last executing test programs: 12m20.884896298s ago: executing program 3 (id=303): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ca7929fae4293d79e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3e0a0b03060000000000000018d407ef29e1e4ffa1bcb5a68fcd2317bbfb4e18e9aa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)='T', 0x1}, {&(0x7f0000000680)}], 0x2}}], 0x4, 0x400c0) 12m20.374811152s ago: executing program 3 (id=304): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) 12m19.10937251s ago: executing program 3 (id=308): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 12m18.088936795s ago: executing program 3 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eab", 0x2}], 0x1) 12m17.356016715s ago: executing program 3 (id=315): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ca7929fae4293d79e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3e0a0b03060000000000000018d407ef29e1e4ffa1bcb5a68fcd2317bbfb4e18e9aa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)='T', 0x1}, {&(0x7f0000000680)}], 0x2}}], 0x4, 0x400c0) 12m17.001192609s ago: executing program 3 (id=318): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x110, 0x3, &(0x7f0000000100), 0x4) 12m1.363723s ago: executing program 32 (id=318): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x110, 0x3, &(0x7f0000000100), 0x4) 11m38.76667043s ago: executing program 4 (id=419): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x2400e044}, 0x0) 11m37.135987367s ago: executing program 4 (id=424): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) socket(0x2a, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 11m37.065825319s ago: executing program 1 (id=425): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 11m35.979536849s ago: executing program 4 (id=428): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16], 0x0) 11m35.134549733s ago: executing program 1 (id=431): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5, 0x0, 0x0, 0x2}]) 11m34.71603734s ago: executing program 1 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11m34.004936138s ago: executing program 4 (id=434): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0xc0) ftruncate(r1, 0x8800000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0x2020) 11m33.448962776s ago: executing program 1 (id=435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033c805d84474b87eee3b18c1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x1, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0xfffffffc}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r4, 0x5, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000e00)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x7, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xca, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0xfffffffffffffff7, 0x4, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x80, 0x3, 0x1, 0x0, 0x6, 0x3, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0x2, 0x8000000000002, 0xa, 0x9, 0x6, 0xe002000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x4009, 0x1800000, 0x5, 0x82b, 0x5, 0x5, 0x0, 0x7ff, 0x3, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x2, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x5, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0xfffffffffffffffc, 0x9, 0x8, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x1642, 0x1000, 0x1d68a423, 0x5, 0x7, 0xfffffffffffff004, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x20000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 11m32.632220422s ago: executing program 4 (id=437): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) pwrite64(r0, &(0x7f0000000080)="0bfb8db7a1fbb7e67aeefa08080dc824a6d4f8c1b858acc7e026bb286ada2267308b440c34b8a06dce7f868ec6ad4e82bcabdb30db1b6aedf0c6334fb612d66439c3c69bb65727c7a724", 0x4a, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xd, 0x4001c1) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x7, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) shutdown(r4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) 11m31.461372185s ago: executing program 4 (id=440): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 11m31.32750886s ago: executing program 1 (id=441): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 11m30.29167067s ago: executing program 1 (id=445): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 11m16.249103503s ago: executing program 33 (id=440): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 11m15.205547772s ago: executing program 34 (id=445): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 10m35.713725486s ago: executing program 2 (id=571): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x159) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 10m35.563818323s ago: executing program 2 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x6, r0, 0x7, 0x80010) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 10m34.217842736s ago: executing program 2 (id=573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 10m34.127936732s ago: executing program 2 (id=574): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4044) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001480)={0x0, 0x7ff, 0x4}, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40), 0x0) socket(0x18, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x80003, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x10}]}, 0x0, 0x0, 0xffffff82, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x6}, 'port1\x00', 0x54, 0x1b100b, 0x7ffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2}) 10m34.073228257s ago: executing program 2 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 10m34.020950982s ago: executing program 2 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffff"], 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ad00000095000000000000b003795f5c973c00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 10m18.821066397s ago: executing program 35 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffff"], 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ad00000095000000000000b003795f5c973c00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 1m1.241918855s ago: executing program 0 (id=1814): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 1m0.139895389s ago: executing program 0 (id=1819): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000063c0)={0x2020}, 0x2020) 12.820563442s ago: executing program 8 (id=1928): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x2, "c5fb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000004c0)={0x0, 0xe, 0x1, '\n'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.539140862s ago: executing program 5 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) removexattr(0x0, 0x0) keyctl$setperm(0x5, r4, 0x52b242d) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r5, 0x1, 0x9, &(0x7f0000000040), 0x29) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 10.699401017s ago: executing program 5 (id=1934): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xca) 8.877779299s ago: executing program 7 (id=1935): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) 8.876578663s ago: executing program 6 (id=1936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x4000815, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) 8.557281219s ago: executing program 7 (id=1937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = dup2(r5, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) 7.212269511s ago: executing program 8 (id=1938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85, 0x49060}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.1936312s ago: executing program 6 (id=1939): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}]}}]}, 0x3c}}, 0x0) 7.176972024s ago: executing program 5 (id=1940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "33479bc280c38b71f843068c9a455562940dfda8921684418d8631cb318d600c0ef35924066ea2"}}, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "d1"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x6c3}}}}, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000680)={0x20, 0x1, 0x2c, "1547cc83d64a72d36dacd785359996774ff12da9645cd20c12074047736ee5c503c8571f46c3f275a7269907"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) 6.760804096s ago: executing program 7 (id=1941): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000b, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="766a78056ecf"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f4ff89f61b93"}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], 0x0}, 0x94) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000a80)=@req3={0x7661, 0x2, 0xc, 0xffff0000, 0x1000, 0x8001}, 0x1c) sched_getattr(0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x20000080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) 6.678026981s ago: executing program 6 (id=1942): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000}}}}}}, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00\x00@\x00'}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4044) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setpriority(0x2, 0x0, 0x8000000000000000) 6.677570268s ago: executing program 0 (id=1820): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = fanotify_init(0x79, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2004810) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0xd6ce0d646182fa6c, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x8]}}}, 0x4c}}, 0x10000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r8}, 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r8, 0x9}, &(0x7f00000001c0)=0x8) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000140)) 6.676497502s ago: executing program 8 (id=1943): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 6.291250222s ago: executing program 0 (id=1944): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 5.87202526s ago: executing program 8 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x48) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) 4.794835037s ago: executing program 6 (id=1946): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) 4.752568855s ago: executing program 0 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200643, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000400)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket(0x169b85273c6f8108, 0x4, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) getsockname$netrom(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x20004, 0x0, 0x3}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) shutdown(r4, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) 4.578216326s ago: executing program 8 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3.559656611s ago: executing program 6 (id=1949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x4000815, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) 3.373605708s ago: executing program 0 (id=1950): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r4 = openat$dsp(0xffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0xff, 0xf}, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast1, 0xfffffffc, 0x1}, 0x80, 0x0}, 0x5b4}], 0x8000000000000ea, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x2, 0x102) 3.308016932s ago: executing program 6 (id=1951): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.213726194s ago: executing program 8 (id=1952): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) 2.449854791s ago: executing program 5 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000440), 0x0}, 0x20) 1.307890098s ago: executing program 5 (id=1954): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = fanotify_init(0x79, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2004810) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0xd6ce0d646182fa6c, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x8]}}}, 0x4c}}, 0x10000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r8}, 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r8, 0x9}, &(0x7f00000001c0)=0x8) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000140)) 786.703498ms ago: executing program 7 (id=1955): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 295.882483ms ago: executing program 7 (id=1956): r0 = socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x41, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)}], 0x2}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 182.912703ms ago: executing program 5 (id=1957): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 0s ago: executing program 7 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) kernel console output (not intermixed with test programs): 529][ T3679] bridge_slave_1: left promiscuous mode [ 415.530583][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.618989][ T3679] bridge_slave_0: left allmulticast mode [ 415.619049][ T3679] bridge_slave_0: left promiscuous mode [ 415.619922][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.726201][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.824783][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.888503][ T3679] bond0 (unregistering): Released all slaves [ 418.094622][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.185671][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.248047][ T3679] bond0 (unregistering): Released all slaves [ 418.454711][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.534825][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.598454][ T3679] bond0 (unregistering): Released all slaves [ 419.974807][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.056794][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.125931][ T3679] bond0 (unregistering): Released all slaves [ 420.465025][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.545085][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.647460][ T3679] bond0 (unregistering): Released all slaves [ 420.741230][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.904961][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.221628][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.581415][ T8640] loop2: detected capacity change from 0 to 7 [ 421.582596][ T8640] Dev loop2: unable to read RDB block 7 [ 421.582639][ T8640] loop2: unable to read partition table [ 421.582863][ T8640] loop2: partition table beyond EOD, truncated [ 421.582899][ T8640] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.831645][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.772860][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.823986][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 422.824011][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.824032][ T8646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.866014][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.866041][ T8646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.888628][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.972367][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.253388][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.434241][ T3679] hsr_slave_0: left promiscuous mode [ 423.474280][ T3679] hsr_slave_1: left promiscuous mode [ 423.475410][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.482768][ T8649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.519308][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.674377][ T3679] hsr_slave_0: left promiscuous mode [ 423.694116][ T3679] hsr_slave_1: left promiscuous mode [ 423.694840][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.735020][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.884050][ T3679] hsr_slave_0: left promiscuous mode [ 423.904092][ T3679] hsr_slave_1: left promiscuous mode [ 423.905022][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.944612][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.150631][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.175482][ T3679] hsr_slave_0: left promiscuous mode [ 424.323693][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.364117][ T3679] hsr_slave_1: left promiscuous mode [ 424.364827][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.419057][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.251271][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.534104][ T3679] hsr_slave_0: left promiscuous mode [ 425.564523][ T3679] hsr_slave_1: left promiscuous mode [ 425.582745][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.784001][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.454657][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.695724][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 426.825756][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 427.110479][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.183934][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.229995][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.304764][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.374422][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.415919][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.392987][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.405372][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.836016][ T8677] blktrace: Concurrent blktraces are not allowed on loop0 [ 430.644607][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 430.872253][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 430.877386][ T8682] misc userio: Invalid payload size [ 431.456230][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.412892][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.361095][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.572261][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.384137][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.625744][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 434.765517][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 435.442148][ T8700] syz.0.765 (8700) used greatest stack depth: 14456 bytes left [ 435.476958][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.739243][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 437.829120][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 438.996783][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.000141][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.001344][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.002500][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.003274][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.227068][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.227139][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.979411][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 441.114187][ T5119] Bluetooth: hci3: command tx timeout [ 441.114647][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 442.309853][ T8733] misc userio: Can't change port type on an already running userio instance [ 442.908017][ T8344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 443.024116][ T8344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 443.193994][ T5119] Bluetooth: hci3: command tx timeout [ 443.357845][ T8344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.769909][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.788937][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.794523][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.824709][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.854143][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.957696][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.962585][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.964576][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.004194][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.019597][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.283991][ T5888] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 444.294877][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 444.435366][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 444.441981][ T5888] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 444.442008][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.469540][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.469570][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.469590][ T5888] usb 1-1: Product: syz [ 444.469604][ T5888] usb 1-1: Manufacturer: syz [ 444.469617][ T5888] usb 1-1: SerialNumber: syz [ 444.724443][ T5888] usb 1-1: 0:2 : does not exist [ 444.739430][ T5888] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 444.771710][ T5888] usb 1-1: USB disconnect, device number 16 [ 444.824905][ T8750] udevd[8750]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.264264][ T5808] Bluetooth: hci3: command tx timeout [ 445.884149][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.884309][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.884546][ T8715] bridge_slave_0: entered allmulticast mode [ 445.887863][ T8715] bridge_slave_0: entered promiscuous mode [ 445.903988][ T5808] Bluetooth: hci0: command tx timeout [ 445.920510][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.924302][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.924526][ T8715] bridge_slave_1: entered allmulticast mode [ 445.927229][ T8715] bridge_slave_1: entered promiscuous mode [ 446.064186][ T5808] Bluetooth: hci5: command tx timeout [ 447.189209][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.216201][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.344123][ T5808] Bluetooth: hci3: command tx timeout [ 447.984125][ T5808] Bluetooth: hci0: command tx timeout [ 448.030242][ T8715] team0: Port device team_slave_0 added [ 448.144026][ T5808] Bluetooth: hci5: command tx timeout [ 448.166670][ T8715] team0: Port device team_slave_1 added [ 448.359921][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.642281][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.642297][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.642316][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.712784][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.712795][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.712810][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.181394][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 449.221620][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 449.246880][ T8715] hsr_slave_0: entered promiscuous mode [ 449.248373][ T8715] hsr_slave_1: entered promiscuous mode [ 449.391243][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.445537][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.064229][ T5808] Bluetooth: hci0: command tx timeout [ 450.224078][ T5808] Bluetooth: hci5: command tx timeout [ 451.124915][ T8463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 451.170124][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.170344][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.170595][ T8744] bridge_slave_0: entered allmulticast mode [ 451.173633][ T8744] bridge_slave_0: entered promiscuous mode [ 451.178449][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.178597][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.178792][ T8748] bridge_slave_0: entered allmulticast mode [ 451.181696][ T8748] bridge_slave_0: entered promiscuous mode [ 451.288420][ T8463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 451.381889][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.382024][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.382240][ T8744] bridge_slave_1: entered allmulticast mode [ 451.409150][ T8744] bridge_slave_1: entered promiscuous mode [ 451.411079][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.411216][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.411401][ T8748] bridge_slave_1: entered allmulticast mode [ 451.448506][ T8748] bridge_slave_1: entered promiscuous mode [ 451.467488][ T8463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 451.979521][ T8463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.146387][ T5808] Bluetooth: hci0: command tx timeout [ 452.327065][ T5808] Bluetooth: hci5: command tx timeout [ 452.422762][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.470053][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.478954][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.796358][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.050835][ T8748] team0: Port device team_slave_0 added [ 453.188353][ T8748] team0: Port device team_slave_1 added [ 453.209235][ T8744] team0: Port device team_slave_0 added [ 453.383556][ T8744] team0: Port device team_slave_1 added [ 453.557545][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.557563][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.557588][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.795441][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.795458][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.795484][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.950346][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.950363][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.950389][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.978713][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.978729][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.978815][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.583445][ T8748] hsr_slave_0: entered promiscuous mode [ 454.585662][ T8748] hsr_slave_1: entered promiscuous mode [ 454.586650][ T8748] debugfs: 'hsr0' already exists in 'hsr' [ 454.586673][ T8748] Cannot create hsr debugfs directory [ 454.840076][ T8744] hsr_slave_0: entered promiscuous mode [ 454.842132][ T8744] hsr_slave_1: entered promiscuous mode [ 454.843311][ T8744] debugfs: 'hsr0' already exists in 'hsr' [ 454.843335][ T8744] Cannot create hsr debugfs directory [ 454.923987][ T5867] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 455.086565][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 455.088830][ T5867] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 455.088854][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.091461][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.091487][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.091506][ T5867] usb 1-1: Product: syz [ 455.091520][ T5867] usb 1-1: Manufacturer: syz [ 455.091533][ T5867] usb 1-1: SerialNumber: syz [ 455.365495][ T5867] usb 1-1: 0:2 : does not exist [ 455.382277][ T5867] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 455.487253][ T5867] usb 1-1: USB disconnect, device number 17 [ 455.593377][ T8750] udevd[8750]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.205217][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.497123][ T8715] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 456.640489][ T8715] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 456.712504][ T8715] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.792134][ T8715] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 456.970392][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.979330][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.992472][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.997568][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.999333][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.651472][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 458.852016][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.024055][ T5808] Bluetooth: hci1: command tx timeout [ 459.078556][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.078737][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.078923][ T8946] bridge_slave_0: entered allmulticast mode [ 459.081576][ T8946] bridge_slave_0: entered promiscuous mode [ 459.091507][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.091651][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.091883][ T8946] bridge_slave_1: entered allmulticast mode [ 459.116957][ T8946] bridge_slave_1: entered promiscuous mode [ 459.163297][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.416466][ T3679] bridge_slave_1: left allmulticast mode [ 459.416496][ T3679] bridge_slave_1: left promiscuous mode [ 459.416759][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.515402][ T3679] bridge_slave_0: left allmulticast mode [ 459.515421][ T3679] bridge_slave_0: left promiscuous mode [ 459.515617][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.576729][ T3679] bridge_slave_1: left allmulticast mode [ 459.576749][ T3679] bridge_slave_1: left promiscuous mode [ 459.576899][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.635885][ T3679] bridge_slave_0: left allmulticast mode [ 459.635914][ T3679] bridge_slave_0: left promiscuous mode [ 459.636162][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.696864][ T3679] bridge_slave_1: left allmulticast mode [ 459.696885][ T3679] bridge_slave_1: left promiscuous mode [ 459.697169][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.755604][ T3679] bridge_slave_0: left allmulticast mode [ 459.755634][ T3679] bridge_slave_0: left promiscuous mode [ 459.755831][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.054780][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.134682][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.216595][ T3679] bond0 (unregistering): Released all slaves [ 460.414950][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.504956][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.566114][ T3679] bond0 (unregistering): Released all slaves [ 460.775287][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.854782][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.916494][ T3679] bond0 (unregistering): Released all slaves [ 461.104018][ T5808] Bluetooth: hci1: command tx timeout [ 461.217415][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.220693][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.511932][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.611781][ T8967] Invalid source name [ 461.611823][ T8967] UBIFS error (pid: 8967): cannot open "./file0", error -22 [ 462.659958][ T8971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.795'. [ 463.324020][ T5808] Bluetooth: hci1: command tx timeout [ 463.538710][ T8946] team0: Port device team_slave_0 added [ 463.541469][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.541595][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.553564][ T8946] team0: Port device team_slave_1 added [ 464.325243][ T3679] hsr_slave_0: left promiscuous mode [ 464.364058][ T3679] hsr_slave_1: left promiscuous mode [ 464.364809][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.387254][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.444112][ T5945] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 464.564238][ T3679] hsr_slave_0: left promiscuous mode [ 464.584193][ T3679] hsr_slave_1: left promiscuous mode [ 464.584873][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.594020][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 464.598462][ T5945] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 464.598486][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.607133][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.607152][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.607162][ T5945] usb 1-1: Product: syz [ 464.607170][ T5945] usb 1-1: Manufacturer: syz [ 464.607177][ T5945] usb 1-1: SerialNumber: syz [ 464.661798][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.814931][ T3679] hsr_slave_0: left promiscuous mode [ 464.845268][ T3679] hsr_slave_1: left promiscuous mode [ 464.846164][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.858641][ T5945] usb 1-1: 0:2 : does not exist [ 464.864524][ T5945] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 464.892468][ T5945] usb 1-1: USB disconnect, device number 18 [ 464.904756][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.935724][ T8750] udevd[8750]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.344048][ T5808] Bluetooth: hci1: command tx timeout [ 465.584653][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 465.664741][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 465.714922][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 465.820762][ T5867] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 465.820800][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.820820][ T5867] usb 1-1: Product: syz [ 465.820834][ T5867] usb 1-1: Manufacturer: syz [ 465.820847][ T5867] usb 1-1: SerialNumber: syz [ 465.827203][ T5867] usb 1-1: config 0 descriptor?? [ 465.871336][ T5867] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 466.905174][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 467.084959][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 467.688870][ T985] usb 1-1: USB disconnect, device number 19 [ 468.244964][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 468.263360][ T8984] CUSE: unknown device info "" [ 468.263375][ T8984] CUSE: unknown device info "`" [ 468.263382][ T8984] CUSE: unknown device info "" [ 468.263389][ T8984] CUSE: unknown device info "€" [ 468.263396][ T8984] CUSE: DEVNAME unspecified [ 468.373106][ T8988] netlink: 68 bytes leftover after parsing attributes in process `syz.0.802'. [ 468.407423][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 468.698215][ T8998] CUSE: unknown device info "" [ 468.698227][ T8998] CUSE: unknown device info "`" [ 468.698231][ T8998] CUSE: unknown device info "" [ 468.698235][ T8998] CUSE: unknown device info "€" [ 468.698239][ T8998] CUSE: DEVNAME unspecified [ 469.012068][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.012197][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.029148][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.029164][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.029190][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.149423][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.149433][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.149449][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.417403][ T8946] hsr_slave_0: entered promiscuous mode [ 469.418389][ T8946] hsr_slave_1: entered promiscuous mode [ 469.419060][ T8946] debugfs: 'hsr0' already exists in 'hsr' [ 469.419077][ T8946] Cannot create hsr debugfs directory [ 469.987985][ T9008] ALSA: mixer_oss: invalid OSS volume '' [ 470.495587][ T8748] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.616658][ T8748] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.843418][ T8748] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.993750][ T8748] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 471.422658][ T8744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.498372][ T8744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 471.749846][ T8744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 471.770765][ T8744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.177813][ T8715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.076934][ T3679] bridge_slave_1: left allmulticast mode [ 474.076963][ T3679] bridge_slave_1: left promiscuous mode [ 474.077227][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.165905][ T3679] bridge_slave_0: left allmulticast mode [ 474.165934][ T3679] bridge_slave_0: left promiscuous mode [ 474.171034][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.604785][ T9078] ALSA: mixer_oss: invalid OSS volume '' [ 475.357900][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.634776][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.726735][ T3679] bond0 (unregistering): Released all slaves [ 476.023003][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.046695][ T3679] hsr_slave_0: left promiscuous mode [ 477.063974][ T3679] hsr_slave_1: left promiscuous mode [ 477.064572][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.096543][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.044860][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 478.184942][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 479.186828][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.292629][ T8946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.496102][ T8946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.299186][ T8946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.496409][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.501427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.504242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.504902][ T8946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.650762][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.651308][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.701510][ T8715] veth0_vlan: entered promiscuous mode [ 480.802111][ T8715] veth1_vlan: entered promiscuous mode [ 480.831879][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.882477][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.894801][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.945304][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.945466][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.197380][ T8715] veth0_macvtap: entered promiscuous mode [ 481.233193][ T8715] veth1_macvtap: entered promiscuous mode [ 481.400358][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.476802][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.509409][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.563037][ T1124] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.609611][ T1124] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.631628][ T1124] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.658840][ T1124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.686847][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.826773][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.827016][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.916682][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.922892][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.047586][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.047606][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.150396][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.200953][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.200972][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.335867][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.724823][ T9181] overlayfs: missing 'lowerdir' [ 484.068397][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.454347][ T8748] veth0_vlan: entered promiscuous mode [ 487.520551][ T8748] veth1_vlan: entered promiscuous mode [ 488.095901][ T8744] veth0_vlan: entered promiscuous mode [ 488.114205][ T8748] veth0_macvtap: entered promiscuous mode [ 488.158616][ T8748] veth1_macvtap: entered promiscuous mode [ 488.176358][ T8744] veth1_vlan: entered promiscuous mode [ 488.281868][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.383098][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.432988][ T6023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.447197][ T6023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.448683][ T6023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.449400][ T8946] veth0_vlan: entered promiscuous mode [ 488.449796][ T6023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.495593][ T8744] veth0_macvtap: entered promiscuous mode [ 488.521971][ T8744] veth1_macvtap: entered promiscuous mode [ 489.587420][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.764658][ T8946] veth1_vlan: entered promiscuous mode [ 490.701612][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.817254][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.937853][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.937872][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.002197][ T3679] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.021956][ T3679] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.075856][ T8946] veth0_macvtap: entered promiscuous mode [ 491.078526][ T3679] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.122773][ T3679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.151947][ T8946] veth1_macvtap: entered promiscuous mode [ 491.156713][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.156732][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.552826][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.578657][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.728137][ T3565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.772243][ T3565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.785740][ T3565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.788535][ T3565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.789790][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.789807][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.747098][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.747118][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.122114][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.122135][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.231132][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.231154][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.838075][ T9323] warning: `syz.7.851' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 495.983775][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.852'. [ 495.993513][ T9324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.327539][ T9324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.723992][ T5948] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 496.875589][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 496.892999][ T5948] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 496.893029][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.893048][ T5948] usb 1-1: Product: syz [ 496.893062][ T5948] usb 1-1: Manufacturer: syz [ 496.893076][ T5948] usb 1-1: SerialNumber: syz [ 496.950864][ T5948] usb 1-1: config 0 descriptor?? [ 497.096312][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 497.121319][ T9346] misc userio: Invalid payload size [ 497.121912][ T9346] misc userio: No port type given on /dev/userio [ 497.868989][ T5948] gspca_sonixj: reg_r err -32 [ 497.869087][ T5948] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 497.983048][ T5948] usb 1-1: USB disconnect, device number 20 [ 500.202847][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.661269][ T9391] misc userio: Invalid payload size [ 500.661523][ T9391] misc userio: No port type given on /dev/userio [ 501.185464][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.520065][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.719149][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.829294][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.829368][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.865934][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.194622][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.214325][ T9455] program syz.5.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.043194][ T9476] overlayfs: missing 'lowerdir' [ 512.302316][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.894'. [ 514.252921][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 514.364126][ T8778] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 514.440244][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 514.455154][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 514.455183][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.455201][ T10] usb 9-1: Product: syz [ 514.455214][ T10] usb 9-1: Manufacturer: syz [ 514.455227][ T10] usb 9-1: SerialNumber: syz [ 514.486045][ T10] usb 9-1: config 0 descriptor?? [ 514.523941][ T8778] usb 8-1: Using ep0 maxpacket: 16 [ 514.526245][ T8778] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 514.526271][ T8778] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.529321][ T8778] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.529350][ T8778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.529368][ T8778] usb 8-1: Product: syz [ 514.529380][ T8778] usb 8-1: Manufacturer: syz [ 514.529393][ T8778] usb 8-1: SerialNumber: syz [ 514.531542][ T10] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 514.533609][ T9525] overlayfs: missing 'lowerdir' [ 514.845730][ T8778] usb 8-1: 0:2 : does not exist [ 515.296947][ T10] gspca_sonixj: reg_r err -110 [ 515.298233][ T10] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 515.725062][ T8778] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 516.264496][ T8778] usb 8-1: USB disconnect, device number 2 [ 516.473704][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.542312][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.895476][ T8778] usb 9-1: USB disconnect, device number 2 [ 517.410008][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.733932][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.740583][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.828207][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.207090][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.547877][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.911147][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.245362][ T9588] overlayfs: missing 'lowerdir' [ 520.474012][ T5948] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 520.544490][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 520.591598][ T9597] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 520.626528][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 520.630908][ T5948] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 520.630933][ T5948] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.694005][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 520.804149][ T5948] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.804180][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.804200][ T5948] usb 8-1: Product: syz [ 520.804214][ T5948] usb 8-1: Manufacturer: syz [ 520.804227][ T5948] usb 8-1: SerialNumber: syz [ 520.814149][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 520.814176][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.814196][ T10] usb 7-1: Product: syz [ 520.814209][ T10] usb 7-1: Manufacturer: syz [ 520.814222][ T10] usb 7-1: SerialNumber: syz [ 520.905479][ T10] usb 7-1: config 0 descriptor?? [ 521.095493][ T10] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 521.260570][ T5948] usb 8-1: 0:2 : does not exist [ 521.290491][ T5948] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 521.794679][ T10] gspca_sonixj: reg_r err -110 [ 521.796602][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 521.822662][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.952612][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.260380][ T5948] usb 8-1: USB disconnect, device number 3 [ 522.412698][ T9353] udevd[9353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.711713][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.465255][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.320942][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.406242][ T8876] usb 7-1: USB disconnect, device number 2 [ 524.439146][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.018937][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.966961][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.189474][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.473323][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.754853][ T9662] misc userio: Invalid payload size [ 527.027795][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.082065][ T9668] overlayfs: missing 'lowerdir' [ 