last executing test programs: 10m26.664234006s ago: executing program 1 (id=2): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x5e, 0xffffffffffffffff, 0x41100, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x10, 0x100}, 0x94) 10m26.334231511s ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10m21.445598066s ago: executing program 1 (id=20): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000500) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 10m21.039916766s ago: executing program 1 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) 10m19.408065514s ago: executing program 1 (id=24): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x40080, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x7ff, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0xffff, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x7, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x7, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x7, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0x7, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000002080500ff7f0000000000b3acd03c0709190100"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) 10m4.268108737s ago: executing program 32 (id=24): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x40080, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x7ff, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0xffff, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x7, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x7, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x7, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0x7, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000002080500ff7f0000000000b3acd03c0709190100"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) 49.974327451s ago: executing program 0 (id=1212): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffc, 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 49.770270419s ago: executing program 0 (id=1213): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 49.679555298s ago: executing program 0 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil, &(0x7f0000fc7000/0x13000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000000), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, 0x0, &(0x7f00000015c0)=""/132}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000140)="27bb8a6af547da4cad0fbd9a8e46fa06226f81d37635a6370b94c473d2c66a0324b50da8e60cbdc7109c4f7fa0", 0x2d, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0xa6, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x5, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0x80000df, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x3, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0xfd, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x85, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xffc, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x5, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0x6, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x4, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) 46.43168529s ago: executing program 0 (id=1219): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) tkill(r0, 0xb) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x7, @mcast1, 0x800}}, 0x0, 0x0, 0xb, 0x0, "9c3ae8602a6587fabf97ed464df8554f7ed6a3c451e16ff9811348627f1490e56ad2a1e80fe74337caa36a2ab72e287e31c935497662d6284d3c25ccb19cc3b11fd5b3ecdbba28f91c10658827776216"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x6, @loopback, 0x10}}, 0x0, 0x0, 0x37, 0x0, "076c30e56d0d7211c15d573f652b8fd98b8a605000c9541cbd302c12a5f4d38be01230fdc857dcdc61c36d92272a67d50bd16b615bf99a90b603d3862f301225ccadfee3b6da1ab535af4850f0d60902"}, 0xd8) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0xce22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, 0x0, 0x0, 0x3c, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}]}}]}, 0x44}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.230252729s ago: executing program 0 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast1}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000006800028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) 43.864552075s ago: executing program 5 (id=1229): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x330b, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 42.720561889s ago: executing program 0 (id=1232): r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r0, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x7, @mcast1, 0x800}}, 0x0, 0x0, 0xb, 0x0, "9c3ae8602a6587fabf97ed464df8554f7ed6a3c451e16ff9811348627f1490e56ad2a1e80fe74337caa36a2ab72e287e31c935497662d6284d3c25ccb19cc3b11fd5b3ecdbba28f91c10658827776216"}, 0xd8) 42.546587789s ago: executing program 2 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000380), &(0x7f0000000340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x2}, {0x1ff, 0xffffffffe, 0x4053e5, 0x8000000000000001}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9df}, 0x1c) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) 42.49415006s ago: executing program 5 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 41.659180222s ago: executing program 4 (id=1236): timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) eventfd2(0x72, 0x800) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 39.439450686s ago: executing program 3 (id=1238): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffc, 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 37.653591419s ago: executing program 5 (id=1239): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, 0x0) 37.61026999s ago: executing program 4 (id=1240): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$dsp(r0, &(0x7f0000000740)="761bbf695dedf22536b4760649c252421c07499a3ad59d1ed371dc6e8ea85e45210e274a292d2bd91088af761dc5c80c1ef767ee81134bfd2523feb05d624792c69c2b9e4f774934f853a143dc08e34973b94d344ce9fd352af4f4fe5cb1ff58176209c223e7011cacb2752501d62d1474388ce3379640a436f1d6687dd5fa5c22b7f01b5a58b6770c8bb8f812e1539307eb6bc294cb22f010547df46cad442690e9eccfaf08012a96594a9b81cbd6c3f9361f84ab7a7b4f5790a31d9f0eb8a5c560e1b6d32e2234a5e33a629887ea8aa7040c23b04324eb0e27b028b2ab844706a35158d1584716f5145a17544c71223c4d9c634c08e752c9ab43e57b7c1a4beacf820ff0056cdd03485313acd92e83d660145405f2b83de3a1ccb6d2dc98e0db771b68f5743c815825aef0ebb4396e3db171135e1f4ba2d2c23a90edc2848a148c7a5911cc8f86a55e3155f0f8c26c880e460c5526a3847d3815143ac523c2b71850986cefc27b40c2c66568b4276f7b5364d2c31f4d6047f102c260fe983bcbc1466b97773803fbb1aa2f4008c2611216c66aee8545cbbbe183df17d8f6002c1faf5576b038666f6941628fe2aa50fad78147721e56050df9ef0618a1878001814268f4be095b3aac89d2ca9693802678ff881525dc91bd3c9eac54adc475f11a0e62469bf8dd566cc8223b48f29039e51953684858ff07410c762fcee02248444048d13a07e280d613a99d982e9ddf8fc6b84bb5331f521dc1337552c18ffd14bc73ce75b3b10c1064de7532dcfa428c9f7a07deccc7432dcb30700d4b116bd3046a94a5b7bce62cebb3892fb3ad8ebf4247eb4f9e6ea3f609c6aa859f38884878a4fa484cda39f43e5fd78d083fc900b38a6e0a0e96ec1d31550dc6f9487ea29e8e00eef95de8f6672087280ab63232b0c87fe2755d27f9620792879b88fe3eb516e237b93e1e5c2560e7fa2269ba7954fb3f73e5635b63689d148f3ac2b3039aa52f733b03b7831ff0dc45b6fcb98d647afe34633f4c101506a7c4f2b537179359e0cb9ce91d7634b08da740cc615ddda32d698b0931d36034cf806f827925b4c85b6973ef5952dc8e420591da5967c9ebc34d8a5f7224f4b2b8563ef3fdc1469ae66ee9d9028d805abb60dc68940a376db6f361c1d9bd381789f97ae39e93e571d24ff4c1dc9d45207ce22f875e073751727bf881682a116630a47a9d7d10ce324c572da1b7f609b59fd90975999c9d7d97b2852f7c05aa103c706de3b7e468a8feaa8c66bb9a0e1c0a463437f9efb5fcae4b91cc20228754e30cb31e43ac8cc2940f681bbb584e52ff54f42497454a0b3d86bc3777347160260bbcd9810a12c1eb02ee262522c8d0523bfeb61518d65ec57cd382f4ba467fee758181be00f9fbf236385ef1f640550f692605ccfe8282de259657cba1564b8983a86cec11b2535366cffa737336f0177ad1695afb6d26e6b26f81e94859f42fca86925c9bcfbea9cca8c40bfcf6be484bd6646bfd495bbfc300a715a03ad4077fd6ce83a36c7e08aed0b72da1df74607c8ab3c8b7e74dba2b4efc02e91474ee5d0477cc9e4f098c7a5e78587bd4afff5e415a2d43c91ae7807780bf78297f086168078a550f6cf34a64923fe0e42043196baf6f575f7086cb72cf9487cb7f2956579f0bfe5a4aa1650877f80bd6118496ba42de85f47711327d0b11c51ef9d89e8d7c6d0fe944538960f52bb59449ed2f4b86d9359580cbf998da435777d5974c837c58b3a6d64cbfd9bb785cdbcea7f92cb3b46ec878dd67935f5853fdd3ddabf22543811564b99864b5b4f1023d46abed62e6400cf2c739c92b5edb104a7f523c846cf4a19c9a21b627050839363ae5c64020c016cdf30c0cf5d520029e833b010e7cff5729275cad1e1d4a51c87c484b372b61469ae894b7028b8ed5aff4cffe04d87d8043b62d1aa74fde77567a7f385ddf9689125616d9d09c4c2e8c053d523e1b74deb089d15a790e40d2e4dfe5c9fd11c2c2c55f550b3d4f78f86e19bdfc094355c832bf7b8c4f6ddaa7476159ddb6a64250ccc699e770a1097206b5fe343753adb841cf3ed434021b7bbed2e11426180a8d81f7d8b9ddfad6c6d0b95a12036b42dd942b586054755273811ccb837d6c0eb05421de8bf9de00b0bfda5b176f6040305c8746824fb8a7a5fd28d1d0896a8e8c52eb75cfdbea2551284903856f6df801f8f4b55fef4d26ab63867e08529c425266186da3abe14b8728abbb66854019bc08042c6bfdec16761207a940ce0cfe81364fbeb378bf7396db4b24b53748deb59a00b88f2a75c27eec2ac53858ff45a466f625ae03f0a8d3a721001294f9ae5433deffdbe5cc930a76d8dca2be3c65d09e74897970194815d964b6b34da07d40cb74300c39de2eec58eaa470c5c12ba2825d0d778e39814e95a565d1aa55f64bdc4724123fec75b97165f759627a1cc7a0c146bf94ac2c9b831f3be99e7b287681cb5b6af9bedef609e9240a825bcab2645f9e27f5dc40d19dd7746b8e7cc75951ba2a558305b4113455949df6f555b7428f05529315d7a07d9cb54d3d9954d2dfdb4c6afb907e6f3f5795895ea40379cdf28d90a346c4fc42af0afb600642199f25f2291c07bd192f21d86f1bf308929a6f988cc350eae953bef9cf845021633bceb3736869c1b1dc8739869b7755d07cd3c9e3ed06860dfe3e674aa54da1e23e88ac4db30c29de0e8ce74132540f7c473feaf4b005cf318db2daea1ebe938ef7fa21a896bb6b109122afeddeaee718295f2b3398c8b4dee127e9a84942416e59b077b5c76db0d8c915ddc3b041df09a1f220f5af8c1a02beafb73675d659cd50721cbfcdd47f117b68e938fa613eedd6d6d798b971b64c10c6e62e4ed723fc71e0ecee95cf838832f7b52a11d1cc931feba19af78d78bbc6338acbf0a3ae968681643954af9096725fb1dc664727d5cab8942965d2574f289a6a98f4a08297a42552e106f5ba46180e3388686fb6973a7db1eb071cb77cf48a3948d05b24651ae0f1e7446af5e712248e833912dc744eb19e8e5d8ebbeafbe00ca8f494794ec43232b93013b1ea937d47b9e6e89f07faac2c572eff94528acaf36d814c11178174aae7e1c67be23937f3a8f71d40c9ddb6ae99670a51465cb5d7e636bc648118e1ee56a95a47a108a76042a88fe6a8647f5f7ba66f4157f9ca2771bc5f9512e7a1ce06c2429690db9a517672daa6f741daeb8cd916e95975311c37d878a1096206e31177e85e0e37b437abef7979a6597f587a27161d192e98c86080081ca9db44fee1866d46ea20bd8dec460c6a4e57cc40f8e6804a14b5ad4850588ebea8a125228ee744c860384da5edf3bf53e7f7434d47bd47c6571e8d79c2042fc8085165d334f1bc2decd189272f3d251266f41f3285fc1c0b7383c772cc1c8de5bc4f9a1c9a1fdcfdfb4290696a4df70d464051c3d5fff510f49a9d78a8c029013f2dedd5485eec18c37362390e608adfab8719006e38cbb0cea0330677f819817b979029160329bc2ece963c725e8c8ce055e1c4db5c306745e06ff1058f4971253011cc1387d04e4fe4e10b59c6ccdcdd52d2967e0b92742443b585703405689ef16382824744277b7b241ffae5bf90cb698e3a7cd92bc63f36205d80ed30e8d257d1341fe8d8efe62e0b5b79a15f11be9cfc39ad6da0700599d8f302c29fdabbc0738b0ecd6691c57d9fe643b1967c947f79bedcff9d91d9271f7bf3c417bbc4c7e331e21641cff94ed4b78b93d1c3e8f4f3ffcac26977f4205b5417d2ecbb99e7585986348db27ed234a4d8134362af75e4c4826c762b2596ad285e0bcf8fb26b9333c9cbb93b2903cd26e01777c03cbdded9dc6516680d4eacaa0a6a85eff98b790044d92db2c2f32fb63f8ad58dd02c361f87a4bf14b70eda3e3007d7da5113879bf5ef0e1afbc22729d8ed2f516cd15c68fb121b22d819d84e8ca6d7e45d51fdba77458774ad5b365e7c8d74ce4654a0fdea8d998b8430520b56b64941a9ac57e4e3d621cdcfe696620610d4d94d52b64ddb8f2930e9b0557d18d93772f9606a02fcf004314b9fea4e65dc69961c96ac006524b7bf06f699d6bebc53a0de9a638a35c55eacc88d5eca6b6d3ebe15431f5e58f9345afe9217343793b07a9e2cf3d48637085398b2ad489b243d3a1365285140067fa1682c1b84fc66d1ec03d59872abc634d764733b9a1c1d5fb686f5b9dbf11092115ab67c8f2a0fe08012a19013ca9892033a9676dce8307debe419bdfefd61e5a1368a65fbd2cd6f92dd6a49d03f64a1bb574778458b28141d1ba3d65d9aea0003b4993bcfea02ee6e7f59a6a5c7e72bdf953b53e7af1685836b76516cf242f55615e062ad57950eef66d77eb6001449c7591a6dc569e2432a968b713341133e66ad3fd89bf14f81f90a5e1ec9d5abdd7814cabcaf44e4b515c4cbf6e80e8e65287401245a826b4508887f192e47aa4c323b2b1693bc7e4d1e096cd4df64618c9de3e8ebdfb89c551115e7783f4630e81b8909ed91d697a56f169a66a04227a80dec70a6af0a3bfff9fb87f1361ea698441e08125f3693e3666c7d93757248580dfe83ee2f5e34d9237d6a279bf233e08b602e6e0823fcd2c87405a15ad53410872396eb8eaed4eb16d33d7344338b1363736b2e3d0f162f1f07c12ecb3cb68fc7510470d6515ab7c789aed79f285426290682bf1be661c32b2c5d33830add4f382e42e55d5134067e0ee477964520f4b8494497a2382d23de1c9cf6065bc02801d634589dcd41bd943d1e2666224f2e3929d469b08921a1eecb67c719dbf1cdb691ed1948551bc81366c1866d2e95031284ab60a1e8f7398b5d287c03bbe035d0638e366c4a06c0f6ca6151b8b6862e5b84794bf1ef8c75a263cb3553ce6f60d1ccdf87066a0e099ecf809c62914759f4add7bf0c8c74d21b90a887575bd5669f3bb8ded11b8933c100d008c83ad0f5209b5c4d599c9df2ee679dc87f94268ede1d7763a59cd37670f468da2792de87a839d0de86b3ec0fff7cfb8eb34bb32c7c8f8ff02aa4e10333f4a034da92718df33a8d9f8df3b0113ebc4289c8b0bb6580e08312ea2bc6e1d5ccbc71fd1b9de089cea51ece8dcf20ea98cce374f82ac12b42af40696fa8bf0049666d366afd7b7f484e79e4c6e15fd838137cc0502253e2d365a353b378902048710c8e0006d163f1e5d4c95fda9f3489b82d79af23ec19f3e758b737f7e69f62dcdf7d1805a88febd054a04f8d3057813b9492cbf5eddb9b5d153c4171867f0081950affabe7759c888ecbea2023cd6ac569abf1f66fcef5d2314277d17d5a9aa9d6cf01a708a2ca524b9b5069a73d2ed5b06d2ac66ed809873c05f5f1ae07d6e0dc0eb07d4217e80b083a3c41438d0b5b081d4e3beb7419df80e9c1b2e60b876e31ac5ae3f84b84a1ee26bd87476fb08715a723ea7f8c7629bcfdc1ccd4", 0xf21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x31, 0x0, &(0x7f00000025c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x14, 0x10, 0x177, 0x0}) 37.035094636s ago: executing program 2 (id=1241): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 37.023149142s ago: executing program 3 (id=1242): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1, 0x7, 0x3, {0x0, @pix={0x0, 0x0, 0x30313953, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}}) 36.867496528s ago: executing program 5 (id=1243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xfec, 0x1, [@m_ipt={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x58, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xc0, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x95, 0x6, "78eecaa209275119972ece92d2e88234b9706d227b2a1990c2f992e5abc79d597fc027585b2a522cbba2bbfd70572af8567f1ac5a6e5481a81de72a4d3833341dd6471dd4c2e672e8897a728399ac8a74c6279db2979b2a6718d193ae48042161bb00344ee79f3bef993b0ebcfa56777889cafa2e9d829ae9a3c3afaaaf9f70a7d5fa46e3ad32738204d8e94f4c600a9d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x3c, 0x1e, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xdc8, 0x8, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x2, 0x4}}, @TCA_IPT_HOOK={0x8}]}, {0xd61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x98, 0x14, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x69, 0x6, {0xb8, 'raw\x00', 0x1f, 0x26, "374cf76660b32ef74cf77b9ffe7f6bfbf5178692237ffdfcb310b13da6b966c705e4ab4efe4a16c41962f45abf219e56c0297164ac536ffe18646a20a5f435"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 36.866757036s ago: executing program 3 (id=1244): capset(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 36.866527375s ago: executing program 2 (id=1245): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x330b, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 36.563733759s ago: executing program 4 (id=1246): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 35.322381443s ago: executing program 5 (id=1247): lgetxattr(0x0, &(0x7f0000000540)=@known='trusted.overlay.upper\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x17) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) futex(&(0x7f00000004c0), 0x3, 0xfffffbfd, 0x0, &(0x7f0000000080)=0xfffffffc, 0x93fffffa) 35.320722353s ago: executing program 3 (id=1248): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100002019500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) read$rfkill(r0, &(0x7f0000000000), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$radio(&(0x7f0000001800), 0x2, 0x2) readv(r4, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/150, 0x96}, {0x0}, {&(0x7f0000000500)=""/237, 0xed}, {0x0}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000000880)=""/156, 0x9c}], 0x7) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 34.766232619s ago: executing program 2 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 34.726927274s ago: executing program 4 (id=1250): timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) eventfd2(0x72, 0x800) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 33.551537476s ago: executing program 3 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000380), &(0x7f0000000340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x2}, {0x1ff, 0xffffffffe, 0x4053e5, 0x8000000000000001}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9df}, 0x1c) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) 31.438826049s ago: executing program 4 (id=1252): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffc, 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 30.399137841s ago: executing program 5 (id=1253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil, &(0x7f0000fc7000/0x13000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000000), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, 0x0, &(0x7f00000015c0)=""/132}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000140)="27bb8a6af547da4cad0fbd9a8e46fa06226f81d37635a6370b94c473d2c66a0324b50da8e60cbdc7109c4f7fa0", 0x2d, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0xa6, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x5, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0x80000df, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x3, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0xfd, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x85, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xffc, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x5, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0x6, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x4, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 30.308479545s ago: executing program 2 (id=1254): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 30.098413465s ago: executing program 3 (id=1255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 28.401192207s ago: executing program 4 (id=1256): socket$l2tp6(0xa, 0x2, 0x73) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r4, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 27.690528564s ago: executing program 2 (id=1257): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xfec, 0x1, [@m_ipt={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x58, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xc0, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x95, 