last executing test programs: 18m51.316126078s ago: executing program 32 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x4) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}}, &(0x7f0000000080)=0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0xad) 17m37.462071928s ago: executing program 33 (id=311): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 14m40.341979219s ago: executing program 34 (id=571): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r5, &(0x7f0000000840)=""/40, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000002000000000000000000000d00"/36], 0x0, 0x26, 0x0, 0x3}, 0x28) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) 13m38.697932463s ago: executing program 35 (id=677): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xf}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40840) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r6, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) close(0x3) listen(r5, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) 12m18.619301221s ago: executing program 36 (id=741): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 11m56.056181038s ago: executing program 2 (id=792): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 11m52.925268511s ago: executing program 2 (id=795): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb8ff0100180000000002000000000004100000000604050000000070bbcee9bd744f233cdcd2ba77f9501e780e842ebeeab1a73c43a1127ab12fd9ff93a3c84ae88c48a3a157167bd953db204011e87c6c72cff3eeab07c8c125c6b3146f602e82621097e42977b017fad771389eeb264910c15327c09b4d4a36794bfabdb97044"], &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8, 0x2}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, {0x5, 0x4, 0x2, 0x27, 0xaab, 0x65, 0xffa6, 0x2, 0x21, 0x800, @remote, @empty}}}}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004841) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xfff7, 0x0, 0x0, 0x7, 0xa, "b8cd9e6b41b50aee"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x11) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000000c0)=0xc, 0x4) 11m37.12806259s ago: executing program 37 (id=795): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb8ff0100180000000002000000000004100000000604050000000070bbcee9bd744f233cdcd2ba77f9501e780e842ebeeab1a73c43a1127ab12fd9ff93a3c84ae88c48a3a157167bd953db204011e87c6c72cff3eeab07c8c125c6b3146f602e82621097e42977b017fad771389eeb264910c15327c09b4d4a36794bfabdb97044"], &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8, 0x2}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, {0x5, 0x4, 0x2, 0x27, 0xaab, 0x65, 0xffa6, 0x2, 0x21, 0x800, @remote, @empty}}}}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004841) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xfff7, 0x0, 0x0, 0x7, 0xa, "b8cd9e6b41b50aee"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x11) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000000c0)=0xc, 0x4) 9m38.040813663s ago: executing program 5 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9m36.624495044s ago: executing program 5 (id=901): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9m35.565121706s ago: executing program 5 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) unshare(0x2040400) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r5, &(0x7f0000000840)=""/40, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffc01, 0xfffff000, 0xb) 9m34.240890197s ago: executing program 5 (id=905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x4) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) close(r5) 9m32.566821623s ago: executing program 5 (id=907): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x2, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 9m29.064683043s ago: executing program 5 (id=910): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9m27.390953596s ago: executing program 9 (id=757): mlockall(0x1) 9m27.006293222s ago: executing program 8 (id=913): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x100000000, 0x8000000000000000, 0x4}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x959d78de5e5403a9, r2}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe94a, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x100, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0xb, 0xb, 0x8, 0x2fac39c4794555e0}, @alu={0x4, 0x1, 0x2, 0xb, 0x8, 0x100, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xff, 0x3f, &(0x7f0000000100)=""/63, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x457, 0xfffffeff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r5, 0x1, 0xffffffffffffffff, r6, 0x1], &(0x7f00000004c0)=[{0x1, 0x2, 0x2, 0xa}, {0x4, 0x3, 0x1, 0xc}, {0x5, 0x1, 0x6, 0xc}, {0x2, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x9, 0xb}, {0x5, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x4, 0x4, 0x6, 0x7}], 0x10, 0x45d1}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9m25.904650707s ago: executing program 9 (id=915): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x100000000, 0x8000000000000000, 0x4}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x959d78de5e5403a9, r2}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe94a, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x100, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0xb, 0xb, 0x8, 0x2fac39c4794555e0}, @alu={0x4, 0x1, 0x2, 0xb, 0x8, 0x100, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xff, 0x3f, &(0x7f0000000100)=""/63, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x457, 0xfffffeff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r5, 0x1, 0xffffffffffffffff, r6, 0x1], &(0x7f00000004c0)=[{0x1, 0x2, 0x2, 0xa}, {0x4, 0x3, 0x1, 0xc}, {0x5, 0x1, 0x6, 0xc}, {0x2, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x9, 0xb}, {0x5, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x4, 0x4, 0x6, 0x7}], 0x10, 0x45d1}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9m25.758736785s ago: executing program 6 (id=325): socket$kcm(0x21, 0x2, 0xa) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="090000000400000006000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\f\x00'/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getpid() ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000020000000055090100000000009500000000000000bf91000000000000b71e0da08fd0a5baee00000000000000b7000000000000009500"/96], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10840, 0x0) ioctl$KDSETLED(r5, 0x4b32, 0x40) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff46}], 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f00000003c0)={0x1, 0x1, 0x7, 0x11, 0x72, 0x0}) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x400, 0x0, 0x3, 0x8000000000, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/42, 0x2a}], 0x1, &(0x7f0000000340)=""/8, 0x8}, 0x100) close_range(r1, 0xffffffffffffffff, 0x0) 9m23.678022483s ago: executing program 9 (id=918): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x2, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 9m22.136021062s ago: executing program 6 (id=919): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x2, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 9m20.389761678s ago: executing program 9 (id=920): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0xb, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 9m19.496868674s ago: executing program 8 (id=921): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000240)=')@\x1b^\x00') syz_open_dev$sndmidi(&(0x7f0000001000), 0x7f, 0x80000) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x62000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000240)={0x7, 0x3, 0x0, 0x2, 0x8}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) timer_create(0x3, &(0x7f0000001140)={0x0, 0x30, 0x1, @thr={&(0x7f0000001080)="2cea259a7284634cea3465a9f4611ecaddde126524205a27212dcf39211c72e971d5cde9271ce43a40831ab5b468699729eadb823b6a93fc42ff62cb994028ed12b188b397a88308a7d6710e5836f8b4324e7773", &(0x7f0000001100)="60b3b29c7ff89672b1f84dfbdc247353e070ee"}}, &(0x7f0000001180)=0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000001200)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000001240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000000c0)='@\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x28, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'vxcan1\x00'}}, 0x1e) syz_usb_connect(0x5, 0x2f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201d00245da56102104df047673015cf066d3cacc43afd1e602030109021d00010703400c0904bc05010202ff0109050502ff030204f90223", @ANYRES64=0x0], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000012c0)={0x3}) 9m18.304254954s ago: executing program 6 (id=923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000005c0)) 9m16.321426978s ago: executing program 8 (id=926): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x402, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x800, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}, 0x1, 