527.174577][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.521809][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.739681][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.654489][ T8876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 529.873939][ T8876] usb 7-1: Using ep0 maxpacket: 8 [ 529.883771][ T8876] usb 7-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 529.884950][ T8876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.884973][ T8876] usb 7-1: Product: syz [ 529.884987][ T8876] usb 7-1: Manufacturer: syz [ 529.885000][ T8876] usb 7-1: SerialNumber: syz [ 529.938532][ T8876] usb 7-1: config 0 descriptor?? [ 529.960848][ T8876] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 530.354623][ T8876] gspca_sonixj: reg_r err -32 [ 530.354681][ T8876] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 531.609255][ T10] usb 7-1: USB disconnect, device number 3 [ 532.993120][ T9725] misc userio: No port type given on /dev/userio [ 533.007155][ T9725] misc userio: Invalid payload size [ 535.275269][ T985] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 535.656642][ T985] usb 9-1: Using ep0 maxpacket: 8 [ 535.792371][ T985] usb 9-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 535.792402][ T985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.792421][ T985] usb 9-1: Product: syz [ 535.792435][ T985] usb 9-1: Manufacturer: syz [ 535.792449][ T985] usb 9-1: SerialNumber: syz [ 535.871904][ T985] usb 9-1: config 0 descriptor?? [ 536.043774][ T985] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 536.451925][ T985] gspca_sonixj: reg_r err -32 [ 536.452024][ T985] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 536.602353][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.963'. [ 536.602500][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.024143][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.115856][ T8876] usb 9-1: USB disconnect, device number 3 [ 540.200827][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 540.200847][ T37] audit: type=1326 audit(1763158326.656:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.8.973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 543.144020][ T8876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.303906][ T8876] usb 6-1: Using ep0 maxpacket: 8 [ 543.309580][ T8876] usb 6-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 543.309609][ T8876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.309628][ T8876] usb 6-1: Product: syz [ 543.309642][ T8876] usb 6-1: Manufacturer: syz [ 543.309656][ T8876] usb 6-1: SerialNumber: syz [ 543.570394][ T8876] usb 6-1: config 0 descriptor?? [ 543.578438][ T8876] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 544.154050][ T8876] gspca_sonixj: reg_w1 err -110 [ 544.154147][ T8876] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 545.609646][ T8778] usb 6-1: USB disconnect, device number 2 [ 547.533360][ T37] audit: type=1326 audit(1763158333.996:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9872 comm="syz.5.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a0934f6c9 code=0x0 [ 550.214572][ T5815] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 550.364912][ T5815] usb 7-1: Using ep0 maxpacket: 8 [ 550.388169][ T5815] usb 7-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 550.388201][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.388221][ T5815] usb 7-1: Product: syz [ 550.388234][ T5815] usb 7-1: Manufacturer: syz [ 550.388248][ T5815] usb 7-1: SerialNumber: syz [ 550.461994][ T5815] usb 7-1: config 0 descriptor?? [ 550.505913][ T5815] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 550.878658][ T5815] gspca_sonixj: reg_r err -32 [ 550.878747][ T5815] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 551.717448][ T37] audit: type=1326 audit(1763158338.176:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.5.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a0934f6c9 code=0x0 [ 551.993160][ T9934] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1003'. [ 553.295993][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.463581][ T985] usb 7-1: USB disconnect, device number 4 [ 556.403469][ T9987] overlayfs: failed lookup in lower (newroot/36, name='bus', err=-40): overlapping layers [ 559.874383][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.857791][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.218783][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.477103][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.127571][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.129973][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.606360][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.686870][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.984684][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 564.127543][ T5887] usb 8-1: device descriptor read/64, error -71 [ 564.415234][ T5887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 564.439525][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1035'. [ 564.655436][ T5887] usb 8-1: device descriptor read/64, error -71 [ 564.714383][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.966543][ T5887] usb usb8-port1: attempt power cycle [ 565.052988][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.453956][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 566.118266][ T5887] usb 8-1: device descriptor read/8, error -71 [ 566.154251][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 566.366725][ T5887] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 566.367328][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.385076][ T5887] usb 8-1: device descriptor read/8, error -71 [ 566.421057][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.524328][ T5887] usb usb8-port1: unable to enumerate USB device [ 566.748883][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.899050][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'. [ 568.225284][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.433456][T10106] pim6reg: entered allmulticast mode [ 568.529166][T10106] pim6reg: left allmulticast mode [ 568.655697][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.916258][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.627886][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.375115][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.381232][ T6967] Bluetooth: hci0: command 0x0406 tx timeout [ 570.381270][ T6967] Bluetooth: hci5: command 0x0406 tx timeout [ 570.875134][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.105793][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.306529][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.475309][ T9139] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 572.560378][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.858548][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.681339][ T9139] usb 9-1: device descriptor read/64, error -71 [ 573.914095][ T9139] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 574.125152][ T9139] usb 9-1: device descriptor read/64, error -71 [ 574.334573][ T9139] usb usb9-port1: attempt power cycle [ 576.036921][T10198] program syz.8.1059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 578.197170][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 579.143913][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 579.168755][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 579.168774][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.168784][ T9] usb 1-1: Product: syz [ 579.168791][ T9] usb 1-1: Manufacturer: syz [ 579.168798][ T9] usb 1-1: SerialNumber: syz [ 579.221552][ T9] usb 1-1: config 0 descriptor?? [ 579.267199][ T9] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 581.647411][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 581.703939][ T8876] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 582.157478][ T9] gspca_sonixj: reg_w1 err -110 [ 582.157584][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 582.212263][ T5948] usb 1-1: USB disconnect, device number 21 [ 582.333938][ T8876] usb 7-1: device descriptor read/64, error -71 [ 583.182707][ T8876] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 585.018388][T10287] CUSE: unknown device info "" [ 585.018404][T10287] CUSE: unknown device info "`" [ 585.018412][T10287] CUSE: unknown device info "" [ 585.018417][T10287] CUSE: unknown device info "€" [ 585.018421][T10287] CUSE: DEVNAME unspecified [ 587.155555][ T37] audit: type=1326 audit(1763158373.606:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10301 comm="syz.5.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a0934f6c9 code=0x0 [ 587.493886][ T8778] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 587.643916][ T8778] usb 1-1: Using ep0 maxpacket: 8 [ 587.647875][ T8778] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 587.647892][ T8778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.647902][ T8778] usb 1-1: Product: syz [ 587.647910][ T8778] usb 1-1: Manufacturer: syz [ 587.647918][ T8778] usb 1-1: SerialNumber: syz [ 587.739894][ T8778] usb 1-1: config 0 descriptor?? [ 587.786827][ T8778] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 589.239785][ T8778] gspca_sonixj: reg_w1 err -71 [ 589.239843][ T8778] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 589.241783][ T8778] usb 1-1: USB disconnect, device number 22 [ 590.803350][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.183956][ T9139] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 591.309873][T10355] CUSE: unknown device info "" [ 591.309888][T10355] CUSE: unknown device info "`" [ 591.309892][T10355] CUSE: unknown device info "" [ 591.309897][T10355] CUSE: unknown device info "€" [ 591.309901][T10355] CUSE: DEVNAME unspecified [ 591.354052][ T9139] usb 7-1: Using ep0 maxpacket: 16 [ 591.358480][ T9139] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 591.358505][ T9139] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.362332][ T9139] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.362360][ T9139] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.362378][ T9139] usb 7-1: Product: syz [ 591.362392][ T9139] usb 7-1: Manufacturer: syz [ 591.362405][ T9139] usb 7-1: SerialNumber: syz [ 591.655283][ T9139] usb 7-1: 0:2 : does not exist [ 592.228208][ T9139] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 592.380974][ T9139] usb 7-1: USB disconnect, device number 7 [ 592.828216][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.791716][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.049512][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.883379][T10384] overlayfs: failed lookup in lower (newroot/51, name='bus', err=-40): overlapping layers [ 596.061551][T10402] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1104'. [ 596.556374][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1106'. [ 602.279309][T10449] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1118'. [ 603.139985][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.175159][T10448] misc userio: Can't change port type on an already running userio instance [ 603.324958][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.525389][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.787776][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.492943][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.457831][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.961037][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.801610][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.419650][T10501] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1130'. [ 612.473946][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 612.683921][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 612.686624][ T10] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 612.686640][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.689492][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.689511][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.689521][ T10] usb 7-1: Product: syz [ 612.689529][ T10] usb 7-1: Manufacturer: syz [ 612.689536][ T10] usb 7-1: SerialNumber: syz [ 613.049986][ T10] usb 7-1: 0:2 : does not exist [ 613.823585][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 615.140011][ T10] usb 7-1: USB disconnect, device number 8 [ 616.569578][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.739433][T10600] svc: failed to register nfsdv3 RPC service (errno 111). [ 620.751314][T10600] svc: failed to register nfsaclv3 RPC service (errno 111). [ 622.010132][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.043536][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.048536][T10645] program syz.5.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.225428][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.515317][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.354240][ T37] audit: type=1326 audit(1763158409.816:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10652 comm="syz.7.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc36cf6c9 code=0x0 [ 624.176690][ T5887] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 624.353991][ T5887] usb 9-1: device descriptor read/64, error -71 [ 624.570959][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.571030][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.834976][ T5887] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 625.311639][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.513938][ T5887] usb 9-1: device descriptor read/64, error -71 [ 625.645272][ T5887] usb usb9-port1: attempt power cycle [ 625.983920][ T5887] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 626.005157][ T5887] usb 9-1: device descriptor read/8, error -71 [ 626.174022][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 626.273870][ T5887] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 626.294804][ T5887] usb 9-1: device descriptor read/8, error -71 [ 626.352191][ T9] usb 8-1: config 0 has no interfaces? [ 626.360891][ T9] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.360909][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.360919][ T9] usb 8-1: Product: syz [ 626.360927][ T9] usb 8-1: Manufacturer: syz [ 626.360934][ T9] usb 8-1: SerialNumber: syz [ 626.394560][ T9] usb 8-1: config 0 descriptor?? [ 626.404597][ T5887] usb usb9-port1: unable to enumerate USB device [ 626.899347][T10698] pim6reg: entered allmulticast mode [ 628.395283][T10688] pim6reg: left allmulticast mode [ 630.707211][ T37] audit: type=1326 audit(1763158417.176:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.0.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df142f6c9 code=0x0 [ 631.228422][ T5945] usb 8-1: USB disconnect, device number 8 [ 634.426409][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 635.604389][ T9] usb 8-1: device descriptor read/64, error -71 [ 635.864035][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 636.014135][ T9] usb 8-1: device descriptor read/64, error -71 [ 636.132623][ T9] usb usb8-port1: attempt power cycle [ 636.473891][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 636.542163][ T9] usb 8-1: device descriptor read/8, error -71 [ 636.833898][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 636.934191][ T9] usb 8-1: device descriptor read/8, error -71 [ 636.993962][ T37] audit: type=1326 audit(1763158423.456:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10814 comm="syz.8.