8d0 [ 634.946157][T18981] netlink_sendmsg+0x805/0xb30 [ 634.951820][T18981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.957693][T18981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.965823][T18981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.973127][T18981] __sock_sendmsg+0x21c/0x270 [ 634.978513][T18981] ____sys_sendmsg+0x505/0x830 [ 634.983364][T18981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.990319][T18981] ? import_iovec+0x74/0xa0 [ 634.995566][T18981] ___sys_sendmsg+0x21f/0x2a0 [ 634.996743][T18638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.001393][T18981] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.001460][T18981] ? __fget_files+0x2a/0x420 [ 635.025160][T18981] ? __fget_files+0x3a0/0x420 [ 635.030337][T18981] __x64_sys_sendmsg+0x19b/0x260 [ 635.036075][T18981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.042634][T18981] ? rcu_is_watching+0x15/0xb0 [ 635.047654][T18981] ? do_syscall_64+0xbe/0x3b0 [ 635.052425][T18981] do_syscall_64+0xfa/0x3b0 [ 635.057042][T18981] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.063381][T18981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.070633][T18981] ? clear_bhb_loop+0x60/0xb0 [ 635.076273][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.084205][T18981] RIP: 0033:0x7fb7efd8e929 [ 635.091013][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.112873][T18981] RSP: 002b:00007fb7f0b35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.122591][T18981] RAX: ffffffffffffffda RBX: 00007fb7effb5fa0 RCX: 00007fb7efd8e929 [ 635.130594][T18981] RDX: 0000000000000044 RSI: 0000200000001080 RDI: 0000000000000007 [ 635.140066][T18981] RBP: 00007fb7efe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 635.149720][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.158220][T18981] R13: 0000000000000000 R14: 00007fb7effb5fa0 R15: 00007ffdddd399a8 [ 635.170021][T18981] [ 635.173705][T18981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 635.181008][T18981] CPU: 0 UID: 0 PID: 18981 Comm: syz.3.1816 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 635.191462][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.204250][T18981] Call Trace: [ 635.207997][T18981] [ 635.214305][T18981] dump_stack_lvl+0x99/0x250 [ 635.220475][T18981] ? __asan_memcpy+0x40/0x70 [ 635.227863][T18981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.234830][T18981] ? __pfx__printk+0x10/0x10 [ 635.239712][T18981] panic+0x2db/0x790 [ 635.243818][T18981] ? __pfx_panic+0x10/0x10 [ 635.248550][T18981] __warn+0x31b/0x4b0 [ 635.253333][T18981] ? rate_control_rate_init+0x64a/0x6e0 [ 635.259640][T18981] ? rate_control_rate_init+0x64a/0x6e0 [ 635.266247][T18981] report_bug+0x2be/0x4f0 [ 635.270849][T18981] ? rate_control_rate_init+0x64a/0x6e0 [ 635.276761][T18981] ? rate_control_rate_init+0x64a/0x6e0 [ 635.283639][T18981] ? rate_control_rate_init+0x64c/0x6e0 [ 635.289651][T18981] handle_bug+0x84/0x160 [ 635.294166][T18981] exc_invalid_op+0x1a/0x50 [ 635.299111][T18981] asm_exc_invalid_op+0x1a/0x20 [ 635.304597][T18981] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 635.313419][T18981] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 e8 8b 00 cc e8 52 22 ea f6 90 0f 0b 90 eb e1 e8 47 22 ea f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 635.336956][T18981] RSP: 0018:ffffc90004fc6ff0 EFLAGS: 00010283 [ 635.343847][T18981] RAX: ffffffff8ad629d9 RBX: ffff8880216d0000 RCX: 0000000000080000 [ 635.354495][T18981] RDX: ffffc9000cc5b000 RSI: 00000000000035b4 RDI: 00000000000035b5 [ 635.367956][T18981] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ad624f3 [ 635.376663][T18981] R10: dffffc0000000000 R11: ffffed10042da031 R12: 