0x7}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000800)=@base={0xa, 0x16, 0xb3, 0x7f, 0x4600}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000600)={0x0, 0x2}, &(0x7f0000000640)=0x8) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="020571ea080000000007000000000004010015004e23575c80cc546dee190000030805e9040007ad9362e19e9aa2cb000000000002004e23ac14143400000000000000"], 0x40}, 0x1, 0x7}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000200)={0x1, 0x0, 0x8d5, 0xa}, 0x10) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) futex(&(0x7f00000000c0)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x41ffffff) socket$inet6(0xa, 0x3, 0xff) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000e30902120001000080040904"], 0x0) 9m13.888516872s ago: executing program 38 (id=910): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9m13.546356813s ago: executing program 8 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) unshare(0x2040400) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r5, &(0x7f0000000840)=""/40, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffc01, 0xfffff000, 0xb) 9m11.727419133s ago: executing program 8 (id=931): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002380)=""/185) keyctl$unlink(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb778, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x2, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c49c7b08b10e07700802000000010902120001000000000904000800c21e9b00"], 0x0) 9m8.039282263s ago: executing program 8 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9m5.063715511s ago: executing program 39 (id=920): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0xb, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 9m2.753342736s ago: executing program 40 (id=923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000005c0)) 8m52.830351773s ago: executing program 41 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m27.948355709s ago: executing program 0 (id=2346): add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 2m27.298661726s ago: executing program 0 (id=2349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90021118db0049d90491ceaebfd26d4eef2", 0x27}, {&(0x7f0000000280)="edce35b4db1b4d", 0x7}], 0x2) 2m26.734272929s ago: executing program 0 (id=2358): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x9, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2m22.740195579s ago: executing program 0 (id=2365): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x805, 0x0, 0x2, 0x88d7, 0x2, 0x1007, 0x8010, 0x1005, 0xa591, 0x1000, 0x7, 0x10000006, 0x4, 0x5, 0x1, 0x8, 0x4003, 0x9, 0x91, 0x108, 0x1, 0x7, 0xa, 0x6, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0xfffffffe]}) 2m22.55065858s ago: executing program 0 (id=2369): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = fanotify_init(0x20, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = fanotify_init(0x24, 0x80000) fanotify_mark(r5, 0x441, 0x1002, r4, 0x0) r6 = dup(r4) fanotify_mark(r1, 0x201, 0x20, r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.280865312s ago: executing program 0 (id=2374): symlink(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x400, 0x0, 0x2, 0xfffffffd, 0x5}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f000000f940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 2m7.112423379s ago: executing program 42 (id=2374): symlink(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x400, 0x0, 0x2, 0xfffffffd, 0x5}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f000000f940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 22.301260323s ago: executing program 4 (id=2685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8080) 21.576230193s ago: executing program 4 (id=2688): creat(&(0x7f0000000340)='./file0\x00', 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 16.504313133s ago: executing program 4 (id=2699): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) inotify_init1(0x0) rmdir(&(0x7f0000000280)='./control\x00') 16.40386253s ago: executing program 1 (id=2700): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001080), 0x101000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f00000010c0)={0x3, 0x1, 0xc, 0x6f, 0x0, 0x4, 0x9, 0x2, 0x3, 0x47, 0x80, "a5fd83885bc4a198260a439d30bae01ea3128f9097e6d5cb35cab1e41d93ddcc"}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 14.29993882s ago: executing program 1 (id=2702): syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f04890105"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xb, 0x4100) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[], 0x21e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, 0x0, 0x0) sendfile(r5, r4, &(0x7f0000000140)=0x400064, 0x21c) 13.431587219s ago: executing program 4 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 11.462936417s ago: executing program 4 (id=2706): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.522563492s ago: executing program 3 (id=2709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, 0x0, 0x8080) 9.212686164s ago: executing program 3 (id=2711): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) prlimit64(r0, 0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000180)) syz_usbip_server_init(0x5) 8.903587716s ago: executing program 1 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value={0x0, 0x97}, &(0x7f0000000b00)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) unshare(0x20000400) timerfd_create(0x0, 0x80000) 7.436079138s ago: executing program 1 (id=2714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2c2200, 0x0) landlock_restrict_self(r2, 0x5) setrlimit(0x8, 0x0) mlockall(0x6) landlock_restrict_self(0xffffffffffffffff, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0xf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.403283679s ago: executing program 4 (id=2715): openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) 7.325889502s ago: executing program 2 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf251a0000000c0022800400008004000080060021"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 7.173008814s ago: executing program 2 (id=2717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 6.893311359s ago: executing program 7 (id=2718): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.869491709s ago: executing program 3 (id=2719): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00"], 0xc) 6.616847852s ago: executing program 7 (id=2720): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)}], 0x1}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) 6.429389442s ago: executing program 3 (id=2721): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.286523033s ago: executing program 7 (id=2722): syz_usb_connect(0x2, 0xb6, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 5.464049298s ago: executing program 2 (id=2723): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x51, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 5.326351168s ago: executing program 1 (id=2724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x8400, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value={0x0, 0x97}, &(0x7f0000000b00)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) unshare(0x20000400) timerfd_create(0x0, 0x80000) 4.881242244s ago: executing program 3 (id=2725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) lseek(0xffffffffffffffff, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0xff, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x7, 0x0, 0x7}]) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r5, &(0x7f0000001e80)=""/96, 0x60) close(0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000380)=0x1) 4.461174793s ago: executing program 2 (id=2726): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000001300)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000001340)='./file0\x00') r2 = socket$kcm(0x29, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000018, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa13, 0xffffffff}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fcntl$lock(r5, 0x5, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x31, 0x0, 0x0) recvmmsg(r6, &(0x7f000000e280), 0x58a, 0x42, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01010000000000000000020000000900010073797a30000000000900030073797a30000000000c0f8138265205cf9100000120000000050a03000000000000000000020000060900030073797a3200000000140000001100014000000000000000000000000a"], 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001380)={'wlan0\x00'}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r9, 0x3b8d, &(0x7f00000001c0)={0x20, r11, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r9, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r12, r10, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000200)="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"}) 3.111800332s ago: executing program 1 (id=2727): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='5', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fc"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004800) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) sendto$packet(r6, &(0x7f0000000300)="33033600d1fd36bcdc7fe45f46392478c14af365debcf3aca37d03387a598c159f89928488bcaea2cc15e42cf6e26111ef16f1eae7010ec604a052bd02676b6ade494f7233ff6703f416cd917d4bd4ee4906f69ee09294483e96c59ffd2f04d61496ea67a2d9e5eb670db0639c3caa372f2cd7409179b14e8cae2f00040a85f8fff9f0f214c5", 0x86, 0x40008c1, &(0x7f0000000040)={0x11, 0x86dd, r8, 0x1, 0x62}, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.513363148s ago: executing program 7 (id=2728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5d6c}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.140331947s ago: executing program 3 (id=2729): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x8042, 0x10c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000240), 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=0x8) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) 1.12613692s ago: executing program 7 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 0s ago: executing program 7 (id=2731): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) kernel console output (not intermixed with test programs): ch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.058201][ T37] audit: type=1326 audit(1758409868.709:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.058250][ T37] audit: type=1326 audit(1758409868.709:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.058289][ T37] audit: type=1326 audit(1758409868.709:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.062816][ T37] audit: type=1326 audit(1758409868.709:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.063083][ T37] audit: type=1326 audit(1758409868.709:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.063589][ T37] audit: type=1326 audit(1758409868.709:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11255 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1039.556456][T11275] netlink: 'syz.7.1422': attribute type 10 has an invalid length. [ 1039.608325][T11275] netlink: 'syz.7.1422': attribute type 10 has an invalid length. [ 1039.652334][T11275] team0: Port device dummy0 removed [ 1039.694066][T11275] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1040.459420][T11304] lo speed is unknown, defaulting to 1000 [ 1041.770671][T11357] IPv6: Can't replace route, no match found [ 1042.573838][T11364] hub 9-0:1.0: USB hub found [ 1042.574511][T11364] hub 9-0:1.0: 1 port detected [ 1043.056963][ T37] audit: type=1107 audit(1758409872.669:921): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' P´fÝÁ' [ 1043.370207][T11383] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 1043.514955][T11383] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1043.804610][T11389] netlink: 'syz.4.1463': attribute type 4 has an invalid length. [ 1043.862796][T11394] netlink: 'syz.4.1463': attribute type 4 has an invalid length. [ 1044.223549][T11407] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 1044.223570][T11407] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1471'. [ 1044.224236][T11407] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 1044.224253][T11407] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1471'. [ 1044.688473][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688510][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688531][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688555][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688589][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688614][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688639][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688664][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688688][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.688712][ T9723] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1044.792913][ T9723] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1044.797153][T11415] pim6reg1: entered promiscuous mode [ 1044.797182][T11415] pim6reg1: entered allmulticast mode [ 1045.386649][T11432] siw: device registration error -23 [ 1047.112058][T11464] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 1047.112080][T11464] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1491'. [ 1047.112654][T11464] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 1047.112671][T11464] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1491'. [ 1047.200135][T11466] tipc: Started in network mode [ 1047.200167][T11466] tipc: Node identity ba15547f49ce, cluster identity 4711 [ 1047.200702][T11466] tipc: Enabled bearer , priority 0 [ 1047.205095][T11466] syzkaller0: entered promiscuous mode [ 1047.205274][T11466] syzkaller0: entered allmulticast mode [ 1047.406785][ T37] audit: type=1326 audit(1758409877.059:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.406836][ T37] audit: type=1326 audit(1758409877.059:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.449093][ T37] audit: type=1326 audit(1758409877.099:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.449573][ T37] audit: type=1326 audit(1758409877.099:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.449617][ T37] audit: type=1326 audit(1758409877.099:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.457387][ T37] audit: type=1326 audit(1758409877.099:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.457437][ T37] audit: type=1326 audit(1758409877.109:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.459254][ T37] audit: type=1326 audit(1758409877.109:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.459311][ T37] audit: type=1326 audit(1758409877.109:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.460100][ T37] audit: type=1326 audit(1758409877.109:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b658eec29 code=0x7ffc0000 [ 1047.521206][T11474] tipc: Resetting bearer [ 1047.685811][T11465] tipc: Resetting bearer [ 1047.967857][T11465] tipc: Disabling bearer [ 1048.108475][T11494] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 1048.108495][T11494] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1503'. [ 1048.109176][T11494] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 1048.109191][T11494] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1503'. [ 1050.344290][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1518'. [ 1050.446350][T11541] netlink: 'syz.7.1520': attribute type 4 has an invalid length. [ 1051.773145][T11587] IPv4: Oversized IP packet from 127.202.26.0 [ 1052.733904][T11619] IPv6: Can't replace route, no match found [ 1053.345300][T11216] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1053.534501][T11642] hub 9-0:1.0: USB hub found [ 1053.539336][T11642] hub 9-0:1.0: 1 port detected [ 1054.295738][T11216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1054.299385][T11216] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1054.299423][T11216] usb 2-1: can't read configurations, error -71 [ 1054.552060][T11656] IPv6: Can't replace route, no match found [ 1054.621091][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.621168][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.029420][T11672] syz.3.1576: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1055.039556][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.3.1576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1055.039581][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1055.039595][T11672] Call Trace: [ 1055.039603][T11672] [ 1055.039612][T11672] dump_stack_lvl+0x189/0x250 [ 1055.039648][T11672] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1055.039683][T11672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.039710][T11672] ? __pfx__printk+0x10/0x10 [ 1055.039731][T11672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1055.039753][T11672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1055.039780][T11672] warn_alloc+0x22e/0x3b0 [ 1055.039799][T11672] ? stack_trace_save+0x9c/0xe0 [ 1055.039825][T11672] ? __pfx_warn_alloc+0x10/0x10 [ 1055.039849][T11672] ? __kasan_kmalloc+0x93/0xb0 [ 1055.039872][T11672] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 1055.039894][T11672] ? xskq_create+0x56/0x170 [ 1055.039918][T11672] ? xsk_init_queue+0xb0/0x110 [ 1055.039941][T11672] ? xsk_setsockopt+0x4dc/0x8d0 [ 1055.039965][T11672] ? do_sock_setsockopt+0x179/0x1b0 [ 1055.039993][T11672] ? __x64_sys_setsockopt+0x145/0x1b0 [ 1055.040010][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.040036][T11672] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1055.040098][T11672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1055.040136][T11672] ? __kasan_kmalloc+0x93/0xb0 [ 1055.040164][T11672] vmalloc_user_noprof+0xad/0xf0 [ 1055.040194][T11672] ? xskq_create+0xbf/0x170 [ 1055.040224][T11672] xskq_create+0xbf/0x170 [ 1055.040255][T11672] xsk_init_queue+0xb0/0x110 [ 1055.040286][T11672] xsk_setsockopt+0x4dc/0x8d0 [ 