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 637.044489][ T9] usb usb8-port1: unable to enumerate USB device [ 640.167149][T10847] ALSA: mixer_oss: invalid OSS volume 'u' [ 645.753936][ T9139] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 645.919493][ T9139] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 645.919511][ T9139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.919522][ T9139] usb 1-1: Product: syz [ 645.919529][ T9139] usb 1-1: Manufacturer: syz [ 645.919536][ T9139] usb 1-1: SerialNumber: syz [ 645.933063][ T9139] usb 1-1: config 0 descriptor?? [ 645.942499][ T9139] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 647.704174][ T9139] usb 1-1: USB disconnect, device number 23 [ 651.723968][ T9139] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 651.894025][ T9139] usb 1-1: Using ep0 maxpacket: 16 [ 651.896713][ T9139] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 651.896738][ T9139] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.898901][ T9139] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.898916][ T9139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.898927][ T9139] usb 1-1: Product: syz [ 651.898934][ T9139] usb 1-1: Manufacturer: syz [ 651.898941][ T9139] usb 1-1: SerialNumber: syz [ 652.294631][ T9139] usb 1-1: 0:2 : does not exist [ 652.307204][ T9139] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 652.353970][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 652.400311][ T9139] usb 1-1: USB disconnect, device number 24 [ 652.632305][ T31] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 652.632334][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.632352][ T31] usb 9-1: Product: syz [ 652.632366][ T31] usb 9-1: Manufacturer: syz [ 652.632380][ T31] usb 9-1: SerialNumber: syz [ 653.622573][ T31] usb 9-1: config 0 descriptor?? [ 653.647314][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 653.651184][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.182688][ T31] gspca_sunplus: reg_r err -110 [ 654.182749][ T31] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 655.572352][ T9] usb 9-1: USB disconnect, device number 11 [ 658.800558][T11028] Invalid source name [ 658.800569][T11028] UBIFS error (pid: 11028): cannot open "./file0", error -22 [ 659.760592][T11044] blktrace: Concurrent blktraces are not allowed on loop16 [ 661.044152][T11047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.073056][T11047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.073145][T11047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 662.299565][T11047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.301456][T11047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 662.473311][T11047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 662.481424][T11047] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 662.640101][T11047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 662.640558][T11047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 662.784075][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 663.103997][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 664.393990][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 664.544012][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 664.704092][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 666.030156][T10139] Bluetooth: hci3: command 0x0406 tx timeout [ 666.194376][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.463897][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 666.633977][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 666.783957][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 672.908638][T11124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.953143][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.206390][T11140] overlayfs: failed lookup in lower (newroot/85, name='bus', err=-40): overlapping layers [ 677.323955][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 677.493834][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 677.495992][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.496016][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.500197][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.500214][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.500224][ T9] usb 8-1: Product: syz [ 677.500232][ T9] usb 8-1: Manufacturer: syz [ 677.500239][ T9] usb 8-1: SerialNumber: syz [ 678.766774][ T9] usb 8-1: 0:2 : does not exist [ 678.772619][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 678.864021][ T9] usb 8-1: USB disconnect, device number 13 [ 680.298365][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.383560][ T8778] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 680.533884][ T8778] usb 1-1: Using ep0 maxpacket: 16 [ 680.536310][ T8778] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 680.536335][ T8778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.539562][ T8778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.539588][ T8778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.539608][ T8778] usb 1-1: Product: syz [ 680.539621][ T8778] usb 1-1: Manufacturer: syz [ 680.539634][ T8778] usb 1-1: SerialNumber: syz [ 681.928858][ T8778] usb 1-1: 0:2 : does not exist [ 681.969341][ T8778] usb 1-1: USB disconnect, device number 25 [ 682.246131][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.973452][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.973548][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.121228][T11226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.121450][T11226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.121634][T11226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.121819][T11226] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 686.122014][T11226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.154473][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 688.159379][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 688.161354][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 688.162671][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 688.166614][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 689.054098][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 691.693370][T11283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.713193][T11283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.722611][T11283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.723552][T11283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 691.724097][T11283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.937167][T11293] program syz.0.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.923441][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1338'. [ 693.424252][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 693.743993][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 693.818754][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 693.818804][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 693.818831][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 697.225408][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.225629][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 697.383866][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 697.406536][ T5945] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 697.406563][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.410133][ T5945] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.410150][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.410161][ T5945] usb 6-1: Product: syz [ 697.410168][ T5945] usb 6-1: Manufacturer: syz [ 697.410175][ T5945] usb 6-1: SerialNumber: syz [ 697.619740][T11351] ALSA: mixer_oss: invalid OSS volume 'u' [ 697.774046][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.813847][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.127144][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.239131][ T5945] usb 6-1: 0:2 : does not exist [ 698.289142][ T5945] usb 6-1: USB disconnect, device number 3 [ 698.522543][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.474549][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 699.653981][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 699.656439][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.656464][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.658894][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.658921][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.658940][ T31] usb 6-1: Product: syz [ 699.658954][ T31] usb 6-1: Manufacturer: syz [ 699.658966][ T31] usb 6-1: SerialNumber: syz [ 699.974114][ T31] usb 6-1: 0:2 : does not exist [ 700.035123][ T31] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 700.244944][ T31] usb 6-1: USB disconnect, device number 4 [ 700.426840][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.549327][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 700.703863][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 700.707026][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.707052][ T9] usb 9-1: config 0 has no interfaces? [ 700.711955][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 700.711983][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.712002][ T9] usb 9-1: Product: syz [ 700.712016][ T9] usb 9-1: Manufacturer: syz [ 700.712029][ T9] usb 9-1: SerialNumber: syz [ 700.813503][ T9] usb 9-1: config 0 descriptor?? [ 702.392250][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.651261][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.899445][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.080020][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.159254][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.288822][T11406] svc: failed to register nfsdv3 RPC service (errno 512). [ 703.291041][T11406] svc: failed to register nfsaclv3 RPC service (errno 512). [ 703.397364][ T5945] usb 9-1: USB disconnect, device number 12 [ 704.883246][T11441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.883668][T11441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.884098][T11441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.884362][T11441] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 704.884772][T11441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 706.823875][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 706.943884][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 706.943923][T10139] Bluetooth: hci5: command 0x0406 tx timeout [ 706.943934][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 706.943953][T10139] Bluetooth: hci3: command 0x0406 tx timeout [ 707.311541][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.723852][ T5945] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 707.878329][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 707.880801][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.880825][ T5945] usb 1-1: config 0 has no interfaces? [ 707.908999][ T5945] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 707.909035][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.909056][ T5945] usb 1-1: Product: syz [ 707.909070][ T5945] usb 1-1: Manufacturer: syz [ 707.909085][ T5945] usb 1-1: SerialNumber: syz [ 707.969849][ T5945] usb 1-1: config 0 descriptor?? [ 710.032502][ T37] audit: type=1326 audit(1763158496.496:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.8.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 710.507267][ T5948] usb 1-1: USB disconnect, device number 26 [ 713.574596][ T9139] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 713.754284][ T9139] usb 9-1: Using ep0 maxpacket: 16 [ 713.757884][ T9139] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.757899][ T9139] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.760040][ T9139] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.760056][ T9139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.760066][ T9139] usb 9-1: Product: syz [ 713.760073][ T9139] usb 9-1: Manufacturer: syz [ 713.760081][ T9139] usb 9-1: SerialNumber: syz [ 713.982121][ T9139] usb 9-1: 0:2 : does not exist [ 714.004626][ T9139] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 714.133663][ T9139] usb 9-1: USB disconnect, device number 13 [ 714.294535][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.666344][ T37] audit: type=1326 audit(1763158501.136:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.8.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 714.765299][ T9139] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 714.914200][ T9139] usb 6-1: Using ep0 maxpacket: 16 [ 714.916725][ T9139] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 714.916742][ T9139] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.918859][ T9139] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.918875][ T9139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.918885][ T9139] usb 6-1: Product: syz [ 714.918892][ T9139] usb 6-1: Manufacturer: syz [ 714.918900][ T9139] usb 6-1: SerialNumber: syz [ 715.078489][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.128502][ T9139] usb 6-1: 0:2 : does not exist [ 715.128591][ T9139] usb 6-1: unit 6 not found! [ 715.169254][ T9139] usb 6-1: USB disconnect, device number 5 [ 715.224452][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.237603][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.713865][ T5945] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 716.841466][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1410'. [ 716.908428][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 716.916807][ T5945] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 716.916835][ T5945] usb 6-1: config 179 has no interface number 0 [ 716.916884][ T5945] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 716.916911][ T5945] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 716.916937][ T5945] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 716.916960][ T5945] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 716.916984][ T5945] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 716.917025][ T5945] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 716.917048][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.940860][T11570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 717.113192][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.481541][T11570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.579181][ T8778] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 717.589886][T11570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.837095][ T5945] usb 6-1: USB disconnect, device number 6 [ 717.837169][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 717.837208][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 719.861408][ T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.865472][ T996] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.865517][ T996] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.865554][ T996] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.983147][ T37] audit: type=1326 audit(1763158506.446:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.0.