0x6, "78eecaa209275119972ece92d2e88234b9706d227b2a1990c2f992e5abc79d597fc027585b2a522cbba2bbfd70572af8567f1ac5a6e5481a81de72a4d3833341dd6471dd4c2e672e8897a728399ac8a74c6279db2979b2a6718d193ae48042161bb00344ee79f3bef993b0ebcfa56777889cafa2e9d829ae9a3c3afaaaf9f70a7d5fa46e3ad32738204d8e94f4c600a9d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x3c, 0x1e, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xdc8, 0x8, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x2, 0x4}}, @TCA_IPT_HOOK={0x8}]}, {0xd61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x98, 0x14, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x69, 0x6, {0xb8, 'raw\x00', 0x1f, 0x26, "374cf76660b32ef74cf77b9ffe7f6bfbf5178692237ffdfcb310b13da6b966c705e4ab4efe4a16c41962f45abf219e56c0297164ac536ffe18646a20a5f435"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 0s ago: executing program 33 (id=1232): r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r0, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x7, @mcast1, 0x800}}, 0x0, 0x0, 0xb, 0x0, "9c3ae8602a6587fabf97ed464df8554f7ed6a3c451e16ff9811348627f1490e56ad2a1e80fe74337caa36a2ab72e287e31c935497662d6284d3c25ccb19cc3b11fd5b3ecdbba28f91c10658827776216"}, 0xd8) kernel console output (not intermixed with test programs): an_adv: batadv0: Adding interface: batadv_slave_1 [ 87.030046][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.030059][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.121371][ T5825] team0: Port device team_slave_1 added [ 87.139871][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.139882][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.139895][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.227007][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.227018][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.227031][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.540229][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.540245][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.540268][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.708968][ T5829] Bluetooth: hci0: command tx timeout [ 87.753073][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.753089][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.753111][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.788893][ T5829] Bluetooth: hci2: command tx timeout [ 87.788916][ T5823] Bluetooth: hci4: command tx timeout [ 87.788958][ T5823] Bluetooth: hci1: command tx timeout [ 87.823270][ T5813] hsr_slave_0: entered promiscuous mode [ 87.824331][ T5813] hsr_slave_1: entered promiscuous mode [ 87.832682][ T5830] hsr_slave_0: entered promiscuous mode [ 87.833940][ T5830] hsr_slave_1: entered promiscuous mode [ 87.834936][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 87.835047][ T5830] Cannot create hsr debugfs directory [ 87.867801][ T5829] Bluetooth: hci3: command tx timeout [ 87.950552][ T5816] hsr_slave_0: entered promiscuous mode [ 87.951842][ T5816] hsr_slave_1: entered promiscuous mode [ 87.952665][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 87.952686][ T5816] Cannot create hsr debugfs directory [ 88.259932][ T5814] hsr_slave_0: entered promiscuous mode [ 88.260771][ T5814] hsr_slave_1: entered promiscuous mode [ 88.261485][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 88.261506][ T5814] Cannot create hsr debugfs directory [ 88.812415][ T5825] hsr_slave_0: entered promiscuous mode [ 88.813709][ T5825] hsr_slave_1: entered promiscuous mode [ 88.814607][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 88.814628][ T5825] Cannot create hsr debugfs directory [ 89.788043][ T5829] Bluetooth: hci0: command tx timeout [ 89.871292][ T5829] Bluetooth: hci1: command tx timeout [ 89.871325][ T5829] Bluetooth: hci4: command tx timeout [ 89.871345][ T5829] Bluetooth: hci2: command tx timeout [ 89.957930][ T5819] Bluetooth: hci3: command tx timeout [ 90.159952][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.234758][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.289669][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.327055][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.479712][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.531279][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.581800][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.642205][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.767862][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.812463][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.844942][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.907253][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.062869][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.114146][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.155413][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.201056][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.265979][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.431864][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.432106][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.467362][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.506091][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.553932][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.587497][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.588221][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.650679][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.650813][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.762287][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.866002][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.881208][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.939059][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.939156][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.999695][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.999837][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.041542][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.105354][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.124805][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.125065][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.186086][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.187792][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.293474][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.331685][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.346882][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.347098][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.389207][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.389352][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.466787][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.492516][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.544162][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.548722][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.632079][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.637806][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.981483][ T5813] veth0_vlan: entered promiscuous mode [ 93.032107][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.059401][ T5813] veth1_vlan: entered promiscuous mode [ 93.157990][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.308814][ T5813] veth0_macvtap: entered promiscuous mode [ 93.368383][ T5813] veth1_macvtap: entered promiscuous mode [ 93.484231][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.523375][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.553953][ T5814] veth0_vlan: entered promiscuous mode [ 93.560421][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.564135][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.616579][ T1457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.630848][ T5814] veth1_vlan: entered promiscuous mode [ 93.632700][ T1457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636559][ T1457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.646871][ T1457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.935181][ T5825] veth0_vlan: entered promiscuous mode [ 94.008391][ T5814] veth0_macvtap: entered promiscuous mode [ 94.046104][ T5825] veth1_vlan: entered promiscuous mode [ 94.055365][ T5816] veth0_vlan: entered promiscuous mode [ 94.064101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.064127][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.088480][ T5814] veth1_macvtap: entered promiscuous mode [ 94.155646][ T5816] veth1_vlan: entered promiscuous mode [ 94.198242][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.198263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.235685][ T5830] veth0_vlan: entered promiscuous mode [ 94.242366][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.297170][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.320258][ T5830] veth1_vlan: entered promiscuous mode [ 94.333700][ T5825] veth0_macvtap: entered promiscuous mode [ 94.336651][ T1438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352771][ T1438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.369766][ T1438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396711][ T1438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413833][ T5825] veth1_macvtap: entered promiscuous mode [ 94.456064][ T5816] veth0_macvtap: entered promiscuous mode [ 94.552268][ T5816] veth1_macvtap: entered promiscuous mode [ 95.483552][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.588295][ T5830] veth0_macvtap: entered promiscuous mode [ 95.656167][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.695697][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.809360][ T1438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.809421][ T1438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.946557][ T5830] veth1_macvtap: entered promiscuous mode [ 96.229067][ T981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.250473][ T981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.325031][ T981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.327592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.338869][ T981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.763639][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.765001][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.776840][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.776859][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.371331][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.469806][ T1108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.472779][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.519083][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.553157][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.554689][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.577889][ T1108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.580222][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653011][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.913029][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.037271][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.037290][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.226624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.226645][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.299596][ T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.299612][ T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.357954][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.426412][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.426432][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.548313][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 98.548340][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.582262][ T5908] usb 2-1: config 0 descriptor?? [ 98.610199][ T5908] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 98.713328][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.713346][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.037357][ T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.037379][ T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.046166][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.085611][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.673091][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.175070][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.712697][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.559873][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.675142][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.861830][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.177405][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.330903][ T5908] usb 2-1: USB disconnect, device number 2 [ 102.515239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.845472][ T5992] random: crng reseeded on system resumption [ 103.392279][ T5992] Zero length message leads to an empty skb [ 103.497729][ T5971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.498232][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.648482][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 103.677126][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.677156][ T5971] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.677168][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.728289][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 103.730808][ T5971] usb 4-1: config 0 descriptor?? [ 103.934015][ T5900] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 103.934043][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.934062][ T5900] usb 1-1: Product: syz [ 103.934075][ T5900] usb 1-1: Manufacturer: syz [ 103.934088][ T5900] usb 1-1: SerialNumber: syz [ 104.194149][ T5900] usb 1-1: config 0 descriptor?? [ 104.913014][ T6001] random: crng reseeded on system resumption [ 104.919024][ T5900] as10x_usb: device has been detected [ 104.920134][ T5900] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 105.127592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.226508][ T5900] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 105.467596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.493256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 105.847571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.847613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.847645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.847676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.217177][ T5971] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 106.217217][ T5971] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 106.217241][ T5971] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 106.217265][ T5971] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 106.217289][ T5971] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 106.228820][ T5971] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 106.409720][ T5900] as10x_usb: error during firmware upload part1 [ 106.410403][ T5900] Registered device Sky IT Digital Key (green led) [ 106.451105][ T5900] usb 1-1: USB disconnect, device number 2 [ 107.481085][ T5900] Unregistered device Sky IT Digital Key (green led) [ 107.631446][ T5900] as10x_usb: device has been disconnected [ 107.649634][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 107.725356][ T5971] usb 4-1: USB disconnect, device number 2 [ 115.829939][ T6068] tty tty4: ldisc open failed (-12), clearing slot 3 [ 119.968564][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.557808][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.717730][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 120.720136][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 120.720164][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 120.720185][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 120.720205][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 120.720227][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 120.736594][ T5900] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 120.736621][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.736648][ T5900] usb 3-1: Product: syz [ 120.736660][ T5900] usb 3-1: Manufacturer: syz [ 120.736672][ T5900] usb 3-1: SerialNumber: syz [ 120.788959][ T5900] usb 3-1: config 0 descriptor?? [ 120.942120][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.944824][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.945747][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.946981][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.976273][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.838337][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 123.838407][ T5900] input input5: Device does not respond to id packet M [ 123.937370][ T5829] Bluetooth: hci5: command tx timeout [ 123.970282][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 123.970331][ T5900] input input5: Device does not respond to id packet P [ 124.221904][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.221954][ T5900] input input5: Device does not respond to id packet B [ 124.222465][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.222507][ T5900] input input5: Device does not respond to id packet N [ 124.222924][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.223356][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.223848][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.225520][ T5900] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 124.313597][ T6122] chnl_net:caif_netlink_parms(): no params data found [ 124.342909][ T5900] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 125.199381][ T5900] usb 3-1: USB disconnect, device number 2 [ 125.318823][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.947953][ T5829] Bluetooth: hci5: command tx timeout [ 126.780412][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.437598][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.015611][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.111717][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.137361][ T5829] Bluetooth: hci5: command tx timeout [ 128.731646][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.188019][ T5829] Bluetooth: hci5: command tx timeout [ 131.162513][ T3996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.830233][ T5907] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 132.283598][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.298169][ T5907] usb 1-1: not running at top speed; connect to a high speed hub [ 132.319907][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.319930][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.356079][ T5907] usb 1-1: string descriptor 0 read error: -22 [ 132.356218][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.356238][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.433906][ T5907] usb 1-1: 0:2 : does not exist [ 133.059416][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.123638][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.175781][ T3996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.474321][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.474447][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.474682][ T6122] bridge_slave_0: entered allmulticast mode [ 134.488615][ T6122] bridge_slave_0: entered promiscuous mode [ 134.503264][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.504909][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.505147][ T6122] bridge_slave_1: entered allmulticast mode [ 134.525328][ T6122] bridge_slave_1: entered promiscuous mode [ 134.582218][ T5907] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 134.597802][ T5907] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 134.693387][ T5907] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 134.720647][ T5907] usb 1-1: USB disconnect, device number 3 [ 134.851483][ T6226] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 135.123801][ T3996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.790640][ T3996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.231620][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.298215][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.321292][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 141.270937][ T6122] team0: Port device team_slave_0 added [ 141.528581][ T6122] team0: Port device team_slave_1 added [ 142.988527][ T6299] overlayfs: missing 'lowerdir' [ 144.628151][ T6308] ======================================================= [ 144.628151][ T6308] WARNING: The mand mount option has been deprecated and [ 144.628151][ T6308] and is ignored by this kernel. Remove the mand [ 144.628151][ T6308] option from the mount to silence this warning. [ 144.628151][ T6308] ======================================================= [ 144.628417][ T6308] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 145.204751][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.204766][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.204797][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.653689][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.653704][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.653727][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.275995][ T3996] bridge_slave_1: left allmulticast mode [ 147.276321][ T3996] bridge_slave_1: left promiscuous mode [ 147.278999][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.478794][ T6330] infiniband syz2: set active [ 147.478820][ T6330] infiniband syz2: added batadv_slave_0 [ 147.482033][ T6330] syz2: rxe_create_cq: returned err = -12 [ 147.482197][ T6330] infiniband syz2: Couldn't create ib_mad CQ [ 147.482389][ T6330] infiniband syz2: Couldn't open port 1 [ 147.529506][ T6330] RDS/IB: syz2: added [ 147.530205][ T6330] smc: adding ib device syz2 with port count 1 [ 147.530393][ T6330] smc: ib device syz2 port 1 has pnetid [ 147.699975][ T3996] bridge_slave_0: left allmulticast mode [ 147.700008][ T3996] bridge_slave_0: left promiscuous mode [ 147.700712][ T3996] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.831376][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 155.962556][ T3996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.039850][ T3996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.060527][ T3996] bond0 (unregistering): Released all slaves [ 156.274338][ T6122] hsr_slave_0: entered promiscuous mode [ 156.275371][ T6122] hsr_slave_1: entered promiscuous mode [ 156.276100][ T6122] debugfs: 'hsr0' already exists in 'hsr' [ 156.276119][ T6122] Cannot create hsr debugfs directory [ 162.899076][ T37] audit: type=1804 audit(1759262325.329:2): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.151" name="/newroot/35/file0" dev="tmpfs" ino=208 res=1 errno=0 [ 171.508379][ T6548] Bluetooth: MGMT ver 1.23 [ 171.510105][ T6546] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 171.708270][ T6551] netlink: 96 bytes leftover after parsing attributes in process `syz.2.176'. [ 171.840877][ T6005] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.033543][ T6005] usb 1-1: Using ep0 maxpacket: 32 [ 173.038426][ T6005] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 173.038452][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.046047][ T6005] usb 1-1: config 0 descriptor?? [ 173.068921][ T6005] gspca_main: sunplus-2.14.0 probing 041e:400b [ 173.485155][ T5819] Bluetooth: hci0: command 0x0401 tx timeout [ 173.499650][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 173.523211][ T3996] hsr_slave_0: left promiscuous mode [ 174.387678][ T3996] hsr_slave_1: left promiscuous mode [ 174.390351][ T3996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.391171][ T3996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.548034][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.548491][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.584400][ T6005] gspca_sunplus: reg_w_riv err -71 [ 174.584508][ T6005] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 174.633894][ T6005] usb 1-1: USB disconnect, device number 4 [ 174.708139][ T3996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.708171][ T3996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.939549][ T3996] veth1_macvtap: left promiscuous mode [ 174.939815][ T3996] veth0_macvtap: left promiscuous mode [ 174.940126][ T3996] veth1_vlan: left promiscuous mode [ 174.940563][ T3996] veth0_vlan: left promiscuous mode [ 174.988043][ T6138] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.338498][ T6138] usb 3-1: Using ep0 maxpacket: 16 [ 175.344531][ T6138] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 175.344557][ T6138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.344574][ T6138] usb 3-1: Product: syz [ 175.344587][ T6138] usb 3-1: Manufacturer: syz [ 175.344599][ T6138] usb 3-1: SerialNumber: syz [ 175.396120][ T6138] usb 3-1: config 0 descriptor?? [ 175.449640][ T6138] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 175.451929][ T6571] syz.0.175 (6571) used greatest stack depth: 18896 bytes left [ 175.547950][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 175.622346][ T1457] usb 3-1: Failed to submit usb control message: -71 [ 175.622376][ T1457] usb 3-1: unable to send the bmi data to the device: -71 [ 175.622388][ T1457] usb 3-1: unable to get target info from device [ 175.622411][ T1457] usb 3-1: could not get target info (-71) [ 175.641901][ T6138] usb 3-1: USB disconnect, device number 3 [ 175.663708][ T1457] usb 3-1: could not probe fw (-71) [ 176.167683][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.317830][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 176.338080][ T45] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 176.338105][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.338122][ T45] usb 1-1: Product: syz [ 176.338132][ T45] usb 1-1: Manufacturer: syz [ 176.338144][ T45] usb 1-1: SerialNumber: syz [ 176.412816][ T45] usb 1-1: config 0 descriptor?? [ 176.440739][ T45] as10x_usb: device has been detected [ 176.441647][ T45] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 176.512633][ T45] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 177.028000][ T45] as10x_usb: error during firmware upload part1 [ 177.028697][ T45] Registered device Sky IT Digital Key (green led) [ 177.077008][ T45] usb 1-1: USB disconnect, device number 5 [ 177.285818][ T45] Unregistered device Sky IT Digital Key (green led) [ 177.534033][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.065548][ T45] as10x_usb: device has been disconnected [ 178.267243][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.535072][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.770241][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.447990][ T6612] fuse: Unknown parameter 'çä†KÏÆêCúõ¾[^k·ú¾;ªü16¡bWè3NiL퀵ˆ¤ ^wûWs΄d:Þ›Ö4ÃÛƒ©ƒ8ïÉhÒ*7`/éûÓBHB*‡„#ÃBÒÚÌ1¨/‹Ön´1¦…é‹0€a´: ¡îHNJ(?ífbû‹½xI$€^”0ÝT¼¢ÜI·-ª&*á$©ëÀµ+13çcço>xóÔüÙ' [ 179.838560][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.612402][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.004390][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.776436][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.486554][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.780027][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.232992][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.274634][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.580406][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.707231][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.912178][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.010772][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.169400][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.193575][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.207725][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.229906][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.234416][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.533630][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.950467][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.912885][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.653226][ T5819] Bluetooth: hci1: command tx timeout [ 187.608451][ T3996] team0 (unregistering): Port device team_slave_1 removed [ 188.780586][ T5819] Bluetooth: hci1: command tx timeout [ 188.798365][ T3996] team0 (unregistering): Port device team_slave_0 removed [ 189.413511][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.930625][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.314356][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.500190][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.798759][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.835446][ T5819] Bluetooth: hci1: command tx timeout [ 190.835534][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.101825][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.277420][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 191.286850][ T6692] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.966137][ T6663] warning: `syz.4.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.062834][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.310871][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.390521][ T6122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.544129][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.574129][ T6661] netlink: 96 bytes leftover after parsing attributes in process `syz.0.207'. [ 192.908326][ T5819] Bluetooth: hci1: command tx timeout [ 193.097809][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.250909][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.547764][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 193.582165][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.605782][ T9] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 193.605807][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.605823][ T9] usb 4-1: Product: syz [ 193.605835][ T9] usb 4-1: Manufacturer: syz [ 193.605847][ T9] usb 4-1: SerialNumber: syz [ 193.658862][ T9] usb 4-1: config 0 descriptor?? [ 193.977778][ T9] as10x_usb: device has been detected [ 193.978332][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 194.125214][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 194.331077][ T9] as10x_usb: error during firmware upload part1 [ 194.331763][ T9] Registered device Sky IT Digital Key (green led) [ 194.374119][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374190][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446204][ T9] usb 4-1: USB disconnect, device number 3 [ 194.472319][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 194.477771][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.632663][ T9] Unregistered device Sky IT Digital Key (green led) [ 194.633304][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 194.640726][ T45] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 194.640754][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.676789][ T5907] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 194.676815][ T5907] usb 1-1: config 0 has no interface number 0 [ 194.680507][ T5907] usb 1-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb [ 194.680533][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.680550][ T5907] usb 1-1: Product: syz [ 194.680562][ T5907] usb 1-1: Manufacturer: syz [ 194.680574][ T5907] usb 1-1: SerialNumber: syz [ 194.742858][ T9] as10x_usb: device has been disconnected [ 194.807878][ T45] usb 5-1: config 0 descriptor?? [ 194.874980][ T45] gspca_main: sunplus-2.14.0 probing 041e:400b [ 194.897017][ T5907] usb 1-1: config 0 descriptor?? [ 195.091630][ T6741] netlink: 96 bytes leftover after parsing attributes in process `syz.3.228'. [ 195.169072][ T6138] usb 1-1: USB disconnect, device number 6 [ 196.089166][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.097806][ T45] gspca_sunplus: reg_w_riv err -110 [ 196.097891][ T45] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 196.234252][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.234779][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.284062][ T9] usb 5-1: USB disconnect, device number 2 [ 196.696281][ T6756] trusted_key: syz.3.231 sent an empty control message without MSG_MORE. [ 198.790337][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.864912][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.454759][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.320045][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.540877][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.659779][ T6800] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.680694][ T37] audit: type=1804 audit(1759262363.149:3): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.239" name="/newroot/51/file0" dev="tmpfs" ino=277 res=1 errno=0 [ 202.089606][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.567778][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.612057][ T6649] chnl_net:caif_netlink_parms(): no params data found [ 203.760851][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.767732][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 203.767760][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.767778][ T9] usb 4-1: Product: syz [ 203.767790][ T9] usb 4-1: Manufacturer: syz [ 203.767802][ T9] usb 4-1: SerialNumber: syz [ 204.900696][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.986339][ T9] usb 4-1: config 0 descriptor?? [ 205.007847][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 205.229207][ T6831] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 205.597641][ T6831] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.599987][ T6831] bond0: (slave team0): Enslaving as an active interface with an up link [ 205.947326][ T3996] bridge_slave_1: left allmulticast mode [ 205.947356][ T3996] bridge_slave_1: left promiscuous mode [ 205.947834][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.207250][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.489619][ T9] gspca_sunplus: reg_r err -110 [ 206.492452][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 206.833208][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.844482][ T3996] bridge_slave_0: left allmulticast mode [ 206.844511][ T3996] bridge_slave_0: left promiscuous mode [ 206.844816][ T3996] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.907818][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 206.907849][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 206.917702][ T5134] Bluetooth: hci0: command 0x0401 tx timeout [ 206.917754][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 206.993201][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.080693][ T45] usb 4-1: USB disconnect, device number 4 [ 207.837651][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.987688][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 207.994423][ T9] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 207.994450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.994466][ T9] usb 1-1: Product: syz [ 207.994478][ T9] usb 1-1: Manufacturer: syz [ 207.994490][ T9] usb 1-1: SerialNumber: syz [ 208.026932][ T9] usb 1-1: config 0 descriptor?? [ 208.151793][ T9] as10x_usb: device has been detected [ 208.152896][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 208.218411][ T3996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.241345][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 208.247378][ T6866] 9pnet_fd: Insufficient options for proto=fd [ 208.273951][ T9] as10x_usb: error during firmware upload part1 [ 208.274629][ T9] Registered device Sky IT Digital Key (green led) [ 208.292415][ T9] usb 1-1: USB disconnect, device number 7 [ 208.361744][ T9] Unregistered device Sky IT Digital Key (green led) [ 208.395589][ T9] as10x_usb: device has been disconnected [ 208.419523][ T3996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.550656][ T3996] bond0 (unregistering): Released all slaves [ 208.888047][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.671618][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.804524][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.551676][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.560919][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.561153][ T6649] bridge_slave_0: entered allmulticast mode [ 210.700030][ T6649] bridge_slave_0: entered promiscuous mode [ 210.716068][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.731322][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.731568][ T6649] bridge_slave_1: entered allmulticast mode [ 210.841896][ T6649] bridge_slave_1: entered promiscuous mode [ 210.978513][ T45] kernel write not supported for file bpf-prog (pid: 45 comm: kworker/0:2) [ 211.347030][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.174104][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.403580][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.954969][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.003382][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.691328][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.692650][ T5907] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.788619][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.840060][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 213.845605][ T5907] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 213.845621][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.845630][ T5907] usb 3-1: Product: syz [ 213.845637][ T5907] usb 3-1: Manufacturer: syz [ 213.845644][ T5907] usb 3-1: SerialNumber: syz [ 214.217670][ T5907] usb 3-1: config 0 descriptor?? [ 214.376603][ T5907] as10x_usb: device has been detected [ 214.385550][ T5907] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 214.568606][ T5907] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 214.729553][ T5907] as10x_usb: error during firmware upload part1 [ 214.804050][ T5907] Registered device Sky IT Digital Key (green led) [ 215.282564][ T5907] usb 3-1: USB disconnect, device number 4 [ 215.376379][ T45] kernel write not supported for file bpf-prog (pid: 45 comm: kworker/0:2) [ 215.458114][ T5907] Unregistered device Sky IT Digital Key (green led) [ 215.470739][ T5907] as10x_usb: device has been disconnected [ 215.785250][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.815026][ T6649] team0: Port device team_slave_0 added [ 216.138067][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 216.149753][ T6946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.158585][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.443369][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.010616][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.897664][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.175532][ T3996] hsr_slave_0: left promiscuous mode [ 218.228002][ T5971] kernel write not supported for file bpf-prog (pid: 5971 comm: kworker/0:6) [ 218.267319][ T3996] hsr_slave_1: left promiscuous mode [ 218.268448][ T3996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.323957][ T3996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.800852][ T5971] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.947638][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 218.952446][ T5971] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 218.952473][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.952491][ T5971] usb 3-1: Product: syz [ 218.952504][ T5971] usb 3-1: Manufacturer: syz [ 218.952516][ T5971] usb 3-1: SerialNumber: syz [ 218.990271][ T5971] usb 3-1: config 0 descriptor?? [ 219.062065][ T5971] as10x_usb: device has been detected [ 219.063041][ T5971] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 219.175580][ T5971] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 219.207098][ T5971] as10x_usb: error during firmware upload part1 [ 219.208026][ T5971] Registered device Sky IT Digital Key (green led) [ 219.258380][ T5971] usb 3-1: USB disconnect, device number 5 [ 219.410541][ T5971] Unregistered device Sky IT Digital Key (green led) [ 219.418624][ T5971] as10x_usb: device has been disconnected [ 220.501515][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.809002][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.844970][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.947366][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.064782][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.361280][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.544306][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.066775][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.513854][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.948911][ T3996] team0 (unregistering): Port device team_slave_1 removed [ 223.425902][ T3996] team0 (unregistering): Port device team_slave_0 removed [ 225.495009][ T6649] team0: Port device team_slave_1 added [ 225.597756][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.738996][ T5817] usb 5-1: device descriptor read/64, error -71 [ 225.987780][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 226.127980][ T5817] usb 5-1: device descriptor read/64, error -71 [ 226.337970][ T5817] usb usb5-port1: attempt power cycle [ 227.400283][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 227.557785][ T5817] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 227.592543][ T5817] usb 5-1: device descriptor read/8, error -71 [ 227.644791][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.644807][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.644830][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.666454][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.666470][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.666493][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.420917][ T5817] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 228.589739][ T5817] usb 5-1: device descriptor read/8, error -71 [ 228.698047][ T5817] usb usb5-port1: unable to enumerate USB device [ 230.647841][ T6649] hsr_slave_0: entered promiscuous mode [ 230.654834][ T6649] hsr_slave_1: entered promiscuous mode [ 230.655668][ T6649] debugfs: 'hsr0' already exists in 'hsr' [ 230.655689][ T6649] Cannot create hsr debugfs directory [ 231.373386][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 232.336711][ T5817] kernel write not supported for file bpf-prog (pid: 5817 comm: kworker/0:3) [ 232.767652][ T5817] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.929630][ T5817] usb 5-1: device descriptor read/64, error -71 [ 233.167704][ T5817] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 233.317653][ T5817] usb 5-1: device descriptor read/64, error -71 [ 234.216965][ T5817] usb usb5-port1: attempt power cycle [ 234.557665][ T5817] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.578675][ T5817] usb 5-1: device descriptor read/8, error -71 [ 235.324833][ T7126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.330280][ T5817] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.537612][ T5817] usb 5-1: device not accepting address 10, error -71 [ 236.540848][ T5817] usb usb5-port1: unable to enumerate USB device [ 239.838850][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.039445][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 240.220017][ T5865] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 240.220146][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.220265][ T5865] usb 4-1: Product: syz [ 240.220386][ T5865] usb 4-1: Manufacturer: syz [ 240.220500][ T5865] usb 4-1: SerialNumber: syz [ 240.596507][ T5865] usb 4-1: config 0 descriptor?? [ 240.617880][ T5865] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 240.620053][ T5865] usb 4-1: Detected FT-X [ 240.772955][ T5865] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 240.773417][ T5865] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 240.774036][ T5865] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 241.546659][ T5865] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 241.580563][ T5865] usb 4-1: USB disconnect, device number 5 [ 241.602980][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 241.603742][ T5865] ftdi_sio 4-1:0.0: device disconnected [ 242.417669][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.557744][ T5865] usb 4-1: device descriptor read/64, error -71 [ 243.867777][ T5865] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.997700][ T5865] usb 4-1: device descriptor read/64, error -71 [ 244.118044][ T5865] usb usb4-port1: attempt power cycle [ 245.016118][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.099348][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.100593][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.102497][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.103441][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.919326][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.359'. [ 246.919352][ T7217] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.353821][ T5821] Bluetooth: hci5: command tx timeout [ 248.732655][ T1128] bridge_slave_1: left allmulticast mode [ 248.732688][ T1128] bridge_slave_1: left promiscuous mode [ 248.732939][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.858592][ T7258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.474626][ T5821] Bluetooth: hci5: command tx timeout [ 249.712192][ T1128] bridge_slave_0: left allmulticast mode [ 249.712223][ T1128] bridge_slave_0: left promiscuous mode [ 249.712465][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.715985][ T7264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'. [ 249.716006][ T7264] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.390225][ T7273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.547656][ T5821] Bluetooth: hci5: command tx timeout [ 252.250777][ T5821] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 252.360582][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.527624][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 252.530769][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 252.530795][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.562524][ T9] usb 1-1: config 0 descriptor?? [ 252.576996][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 252.919254][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.052687][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.148299][ T1128] bond0 (unregistering): Released all slaves [ 253.661436][ T5821] Bluetooth: hci5: command tx timeout [ 253.667967][ T9] gspca_sunplus: reg_r err -110 [ 253.668067][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 254.162642][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.163219][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.812853][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812929][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.072989][ T45] usb 1-1: USB disconnect, device number 8 [ 256.220162][ T5821] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 256.220182][ T5821] Bluetooth: hci4: Unknown advertising packet type: 0x72 [ 256.220193][ T5821] Bluetooth: hci4: Malformed LE Event: 0x0d [ 256.241653][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 258.331245][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 259.228045][ T1128] hsr_slave_0: left promiscuous mode [ 259.255570][ T7358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.392'. [ 259.255593][ T7358] openvswitch: netlink: Flow actions attr not present in new flow. [ 259.288017][ T1128] hsr_slave_1: left promiscuous mode [ 259.288914][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.328443][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.404206][ T7370] process 'syz.0.394' launched './file1' with NULL argv: empty string added [ 262.002074][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 262.127615][ T5907] usb 3-1: device descriptor read/64, error -71 [ 262.294104][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 262.367668][ T5907] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 262.428520][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 262.503670][ T5907] usb 3-1: device descriptor read/64, error -71 [ 262.607951][ T5907] usb usb3-port1: attempt power cycle [ 262.967707][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 262.988459][ T5907] usb 3-1: device descriptor read/8, error -71 [ 263.045671][ T7373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.395'. [ 263.227853][ T5907] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 263.248915][ T5907] usb 3-1: device descriptor read/8, error -71 [ 263.358003][ T5907] usb usb3-port1: unable to enumerate USB device [ 266.041943][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.042081][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.042300][ T7193] bridge_slave_0: entered allmulticast mode [ 266.057624][ T7193] bridge_slave_0: entered promiscuous mode [ 266.456507][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.460441][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.477074][ T7193] bridge_slave_1: entered allmulticast mode [ 266.684232][ T7193] bridge_slave_1: entered promiscuous mode [ 267.385091][ T7443] netlink: 96 bytes leftover after parsing attributes in process `syz.0.409'. [ 267.430506][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.410'. [ 267.430528][ T7447] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.768025][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.780896][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.048314][ T6005] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.218145][ T6005] usb 3-1: device descriptor read/64, error -71 [ 268.623673][ T6005] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.781878][ T7463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.898472][ T6005] usb 3-1: device descriptor read/64, error -71 [ 269.092581][ T6005] usb usb3-port1: attempt power cycle [ 269.777642][ T6005] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.799767][ T6005] usb 3-1: device descriptor read/8, error -71 [ 269.900035][ T7193] team0: Port device team_slave_0 added [ 269.921495][ T7193] team0: Port device team_slave_1 added [ 270.157733][ T6005] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 270.184151][ T6005] usb 3-1: device descriptor read/8, error -71 [ 270.391467][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.391482][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.391506][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.458854][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.458871][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.458895][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.490792][ T6138] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 270.537589][ T6005] usb usb3-port1: unable to enumerate USB device [ 271.487906][ T6138] usb 5-1: Using ep0 maxpacket: 16 [ 271.506244][ T6138] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 271.506270][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.506286][ T6138] usb 5-1: Product: syz [ 271.506297][ T6138] usb 5-1: Manufacturer: syz [ 271.506309][ T6138] usb 5-1: SerialNumber: syz [ 271.554108][ T6138] usb 5-1: config 0 descriptor?? [ 272.256788][ T6138] as10x_usb: device has been detected [ 272.300112][ T6138] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 272.444231][ T6138] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 272.451062][ T6138] as10x_usb: error during firmware upload part1 [ 272.451693][ T6138] Registered device Sky IT Digital Key (green led) [ 272.490908][ T6138] usb 5-1: USB disconnect, device number 11 [ 272.571659][ T6138] Unregistered device Sky IT Digital Key (green led) [ 272.605093][ T6138] as10x_usb: device has been disconnected [ 272.629456][ T7193] hsr_slave_0: entered promiscuous mode [ 272.630689][ T7193] hsr_slave_1: entered promiscuous mode [ 272.631552][ T7193] debugfs: 'hsr0' already exists in 'hsr' [ 272.631573][ T7193] Cannot create hsr debugfs directory [ 274.791833][ T37] audit: type=1804 audit(1759262436.599:4): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.424" name="/newroot/98/file0" dev="tmpfs" ino=538 res=1 errno=0 [ 278.587722][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 278.725906][ T9] usb 3-1: device descriptor read/64, error -71 [ 278.957728][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.159221][ T9] usb 3-1: device descriptor read/64, error -71 [ 279.273590][ T9] usb usb3-port1: attempt power cycle [ 279.853493][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.019209][ T9] usb 3-1: device descriptor read/8, error -71 [ 280.387719][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 280.408493][ T9] usb 3-1: device descriptor read/8, error -71 [ 280.519454][ T9] usb usb3-port1: unable to enumerate USB device [ 280.964350][ T7193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.957549][ T37] audit: type=1804 audit(1759262444.289:5): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.438" name="/newroot/108/file0" dev="tmpfs" ino=595 res=1 errno=0 [ 282.253013][ T7193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.758221][ T7193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.620796][ T7557] evm: overlay not supported [ 284.649040][ T7193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.584109][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.672146][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.694970][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.699316][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.782178][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.782327][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.088157][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.507699][ T989] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 290.670983][ T989] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 290.671020][ T989] usb 5-1: can't read configurations, error -61 [ 290.816947][ T989] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 290.990748][ T989] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 290.990784][ T989] usb 5-1: can't read configurations, error -61 [ 290.991378][ T989] usb usb5-port1: attempt power cycle [ 291.349164][ T989] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 291.646080][ T989] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 291.647947][ T989] usb 5-1: can't read configurations, error -61 [ 291.938450][ T989] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 292.348061][ T989] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 292.348097][ T989] usb 5-1: can't read configurations, error -61 [ 292.348530][ T989] usb usb5-port1: unable to enumerate USB device [ 292.767045][ T7193] veth0_vlan: entered promiscuous mode [ 292.912325][ T7656] bond0: (slave gretap0): Opening slave failed [ 292.961976][ T7193] veth1_vlan: entered promiscuous mode [ 293.158949][ T7193] veth0_macvtap: entered promiscuous mode [ 293.190270][ T7193] veth1_macvtap: entered promiscuous mode [ 293.404632][ T7663] bpf: Bad value for 'uid' [ 293.859043][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.945051][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.076942][ T6368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.147088][ T6368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.165955][ T6368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.193073][ T6368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.265478][ T6368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.265497][ T6368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.287805][ T5971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 295.508234][ T6368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.508262][ T6368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.517694][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 295.522885][ T5971] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 295.522912][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.522929][ T5971] usb 4-1: Product: syz [ 295.522941][ T5971] usb 4-1: Manufacturer: syz [ 295.522952][ T5971] usb 4-1: SerialNumber: syz [ 295.558102][ T5971] usb 4-1: config 0 descriptor?? [ 295.618578][ T5971] as10x_usb: device has been detected [ 295.619561][ T5971] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 295.737894][ T5971] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 295.830511][ T5971] as10x_usb: error during firmware upload part1 [ 295.840498][ T5971] Registered device Sky IT Digital Key (green led) [ 295.868216][ T5971] usb 4-1: USB disconnect, device number 9 [ 296.427439][ T5971] Unregistered device Sky IT Digital Key (green led) [ 296.441874][ T5971] as10x_usb: device has been disconnected [ 297.673856][ T7705] bpf: Bad value for 'uid' [ 297.997737][ T5865] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 298.150120][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.150145][ T5865] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.153120][ T5865] usb 3-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb [ 298.153145][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.153162][ T5865] usb 3-1: Product: syz [ 298.153174][ T5865] usb 3-1: Manufacturer: syz [ 298.153186][ T5865] usb 3-1: SerialNumber: syz [ 298.182678][ T5865] usb 3-1: config 0 descriptor?? [ 299.151493][ T6138] usb 3-1: USB disconnect, device number 18 [ 302.100411][ T7749] bpf: Bad value for 'uid' [ 305.548959][ T6138] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.509946][ T6138] usb 4-1: Using ep0 maxpacket: 16 [ 306.541769][ T6138] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 306.541788][ T6138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.541798][ T6138] usb 4-1: Product: syz [ 306.541805][ T6138] usb 4-1: Manufacturer: syz [ 306.541811][ T6138] usb 4-1: SerialNumber: syz [ 306.588932][ T6138] usb 4-1: config 0 descriptor?? [ 306.924498][ T6138] as10x_usb: device has been detected [ 306.925470][ T6138] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 306.982703][ T6138] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 307.006209][ T6138] as10x_usb: error during firmware upload part1 [ 307.006888][ T6138] Registered device Sky IT Digital Key (green led) [ 307.017311][ T6138] usb 4-1: USB disconnect, device number 10 [ 307.280169][ T37] audit: type=1804 audit(1759262470.149:6): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.496" name="/newroot/120/file0" dev="tmpfs" ino=657 res=1 errno=0 [ 308.186124][ T6138] Unregistered device Sky IT Digital Key (green led) [ 308.237730][ T6138] as10x_usb: device has been disconnected [ 310.962356][ T7813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.505'. [ 312.796000][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 313.230322][ T7836] overlayfs: missing 'lowerdir' [ 313.578159][ T5865] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 313.730620][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 313.958988][ T5865] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 313.959016][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.959033][ T5865] usb 3-1: Product: syz [ 313.959046][ T5865] usb 3-1: Manufacturer: syz [ 313.959059][ T5865] usb 3-1: SerialNumber: syz [ 314.012988][ T5865] usb 3-1: config 0 descriptor?? [ 314.457240][ T5865] as10x_usb: device has been detected [ 314.464116][ T5865] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 314.604787][ T5865] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 314.662943][ T5865] as10x_usb: error during firmware upload part1 [ 314.663611][ T5865] Registered device Sky IT Digital Key (green led) [ 314.691253][ T5865] usb 3-1: USB disconnect, device number 19 [ 314.743449][ T5865] Unregistered device Sky IT Digital Key (green led) [ 314.745633][ T5865] as10x_usb: device has been disconnected [ 317.279266][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279340][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.368828][ T7904] syz.0.533 (7904): drop_caches: 2 [ 325.807973][ T5971] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.977554][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 325.980237][ T5971] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 325.980263][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.108709][ T5971] usb 6-1: config 0 descriptor?? [ 327.284878][ T5971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 327.876765][ T7955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.460010][ T5971] gspca_sunplus: reg_r err -110 [ 328.460108][ T5971] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 328.802616][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.803392][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.047603][ T5817] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 330.058514][ T6005] usb 6-1: USB disconnect, device number 2 [ 330.207839][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 330.211496][ T5817] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 330.211534][ T5817] usb 1-1: config 0 has no interface number 0 [ 330.211630][ T5817] usb 1-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 330.211673][ T5817] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 330.211714][ T5817] usb 1-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.307959][ T5817] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 330.307998][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.308028][ T5817] usb 1-1: Product: syz [ 330.308055][ T5817] usb 1-1: Manufacturer: syz [ 330.308080][ T5817] usb 1-1: SerialNumber: syz [ 330.363342][ T5817] usb 1-1: config 0 descriptor?? [ 330.659673][ T7972] bond0: (slave gretap0): Opening slave failed [ 330.773463][ T5817] usb 1-1: USB disconnect, device number 9 [ 335.596184][ T8002] syz.0.560 (8002): drop_caches: 2 [ 340.256173][ T8063] bond0: (slave gretap0): Opening slave failed [ 345.539771][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.373977][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.733096][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.787880][ T8108] syz.5.590 (8108) used greatest stack depth: 18216 bytes left [ 346.950729][ T8116] overlay: Unknown parameter '\' [ 347.793815][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.083594][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.641628][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.851716][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.006703][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.291421][ T5821] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 349.488192][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.941796][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.828718][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.977638][ T5865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 355.244685][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.984578][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.027691][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 356.038920][ T5865] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 356.038937][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.038947][ T5865] usb 5-1: Product: syz [ 356.038954][ T5865] usb 5-1: Manufacturer: syz [ 356.038960][ T5865] usb 5-1: SerialNumber: syz [ 356.134994][ T5865] usb 5-1: config 0 descriptor?? [ 356.337343][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.026766][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.376100][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.167934][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.793988][ T5865] usb 5-1: can't set config #0, error -71 [ 359.795398][ T5865] usb 5-1: USB disconnect, device number 16 [ 362.631813][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.657480][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.732291][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.872363][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.004509][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 365.052933][ T8221] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.620'. [ 365.596053][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.522493][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.251876][ T5823] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 371.251943][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 375.150441][ T989] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 375.643956][ T989] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 375.643998][ T989] usb 1-1: config 160 has an invalid descriptor of length 255, skipping remainder of the config [ 375.644025][ T989] usb 1-1: config 160 has no interface number 0 [ 375.644071][ T989] usb 1-1: config 160 interface 200 has no altsetting 0 [ 375.705245][ T989] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 375.705271][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.705289][ T989] usb 1-1: Product: syz [ 375.705301][ T989] usb 1-1: Manufacturer: syz [ 375.705313][ T989] usb 1-1: SerialNumber: syz [ 376.024689][ T989] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.024754][ T989] usb 1-1: MIDIStreaming interface descriptor not found [ 376.354986][ T989] usb 1-1: USB disconnect, device number 10 [ 376.502536][ T5821] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 380.185204][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.185275][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.321587][ T7507] udevd[7507]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.708716][ T8316] netlink: 96 bytes leftover after parsing attributes in process `syz.2.648'. [ 382.107623][ T5907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 382.827668][ T5907] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 382.827697][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.893774][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 382.893800][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 382.893818][ T5907] usb 1-1: Product: syz [ 382.893830][ T5907] usb 1-1: Manufacturer: syz [ 382.893843][ T5907] usb 1-1: SerialNumber: syz [ 382.901051][ T5907] usb 1-1: config 0 descriptor?? [ 382.940373][ T5907] usb 1-1: selecting invalid altsetting 0 [ 384.427545][ T5948] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 386.024524][ T5948] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 386.024551][ T5948] usb 4-1: config 160 has an invalid descriptor of length 255, skipping remainder of the config [ 386.024567][ T5948] usb 4-1: config 160 has no interface number 0 [ 386.024613][ T5948] usb 4-1: config 160 interface 200 has no altsetting 0 [ 386.036239][ T5948] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 386.036267][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.036284][ T5948] usb 4-1: Product: syz [ 386.036296][ T5948] usb 4-1: Manufacturer: syz [ 386.036309][ T5948] usb 4-1: SerialNumber: syz [ 386.197316][ T5948] usb 4-1: can't set config #160, error -71 [ 386.206138][ T5948] usb 4-1: USB disconnect, device number 11 [ 386.918030][ T5907] usb 1-1: USB disconnect, device number 11 [ 386.939577][ T8362] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.658'. [ 387.027602][ T37] audit: type=1804 audit(1759262549.889:7): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.660" name="/newroot/148/file0" dev="tmpfs" ino=800 res=1 errno=0 [ 387.358099][ T7624] udevd[7624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.525555][ T8402] overlay: Unknown parameter '\' [ 392.627566][ T5948] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 392.780418][ T5948] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 392.780452][ T5948] usb 1-1: config 160 has no interface number 0 [ 392.780524][ T5948] usb 1-1: config 160 interface 200 has no altsetting 0 [ 392.817049][ T5948] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 392.817079][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.817097][ T5948] usb 1-1: Product: syz [ 392.817110][ T5948] usb 1-1: Manufacturer: syz [ 392.817122][ T5948] usb 1-1: SerialNumber: syz [ 392.860742][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 393.012913][ T8411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.147301][ T5948] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.147355][ T5948] usb 1-1: MIDIStreaming interface descriptor not found [ 394.607946][ T5948] usb 1-1: USB disconnect, device number 12 [ 395.487658][ T989] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 395.628185][ T8155] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 395.659306][ T8309] udevd[8309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.597664][ T8155] usb 6-1: Using ep0 maxpacket: 16 [ 396.621769][ T8155] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 396.621788][ T8155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.621797][ T8155] usb 6-1: Product: syz [ 396.621804][ T8155] usb 6-1: Manufacturer: syz [ 396.621811][ T8155] usb 6-1: SerialNumber: syz [ 396.637544][ T989] usb 3-1: Using ep0 maxpacket: 32 [ 396.642003][ T989] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 396.642029][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.714328][ T989] usb 3-1: config 0 descriptor?? [ 396.730848][ T8155] usb 6-1: config 0 descriptor?? [ 396.756711][ T8155] as10x_usb: device has been detected [ 396.765047][ T8155] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 396.780039][ T989] gspca_main: sunplus-2.14.0 probing 041e:400b [ 396.823623][ T8155] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 396.853868][ T8155] as10x_usb: error during firmware upload part1 [ 396.854986][ T8155] Registered device Sky IT Digital Key (green led) [ 397.080522][ T8155] usb 6-1: USB disconnect, device number 3 [ 397.246292][ T8155] Unregistered device Sky IT Digital Key (green led) [ 397.257044][ T8155] as10x_usb: device has been disconnected [ 398.129666][ T989] gspca_sunplus: reg_w_riv err -110 [ 398.131200][ T989] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 398.805427][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.805934][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.827168][ T5880] usb 3-1: USB disconnect, device number 20 [ 403.112999][ T37] audit: type=1804 audit(1759262565.889:8): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.695" name="/newroot/166/file0" dev="tmpfs" ino=871 res=1 errno=0 [ 403.564195][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 404.320975][ T5880] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 404.321002][ T5880] usb 4-1: config 160 has no interface number 0 [ 404.321051][ T5880] usb 4-1: config 160 interface 200 has no altsetting 0 [ 404.325213][ T5880] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 404.325240][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.325258][ T5880] usb 4-1: Product: syz [ 404.325271][ T5880] usb 4-1: Manufacturer: syz [ 404.325283][ T5880] usb 4-1: SerialNumber: syz [ 404.890282][ T5880] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.890332][ T5880] usb 4-1: MIDIStreaming interface descriptor not found [ 404.907606][ T5971] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 405.072276][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 405.124029][ T5971] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 405.124058][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.124075][ T5971] usb 1-1: Product: syz [ 405.124087][ T5971] usb 1-1: Manufacturer: syz [ 405.124100][ T5971] usb 1-1: SerialNumber: syz [ 405.171079][ T5971] usb 1-1: config 0 descriptor?? [ 405.172599][ T5880] usb 4-1: USB disconnect, device number 12 [ 405.265482][ T5971] as10x_usb: device has been detected [ 405.275597][ T5971] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 405.432825][ T5971] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 405.542981][ T5971] as10x_usb: error during firmware upload part1 [ 405.566653][ T5971] Registered device Sky IT Digital Key (green led) [ 405.671465][ T5971] usb 1-1: USB disconnect, device number 13 [ 407.111299][ T5971] Unregistered device Sky IT Digital Key (green led) [ 407.143499][ T5971] as10x_usb: device has been disconnected [ 407.306165][ T7624] udevd[7624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.391318][ T37] audit: type=1804 audit(1759262571.089:9): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.708" name="/newroot/160/file0" dev="tmpfs" ino=879 res=1 errno=0 [ 412.590755][ T8549] program syz.5.