1055.040315][T11672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1055.040356][T11672] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1055.040376][T11672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1055.040405][T11672] do_sock_setsockopt+0x179/0x1b0 [ 1055.040444][T11672] __x64_sys_setsockopt+0x145/0x1b0 [ 1055.040470][T11672] do_syscall_64+0xfa/0x3b0 [ 1055.040489][T11672] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.040518][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.040538][T11672] ? clear_bhb_loop+0x60/0xb0 [ 1055.040563][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.040584][T11672] RIP: 0033:0x7f1eb11aec29 [ 1055.040603][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.040621][T11672] RSP: 002b:00007f1eaf416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1055.040642][T11672] RAX: ffffffffffffffda RBX: 00007f1eb13f5fa0 RCX: 00007f1eb11aec29 [ 1055.040671][T11672] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1055.040684][T11672] RBP: 00007f1eb1231e41 R08: 0000000000000004 R09: 0000000000000000 [ 1055.040698][T11672] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.040712][T11672] R13: 00007f1eb13f6038 R14: 00007f1eb13f5fa0 R15: 00007ffed47cb5f8 [ 1055.040746][T11672] [ 1055.040863][T11672] Mem-Info: [ 1055.040877][T11672] active_anon:261 inactive_anon:4392 isolated_anon:0 [ 1055.040877][T11672] active_file:6573 inactive_file:44157 isolated_file:0 [ 1055.040877][T11672] unevictable:768 dirty:259 writeback:0 [ 1055.040877][T11672] slab_reclaimable:12755 slab_unreclaimable:105323 [ 1055.040877][T11672] mapped:30005 shmem:1374 pagetables:1092 [ 1055.040877][T11672] sec_pagetables:0 bounce:0 [ 1055.040877][T11672] kernel_misc_reclaimable:0 [ 1055.040877][T11672] free:1325637 free_pcp:2556 free_cma:0 [ 1055.040934][T11672] Node 0 active_anon:1044kB inactive_anon:17568kB active_file:26088kB inactive_file:176628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120020kB dirty:1036kB writeback:0kB shmem:3960kB kernel_stack:12472kB pagetables:4212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1055.040984][T11672] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1055.041030][T11672] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.041094][T11672] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 1055.041130][T11672] Node 0 DMA32 free:1383156kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1040kB inactive_anon:17524kB active_file:25076kB inactive_file:176556kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2572288kB mlocked:0kB bounce:0kB free_pcp:8824kB local_pcp:2236kB free_cma:0kB [ 1055.041192][T11672] lowmem_reserve[]: 0 0 1 1 1 [ 1055.041225][T11672] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1012kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.041284][T11672] lowmem_reserve[]: 0 0 0 0 0 [ 1055.041317][T11672] Node 1 Normal free:3904032kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1400kB local_pcp:136kB free_cma:0kB [ 1055.041377][T11672] lowmem_reserve[]: 0 0 0 0 0 [ 1055.041407][T11672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1055.041525][T11672] Node 0 DMA32: 1121*4kB (UM) 550*8kB (ME) 463*16kB (UME) 480*32kB (UME) 247*64kB (UME) 295*128kB (UME) 122*256kB (UM) 62*512kB (UM) 16*1024kB (UME) 7*2048kB (UM) 294*4096kB (UM) = 1383140kB [ 1055.041690][T11672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1055.041791][T11672] Node 1 Normal: 34*4kB (UME) 25*8kB (UME) 17*16kB (UME) 173*32kB (UME) 77*64kB (UME) 32*128kB (UME) 15*256kB [ 1055.087229][T11677] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1055.108777][T11678] IPVS: stopping master sync thread 11677 ... [ 1055.196404][T11672] (UME) 6*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 945*4096kB (M) = 3904064kB [ 1055.196478][T11672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.196497][T11672] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1055.196515][T11672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.196531][T11672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1055.196545][T11672] 52101 total pagecache pages [ 1055.196568][T11672] 0 pages in swap cache [ 1055.196576][T11672] Free swap = 124996kB [ 1055.196585][T11672] Total swap = 124996kB [ 1055.196594][T11672] 2097051 pages RAM [ 1055.196601][T11672] 0 pages HighMem/MovableOnly [ 1055.196609][T11672] 422081 pages reserved [ 1055.196616][T11672] 0 pages cma reserved [ 1056.782348][T11721] tipc: Started in network mode [ 1056.782380][T11721] tipc: Node identity 9efbaaf3cb13, cluster identity 4711 [ 1056.807626][T11721] tipc: Enabled bearer , priority 0 [ 1056.817551][T11721] syzkaller0: entered promiscuous mode [ 1056.817578][T11721] syzkaller0: entered allmulticast mode [ 1057.215636][T11719] tipc: Resetting bearer [ 1058.122529][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 1058.122551][ T37] audit: type=1107 audit(1758409887.389:977): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' P´fÝÁ[ìžGì” â‚O\ŸiÜSŒ *úÌ•¸_ø«ªYÖŽHòèíX®ŽDW' [ 1058.466313][ T9598] tipc: Node number set to 1441311475 [ 1058.662309][T11719] tipc: Disabling bearer [ 1060.203884][ T37] audit: type=1107 audit(1758409889.849:978): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' P´fÝÁ' [ 1060.495552][T11788] tipc: Enabled bearer , priority 0 [ 1060.496479][T11788] syzkaller0: entered promiscuous mode [ 1060.496506][T11788] syzkaller0: entered allmulticast mode [ 1060.595543][T11787] tipc: Resetting bearer [ 1061.221536][T11787] tipc: Disabling bearer [ 1061.316928][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1633'. [ 1061.409038][T11810] IPVS: Error joining to the multicast group [ 1061.515455][ T9598] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1061.680106][ T9598] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1061.681164][ T9598] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1061.681216][ T9598] usb 2-1: can't read configurations, error -71 [ 1061.734835][ T37] audit: type=1107 audit(1758409891.379:979): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' P´fÝÁ' [ 1062.030934][ T37] audit: type=1326 audit(1758409891.679:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11817 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1062.031233][ T37] audit: type=1326 audit(1758409891.679:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11817 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1062.040436][ T37] audit: type=1326 audit(1758409891.689:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11817 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1062.587372][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'. [ 1065.210476][T11886] C: renamed from team_slave_0 (while UP) [ 1065.292639][T11886] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1657'. [ 1067.915692][T11947] IPv6: Can't replace route, no match found [ 1067.957401][T11944] lo speed is unknown, defaulting to 1000 [ 1068.551090][T11967] o2cb: This node has not been configured. [ 1068.551109][T11967] o2cb: Cluster check failed. Fix errors before retrying. [ 1068.551160][T11967] (syz.7.1691,11967,1):user_dlm_register:674 ERROR: status = -22 [ 1068.551184][T11967] (syz.7.1691,11967,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1068.969180][T11974] lo speed is unknown, defaulting to 1000 [ 1069.364201][T11995] overlayfs: failed to clone upperpath [ 1069.753775][T12010] tipc: Enabled bearer , priority 0 [ 1069.754589][T12010] syzkaller0: entered promiscuous mode [ 1069.754614][T12010] syzkaller0: entered allmulticast mode [ 1069.782713][T12010] tipc: Resetting bearer [ 1069.825388][T12009] tipc: Resetting bearer [ 1070.254144][T12009] tipc: Disabling bearer [ 1071.144131][T12037] lo speed is unknown, defaulting to 1000 [ 1072.221134][T12073] siw: device registration error -23 [ 1072.263746][ T9872] Bluetooth: hci0: command 0x0406 tx timeout [ 1072.910234][ T1238] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1073.657172][T12046] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1073.657234][T12046] block device autoloading is deprecated and will be removed. [ 1073.685277][ T1238] usb 2-1: Using ep0 maxpacket: 32 [ 1073.687969][ T1238] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1073.687995][ T1238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.688016][ T1238] usb 2-1: config 0 has no interface number 0 [ 1073.688086][ T1238] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 1073.688112][ T1238] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.689186][T12078] IPv6: Can't replace route, no match found [ 1073.692904][ T1238] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1073.692932][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.692953][ T1238] usb 2-1: Product: syz [ 1073.692968][ T1238] usb 2-1: Manufacturer: syz [ 1073.692983][ T1238] usb 2-1: SerialNumber: syz [ 1074.078826][ T1238] usb 2-1: config 0 descriptor?? [ 1074.081693][T12067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.092871][T12084] hub 9-0:1.0: USB hub