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df142f6c9 code=0x0 [ 720.373830][ T5815] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 720.645947][ T5815] usb 6-1: Using ep0 maxpacket: 16 [ 720.916267][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.916594][ T5815] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.272221][ T5815] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.272240][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.272251][ T5815] usb 6-1: Product: syz [ 721.272258][ T5815] usb 6-1: Manufacturer: syz [ 721.272265][ T5815] usb 6-1: SerialNumber: syz [ 721.606691][ T5815] usb 6-1: 0:2 : does not exist [ 721.706720][ T5815] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 721.747146][ T5815] usb 6-1: USB disconnect, device number 7 [ 721.873489][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.323856][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 727.490294][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 727.494905][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 727.494930][ T31] usb 1-1: config 179 has no interface number 0 [ 727.494976][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 727.495003][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 727.495028][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 727.495053][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 727.495079][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 727.495121][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 727.495144][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.503578][T11670] svc: failed to register nfsdv3 RPC service (errno 111). [ 727.540857][T11667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 727.688683][T11670] svc: failed to register nfsaclv3 RPC service (errno 111). [ 727.954981][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.959626][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.973386][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 727.973461][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 727.973525][ T31] usb 1-1: USB disconnect, device number 27 [ 727.976549][ T5887] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 729.535314][ T5948] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 729.690506][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.690541][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.690579][ T5948] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 729.690609][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.741232][ T5815] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 729.767639][ T5948] usb 7-1: config 0 descriptor?? [ 729.899589][ T5815] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 729.899612][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.899623][ T5815] usb 6-1: Product: syz [ 729.899634][ T5815] usb 6-1: Manufacturer: syz [ 729.899641][ T5815] usb 6-1: SerialNumber: syz [ 729.976546][ T5815] usb 6-1: config 0 descriptor?? [ 730.002203][ T5815] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 730.222736][ T5948] hid-picolcd 0003:04D8:C002.0005: unbalanced collection at end of report description [ 730.234975][ T5948] hid-picolcd 0003:04D8:C002.0005: device report parse failed [ 730.235129][ T5948] hid-picolcd 0003:04D8:C002.0005: probe with driver hid-picolcd failed with error -22 [ 730.243465][ T5815] gspca_sunplus: reg_r err -32 [ 730.243525][ T5815] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 730.403036][ T5887] usb 7-1: USB disconnect, device number 9 [ 730.834097][ T37] audit: type=1326 audit(1763158517.296:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11704 comm="syz.8.1448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 736.674473][T11689] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 736.684453][T11689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.688408][T11689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 736.688835][T11689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 736.689034][T11689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.766126][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 736.864997][ T10] usb 6-1: USB disconnect, device number 8 [ 738.862158][T10139] Bluetooth: hci1: command 0x0406 tx timeout [ 738.862200][T10139] Bluetooth: hci5: command 0x0406 tx timeout [ 738.862229][T10139] Bluetooth: hci0: command 0x0406 tx timeout [ 738.862255][T10139] Bluetooth: hci3: command 0x0406 tx timeout [ 740.544981][T11746] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1461'. [ 740.658625][T11746] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 740.689513][ T37] audit: type=1326 audit(1763158527.156:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11750 comm="syz.0.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df142f6c9 code=0x0 [ 741.158321][ T5815] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 741.303869][ T5815] usb 9-1: Using ep0 maxpacket: 16 [ 741.306642][ T5815] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.306667][ T5815] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.347562][ T5815] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.347590][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.347610][ T5815] usb 9-1: Product: syz [ 741.347624][ T5815] usb 9-1: Manufacturer: syz [ 741.347638][ T5815] usb 9-1: SerialNumber: syz [ 741.620117][ T5815] usb 9-1: 0:2 : does not exist [ 741.642142][ T5815] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 741.686944][ T5815] usb 9-1: USB disconnect, device number 14 [ 741.838805][T11718] udevd[11718]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.534045][ T8778] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 744.773881][ T8778] usb 8-1: Using ep0 maxpacket: 32 [ 744.779930][ T8778] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.779952][ T8778] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 744.779967][ T8778] usb 8-1: config 0 interface 0 has no altsetting 0 [ 744.779985][ T8778] usb 8-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 744.779997][ T8778] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.838637][ T8778] usb 8-1: config 0 descriptor?? [ 745.027316][T11796] UHID_CREATE from different security context by process 469 (syz.8.1476), this is not allowed. [ 745.252916][ T8778] usbhid 8-1:0.0: can't add hid device: -71 [ 745.253043][ T8778] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 745.261221][ T8778] usb 8-1: USB disconnect, device number 14 [ 745.335994][ T37] audit: type=1326 audit(1763158531.806:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11801 comm="syz.8.1478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 747.013981][ T9139] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 747.173922][ T9139] usb 1-1: Using ep0 maxpacket: 16 [ 747.176178][ T9139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.176201][ T9139] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.180149][ T9139] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.180176][ T9139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.180194][ T9139] usb 1-1: Product: syz [ 747.180208][ T9139] usb 1-1: Manufacturer: syz [ 747.180221][ T9139] usb 1-1: SerialNumber: syz [ 747.445335][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.445482][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.201769][ T9139] usb 1-1: 0:2 : does not exist [ 748.218661][ T9139] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 748.471304][ T9139] usb 1-1: USB disconnect, device number 28 [ 748.632485][T11718] udevd[11718]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.678565][T11891] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1508'. [ 756.313917][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 756.481230][ T5888] usb 6-1: config 0 has no interfaces? [ 756.518777][ T5888] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 756.518806][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.518825][ T5888] usb 6-1: Product: syz [ 756.518838][ T5888] usb 6-1: Manufacturer: syz [ 756.518852][ T5888] usb 6-1: SerialNumber: syz [ 756.590985][ T5888] usb 6-1: config 0 descriptor?? [ 757.844905][ C1] vkms_vblank_simulate: vblank timer overrun [ 758.042523][T11941] blktrace: Concurrent blktraces are not allowed on loop16 [ 758.055476][T11931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.055737][T11931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.058070][T11931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 758.058420][T11931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 758.058885][T11931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.434642][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 759.955624][ T5815] usb 6-1: USB disconnect, device number 9 [ 760.064005][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 760.064045][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 760.064072][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 760.064099][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 760.537734][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.409378][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1528'. [ 761.409569][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1528'. [ 763.709845][T12000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.782053][T12010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.784017][T12010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 766.786568][T12010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 766.786759][T12010] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 766.786947][T12010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.623933][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 768.863878][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 768.863917][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 768.864061][T10139] Bluetooth: hci0: command 0x0406 tx timeout [ 768.864091][T10139] Bluetooth: hci3: command 0x0406 tx timeout [ 768.991972][T12029] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1542'. [ 769.046404][T12031] blktrace: Concurrent blktraces are not allowed on loop16 [ 772.505400][T12059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.803033][T12093] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1561'. [ 777.778471][T12113] blktrace: Concurrent blktraces are not allowed on loop16 [ 779.396597][T12122] syz.7.1569: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 779.396894][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.7.1569 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 779.396907][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.396919][T12122] Call Trace: [ 779.396927][T12122] [ 779.396932][T12122] dump_stack_lvl+0x189/0x250 [ 779.396955][T12122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.396971][T12122] ? __pfx__printk+0x10/0x10 [ 779.396985][T12122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 779.396998][T12122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 779.397011][T12122] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 779.397024][T12122] warn_alloc+0x22e/0x3b0 [ 779.397044][T12122] ? __pfx_warn_alloc+0x10/0x10 [ 779.397064][T12122] ? __get_vm_area_node+0x2bc/0x350 [ 779.397077][T12122] ? vb2_vmalloc_alloc+0xef/0x340 [ 779.397093][T12122] __vmalloc_node_range_noprof+0x690/0x12d0 [ 779.397123][T12122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 779.397139][T12122] ? __kasan_kmalloc+0x93/0xb0 [ 779.397157][T12122] vmalloc_user_noprof+0xad/0xf0 [ 779.397171][T12122] ? vb2_vmalloc_alloc+0xef/0x340 [ 779.397187][T12122] vb2_vmalloc_alloc+0xef/0x340 [ 779.397200][T12122] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 779.397214][T12122] __vb2_queue_alloc+0x9c2/0x15a0 [ 779.397240][T12122] vb2_core_reqbufs+0xc31/0x1420 [ 779.397263][T12122] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 779.397274][T12122] ? vb2_verify_memory_type+0x1fc/0x570 [ 779.397287][T12122] ? vb2_reqbufs+0x3a9/0x630 [ 779.397303][T12122] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 779.397320][T12122] __video_do_ioctl+0xa5c/0xc10 [ 779.397339][T12122] ? __pfx___video_do_ioctl+0x10/0x10 [ 779.397359][T12122] video_usercopy+0x82d/0x1450 [ 779.397378][T12122] ? __pfx___video_do_ioctl+0x10/0x10 [ 779.397391][T12122] ? __pfx_video_usercopy+0x10/0x10 [ 779.397402][T12122] ? smack_file_ioctl+0x2ac/0x340 [ 779.397427][T12122] ? __fget_files+0x3a6/0x420 [ 779.397450][T12122] v4l2_ioctl+0x190/0x1e0 [ 779.397463][T12122] ? __pfx_v4l2_ioctl+0x10/0x10 [ 779.397476][T12122] __se_sys_ioctl+0xff/0x170 [ 779.397489][T12122] do_syscall_64+0xfa/0xfa0 [ 779.397504][T12122] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.397518][T12122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.397529][T12122] ? clear_bhb_loop+0x60/0xb0 [ 779.397542][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.397552][T12122] RIP: 0033:0x7fedc36cf6c9 [ 779.397568][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.397579][T12122] RSP: 002b:00007fedc192e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.397594][T12122] RAX: ffffffffffffffda RBX: 00007fedc3925fa0 RCX: 00007fedc36cf6c9 [ 779.397602][T12122] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 779.397609][T12122] RBP: 00007fedc3751f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.397616][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.397622][T12122] R13: 00007fedc3926038 R14: 00007fedc3925fa0 R15: 00007ffc5e3f5f58 [ 779.397641][T12122] [ 779.397648][T12122] Mem-Info: [ 779.397653][T12122] active_anon:1469 inactive_anon:63234 isolated_anon:0 [ 779.397653][T12122] active_file:15930 inactive_file:40352 isolated_file:0 [ 779.397653][T12122] unevictable:768 dirty:219 writeback:0 [ 779.397653][T12122] slab_reclaimable:12276 slab_unreclaimable:107621 [ 779.397653][T12122] mapped:38799 shmem:57597 pagetables:1649 [ 779.397653][T12122] sec_pagetables:0 bounce:0 [ 779.397653][T12122] kernel_misc_reclaimable:0 [ 779.397653][T12122] free:1253050 free_pcp:6516 free_cma:0 [ 779.397684][T12122] Node 0 active_anon:5876kB inactive_anon:252936kB active_file:63520kB inactive_file:161408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155196kB dirty:876kB writeback:0kB shmem:228852kB kernel_stack:13796kB pagetables:6480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.397709][T12122] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.397732][T12122] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.397762][T12122] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 779.397780][T12122] Node 0 DMA32 free:1095312kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5876kB inactive_anon:252936kB active_file:63520kB inactive_file:161408kB unevictable:1536kB writepending:856kB zspages:0kB present:3129332kB managed:2576084kB mlocked:0kB bounce:0kB free_pcp:26064kB local_pcp:2908kB free_cma:0kB [ 779.397812][T12122] lowmem_reserve[]: 0 0 1 1 1 [ 779.397828][T12122] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.397856][T12122] lowmem_reserve[]: 0 0 0 0 0 [ 779.397872][T12122] Node 1 Normal free:3901528kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.397901][T12122] lowmem_reserve[]: 0 0 0 0 0 [ 779.397918][T12122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 779.398293][T12122] Node 0 DMA32: 12*4kB (UME) 15*8kB (ME) 80*16kB (U) 62*32kB (UME) 100*64kB (UME) 130*128kB (UME) 109*256kB (UME) 17*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 250*4096kB (UM) = 1095272kB [ 779.398375][T12122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 779.398425][T12122] Node 1 Normal: 188*4kB (UE) 39*8kB (UME) 37*16kB (UME) 235*32kB (UME) 80*64kB (UME) 25*128kB (UME) 10*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3901528kB [ 779.398514][T12122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 779.398523][T12122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 779.398532][T12122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 779.398540][T12122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 779.398548][T12122] 113875 total pagecache pages [ 779.398556][T12122] 0 pages in swap cache [ 779.398560][T12122] Free swap = 124996kB [ 779.398564][T12122] Total swap = 124996kB [ 779.398568][T12122] 2097051 pages RAM [ 779.398571][T12122] 0 pages HighMem/MovableOnly [ 779.398575][T12122] 421004 pages reserved [ 779.398578][T12122] 0 pages cma reserved [ 780.193993][ T8778] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 780.418351][ T8778] usb 8-1: Using ep0 maxpacket: 8 [ 780.424495][ T8778] usb 8-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 780.424523][ T8778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.424542][ T8778] usb 8-1: Product: syz [ 780.424555][ T8778] usb 8-1: Manufacturer: syz [ 780.424569][ T8778] usb 8-1: SerialNumber: syz [ 780.442611][ T8778] usb 8-1: config 0 descriptor?? [ 780.458615][ T8778] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 780.857897][ T8778] gspca_sonixj: reg_r err -32 [ 780.857994][ T8778] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 780.988926][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 781.810288][T12154] overlayfs: failed lookup in lower (newroot/154, name='bus', err=-40): overlapping layers [ 