1ffff110042da00a [ 635.385258][T18981] R13: ffff888077f28e40 R14: 0000000000000001 R15: ffffffff8ad624f3 [ 635.393977][T18981] ? rate_control_rate_init+0x163/0x6e0 [ 635.402492][T18981] ? rate_control_rate_init+0x163/0x6e0 [ 635.410418][T18981] ? rate_control_rate_init+0x649/0x6e0 [ 635.418771][T18981] rate_control_rate_init_all_links+0x109/0x1a0 [ 635.427419][T18981] sta_apply_auth_flags+0x1c2/0x400 [ 635.433277][T18981] sta_apply_parameters+0xe4b/0x15b0 [ 635.440032][T18981] ieee80211_add_station+0x424/0x6a0 [ 635.446672][T18981] rdev_add_station+0x108/0x290 [ 635.452367][T18981] nl80211_new_station+0x1723/0x1b40 [ 635.459429][T18981] ? __pfx_nl80211_new_station+0x10/0x10 [ 635.465106][T18981] ? netdev_run_todo+0xe1d/0xea0 [ 635.470880][T18981] ? nl80211_pre_doit+0x4f1/0x930 [ 635.476121][T18981] genl_family_rcv_msg_doit+0x215/0x300 [ 635.481690][T18981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.488558][T18981] ? bpf_lsm_capable+0x9/0x20 [ 635.493414][T18981] ? security_capable+0x7e/0x2e0 [ 635.498551][T18981] genl_rcv_msg+0x60e/0x790 [ 635.503080][T18981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.509082][T18981] ? ref_tracker_free+0x63a/0x7d0 [ 635.514292][T18981] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 635.520749][T18981] ? __pfx_nl80211_new_station+0x10/0x10 [ 635.526431][T18981] ? __pfx_nl80211_post_doit+0x10/0x10 [ 635.534555][T18981] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.541538][T18981] netlink_rcv_skb+0x208/0x470 [ 635.547710][T18981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.553695][T18981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.559363][T18981] ? down_read+0x1ad/0x2e0 [ 635.565581][T18981] genl_rcv+0x28/0x40 [ 635.569892][T18981] netlink_unicast+0x75b/0x8d0 [ 635.576544][T18981] netlink_sendmsg+0x805/0xb30 [ 635.583439][T18981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.591971][T18981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.599746][T18981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.607000][T18981] __sock_sendmsg+0x21c/0x270 [ 635.614699][T18981] ____sys_sendmsg+0x505/0x830 [ 635.622021][T18981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.627760][T18981] ? import_iovec+0x74/0xa0 [ 635.633931][T18981] ___sys_sendmsg+0x21f/0x2a0 [ 635.638977][T18981] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.645892][T18981] ? __fget_files+0x2a/0x420 [ 635.652267][T18981] ? __fget_files+0x3a0/0x420 [ 635.658764][T18981] __x64_sys_sendmsg+0x19b/0x260 [ 635.664973][T18981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.672469][T18981] ? rcu_is_watching+0x15/0xb0 [ 635.680464][T18981] ? do_syscall_64+0xbe/0x3b0 [ 635.688935][T18981] do_syscall_64+0xfa/0x3b0 [ 635.695041][T18981] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.700528][T18981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.706932][T18981] ? clear_bhb_loop+0x60/0xb0 [ 635.713912][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.720167][T18981] RIP: 0033:0x7fb7efd8e929 [ 635.726208][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.756442][T18981] RSP: 002b:00007fb7f0b35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.769402][T18981] RAX: ffffffffffffffda RBX: 00007fb7effb5fa0 RCX: 00007fb7efd8e929 [ 635.780089][T18981] RDX: 0000000000000044 RSI: 0000200000001080 RDI: 0000000000000007 [ 635.789034][T18981] RBP: 00007fb7efe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 635.799481][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.809300][T18981] R13: 0000000000000000 R14: 00007fb7effb5fa0 R15: 00007ffdddd399a8 [ 635.819625][T18981] [ 635.826046][T18981] Kernel Offset: disabled [ 635.831526][T18981] Rebooting in 86400 seconds..