found [ 1074.093204][T12084] hub 9-0:1.0: 1 port detected [ 1074.165840][ T1238] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1074.166651][ T1238] usb 2-1: invalid MIDI in EP 0 [ 1074.560159][T12098] netlink: 'syz.4.1742': attribute type 4 has an invalid length. [ 1074.611816][T12100] netlink: 'syz.4.1742': attribute type 4 has an invalid length. [ 1075.029098][ T37] audit: type=1326 audit(1758409904.679:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.030418][ T37] audit: type=1326 audit(1758409904.679:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.030993][ T37] audit: type=1326 audit(1758409904.679:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.033613][ T37] audit: type=1326 audit(1758409904.679:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.033890][ T37] audit: type=1326 audit(1758409904.679:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.040945][ T37] audit: type=1326 audit(1758409904.689:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.115895][ T37] audit: type=1326 audit(1758409904.769:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.116016][ T37] audit: type=1326 audit(1758409904.769:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.124859][ T37] audit: type=1326 audit(1758409904.769:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.392377][ T37] audit: type=1326 audit(1758409905.039:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12102 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb11aec29 code=0x7ffc0000 [ 1075.410530][T12103] syz.3.1744 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1075.652810][ T1238] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 1076.369541][T12114] udevd[12114]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.441399][T12117] IPv6: Can't replace route, no match found [ 1077.709875][ T1238] usb 2-1: USB disconnect, device number 35 [ 1078.101153][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 1079.606605][T12149] hub 9-0:1.0: USB hub found [ 1079.606997][T12149] hub 9-0:1.0: 1 port detected [ 1080.084145][T12153] IPv6: Can't replace route, no match found [ 1080.662790][T12165] hub 9-0:1.0: USB hub found [ 1080.663158][T12165] hub 9-0:1.0: 1 port detected [ 1082.488648][T10169] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.489881][T10169] Bluetooth: hci1: command 0x0406 tx timeout [ 1082.907406][T12183] IPv6: Can't replace route, no match found [ 1083.408964][T12203] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 1083.470071][T12203] team0: Port device dummy0 added [ 1083.483968][T12204] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 1083.485638][T12204] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1083.527141][T12204] team0: Failed to send options change via netlink (err -105) [ 1083.527386][T12204] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1083.527981][T12204] team0: Port device dummy0 removed [ 1083.554326][T12204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1084.694144][T12225] IPv6: Can't replace route, no match found [ 1087.929768][T12258] hub 9-0:1.0: USB hub found [ 1087.930116][T12258] hub 9-0:1.0: 1 port detected [ 1091.957544][ T5920] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1092.105330][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 1092.108114][ T5920] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1092.155381][ T9598] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1092.184294][ T5920] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1092.184317][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.184329][ T5920] usb 5-1: Product: syz [ 1092.184336][ T5920] usb 5-1: Manufacturer: syz [ 1092.184344][ T5920] usb 5-1: SerialNumber: syz [ 1092.220283][ T5920] usb 5-1: config 0 descriptor?? [ 1092.246875][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1092.246938][ T5920] usb 5-1: setting power ON [ 1092.269526][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 1092.302705][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1092.303691][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1092.303747][ T5920] usb 5-1: media controller created [ 1092.397286][ T9598] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.397349][ T9598] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1092.397372][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.439393][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1092.552365][ T9598] usb 8-1: config 0 descriptor?? [ 1092.634650][ T9598] pwc: Askey VC010 type 2 USB webcam detected. [ 1092.869077][ T5920] usb 5-1: selecting invalid altsetting 6 [ 1092.869094][ T5920] usb 5-1: digital interface selection failed (-22) [ 1092.869116][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1092.874936][ T5920] usb 5-1: setting power OFF [ 1092.920922][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 1092.920956][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1092.920965][ T5920] (NULL device *): no alternate interface [ 1093.215088][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1093.294428][ T5920] usb 5-1: USB disconnect, device number 40 [ 1093.370146][T12296] kAFS: unable to lookup cell 'sy0' [ 1093.374566][ T9598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1093.377143][ T9598] pwc: recv_control_msg error -32 req 02 val 2700 [ 1093.387218][ T9598] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1093.670276][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 1093.673384][ T9598] pwc: recv_control_msg error -32 req 04 val 1300 [ 1093.674289][ T9598] pwc: recv_control_msg error -32 req 04 val 1400 [ 1093.675281][ T9598] pwc: recv_control_msg error -32 req 02 val 2000 [ 1093.677490][ T9598] pwc: recv_control_msg error -32 req 02 val 2100 [ 1093.678310][ T9598] pwc: recv_control_msg error -32 req 04 val 1500 [ 1093.679315][ T9598] pwc: recv_control_msg error -32 req 02 val 2500 [ 1093.679839][ T9598] pwc: recv_control_msg error -32 req 02 val 2400 [ 1093.681271][ T9598] pwc: recv_control_msg error -32 req 02 val 2600 [ 1093.681774][ T9598] pwc: recv_control_msg error -32 req 02 val 2900 [ 1093.688468][ T9598] pwc: recv_control_msg error -32 req 02 val 2800 [ 1093.691755][ T9598] pwc: recv_control_msg error -32 req 04 val 1100 [ 1093.787299][ T9598] pwc: Registered as video103. [ 1093.984335][ T9598] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 1094.079352][ T9598] usb 8-1: USB disconnect, device number 3 [ 1094.440709][T12312] hub 9-0:1.0: USB hub found [ 1094.441711][T12312] hub 9-0:1.0: 1 port detected [ 1094.620719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.013806][T12313] cgroup: none used incorrectly [ 1095.920060][T12328] IPv6: Can't replace route, no match found [ 1097.967381][T12344] hub 9-0:1.0: USB hub found [ 1097.968618][T12344] hub 9-0:1.0: 1 port detected [ 1098.221717][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1098.842487][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.843905][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.637472][T12347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.644311][T12347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.532799][T12379] Bluetooth: MGMT ver 1.23 [ 1100.691877][ T3525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.612355][ T3525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.662657][T12406] pim6reg1: entered promiscuous mode [ 1104.662689][T12406] pim6reg1: entered allmulticast mode [ 1104.666498][ T3525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.771717][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1844'. [ 1106.738129][ T3525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.488637][T12480] pim6reg1: entered promiscuous mode [ 1108.488657][T12480] pim6reg1: entered allmulticast mode [ 1112.425383][ T6773] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1112.580785][ T6773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.580828][ T6773] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1112.580843][ T6773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.635524][ T6773] usb 2-1: config 0 descriptor?? [ 1112.672627][ T6773] pwc: Askey VC010 type 2 USB webcam detected. [ 1113.209890][ T6773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1113.222120][ T6773] pwc: recv_control_msg error -32 req 02 val 2700 [ 1113.223011][ T6773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1114.921741][ T6773] pwc: recv_control_msg error -32 req 04 val 1300 [ 1114.932010][ T6773] pwc: recv_control_msg error -32 req 04 val 1400 [ 1114.945354][ T6773] pwc: recv_control_msg error -32 req 02 val 2000 [ 1114.946260][ T6773] pwc: recv_control_msg error -32 req 02 val 2100 [ 1114.965990][ T6773] pwc: recv_control_msg error -32 req 04 val 1500 [ 1114.966666][ T6773] pwc: recv_control_msg error -32 req 02 val 2500 [ 1114.985041][ T6773] pwc: recv_control_msg error -32 req 02 val 2400 [ 1115.007840][ T6773] pwc: recv_control_msg error -32 req 02 val 2600 [ 1115.059121][ T6773] pwc: recv_control_msg error -32 req 