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.591759][ T8549] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 413.587555][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 413.747715][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 414.309828][ T5880] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 414.309855][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.309872][ T5880] usb 6-1: Product: syz [ 414.309885][ T5880] usb 6-1: Manufacturer: syz [ 414.309897][ T5880] usb 6-1: SerialNumber: syz [ 414.315667][ T5880] usb 6-1: config 0 descriptor?? [ 414.370376][ T5880] as10x_usb: device has been detected [ 414.371292][ T5880] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 414.405327][ T5880] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 414.427848][ T5880] as10x_usb: error during firmware upload part1 [ 414.428532][ T5880] Registered device Sky IT Digital Key (green led) [ 414.606434][ T5880] usb 6-1: USB disconnect, device number 4 [ 414.672919][ T5880] Unregistered device Sky IT Digital Key (green led) [ 414.676616][ T5880] as10x_usb: device has been disconnected [ 416.029215][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.203321][ T5907] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 416.549854][ T5907] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 416.549883][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.597921][ T5907] usb 4-1: config 0 descriptor?? [ 416.616592][ T5907] gspca_main: spca508-2.14.0 probing 8086:0110 [ 416.846295][ T5907] gspca_spca508: reg_read err -32 [ 416.867620][ T5907] gspca_spca508: reg_read err -32 [ 416.868301][ T5907] gspca_spca508: reg_read err -71 [ 416.868707][ T5907] gspca_spca508: reg_read err -71 [ 416.869173][ T5907] gspca_spca508: reg_read err -71 [ 416.870341][ T5907] gspca_spca508: reg write: error -71 [ 416.870426][ T5907] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 416.945437][ T5907] usb 4-1: USB disconnect, device number 13 [ 417.358330][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.166292][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.221864][ T8599] bond0: (slave gretap0): Opening slave failed [ 418.411125][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.246853][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.640243][ T6005] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 419.809436][ T6005] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.809454][ T6005] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.811457][ T6005] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.811472][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.811482][ T6005] usb 4-1: Product: syz [ 419.811489][ T6005] usb 4-1: Manufacturer: syz [ 419.811496][ T6005] usb 4-1: SerialNumber: syz [ 419.940292][ T6005] usb 4-1: config 0 descriptor?? [ 419.985936][ T6005] usb 4-1: selecting invalid altsetting 0 [ 421.660914][ T8628] overlayfs: missing 'lowerdir' [ 422.771766][ T5865] usb 4-1: USB disconnect, device number 14 [ 423.118037][ T8633] overlay: Unknown parameter '\' [ 423.494637][ T5865] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 423.762297][ T5821] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 423.864313][ T5865] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 423.864389][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.102321][ T5865] usb 4-1: config 0 descriptor?? [ 424.156410][ T5865] gspca_main: spca508-2.14.0 probing 8086:0110 [ 424.365034][ T5865] gspca_spca508: reg_read err -32 [ 424.366764][ T5865] gspca_spca508: reg_read err -32 [ 424.405910][ T5865] gspca_spca508: reg_read err -71 [ 424.406327][ T5865] gspca_spca508: reg_read err -71 [ 424.406706][ T5865] gspca_spca508: reg_read err -71 [ 424.407272][ T5865] gspca_spca508: reg write: error -71 [ 424.407384][ T5865] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 424.459323][ T5865] usb 4-1: USB disconnect, device number 15 [ 425.623538][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.834628][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.308265][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.078648][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.657582][ T8673] overlayfs: missing 'lowerdir' [ 427.658539][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.807578][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.102048][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.655403][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.940098][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.434448][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.477959][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.447668][ T5948] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 430.914305][ T5948] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 430.914383][ T5948] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.292330][ T5821] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 431.451210][ T5948] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.451231][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 431.451240][ T5948] usb 6-1: Product: syz [ 431.451247][ T5948] usb 6-1: Manufacturer: syz [ 431.451254][ T5948] usb 6-1: SerialNumber: syz [ 431.520920][ T5948] usb 6-1: config 0 descriptor?? [ 431.528504][ T5948] usb 6-1: selecting invalid altsetting 0 [ 434.550186][ T5948] usb 6-1: USB disconnect, device number 5 [ 435.739043][ T8309] udevd[8309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.480214][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 440.120001][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.120083][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.653102][ T8749] overlayfs: missing 'lowerdir' [ 441.557605][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 441.739134][ T5865] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 441.739160][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.771788][ T5865] usb 1-1: config 0 descriptor?? [ 441.809492][ T5865] gspca_main: spca508-2.14.0 probing 8086:0110 [ 441.984387][ T5865] gspca_spca508: reg_read err -32 [ 442.191414][ T5865] gspca_spca508: reg_read err -71 [ 442.192909][ T5865] gspca_spca508: reg_read err -71 [ 442.193309][ T5865] gspca_spca508: reg_read err -71 [ 442.193700][ T5865] gspca_spca508: reg write: error -71 [ 442.193786][ T5865] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 442.247642][ T5865] usb 1-1: USB disconnect, device number 14 [ 442.569441][ T8767] netlink: 'syz.2.786': attribute type 16 has an invalid length. [ 442.569464][ T8767] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.786'. [ 444.141801][ T8781] overlayfs: missing 'lowerdir' [ 444.994747][ T37] audit: type=1804 audit(1759262607.679:10): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.791" name="/newroot/181/file0" dev="tmpfs" ino=954 res=1 errno=0 [ 445.848307][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 446.028244][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 446.739149][ T5900] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 446.739176][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.775243][ T5900] usb 5-1: config 0 descriptor?? [ 446.804857][ T5900] gspca_main: sunplus-2.14.0 probing 041e:400b [ 447.612069][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.612590][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.617580][ T5900] gspca_sunplus: reg_r err -71 [ 447.617639][ T5900] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 447.663431][ T5900] usb 5-1: USB disconnect, device number 17 [ 449.225186][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.800'. [ 449.225209][ T8813] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.336107][ T8831] netlink: 96 bytes leftover after parsing attributes in process `syz.5.805'. [ 456.254402][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 456.435859][ T8868] veth1: entered promiscuous mode [ 460.064903][ T8889] overlayfs: missing 'lowerdir' [ 465.039939][ T8924] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.832'. [ 466.505773][ T8938] overlayfs: missing 'lowerdir' [ 467.315907][ T37] audit: type=1804 audit(1759262630.199:11): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.833" name="/newroot/96/file0" dev="tmpfs" ino=537 res=1 errno=0 [ 469.217560][ T6005] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 469.390501][ T5865] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 469.401494][ T6005] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 469.401521][ T6005] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.404076][ T6005] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 469.404102][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 469.404120][ T6005] usb 3-1: Product: syz [ 469.404132][ T6005] usb 3-1: Manufacturer: syz [ 469.404144][ T6005] usb 3-1: SerialNumber: syz [ 469.459021][ T5971] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 469.475357][ T6005] usb 3-1: config 0 descriptor?? [ 469.499568][ T6005] usb 3-1: selecting invalid altsetting 0 [ 469.549259][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 469.551854][ T5865] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 469.551880][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.590694][ T5865] usb 5-1: config 0 descriptor?? [ 469.593688][ T5865] gspca_main: sunplus-2.14.0 probing 041e:400b [ 469.659347][ T5971] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 469.659365][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 469.661465][ T5971] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 469.661480][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 469.661489][ T5971] usb 4-1: Product: syz [ 469.661580][ T5971] usb 4-1: Manufacturer: syz [ 469.661588][ T5971] usb 4-1: SerialNumber: syz [ 469.703420][ T5971] usb 4-1: config 0 descriptor?? [ 470.899416][ T5865] gspca_sunplus: reg_w_riv err -110 [ 470.899509][ T5865] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 471.036311][ T5971] usb 4-1: selecting invalid altsetting 0 [ 471.273407][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.273899][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.410202][ T5971] usb 3-1: USB disconnect, device number 21 [ 472.411987][ T5948] usb 4-1: USB disconnect, device number 16 [ 472.568455][ T5865] usb 5-1: USB disconnect, device number 18 [ 472.955542][ T8980] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.237786][ T5948] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 478.411422][ T5865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 478.580678][ T5948] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 478.580707][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 478.686886][ T5948] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 478.686903][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 478.686913][ T5948] usb 4-1: Product: syz [ 478.686920][ T5948] usb 4-1: Manufacturer: syz [ 478.686926][ T5948] usb 4-1: SerialNumber: syz [ 478.710116][ T5948] usb 4-1: config 0 descriptor?? [ 478.715672][ T5865] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 478.715697][ T5865] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.721282][ T5865] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 478.721308][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 478.721326][ T5865] usb 6-1: Product: syz [ 478.721338][ T5865] usb 6-1: Manufacturer: syz [ 478.721350][ T5865] usb 6-1: SerialNumber: syz [ 478.739512][ T5865] usb 6-1: config 0 descriptor?? [ 478.766953][ T5948] usb 4-1: selecting invalid altsetting 0 [ 478.907731][ T6005] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 479.792430][ T6005] usb 5-1: Using ep0 maxpacket: 32 [ 479.794778][ T6005] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 479.794803][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.809640][ T5865] usb 6-1: selecting invalid altsetting 0 [ 479.853101][ T6005] usb 5-1: config 0 descriptor?? [ 480.195716][ T6005] gspca_main: sunplus-2.14.0 probing 041e:400b [ 480.589050][ T37] audit: type=1804 audit(1759262643.459:12): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.858" name="/newroot/188/file0" dev="tmpfs" ino=991 res=1 errno=0 [ 480.665877][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.666421][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.681131][ T6005] gspca_sunplus: reg_r err -71 [ 480.681224][ T6005] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 480.716904][ T6005] usb 5-1: USB disconnect, device number 19 [ 481.106707][ T5900] usb 6-1: USB disconnect, device number 6 [ 481.135221][ T5948] usb 4-1: USB disconnect, device number 17 [ 483.467914][ T9047] overlay: Unknown parameter '\' [ 487.011387][ T9068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.917693][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 489.132960][ T5948] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 489.168221][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 489.231054][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 489.231082][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.237327][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.237354][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.243608][ T10] usb 4-1: Product: syz [ 489.243626][ T10] usb 4-1: Manufacturer: syz [ 489.243638][ T10] usb 4-1: SerialNumber: syz [ 489.277558][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 489.280366][ T5948] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 489.280390][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.344454][ T9084] veth3: entered promiscuous mode [ 489.403829][ T10] usb 4-1: config 0 descriptor?? [ 489.471607][ T5948] usb 6-1: config 0 descriptor?? [ 489.492575][ T10] usb 4-1: selecting invalid altsetting 0 [ 489.520689][ T5948] gspca_main: sunplus-2.14.0 probing 041e:400b [ 490.450065][ T5948] gspca_sunplus: reg_r err -110 [ 490.450910][ T5948] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 490.741970][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.742320][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.866796][ T5948] usb 6-1: USB disconnect, device number 7 [ 491.055711][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.874'. [ 491.055734][ T9090] openvswitch: netlink: Flow actions attr not present in new flow. [ 491.846928][ T5900] usb 4-1: USB disconnect, device number 18 [ 492.749165][ T9106] netlink: 44 bytes leftover after parsing attributes in process `syz.5.878'. [ 494.029397][ T9116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.332801][ T5880] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 495.785651][ T5880] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 495.785680][ T5880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 495.793625][ T5880] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 495.793653][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 495.793671][ T5880] usb 1-1: Product: syz [ 495.793684][ T5880] usb 1-1: Manufacturer: syz [ 495.793696][ T5880] usb 1-1: SerialNumber: syz [ 495.818534][ T5880] usb 1-1: config 0 descriptor?? [ 495.844529][ T5880] usb 1-1: selecting invalid altsetting 0 [ 496.994388][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.888'. [ 497.057624][ T5948] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 497.353351][ T5948] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 497.353379][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 497.357295][ T5948] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 497.357322][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 497.357340][ T5948] usb 3-1: Product: syz [ 497.357351][ T5948] usb 3-1: Manufacturer: syz [ 497.358391][ T5948] usb 3-1: SerialNumber: syz [ 497.380213][ T5948] usb 3-1: config 0 descriptor?? [ 499.087640][ T6005] usb 1-1: USB disconnect, device number 15 [ 499.109060][ T5948] usb 3-1: selecting invalid altsetting 0 [ 500.224931][ T5900] usb 3-1: USB disconnect, device number 22 [ 500.708240][ T9165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.507568][ T6005] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 501.553847][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.553919][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.667501][ T6005] usb 1-1: Using ep0 maxpacket: 16 [ 501.851833][ T6005] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 501.851859][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.851875][ T6005] usb 1-1: Product: syz [ 501.851885][ T6005] usb 1-1: Manufacturer: syz [ 501.851897][ T6005] usb 1-1: SerialNumber: syz [ 502.416645][ T6005] usb 1-1: config 0 descriptor?? [ 502.921741][ T6005] usb 1-1: can't set config #0, error -71 [ 502.965750][ T6005] usb 1-1: USB disconnect, device number 16 [ 503.915347][ T9185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.296863][ T6005] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 504.567901][ T9198] overlayfs: missing 'lowerdir' [ 505.048406][ T6005] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 505.048433][ T6005] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.088320][ T6005] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 505.088347][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 505.088364][ T6005] usb 4-1: Product: syz [ 505.088377][ T6005] usb 4-1: Manufacturer: syz [ 505.088389][ T6005] usb 4-1: SerialNumber: syz [ 505.091953][ T6005] usb 4-1: config 0 descriptor?? [ 505.096386][ T6005] usb 4-1: selecting invalid altsetting 0 [ 505.511553][ T5948] usb 4-1: USB disconnect, device number 19 [ 506.130315][ T8309] udevd[8309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.897957][ T989] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 506.952773][ T9215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.951768][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 508.550344][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.279402][ T989] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 509.279420][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.279430][ T989] usb 5-1: Product: syz [ 509.279437][ T989] usb 5-1: Manufacturer: syz [ 509.279444][ T989] usb 5-1: SerialNumber: syz [ 509.338764][ T989] usb 5-1: config 0 descriptor?? [ 509.370411][ T989] as10x_usb: device has been detected [ 509.371357][ T989] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 509.418119][ T989] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 509.425477][ T989] as10x_usb: error during firmware upload part1 [ 509.425857][ T989] Registered device Sky IT Digital Key (green led) [ 509.558388][ T989] usb 5-1: USB disconnect, device number 20 [ 509.724049][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.960182][ T989] Unregistered device Sky IT Digital Key (green led) [ 509.966900][ T989] as10x_usb: device has been disconnected [ 510.825188][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.041659][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.356072][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.560799][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.666974][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.887549][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.181819][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.117536][ T6138] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 514.950521][ T6138] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 514.950549][ T6138] usb 5-1: config 0 interface 0 has no altsetting 0 [ 514.953769][ T6138] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.953795][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 514.953813][ T6138] usb 5-1: Product: syz [ 514.953826][ T6138] usb 5-1: Manufacturer: syz [ 514.953838][ T6138] usb 5-1: SerialNumber: syz [ 515.027917][ T6138] usb 5-1: config 0 descriptor?? [ 515.052573][ T6138] usb 5-1: selecting invalid altsetting 0 [ 515.447536][ T5865] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 515.890311][ T5865] usb 6-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 515.890339][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.949293][ T5865] usb 6-1: config 0 descriptor?? [ 515.966438][ T5865] gspca_main: tv8532-2.14.0 probing 0545:808b [ 516.677445][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.876970][ T5865] usb 6-1: USB disconnect, device number 8 [ 517.497961][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 518.155266][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 518.183846][ T5880] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 518.183875][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.183893][ T5880] usb 4-1: Product: syz [ 518.183906][ T5880] usb 4-1: Manufacturer: syz [ 518.183919][ T5880] usb 4-1: SerialNumber: syz [ 518.265706][ T5880] usb 4-1: config 0 descriptor?? [ 518.321937][ T5880] as10x_usb: device has been detected [ 518.324316][ T5880] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 518.420652][ T5880] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 518.425599][ T5880] as10x_usb: error during firmware upload part1 [ 518.444565][ T5880] Registered device Sky IT Digital Key (green led) [ 518.478280][ T6011] usb 4-1: USB disconnect, device number 20 [ 518.609462][ T6011] Unregistered device Sky IT Digital Key (green led) [ 518.725369][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.817690][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.941330][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.108533][ T6011] as10x_usb: device has been disconnected [ 519.855885][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.538434][ T5880] usb 5-1: USB disconnect, device number 21 [ 520.817066][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.418593][ T989] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 523.452162][ T9331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'. [ 523.452184][ T9331] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.580039][ T989] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 523.580067][ T989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 523.582849][ T989] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 523.582876][ T989] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 523.582894][ T989] usb 5-1: Product: syz [ 523.582907][ T989] usb 5-1: Manufacturer: syz [ 523.582919][ T989] usb 5-1: SerialNumber: syz [ 523.649762][ T989] usb 5-1: config 0 descriptor?? [ 523.655992][ T989] usb 5-1: selecting invalid altsetting 0 [ 524.377553][ T5971] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 524.491602][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.483254][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.509721][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 525.749490][ T5971] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 525.749519][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.749537][ T5971] usb 3-1: Product: syz [ 525.749549][ T5971] usb 3-1: Manufacturer: syz [ 525.749561][ T5971] usb 3-1: SerialNumber: syz [ 525.776603][ T5971] usb 3-1: config 0 descriptor?? [ 525.819907][ T5971] as10x_usb: device has been detected [ 525.828194][ T5971] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 525.947246][ T5971] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 531.732211][ T5971] as10x_usb: error during firmware upload part1 [ 531.732894][ T5971] Registered device Sky IT Digital Key (green led) [ 531.911226][ T5971] usb 5-1: USB disconnect, device number 22 [ 531.947221][ T6005] usb 3-1: USB disconnect, device number 23 [ 532.070271][ T6005] Unregistered device Sky IT Digital Key (green led) [ 532.112407][ T6005] as10x_usb: device has been disconnected [ 532.477504][ T6005] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 532.633001][ T6005] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 532.633028][ T6005] usb 3-1: config 0 interface 0 has no altsetting 0 [ 532.662419][ T6005] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 532.662446][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 532.662464][ T6005] usb 3-1: Product: syz [ 532.662475][ T6005] usb 3-1: Manufacturer: syz [ 532.662487][ T6005] usb 3-1: SerialNumber: syz [ 532.720151][ T6005] usb 3-1: config 0 descriptor?? [ 532.748692][ T6005] usb 3-1: selecting invalid altsetting 0 [ 535.807103][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.829971][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.930110][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.330914][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.764313][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.342171][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.602243][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.956682][ T5971] usb 3-1: USB disconnect, device number 24 [ 544.357562][ T5880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 545.317547][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 545.320493][ T5880] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 545.320519][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.377583][ T5880] usb 5-1: config 0 descriptor?? [ 545.383988][ T5880] gspca_main: sunplus-2.14.0 probing 041e:400b [ 547.485157][ T5880] gspca_sunplus: reg_r err -110 [ 547.486227][ T5880] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 548.275379][ T5880] usb 5-1: USB disconnect, device number 23 [ 549.682234][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.854319][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.048323][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.281100][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.403001][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.455057][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 551.505795][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.802681][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.486973][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.879046][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 553.027513][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 553.030218][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 553.030245][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.107497][ T9] usb 6-1: config 0 descriptor?? [ 553.113344][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 553.733055][ T9] gspca_sunplus: reg_w_riv err -110 [ 553.733153][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 554.606183][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 554.766647][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 554.766674][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.786871][ T10] usb 1-1: config 0 descriptor?? [ 554.806547][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 554.829091][ T6138] usb 6-1: USB disconnect, device number 9 [ 555.653272][ T10] gspca_spca508: reg_read err -110 [ 555.653854][ T10] gspca_spca508: reg_read err -32 [ 555.667705][ T10] gspca_spca508: reg_read err -32 [ 555.669862][ T10] gspca_spca508: reg_read err -32 [ 555.670349][ T10] gspca_spca508: reg_read err -32 [ 555.670761][ T10] gspca_spca508: reg write: error -32 [ 555.670844][ T10] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 556.091938][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.857383][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.855913][ T5907] usb 1-1: USB disconnect, device number 17 [ 558.019976][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.135966][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 558.295662][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.505867][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.537662][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.625827][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.819879][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.089036][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.169894][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.548320][ T6138] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 559.837617][ T6138] usb 5-1: Using ep0 maxpacket: 32 [ 559.839934][ T6138] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 559.839960][ T6138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.880626][ T6138] usb 5-1: config 0 descriptor?? [ 559.909182][ T6138] gspca_main: sunplus-2.14.0 probing 041e:400b [ 560.338531][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.790743][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.361733][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.362765][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.703974][ T9571] bond0: (slave gretap0): Opening slave failed [ 562.921234][ T6138] gspca_sunplus: reg_w_riv err -71 [ 562.921327][ T6138] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 562.931968][ T6138] usb 5-1: USB disconnect, device number 24 [ 562.994256][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.994327][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.801890][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.563690][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.757426][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 565.924592][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 565.924622][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.465040][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.465058][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.465067][ T9] usb 1-1: Product: syz [ 566.465074][ T9] usb 1-1: Manufacturer: syz [ 566.465080][ T9] usb 1-1: SerialNumber: syz [ 566.470768][ T9] usb 1-1: config 0 descriptor?? [ 566.486043][ T9] usb 1-1: selecting invalid altsetting 0 [ 567.184207][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.277279][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.419751][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.458926][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 568.745091][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.823792][ T9621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 568.998025][ T9623] pim6reg: entered allmulticast mode [ 569.789725][ T6011] usb 1-1: USB disconnect, device number 18 [ 570.838820][ T6138] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 570.987532][ T6138] usb 5-1: Using ep0 maxpacket: 32 [ 570.995615][ T6138] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 570.995642][ T6138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.053328][ T6138] usb 5-1: config 0 descriptor?? [ 571.071847][ T6138] gspca_main: sunplus-2.14.0 probing 041e:400b [ 571.213798][ T9640] netlink: 'syz.2.1037': attribute type 72 has an invalid length. [ 571.860305][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.188723][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.197497][ T6138] gspca_sunplus: reg_w_riv err -110 [ 573.197587][ T6138] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 573.364059][ T5907] usb 5-1: USB disconnect, device number 25 [ 573.670893][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'. [ 573.981788][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.297110][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.888796][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.128579][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.158623][ T9664] tty tty24: ldisc open failed (-12), clearing slot 23 [ 576.277489][ T6011] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 576.459544][ T6011] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 576.459572][ T6011] usb 6-1: config 0 interface 0 has no altsetting 0 [ 576.462157][ T6011] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.462183][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.462202][ T6011] usb 6-1: Product: syz [ 576.462215][ T6011] usb 6-1: Manufacturer: syz [ 576.462228][ T6011] usb 6-1: SerialNumber: syz [ 576.523754][ T6011] usb 6-1: config 0 descriptor?? [ 576.561531][ T6011] usb 6-1: selecting invalid altsetting 0 [ 577.227750][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.021171][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.112964][ T5823] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 578.113052][ T5823] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 578.113103][ T5823] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 578.113117][ T5823] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 578.113176][ T5823] Bluetooth: hci3: Malformed LE Event: 0x0d [ 578.175733][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 580.807524][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.140295][ T5948] usb 6-1: USB disconnect, device number 10 [ 586.044126][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 589.839525][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.064123][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.213101][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.781014][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.918164][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.968922][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.320862][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.391956][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.649464][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.821032][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.988432][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.941538][ T37] audit: type=1804 audit(1759262764.539:13): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1077" name="/newroot/225/file0" dev="tmpfs" ino=1198 res=1 errno=0 [ 616.485161][ T9922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1113'. [ 622.070713][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.205873][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.437959][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.438004][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.539769][ T5900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 624.725605][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.997892][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.554335][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.641626][ T5900] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 625.641655][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 625.667265][ T5900] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 625.667283][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 625.667293][ T5900] usb 4-1: Product: syz [ 625.687368][ T5900] usb 4-1: Manufacturer: syz [ 625.687386][ T5900] usb 4-1: SerialNumber: syz [ 625.770336][ T5900] usb 4-1: config 0 descriptor?? [ 625.843073][ T5900] usb 4-1: selecting invalid altsetting 0 [ 628.379082][ T9] usb 4-1: USB disconnect, device number 21 [ 628.549341][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1135'. [ 628.549365][ T9990] openvswitch: netlink: Flow actions attr not present in new flow. [ 630.986997][T10004] netlink: 'syz.5.1137': attribute type 10 has an invalid length. [ 631.788965][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.836689][T10004] bond0: (slave team0): Enslaving as an active interface with an up link [ 631.954154][T10009] bond0: (slave gretap0): Opening slave failed [ 637.288980][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1148'. [ 637.289052][T10039] openvswitch: netlink: Flow actions attr not present in new flow. [ 646.321177][T10082] 9pnet_fd: Insufficient options for proto=fd [ 647.309321][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.388320][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.690845][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.560688][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.192593][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.127050][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.417985][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.201374][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.188118][T10130] 9pnet_fd: Insufficient options for proto=fd [ 656.390302][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.986607][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.395398][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.638377][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.136376][ T6138] kernel write not supported for file /847/clear_refs (pid: 6138 comm: kworker/1:8) [ 662.495571][T10185] overlay: Unknown parameter '\' [ 664.288054][T10182] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 664.288076][T10182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1189'. [ 668.735048][ T989] kernel write not supported for file /797/clear_refs (pid: 989 comm: kworker/1:2) [ 670.938400][T10260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 674.618239][ T5971] kernel write not supported for file /836/clear_refs (pid: 5971 comm: kworker/0:6) [ 680.210459][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 686.385334][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.385813][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.880009][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.139104][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.924420][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.544664][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.734923][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 690.133863][ T5865] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.133925][ T5865] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.502473][ T5865] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.502508][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.502527][ T5865] usb 6-1: Product: syz [ 690.502540][ T5865] usb 6-1: Manufacturer: syz [ 690.502552][ T5865] usb 6-1: SerialNumber: syz [ 690.559916][ T5865] usb 6-1: config 0 descriptor?? [ 690.619293][ T5865] usb 6-1: selecting invalid altsetting 0 [ 690.763578][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.992787][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.211539][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.905777][ T5865] usb 6-1: USB disconnect, device number 11 [ 694.938159][T10426] mmap: syz.2.1254 (10426) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 696.100288][T10424] udevd[10424]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.700344][ C0] sched: DL replenish lagged too much [ 750.111501][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.111589][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.440664][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.449152][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.107371][ T38] INFO: task kworker/u8:4:68 blocked for more than 143 seconds. [ 856.107410][ T38] Not tainted syzkaller #0 [ 856.107420][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.107431][ T38] task:kworker/u8:4 state:D stack:21224 pid:68 tgid:68 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 856.107488][ T38] Workqueue: events_unbound linkwatch_event [ 856.107538][ T38] Call Trace: [ 856.107548][ T38] [ 856.107563][ T38] __schedule+0x16f3/0x4c20 [ 856.107603][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 856.107635][ T38] ? __pfx___schedule+0x10/0x10 [ 856.107681][ T38] rt_mutex_schedule+0x77/0xf0 [ 856.107700][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 856.107734][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 856.107759][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 856.107782][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 856.107804][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 856.107835][ T38] ? linkwatch_event+0xe/0x60 [ 856.107860][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 856.107885][ T38] ? linkwatch_event+0xe/0x60 [ 856.107901][ T38] mutex_lock_nested+0x16a/0x1d0 [ 856.107920][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 856.107937][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 856.107959][ T38] linkwatch_event+0xe/0x60 [ 856.107976][ T38] process_scheduled_works+0xae1/0x17b0 [ 856.108026][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.108065][ T38] worker_thread+0x8a0/0xda0 [ 856.108111][ T38] kthread+0x711/0x8a0 [ 856.108132][ T38] ? __pfx_worker_thread+0x10/0x10 [ 856.108152][ T38] ? __pfx_kthread+0x10/0x10 [ 856.108174][ T38] ? __pfx_kthread+0x10/0x10 [ 856.108192][ T38] ret_from_fork+0x436/0x7d0 [ 856.108216][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 856.108244][ T38] ? __switch_to_asm+0x39/0x70 [ 856.108261][ T38] ? __switch_to_asm+0x33/0x70 [ 856.108276][ T38] ? __pfx_kthread+0x10/0x10 [ 856.108295][ T38] ret_from_fork_asm+0x1a/0x30 [ 856.108328][ T38] [ 856.108746][ T38] [ 856.108746][ T38] Showing all locks held in the system: [ 856.108756][ T38] 1 lock held by kthreadd/2: [ 856.108770][ T38] 4 locks held by kworker/0:0/9: [ 856.108779][ T38] #0: ffff88805d577938 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.108836][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.108900][ T38] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.108944][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.108987][ T38] 4 locks held by kworker/0:1/10: [ 856.108997][ T38] #0: ffff88805ba01938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.109046][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.109102][ T38] #2: ffff88805bca95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.109149][ T38] #3: ffff88805d831928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x563/0x900 [ 856.109193][ T38] 7 locks held by kworker/u8:1/13: [ 856.109203][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.109247][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.109290][ T38] #2: ffff88802f63a300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 856.109336][ T38] #3: ffff88805ea37920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 856.109376][ T38] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 856.109419][ T38] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.109462][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.109506][ T38] 1 lock held by kworker/R-mm_pe/14: [ 856.109523][ T38] 2 locks held by ksoftirqd/0/15: [ 856.109533][ T38] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.109576][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.109619][ T38] 7 locks held by ktimers/0/16: [ 856.109631][ T38] 2 locks held by rcuc/0/20: [ 856.109640][ T38] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.109683][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.109727][ T38] 4 locks held by kworker/1:0/31: [ 856.109738][ T38] 1 lock held by khungtaskd/38: [ 856.109748][ T38] #0: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 856.109792][ T38] 3 locks held by kworker/u8:4/68: [ 856.109801][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.109845][ T38] #1: ffffc9000153fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.109888][ T38] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 856.109933][ T38] 5 locks held by kworker/1:2/989: [ 856.109945][ T38] 2 locks held by kworker/u8:7/1128: [ 856.109957][ T38] 3 locks held by kworker/u8:10/1442: [ 856.109967][ T38] 2 locks held by kworker/u8:11/1457: [ 856.109977][ T38] #0: ffffffff8d4c68a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 856.110021][ T38] #1: ffff88801d698a58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 856.110071][ T38] 7 locks held by kworker/u8:14/3625: [ 856.110082][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.110125][ T38] #1: ffffc9000e087bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.110169][ T38] #2: ffff88805d9bd300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 856.110213][ T38] #3: ffff88805d93c520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 856.110254][ T38] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 856.110295][ T38] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.110342][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.110387][ T38] 1 lock held by udevd/5185: [ 856.110397][ T38] 1 lock held by dhcpcd/5479: [ 856.110407][ T38] 4 locks held by dhcpcd/5480: [ 856.110417][ T38] 2 locks held by getty/5577: [ 856.110427][ T38] #0: ffff88823bf228a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 856.110468][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 856.110512][ T38] 4 locks held by syz-executor/5813: [ 856.110531][ T38] 2 locks held by syz-executor/5816: [ 856.110541][ T38] 4 locks held by kworker/0:3/5817: [ 856.110550][ T38] #0: ffff88805bf2cd38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.110599][ T38] #1: ffffc90004bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.110656][ T38] #2: ffff888034e995f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.110700][ T38] #3: ffff88805d836350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 856.110744][ T38] 4 locks held by syz-executor/5830: [ 856.110754][ T38] #0: ffff88803916a488 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 856.110818][ T38] #1: ffff88803d8ce598 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 [ 856.110878][ T38] #2: ffffffff8d4c68a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 856.110917][ T38] #3: ffff88801d698858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 856.110958][ T38] 2 locks held by kworker/R-wg-cr/5850: [ 856.110968][ T38] 1 lock held by kworker/R-wg-cr/5851: [ 856.110979][ T38] 1 lock held by kworker/R-wg-cr/5853: [ 856.110989][ T38] 1 lock held by kworker/R-wg-cr/5854: [ 856.110999][ T38] 4 locks held by kworker/R-wg-cr/5862: [ 856.111009][ T38] #0: ffff88805bf2d138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.111057][ T38] #1: ffffc90004ec7ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.111113][ T38] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.111155][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.111199][ T38] 2 locks held by kworker/R-wg-cr/5863: [ 856.111209][ T38] 4 locks held by kworker/0:4/5865: [ 856.111218][ T38] 5 locks held by kworker/1:3/5880: [ 856.111229][ T38] 4 locks held by kworker/1:4/5900: [ 856.111239][ T38] 5 locks held by kworker/1:5/5907: [ 856.111250][ T38] 4 locks held by kworker/0:5/5948: [ 856.111259][ T38] #0: ffff88805d242d38 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.111307][ T38] #1: ffffc90005277bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.111363][ T38] #2: ffff88803dbc55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.111408][ T38] #3: ffff88805dd64388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 856.111452][ T38] 4 locks held by kworker/0:6/5971: [ 856.111462][ T38] #0: ffff88805ba00938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.111510][ T38] #1: ffffc90005327bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.111573][ T38] #2: ffff88805bb955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.111616][ T38] #3: ffff888036df6de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x563/0x900 [ 856.111661][ T38] 4 locks held by kworker/0:7/6011: [ 856.111671][ T38] #0: ffff88805b334d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.111715][ T38] #1: ffffc90005227bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.111759][ T38] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.111802][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.111844][ T38] 5 locks held by kworker/1:8/6138: [ 856.111855][ T38] 7 locks held by kworker/u8:16/6331: [ 856.111865][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.111909][ T38] #1: ffffc90007b37bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.111953][ T38] #2: ffff888037291300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 856.111998][ T38] #3: ffff88805dc1b920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 856.112038][ T38] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 856.112080][ T38] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.112122][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.112166][ T38] 7 locks held by kworker/u8:17/6367: [ 856.112176][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.112219][ T38] #1: ffffc90006f0fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.112264][ T38] #2: ffff888036eb3300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 856.112308][ T38] #3: ffff8880265b4920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 856.112348][ T38] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 856.112390][ T38] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.112432][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.112475][ T38] 5 locks held by kworker/u8:19/6369: [ 856.112485][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.112534][ T38] #1: ffffc90009b8fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.112578][ T38] #2: ffff888041000898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 856.112625][ T38] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.112667][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.112712][ T38] 4 locks held by kworker/0:8/8155: [ 856.112723][ T38] #0: ffff888032a5b538 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.112771][ T38] #1: ffffc900067afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.112828][ T38] #2: ffff8880375f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.112873][ T38] #3: ffff88805dd658b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 856.112918][ T38] 4 locks held by kworker/1:1/9742: [ 856.112929][ T38] 3 locks held by kworker/u8:0/10221: [ 856.112939][ T38] #0: ffff88802ffb2938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.112983][ T38] #1: ffffc9001dc97bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.113028][ T38] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 856.113073][ T38] 1 lock held by syz.5.1253/10413: [ 856.113083][ T38] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 856.113124][ T38] 4 locks held by kworker/0:2/10433: [ 856.113134][ T38] #0: ffff88805b78bd38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.113182][ T38] #1: ffffc9001e307bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.113239][ T38] #2: ffff88805b7bd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 856.113284][ T38] #3: ffff888036df03f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 856.113329][ T38] 2 locks held by kworker/u8:2/10434: [ 856.113339][ T38] 4 locks held by kworker/0:9/10435: [ 856.113350][ T38] #0: ffff88805b336938 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 856.113398][ T38] #1: ffffc9001e3c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 856.113454][ T38] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 856.113497][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 856.113546][ T38] 3 locks held by syz-executor/10436: [ 856.113556][ T38] [ 856.113561][ T38] ============================================= [ 856.113561][ T38] [ 856.113583][ T38] NMI backtrace for cpu 1 [ 856.113602][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.113622][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.113632][ T38] Call Trace: [ 856.113639][ T38] [ 856.113647][ T38] dump_stack_lvl+0x189/0x250 [ 856.113673][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.113695][ T38] ? __pfx__printk+0x10/0x10 [ 856.113727][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 856.113750][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 856.113773][ T38] ? __pfx__printk+0x10/0x10 [ 856.113797][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.113820][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 856.113843][ T38] watchdog+0xf93/0xfe0 [ 856.113869][ T38] ? watchdog+0x1de/0xfe0 [ 856.113895][ T38] kthread+0x711/0x8a0 [ 856.113914][ T38] ? __pfx_watchdog+0x10/0x10 [ 856.113934][ T38] ? __pfx_kthread+0x10/0x10 [ 856.113954][ T38] ? __pfx_kthread+0x10/0x10 [ 856.113971][ T38] ret_from_fork+0x436/0x7d0 [ 856.113995][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 856.114021][ T38] ? __switch_to_asm+0x39/0x70 [ 856.114036][ T38] ? __switch_to_asm+0x33/0x70 [ 856.114052][ T38] ? __pfx_kthread+0x10/0x10 [ 856.114069][ T38] ret_from_fork_asm+0x1a/0x30 [ 856.114100][ T38] [ 856.114106][ T38] Sending NMI from CPU 1 to CPUs 0: [ 856.114131][ C0] NMI backtrace for cpu 0 [ 856.114145][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.114164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.114174][ C0] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 856.114200][ C0] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 fb 02 aa 00 48 8b 3b e8 b3 b3 18 00 85 c0 74 14 [ 856.114215][ C0] RSP: 0018:ffffc90000156b88 EFLAGS: 00000246 [ 856.114230][ C0] RAX: 0000000000000000 RBX: ffffc90000156bf0 RCX: 63ac70695548bd00 [ 856.114243][ C0] RDX: 0000000000000006 RSI: ffffffff8cd89977 RDI: ffffc90000156ba8 [ 856.114255][ C0] RBP: ffffc90000156c30 R08: ffffc90000157e70 R09: 0000000000000000 [ 856.114273][ C0] R10: ffffc90000156bf8 R11: fffff5200002ad81 R12: ffff88801a6fd940 [ 856.114286][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200002ad7e [ 856.114298][ C0] FS: 0000000000000000(0000) GS:ffff888127025000(0000) knlGS:0000000000000000 [ 856.114312][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.114324][ C0] CR2: 000055b98fee2610 CR3: 00000000364a6000 CR4: 00000000003526f0 [ 856.114339][ C0] Call Trace: [ 856.114345][ C0] [ 856.114352][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 856.114372][ C0] arch_stack_walk+0xfc/0x150 [ 856.114390][ C0] ? ret_from_fork+0x436/0x7d0 [ 856.114411][ C0] stack_trace_save+0x9c/0xe0 [ 856.114429][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 856.114445][ C0] ? kasan_save_free_info+0x46/0x50 [ 856.114462][ C0] ? consume_skb+0x9e/0xf0 [ 856.114477][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 856.114495][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 856.114514][ C0] ? __lock_acquire+0xab9/0xd20 [ 856.114536][ C0] kasan_save_track+0x3e/0x80 [ 856.114555][ C0] ? kasan_save_track+0x3e/0x80 [ 856.114572][ C0] ? kasan_save_free_info+0x46/0x50 [ 856.114587][ C0] ? __kasan_slab_free+0x5b/0x80 [ 856.114605][ C0] ? kmem_cache_free+0x195/0x510 [ 856.114627][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 856.114644][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 856.114661][ C0] ? nft_do_chain+0x40c/0x1920 [ 856.114678][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 856.114695][ C0] ? nf_hook_slow+0xc5/0x220 [ 856.114716][ C0] ? NF_HOOK+0x206/0x3a0 [ 856.114737][ C0] ? NF_HOOK+0x309/0x3a0 [ 856.114757][ C0] ? __netif_receive_skb+0x143/0x380 [ 856.114777][ C0] ? process_backlog+0x31e/0x900 [ 856.114797][ C0] ? __napi_poll+0xb3/0x540 [ 856.114815][ C0] ? net_rx_action+0x707/0xe00 [ 856.114835][ C0] ? handle_softirqs+0x22f/0x710 [ 856.114854][ C0] ? run_ktimerd+0xcf/0x190 [ 856.114873][ C0] ? smpboot_thread_fn+0x542/0xa60 [ 856.114892][ C0] ? kthread+0x711/0x8a0 [ 856.114925][ C0] kasan_save_free_info+0x46/0x50 [ 856.114941][ C0] __kasan_slab_free+0x5b/0x80 [ 856.114961][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 856.114978][ C0] kmem_cache_free+0x195/0x510 [ 856.115009][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 856.115030][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 856.115050][ C0] ? nf_ip_checksum+0x13c/0x510 [ 856.115070][ C0] nft_synproxy_do_eval+0x345/0x570 [ 856.115092][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 856.115111][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 856.115137][ C0] nft_do_chain+0x40c/0x1920 [ 856.115162][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 856.115194][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 856.115219][ C0] nft_do_chain_inet+0x25d/0x340 [ 856.115236][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 856.115253][ C0] ? __lock_acquire+0xab9/0xd20 [ 856.115283][ C0] ? NF_HOOK+0x9a/0x3a0 [ 856.115304][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 856.115323][ C0] nf_hook_slow+0xc5/0x220 [ 856.115348][ C0] NF_HOOK+0x206/0x3a0 [ 856.115370][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 856.115392][ C0] ? NF_HOOK+0x9a/0x3a0 [ 856.115413][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 856.115433][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 856.115456][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 856.115480][ C0] ? skb_dst+0x4f/0xd0 [ 856.115501][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 856.115525][ C0] NF_HOOK+0x309/0x3a0 [ 856.115547][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 856.115568][ C0] ? NF_HOOK+0x9a/0x3a0 [ 856.115593][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 856.115615][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 856.115643][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 856.115663][ C0] __netif_receive_skb+0x143/0x380 [ 856.115683][ C0] ? rt_spin_unlock+0x65/0x80 [ 856.115704][ C0] ? process_backlog+0x27b/0x900 [ 856.115724][ C0] process_backlog+0x31e/0x900 [ 856.115752][ C0] __napi_poll+0xb3/0x540 [ 856.115774][ C0] net_rx_action+0x707/0xe00 [ 856.115804][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 856.115842][ C0] handle_softirqs+0x22f/0x710 [ 856.115867][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 856.115892][ C0] run_ktimerd+0xcf/0x190 [ 856.115912][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 856.115932][ C0] ? schedule+0x91/0x360 [ 856.115957][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 856.115977][ C0] smpboot_thread_fn+0x542/0xa60 [ 856.115997][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 856.116021][ C0] kthread+0x711/0x8a0 [ 856.116037][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 856.116057][ C0] ? __pfx_kthread+0x10/0x10 [ 856.116074][ C0] ? __pfx_kthread+0x10/0x10 [ 856.116089][ C0] ret_from_fork+0x436/0x7d0 [ 856.116110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 856.116134][ C0] ? __switch_to_asm+0x39/0x70 [ 856.116149][ C0] ? __switch_to_asm+0x33/0x70 [ 856.116164][ C0] ? __pfx_kthread+0x10/0x10 [ 856.116179][ C0] ret_from_fork_asm+0x1a/0x30 [ 856.116203][ C0] [ 856.117136][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 856.117153][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.117173][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.117183][ T38] Call Trace: [ 856.117190][ T38] [ 856.117200][ T38] dump_stack_lvl+0x99/0x250 [ 856.117222][ T38] ? __asan_memcpy+0x40/0x70 [ 856.117239][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.117261][ T38] ? __pfx__printk+0x10/0x10 [ 856.117292][ T38] vpanic+0x281/0x750 [ 856.117313][ T38] ? __pfx_vpanic+0x10/0x10 [ 856.117327][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 856.117347][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.117374][ T38] panic+0xb9/0xc0 [ 856.117389][ T38] ? __pfx_panic+0x10/0x10 [ 856.117409][ T38] ? irq_work_queue+0xc3/0x140 [ 856.117434][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 856.117458][ T38] watchdog+0xfd2/0xfe0 [ 856.117483][ T38] ? watchdog+0x1de/0xfe0 [ 856.117510][ T38] kthread+0x711/0x8a0 [ 856.117535][ T38] ? __pfx_watchdog+0x10/0x10 [ 856.117555][ T38] ? __pfx_kthread+0x10/0x10 [ 856.117576][ T38] ? __pfx_kthread+0x10/0x10 [ 856.117594][ T38] ret_from_fork+0x436/0x7d0 [ 856.117617][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 856.117644][ T38] ? __switch_to_asm+0x39/0x70 [ 856.117660][ T38] ? __switch_to_asm+0x33/0x70 [ 856.117676][ T38] ? __pfx_kthread+0x10/0x10 [ 856.117693][ T38] ret_from_fork_asm+0x1a/0x30 [ 856.117724][ T38] [ 856.117988][ T38] Kernel Offset: disabled