781.833840][ T5948] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 782.603818][ T5948] usb 9-1: Using ep0 maxpacket: 16 [ 782.606287][ T5948] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.606312][ T5948] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.611784][ T5948] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.611813][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.611832][ T5948] usb 9-1: Product: syz [ 782.611847][ T5948] usb 9-1: Manufacturer: syz [ 782.611861][ T5948] usb 9-1: SerialNumber: syz [ 782.930484][ T5948] usb 9-1: 0:2 : does not exist [ 782.955050][ T5948] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 783.052596][ T9139] usb 8-1: USB disconnect, device number 15 [ 783.064571][ T5948] usb 9-1: USB disconnect, device number 15 [ 783.333161][T12148] udevd[12148]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.835690][T12170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.682665][T12198] blktrace: Concurrent blktraces are not allowed on loop12 [ 787.548514][T12200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.548731][T12200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.548930][T12200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 787.549115][T12200] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.550691][T12200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.719843][T12216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.588930][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 789.588974][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 789.589003][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 789.589030][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 789.589058][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 789.619780][T12229] overlayfs: failed lookup in lower (newroot/166, name='bus', err=-40): overlapping layers [ 795.097319][T12260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.225131][T12293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.210739][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 799.793069][T12320] blktrace: Concurrent blktraces are not allowed on loop12 [ 804.264662][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'. [ 804.264814][T12353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.561295][T12353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.233812][ T5887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 806.383985][ T5887] usb 6-1: device descriptor read/64, error -71 [ 806.873873][ T5887] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 807.003831][ T5887] usb 6-1: device descriptor read/64, error -71 [ 807.114258][ T5887] usb usb6-port1: attempt power cycle [ 807.483940][ T5887] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 807.564501][ T5887] usb 6-1: device descriptor read/8, error -71 [ 807.623832][T12405] blktrace: Concurrent blktraces are not allowed on loop12 [ 807.964024][ T5887] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 807.984721][ T5887] usb 6-1: device descriptor read/8, error -71 [ 808.094165][ T5887] usb usb6-port1: unable to enumerate USB device [ 808.699485][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1664'. [ 808.800877][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.800950][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.403996][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.704915][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.706925][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 812.853769][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 812.856332][ T10] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.856365][ T10] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 812.856391][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 812.856424][ T10] usb 7-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 812.856446][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.870064][ T10] usb 7-1: config 0 descriptor?? [ 813.259513][ T9139] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 813.668253][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.931457][ T9139] usb 1-1: device descriptor read/64, error -71 [ 814.048316][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.054746][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 814.054872][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 814.072033][ T10] usb 7-1: USB disconnect, device number 10 [ 814.273807][ T9139] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 814.406336][ T9139] usb 1-1: device descriptor read/64, error -71 [ 814.721578][ T9139] usb usb1-port1: attempt power cycle [ 815.048194][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.548963][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.679567][ T9139] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 815.694806][ T9139] usb 1-1: device descriptor read/8, error -71 [ 815.704278][T12467] program syz.7.1680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.140075][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1681'. [ 816.443812][ T5887] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 816.597473][ T5887] usb 8-1: Using ep0 maxpacket: 16 [ 816.599908][ T5887] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 816.599932][ T5887] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.604142][ T5887] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.604166][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.604185][ T5887] usb 8-1: Product: syz [ 816.604198][ T5887] usb 8-1: Manufacturer: syz [ 816.604212][ T5887] usb 8-1: SerialNumber: syz [ 816.738409][T12499] blktrace: Concurrent blktraces are not allowed on loop12 [ 816.952305][ T5887] usb 8-1: 0:2 : does not exist [ 817.266177][ T5887] usb 8-1: USB disconnect, device number 16 [ 819.914652][T12537] program syz.6.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.983861][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 829.016490][T12596] blktrace: Concurrent blktraces are not allowed on loop12 [ 829.277485][T12594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 829.279193][T12594] block device autoloading is deprecated and will be removed. [ 831.350821][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.427896][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.259644][T12607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 832.264644][T12607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 832.273848][T12607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.280284][T12607] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.284816][T12607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 832.838559][T12619] program syz.8.1720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.761443][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.774926][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 834.774969][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 834.774999][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 834.775028][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 834.775056][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 836.669870][T12643] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1728' sets config #1 [ 839.145452][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.470025][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.649512][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.300645][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.453808][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 841.616237][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.616265][ T10] usb 9-1: config 0 has no interface number 0 [ 841.616316][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.616342][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.616363][ T10] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.616405][ T10] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 841.616434][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.761109][ T10] usb 9-1: config 0 descriptor?? [ 841.913964][T12681] blktrace: Concurrent blktraces are not allowed on loop10 [ 842.583175][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.953206][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0042.0006/input/input17 [ 844.064993][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0042.0006/input/input18 [ 844.270518][ T10] uclogic 0003:28BD:0042.0006: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.8-1/input1 [ 844.388933][ T10] usb 9-1: USB disconnect, device number 16 [ 845.586416][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.862190][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 845.995526][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.605203][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.906512][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.944412][T12703] fido_id[12703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 847.806024][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.081878][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.397571][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.653687][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.769656][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.186156][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.076072][T12728] blktrace: Concurrent blktraces are not allowed on loop12 [ 854.449880][ T5888] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 854.754511][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 854.770320][ T5888] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 854.770344][ T5888] usb 8-1: config 0 has no interface number 0 [ 854.770378][ T5888] usb 8-1: config 0 interface 12 has no altsetting 0 [ 854.772563][ T5888] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 854.772586][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.772596][ T5888] usb 8-1: Product: syz [ 854.772603][ T5888] usb 8-1: Manufacturer: syz [ 854.772611][ T5888] usb 8-1: SerialNumber: syz [ 854.921109][T12766] blktrace: Concurrent blktraces are not allowed on loop10 [ 855.694121][ T5888] usb 8-1: config 0 descriptor?? [ 856.981624][ T5888] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 856.981671][ T5888] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 856.981680][ T5888] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 856.981742][ T5888] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 857.031073][ T5888] usb 8-1: USB disconnect, device number 17 [ 860.980794][T12809] blktrace: Concurrent blktraces are not allowed on loop12 [ 865.412725][T12848] ALSA: mixer_oss: invalid OSS volume 'u' [ 866.160481][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 867.324519][T12860] blktrace: Concurrent blktraces are not allowed on loop14 [ 870.230378][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.230449][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.925773][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.463765][ T5815] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 872.618455][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.653103][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.108203][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.108259][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.108300][ T5815] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 873.108323][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.116376][ T5815] usb 1-1: config 0 descriptor?? [ 873.128531][ T5815] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 873.672008][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.336536][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.502303][ T31] usb 1-1: USB disconnect, device number 33 [ 874.964532][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.292325][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.680442][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.804114][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.957147][T12950] blktrace: Concurrent blktraces are not allowed on loop10 [ 876.959079][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.587155][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.742126][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.854186][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.104437][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1815'. [ 879.411326][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.671641][T12982] blktrace: Concurrent blktraces are not allowed on loop16 [ 879.998223][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.164641][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.221039][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 880.238850][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 880.251359][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 880.254971][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 880.255707][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 881.159758][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.200512][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.034000][ T5948] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 882.203728][ T5948] usb 9-1: Using ep0 maxpacket: 16 [ 882.206405][ T5948] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.206430][ T5948] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.209507][ T5948] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.209534][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.209562][ T5948] usb 9-1: Product: syz [ 882.209576][ T5948] usb 9-1: Manufacturer: syz [ 882.209590][ T5948] usb 9-1: SerialNumber: syz [ 882.303914][ T61] Bluetooth: hci4: command tx timeout [ 882.534725][ T5948] usb 9-1: 0:2 : does not exist [ 882.553808][ T5948] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 882.755686][ T5948] usb 9-1: USB disconnect, device number 17 [ 882.891922][T12877] udevd[12877]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.168027][T12980] chnl_net:caif_netlink_parms(): no params data found [ 884.316777][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.406210][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.412548][ T61] Bluetooth: hci4: command tx timeout [ 884.615370][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.883069][T13013] blktrace: Concurrent blktraces are not allowed on loop14 [ 884.892299][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.680002][ T37] audit: type=1326 audit(1763158672.146:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.8.1843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c1c4f6c9 code=0x0 [ 887.088226][ T61] Bluetooth: hci4: command tx timeout [ 889.185274][ T61] Bluetooth: hci4: command tx timeout [ 889.963942][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.964345][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.964491][T12980] bridge_slave_0: entered allmulticast mode [ 889.984549][T12980] bridge_slave_0: entered promiscuous mode [ 890.895878][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.896013][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.896221][T12980] bridge_slave_1: entered allmulticast mode [ 890.898877][T12980] bridge_slave_1: entered promiscuous mode [ 891.909553][T13069] blktrace: Concurrent blktraces are not allowed on loop14 [ 892.677412][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.679918][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.726630][T12980] team0: Port device team_slave_0 added [ 893.729855][T12980] team0: Port device team_slave_1 added [ 895.384120][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.384139][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.384164][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.450369][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.450386][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.450413][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.027169][T12980] hsr_slave_0: entered promiscuous mode [ 896.028673][T12980] hsr_slave_1: entered promiscuous mode [ 896.029733][T12980] debugfs: 'hsr0' already exists in 'hsr' [ 896.029757][T12980] Cannot create hsr debugfs directory [ 897.604885][ T9139] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 897.695960][T13122] ALSA: mixer_oss: invalid OSS volume 'u' [ 897.770722][ T9139] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 897.770749][ T9139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.770760][ T9139] usb 9-1: Product: syz [ 897.770768][ T9139] usb 9-1: Manufacturer: syz [ 897.770775][ T9139] usb 9-1: SerialNumber: syz [ 897.806991][ T9139] usb 9-1: config 0 descriptor?? [ 897.828391][ T9139] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 898.562515][T12980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.948869][ T9139] gspca_sunplus: reg_r err -32 [ 898.948961][ T9139] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 899.289582][T12980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.004153][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.097394][ T5887] usb 9-1: USB disconnect, device number 18 [ 901.275246][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.566069][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.046561][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.081691][T12980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.386769][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.746294][T12980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.816788][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.994771][T12980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 905.058488][T12980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 905.106642][T12980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 905.152832][T12980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 905.173924][ T5815] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 905.339004][ T5815] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 905.339033][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.339052][ T5815] usb 9-1: Product: syz [ 905.339066][ T5815] usb 9-1: Manufacturer: syz [ 905.339078][ T5815] usb 9-1: SerialNumber: syz [ 905.397078][ T5815] usb 9-1: config 0 descriptor?? [ 905.421937][ T5815] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 905.450861][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.472195][T13185] syzkaller0: entered promiscuous mode [ 905.472221][T13185] syzkaller0: entered allmulticast mode [ 905.733814][ T5948] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 905.883792][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 905.900078][ T5948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.900106][ T5948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.925723][ T5948] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.926001][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.926023][ T5948] usb 7-1: Product: syz [ 905.926037][ T5948] usb 7-1: Manufacturer: syz [ 905.926051][ T5948] usb 7-1: SerialNumber: syz [ 906.485645][ T5948] usb 7-1: 0:2 : does not exist [ 906.510751][ T5948] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 907.460052][ T5815] gspca_sunplus: reg_r err -110 [ 907.460153][ T5815] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 907.478393][T13201] tty tty2: ldisc open failed (-12), clearing slot 1 [ 907.498752][ T5948] usb 7-1: USB disconnect, device number 11 [ 907.715264][T13115] udevd[13115]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.255468][ T10] usb 9-1: USB disconnect, device number 19 [ 908.294220][T13206] program syz.7.1897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.316003][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.510329][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.510546][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.567304][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.575049][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.012085][T13224] bridge_slave_0: left allmulticast mode [ 910.012259][T13224] bridge_slave_0: left promiscuous mode [ 910.012744][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.398219][T13224] bridge_slave_1: left allmulticast mode [ 910.398240][T13224] bridge_slave_1: left promiscuous mode [ 910.398455][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.652825][T13224] bond0: (slave bond_slave_0): Releasing backup interface [ 911.007522][T13224] bond0: (slave bond_slave_1): Releasing backup interface [ 911.248091][T13224] team0: Port device team_slave_0 removed [ 911.829728][T13224] team0: Port device team_slave_1 removed [ 911.830313][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.830328][T13224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.877353][T13224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 911.960708][T13226] team0: Mode changed to "loadbalance" [ 912.818566][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 912.979676][ T10] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 912.979707][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.979727][ T10] usb 8-1: Product: syz [ 912.979741][ T10] usb 8-1: Manufacturer: syz [ 912.979755][ T10] usb 8-1: SerialNumber: syz [ 913.030844][ T10] usb 8-1: config 0 descriptor?? [ 913.048285][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 914.762368][T13258] program syz.8.1912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.846190][T13266] ubi31: attaching mtd0 [ 915.849254][T13266] ubi31: scanning is finished [ 915.849266][T13266] ubi31: empty MTD device detected [ 915.921405][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.968844][ T10] gspca_sunplus: reg_r err -32 [ 915.968938][ T10] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 917.179417][ T31] usb 8-1: USB disconnect, device number 18 [ 917.302613][T12980] veth0_vlan: entered promiscuous mode [ 917.319441][T12980] veth1_vlan: entered promiscuous mode [ 917.390766][T12980] veth0_macvtap: entered promiscuous mode [ 917.403151][T12980] veth1_macvtap: entered promiscuous mode [ 917.498814][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.535514][T13266] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 917.581039][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.622327][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.622801][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.623018][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.623054][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.511927][T13310] blktrace: Concurrent blktraces are not allowed on loop16 [ 924.470015][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.470036][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.333866][ T5945] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 928.173741][ T7643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.173763][ T7643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.283820][ T5945] usb 9-1: device not accepting address 20, error -71 [ 929.401371][T13343] blktrace: Concurrent blktraces are not allowed on loop14 [ 930.096644][T13362] program syz.7.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.627173][ T5887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 931.823159][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.834369][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.835465][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.846299][ T5887] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 931.846327][ T5887] usb 6-1: config 0 has no interface number 0 [ 931.846376][ T5887] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.846401][ T5887] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.846422][ T5887] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.846463][ T5887] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 931.846485][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.007719][ T5887] usb 6-1: config 0 descriptor?? [ 933.195978][ T5887] usbhid 6-1:0.1: can't add hid device: -71 [ 933.196053][ T5887] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 933.206452][ T5887] usb 6-1: USB disconnect, device number 14 [ 933.508434][T13392] ALSA: mixer_oss: invalid OSS volume 'u' [ 933.860060][ T5945] IPVS: starting estimator thread 0... [ 933.943878][T13400] IPVS: using max 13 ests per chain, 31200 per kthread [ 934.420091][T13381] Bluetooth: hci4: command 0x0405 tx timeout [ 935.252223][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.388871][T13395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 935.406443][T13395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 935.411470][T13395] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 935.447252][T13395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.450655][T13395] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 935.452478][T13395] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 935.710201][T13395] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 935.823815][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 937.239407][T13419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.711984][T13418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.735279][ C1] ------------[ cut here ]------------ [ 937.735289][ C1] refcount_t: addition on 0; use-after-free. [ 937.735547][ C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 937.735573][ C1] Modules linked in: [ 937.735590][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 937.735603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.735611][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 937.735625][ C1] Code: 00 00 e8 99 56 45 fd 5b 41 5e e9 c1 d8 4a 06 cc e8 8b 56 45 fd c6 05 4f 22 47 0a 01 90 48 c7 c7 c0 2e 3d 8b e8 a7 9d 09 fd 90 <0f> 0b 90 90 eb d7 e8 6b 56 45 fd c6 05 30 22 47 0a 01 90 48 c7 c7 [ 937.735636][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 937.735645][ C1] RAX: 8f01efff24585c00 RBX: 0000000000000002 RCX: ffff88801be99e00 [ 937.735654][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 937.735661][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 937.735668][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 937.735676][ C1] R13: ffff88803c7b8460 R14: ffff88803c7b8080 R15: dffffc0000000000 [ 937.735684][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 937.735693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.735701][ C1] CR2: 0000200000404030 CR3: 0000000034ca4000 CR4: 00000000003526f0 [ 937.735711][ C1] Call Trace: [ 937.735717][ C1] [ 937.735723][ C1] mptcp_schedule_work+0x164/0x1a0 [ 937.735739][ C1] mptcp_tout_timer+0x21/0xa0 [ 937.735762][ C1] call_timer_fn+0x17e/0x5f0 [ 937.735788][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 937.735813][ C1] ? call_timer_fn+0xbe/0x5f0 [ 937.735839][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 937.735890][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 937.735919][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.735934][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 937.735950][ C1] __run_timer_base+0x648/0x970 [ 937.735973][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 937.735996][ C1] run_timer_softirq+0xb7/0x180 [ 937.736010][ C1] handle_softirqs+0x22f/0x710 [ 937.736030][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 937.736050][ C1] run_ktimerd+0xcf/0x190 [ 937.736065][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 937.736078][ C1] ? schedule+0x91/0x360 [ 937.736096][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 937.736110][ C1] smpboot_thread_fn+0x542/0xa60 [ 937.736124][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 937.736146][ C1] kthread+0x711/0x8a0 [ 937.736164][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 937.736178][ C1] ? __pfx_kthread+0x10/0x10 [ 937.736192][ C1] ? rt_spin_unlock+0x150/0x200 [ 937.736208][ C1] ? rt_spin_unlock+0x161/0x200 [ 937.736218][ C1] ? __pfx_kthread+0x10/0x10 [ 937.736235][ C1] ret_from_fork+0x4bc/0x870 [ 937.736251][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 937.736268][ C1] ? __switch_to_asm+0x39/0x70 [ 937.736280][ C1] ? __switch_to_asm+0x33/0x70 [ 937.736289][ C1] ? __pfx_kthread+0x10/0x10 [ 937.736306][ C1] ret_from_fork_asm+0x1a/0x30 [ 937.736332][ C1] [ 937.736343][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 937.736352][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 937.736365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.736371][ C1] Call Trace: [ 937.736376][ C1] [ 937.736381][ C1] dump_stack_lvl+0x99/0x250 [ 937.736398][ C1] ? __asan_memcpy+0x40/0x70 [ 937.736411][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.736428][ C1] ? __pfx__printk+0x10/0x10 [ 937.736449][ C1] vpanic+0x237/0x6d0 [ 937.736460][ C1] ? __pfx_vpanic+0x10/0x10 [ 937.736476][ C1] panic+0xb9/0xc0 [ 937.736486][ C1] ? __pfx_panic+0x10/0x10 [ 937.736506][ C1] __warn+0x31b/0x4b0 [ 937.736516][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 937.736529][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 937.736541][ C1] report_bug+0x2be/0x4f0 [ 937.736556][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 937.736568][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 937.736580][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 937.736592][ C1] handle_bug+0x84/0x160 [ 937.736603][ C1] exc_invalid_op+0x1a/0x50 [ 937.736614][ C1] asm_exc_invalid_op+0x1a/0x20 [ 937.736625][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 937.736637][ C1] Code: 00 00 e8 99 56 45 fd 5b 41 5e e9 c1 d8 4a 06 cc e8 8b 56 45 fd c6 05 4f 22 47 0a 01 90 48 c7 c7 c0 2e 3d 8b e8 a7 9d 09 fd 90 <0f> 0b 90 90 eb d7 e8 6b 56 45 fd c6 05 30 22 47 0a 01 90 48 c7 c7 [ 937.736647][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 937.736657][ C1] RAX: 8f01efff24585c00 RBX: 0000000000000002 RCX: ffff88801be99e00 [ 937.736665][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 937.736672][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 937.736679][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 937.736687][ C1] R13: ffff88803c7b8460 R14: ffff88803c7b8080 R15: dffffc0000000000 [ 937.736706][ C1] mptcp_schedule_work+0x164/0x1a0 [ 937.736721][ C1] mptcp_tout_timer+0x21/0xa0 [ 937.736736][ C1] call_timer_fn+0x17e/0x5f0 [ 937.736750][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 937.736764][ C1] ? call_timer_fn+0xbe/0x5f0 [ 937.736778][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 937.736798][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 937.736813][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.736827][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 937.736843][ C1] __run_timer_base+0x648/0x970 [ 937.736865][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 937.736892][ C1] run_timer_softirq+0xb7/0x180 [ 937.736906][ C1] handle_softirqs+0x22f/0x710 [ 937.736925][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 937.736956][ C1] run_ktimerd+0xcf/0x190 [ 937.736984][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 937.737010][ C1] ? schedule+0x91/0x360 [ 937.737046][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 937.737065][ C1] smpboot_thread_fn+0x542/0xa60 [ 937.737080][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 937.737098][ C1] kthread+0x711/0x8a0 [ 937.737116][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 937.737130][ C1] ? __pfx_kthread+0x10/0x10 [ 937.737146][ C1] ? rt_spin_unlock+0x150/0x200 [ 937.737161][ C1] ? rt_spin_unlock+0x161/0x200 [ 937.737172][ C1] ? __pfx_kthread+0x10/0x10 [ 937.737188][ C1] ret_from_fork+0x4bc/0x870 [ 937.737203][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 937.737221][ C1] ? __switch_to_asm+0x39/0x70 [ 937.737232][ C1] ? __switch_to_asm+0x33/0x70 [ 937.737242][ C1] ? __pfx_kthread+0x10/0x10 [ 937.737258][ C1] ret_from_fork_asm+0x1a/0x30 [ 937.737279][ C1] [ 937.737803][ C1] Kernel Offset: disabled