02 val 2900 [ 1115.101348][ T6773] pwc: recv_control_msg error -32 req 02 val 2800 [ 1115.102423][ T6773] pwc: recv_control_msg error -32 req 04 val 1100 [ 1115.102928][ T6773] pwc: recv_control_msg error -71 req 04 val 1200 [ 1115.146182][ T6773] pwc: Registered as video103. [ 1115.149510][ T6773] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 1115.175056][ T6773] usb 2-1: USB disconnect, device number 36 [ 1115.311005][T12552] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1115.311036][T12552] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1115.311353][T12552] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1115.311372][T12552] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1115.931084][T12559] hub 9-0:1.0: USB hub found [ 1115.931433][T12559] hub 9-0:1.0: 1 port detected [ 1116.072614][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.072687][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.406360][T12573] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 1116.589135][T12574] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 1117.319010][T12573] bond0: (slave dummy0): Releasing backup interface [ 1117.372484][T12573] team0: Port device dummy0 added [ 1117.394278][T12580] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1902'. [ 1117.407556][T12580] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1902'. [ 1117.551092][T12574] team0: Port device dummy0 removed [ 1117.558418][T12574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1121.252151][T12630] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 1121.360678][T12634] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 1121.639087][T12630] bond0: (slave dummy0): Releasing backup interface [ 1121.693544][T12630] team0: Port device dummy0 added [ 1121.727597][T12634] team0: Port device dummy0 removed [ 1121.801523][T12634] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1121.808558][T12628] pim6reg1: entered promiscuous mode [ 1121.808586][T12628] pim6reg1: entered allmulticast mode [ 1127.571601][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 1128.679890][T12687] syz.0.1938: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1128.679938][T12687] CPU: 0 UID: 0 PID: 12687 Comm: syz.0.1938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1128.679952][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1128.679960][T12687] Call Trace: [ 1128.679965][T12687] [ 1128.679971][T12687] dump_stack_lvl+0x189/0x250 [ 1128.679994][T12687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1128.680009][T12687] ? __pfx__printk+0x10/0x10 [ 1128.680022][T12687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1128.680034][T12687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1128.680046][T12687] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1128.680059][T12687] warn_alloc+0x22e/0x3b0 [ 1128.680070][T12687] ? stack_trace_save+0x9c/0xe0 [ 1128.680085][T12687] ? __pfx_warn_alloc+0x10/0x10 [ 1128.680098][T12687] ? __kasan_kmalloc+0x93/0xb0 [ 1128.680110][T12687] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 1128.680124][T12687] ? xskq_create+0x56/0x170 [ 1128.680138][T12687] ? xsk_init_queue+0xb0/0x110 [ 1128.680151][T12687] ? xsk_setsockopt+0x4dc/0x8d0 [ 1128.680163][T12687] ? do_sock_setsockopt+0x179/0x1b0 [ 1128.680177][T12687] ? __x64_sys_setsockopt+0x145/0x1b0 [ 1128.680187][T12687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.680201][T12687] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1128.680234][T12687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1128.680254][T12687] ? __kasan_kmalloc+0x93/0xb0 [ 1128.680268][T12687] vmalloc_user_noprof+0xad/0xf0 [ 1128.680294][T12687] ? xskq_create+0xbf/0x170 [ 1128.680309][T12687] xskq_create+0xbf/0x170 [ 1128.680325][T12687] xsk_init_queue+0xb0/0x110 [ 1128.680341][T12687] xsk_setsockopt+0x4dc/0x8d0 [ 1128.680356][T12687] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1128.680377][T12687] ? __fget_files+0x2a/0x420 [ 1128.680391][T12687] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1128.680402][T12687] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1128.680416][T12687] do_sock_setsockopt+0x179/0x1b0 [ 1128.680433][T12687] __x64_sys_setsockopt+0x145/0x1b0 [ 1128.680446][T12687] do_syscall_64+0xfa/0x3b0 [ 1128.680456][T12687] ? lockdep_hardirqs_on+0x9c/0x150 [ 1128.680478][T12687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.680489][T12687] ? clear_bhb_loop+0x60/0xb0 [ 1128.680501][T12687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.680512][T12687] RIP: 0033:0x7fd20b1eec29 [ 1128.680522][T12687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.680532][T12687] RSP: 002b:00007fd209456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1128.680543][T12687] RAX: ffffffffffffffda RBX: 00007fd20b435fa0 RCX: 00007fd20b1eec29 [ 1128.680551][T12687] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1128.680558][T12687] RBP: 00007fd20b271e41 R08: 0000000000000004 R09: 0000000000000000 [ 1128.680564][T12687] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.680571][T12687] R13: 00007fd20b436038 R14: 00007fd20b435fa0 R15: 00007ffef6ddab58 [ 1128.680588][T12687] [ 1128.680593][T12687] Mem-Info: [ 1128.680598][T12687] active_anon:260 inactive_anon:23944 isolated_anon:0 [ 1128.680598][T12687] active_file:13340 inactive_file:40485 isolated_file:0 [ 1128.680598][T12687] unevictable:768 dirty:33 writeback:0 [ 1128.680598][T12687] slab_reclaimable:12715 slab_unreclaimable:104128 [ 1128.680598][T12687] mapped:32734 shmem:21128 pagetables:1065 [ 1128.680598][T12687] sec_pagetables:0 bounce:0 [ 1128.680598][T12687] kernel_misc_reclaimable:0 [ 1128.680598][T12687] free:1297236 free_pcp:7274 free_cma:0 [ 1128.680627][T12687] Node 0 active_anon:1040kB inactive_anon:95776kB active_file:53156kB inactive_file:161940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130936kB dirty:132kB writeback:0kB shmem:82976kB kernel_stack:12376kB pagetables:4104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1128.680653][T12687] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1128.680683][T12687] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.680717][T12687] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 1128.680736][T12687] Node 0 DMA32 free:1266140kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:95732kB active_file:52144kB inactive_file:161868kB unevictable:1536kB writepending:132kB present:3129332kB managed:2572288kB mlocked:0kB bounce:0kB free_pcp:29096kB local_pcp:5080kB free_cma:0kB [ 1128.680774][T12687] lowmem_reserve[]: 0 0 1 1 1 [ 1128.680792][T12687] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1012kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.680822][T12687] lowmem_reserve[]: 0 0 0 0 0 [ 1128.680838][T12687] Node 1 Normal free:3907444kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.680868][T12687] lowmem_reserve[]: 0 0 0 0 0 [ 1128.680884][T12687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1128.680945][T12687] Node 0 DMA32: 737*4kB (UM) 193*8kB (UME) 213*16kB (UME) 198*32kB (UME) 265*64kB (UME) 274*128kB (UME) 79*256kB (UM) 54*512kB (UM) 15*1024kB (UME) 5*2048kB (U) 275*4096kB (UM) = 1266140kB [ 1128.681025][T12687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1128.681074][T12687] Node 1 Normal: 211*4kB (UME) 51*8kB (UME) 37*16kB (UME) 204*32kB (UME) 77*64kB (UME) 33*128kB (UME) 15*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 945*4096kB (M) = 3907444kB [ 1128.681153][T12687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.681162][T12687] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1128.681170][T12687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.681179][T12687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1128.681187][T12687] 74950 total pagecache pages [ 1128.681192][T12687] 0 pages in swap cache [ 1128.681196][T12687] Free swap = 124996kB [ 1128.681200][T12687] Total swap = 124996kB [ 1128.681204][T12687] 2097051 pages RAM [ 1128.681208][T12687] 0 pages HighMem/MovableOnly [ 1128.681212][T12687] 422081 pages reserved [ 1128.681216][T12687] 0 pages cma reserved [ 1128.734632][T12691] Bluetooth: hci0: service_discovery: too big uuid_count value 4459 [ 1129.918354][T12706] trusted_key: syz.7.1944 sent an empty control message without MSG_MORE. [ 1130.308551][T12711] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1946'. [ 1130.311252][T12711] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1946'. [ 1130.980356][T12733] hub 9-0:1.0: USB hub found [ 1130.980721][T12733] hub 9-0:1.0: 1 port detected [ 1133.170380][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 1133.203622][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.203850][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.794216][T12773] netlink: 'syz.7.1967': attribute type 10 has an invalid length. [ 1133.848760][T12774] netlink: 'syz.7.1967': attribute type 10 has an invalid length. [ 1133.945621][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.952246][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.046392][T12773] bond0: (slave dummy0): Releasing backup interface [ 1135.148623][T12773] team0: Port device dummy0 added [ 1135.276671][T12774] team0: Port device dummy0 removed [ 1135.288179][T12774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1135.290228][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.313230][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.313344][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.313380][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.570470][T12799] Invalid ELF header magic: != ELF [ 1138.529062][T12830] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1138.530999][T12830] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1138.709323][T12832] comedi comedi0: Minor 3 specified more than once! [ 1139.951123][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.953233][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.710230][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.733321][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.413332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.702955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.191755][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.608716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.669771][ T7565] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.620112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.786566][T12879] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2001'. [ 1143.786943][T12879] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2001'. [ 1143.956941][ T7565] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.973821][ T7565] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.973865][ T7565] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.309806][T12896] IPv6: Can't replace route, no match found [ 1145.401925][ T5942] hid_parser_main: 8 callbacks suppressed [ 1145.401948][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 1145.401978][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 1145.402043][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 1145.402065][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 1145.402088][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 1145.402112][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 1145.402135][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 1145.402156][ T5942] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 1145.433914][ T5942] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 1145.751923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.824601][T12908] netlink: 'syz.4.2012': attribute type 10 has an invalid length. [ 1145.843397][T12906] fido_id[12906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1146.666721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.850684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.305781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.743799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.765637][T12959] pim6reg1: entered promiscuous mode [ 1148.765667][T12959] pim6reg1: entered allmulticast mode [ 1149.228982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.395333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.950790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.309738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.367799][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2039'. [ 1150.701715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.048842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.633063][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.797641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.201077][T13004] hub 9-0:1.0: USB hub found [ 1153.211608][T13004] hub 9-0:1.0: 1 port detected [ 1153.485295][ T5931] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1153.637751][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.637786][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.637810][ T5931] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.637849][ T5931] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.637872][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.648214][ T5931] usb 8-1: config 0 descriptor?? [ 1154.022827][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2054'. [ 1154.107019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.258194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.772668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.088164][ T5931] usbhid 8-1:0.0: can't add hid device: -71 [ 1155.088292][ T5931] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1155.117207][ T5931] usb 8-1: USB disconnect, device number 4 [ 1155.587038][T13046] pim6reg1: entered promiscuous mode [ 1155.587067][T13046] pim6reg1: entered allmulticast mode [ 1157.244191][T13069] siw: device registration error -23 [ 1157.385328][ T5942] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1157.548623][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.548682][ T5942] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1157.548715][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.554270][ T5942] usb 5-1: config 0 descriptor?? [ 1157.625492][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 1158.134521][ T5942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1158.135676][ T5942] pwc: recv_control_msg error -32 req 02 val 2700 [ 1158.136349][ T5942] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1158.255261][ T5931] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1158.318894][T13085] hub 9-0:1.0: USB hub found [ 1158.329725][T13085] hub 9-0:1.0: 1 port detected [ 1158.355274][ T5942] pwc: recv_control_msg error -32 req 04 val 1300 [ 1158.359749][ T5942] pwc: recv_control_msg error -32 req 04 val 1400 [ 1158.360805][ T5942] pwc: recv_control_msg error -32 req 02 val 2000 [ 1158.384744][ T5942] pwc: recv_control_msg error -32 req 02 val 2100 [ 1158.391914][ T5942] pwc: recv_control_msg error -32 req 04 val 1500 [ 1158.392850][ T5942] pwc: recv_control_msg error -32 req 02 val 2500 [ 1158.394504][ T5942] pwc: recv_control_msg error -32 req 02 val 2400 [ 1158.415434][ T5942] pwc: recv_control_msg error -32 req 02 val 2600 [ 1158.417232][ T5942] pwc: recv_control_msg error -32 req 02 val 2900 [ 1158.418637][ T5942] pwc: recv_control_msg error -32 req 02 val 2800 [ 1158.448418][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.448509][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.448533][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1158.448576][ T5931] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1158.448599][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.518334][ T5931] usb 4-1: config 0 descriptor?? [ 1158.629528][ T5942] pwc: recv_control_msg error -71 req 04 val 1200 [ 1158.717413][ T5942] pwc: Registered as video103. [ 1158.748979][ T5942] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 1158.851432][ T5942] usb 5-1: USB disconnect, device number 41 [ 1158.991272][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 1158.991417][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1159.181917][ T5931] usb 4-1: USB disconnect, device number 32 [ 1161.087770][T13116] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 1162.865250][T12130] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1162.875561][T13138] siw: device registration error -23 [ 1163.028232][T12130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.028294][T12130] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.028318][T12130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.060928][T12130] usb 4-1: config 0 descriptor?? [ 1163.084328][T12130] pwc: Askey VC010 type 2 USB webcam detected. [ 1163.466368][T13144] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.2098'. [ 1163.466815][T13144] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.2098'. [ 1163.506488][T12130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1163.512649][T12130] pwc: recv_control_msg error -32 req 02 val 2700 [ 1163.514283][T12130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1163.652639][T13147] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 1163.687979][T13147] bond0: (slave dummy0): Releasing backup interface [ 1163.711326][T13151] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 1163.735682][T12130] pwc: recv_control_msg error -32 req 04 val 1300 [ 1163.736395][T12130] pwc: recv_control_msg error -32 req 04 val 1400 [ 1163.737143][T12130] pwc: recv_control_msg error -32 req 02 val 2000 [ 1163.737900][T12130] pwc: recv_control_msg error -32 req 02 val 2100 [ 1163.738603][T12130] pwc: recv_control_msg error -32 req 04 val 1500 [ 1163.739342][T12130] pwc: recv_control_msg error -32 req 02 val 2500 [ 1163.740088][T12130] pwc: recv_control_msg error -32 req 02 val 2400 [ 1163.740767][T12130] pwc: recv_control_msg error -32 req 02 val 2600 [ 1163.741497][T12130] pwc: recv_control_msg error -32 req 02 val 2900 [ 1163.742286][T12130] pwc: recv_control_msg error -32 req 02 val 2800 [ 1163.750613][T13147] team0: Failed to send options change via netlink (err -105) [ 1163.750637][T13147] team0: Port device dummy0 added [ 1163.835002][T13151] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1163.905830][T13151] team0: Failed to send options change via netlink (err -105) [ 1163.906194][T13151] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1163.910387][T13151] team0: Port device dummy0 removed [ 1163.950488][T12130] pwc: recv_control_msg error -71 req 04 val 1200 [ 1163.973160][T13151] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1164.030062][T12130] pwc: Registered as video103. [ 1164.033399][T12130] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 1164.091170][T12130] usb 4-1: USB disconnect, device number 33 [ 1164.195996][T13155] 9pnet_fd: Insufficient options for proto=fd [ 1164.752390][T13172] hub 9-0:1.0: USB hub found [ 1164.760254][T13172] hub 9-0:1.0: 1 port detected [ 1165.177552][T13183] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1165.183140][T13183] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1166.396177][T13200] siw: device registration error -23 [ 1166.507215][T13208] tipc: Started in network mode [ 1166.507246][T13208] tipc: Node identity 080211000001, cluster identity 4711 [ 1166.507444][T13208] tipc: Enabled bearer , priority 0 [ 1167.628880][ T9598] tipc: Node number set to 134418688 [ 1168.045259][ T5934] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1168.248027][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.248054][ T5934] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.252720][ T5934] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1168.252747][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1168.252768][ T5934] usb 2-1: Product: syz [ 1168.347802][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2136'. [ 1171.182072][ T5934] usb 2-1: config 0 descriptor?? [ 1173.529927][ T5934] usb 2-1: USB disconnect, device number 37 [ 1173.937809][T13254] netlink: 'syz.4.2140': attribute type 10 has an invalid length. [ 1174.875353][ T5942] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1175.028470][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.028487][ T5942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1175.029844][ T5942] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1175.029861][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1175.029872][ T5942] usb 4-1: Product: syz [ 1178.260154][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.260534][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.311319][ T5942] usb 4-1: config 0 descriptor?? [ 1178.312810][ T5942] usb 4-1: can't set config #0, error -71 [ 1178.352833][ T5942] usb 4-1: USB disconnect, device number 34 [ 1179.557270][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.559834][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.558716][ T5920] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1180.719150][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.719177][ T5920] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.721003][ T5920] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1180.721220][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1180.721242][ T5920] usb 4-1: Product: syz [ 1180.807440][ T5920] usb 4-1: config 0 descriptor?? [ 1181.052081][ T5920] usb 4-1: USB disconnect, device number 35 [ 1182.763149][T13327] 9pnet_fd: Insufficient options for proto=fd [ 1184.039308][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.082387][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.730108][ T9598] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1184.791042][ T3525] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.922205][ T9598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.922232][ T9598] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1184.928149][ T9598] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1184.928178][ T9598] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1184.928198][ T9598] usb 5-1: Product: syz [ 1185.053221][ T9598] usb 5-1: config 0 descriptor?? [ 1185.481951][ T9598] usb 5-1: USB disconnect, device number 42 [ 1186.637149][ T3525] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.653642][ T3525] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.653690][ T3525] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.846962][T13367] 9pnet_fd: Insufficient options for proto=fd [ 1188.281890][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 1190.567760][ T5934] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1191.883206][ T5934] usb 4-1: device descriptor read/all, error -71 [ 1196.386667][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 1196.515451][ T9598] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1196.776379][ T9598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.776406][ T9598] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1196.777925][ T9598] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1196.777950][ T9598] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1196.777970][ T9598] usb 5-1: Product: syz [ 1196.808313][ T9598] usb 5-1: config 0 descriptor?? [ 1197.955154][ T5934] usb 5-1: USB disconnect, device number 43 [ 1200.131431][ T5920] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1200.276874][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.276910][ T5920] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1200.276923][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.281503][ T5920] usb 5-1: config 0 descriptor?? [ 1200.329793][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 1200.720703][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1200.727826][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 1200.739922][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1200.948366][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 1200.952666][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 1200.955698][ T5920] pwc: recv_control_msg error -32 req 02 val 2000 [ 1200.965496][ T5920] pwc: recv_control_msg error -32 req 02 val 2100 [ 1200.981371][ T5920] pwc: recv_control_msg error -32 req 04 val 1500 [ 1200.983682][ T5920] pwc: recv_control_msg error -32 req 02 val 2500 [ 1200.999346][ T5920] pwc: recv_control_msg error -32 req 02 val 2400 [ 1201.016096][ T5920] pwc: recv_control_msg error -32 req 02 val 2600 [ 1201.017041][ T5920] pwc: recv_control_msg error -32 req 02 val 2900 [ 1201.017916][ T5920] pwc: recv_control_msg error -32 req 02 val 2800 [ 1201.224710][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 1201.319869][ T5920] pwc: Registered as video103. [ 1201.340288][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 1201.374188][ T5920] usb 5-1: USB disconnect, device number 44 [ 1207.348658][ T5931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1207.353621][ T9598] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1208.025306][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 1208.025471][ T9598] usb 2-1: Using ep0 maxpacket: 32 [ 1208.028543][ T5931] usb 5-1: config 8 has an invalid interface number: 215 but max is 1 [ 1208.028568][ T5931] usb 5-1: config 8 has no interface number 1 [ 1208.028615][ T5931] usb 5-1: config 8 interface 0 has no altsetting 0 [ 1208.028640][ T5931] usb 5-1: config 8 interface 215 has no altsetting 0 [ 1208.033189][ T9598] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1208.033215][ T9598] usb 2-1: config 0 has no interface number 0 [ 1208.034684][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.1d [ 1208.034711][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.034731][ T5931] usb 5-1: Product: syz [ 1208.034745][ T5931] usb 5-1: Manufacturer: syz [ 1208.034760][ T5931] usb 5-1: SerialNumber: syz [ 1208.040201][ T9598] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1208.040231][ T9598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.040251][ T9598] usb 2-1: Product: syz [ 1208.040266][ T9598] usb 2-1: Manufacturer: syz [ 1208.040281][ T9598] usb 2-1: SerialNumber: syz [ 1208.102373][ T9598] usb 2-1: config 0 descriptor?? [ 1208.122736][ T9598] smsc95xx v2.0.0 [ 1208.220273][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 1208.349888][ T5931] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1208.353327][ T5931] gspca_vc032x: reg_r err -71 [ 1208.353485][ T5931] vc032x 5-1:8.0: probe with driver vc032x failed with error -71 [ 1208.381507][ T5931] usb 5-1: USB disconnect, device number 45 [ 1209.172501][ T9598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1209.172532][ T9598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1209.173107][ T9598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1209.173416][ T9598] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1209.196628][T13596] input: syz0 as /devices/virtual/input/input14 [ 1209.246677][ T9598] usb 2-1: USB disconnect, device number 38 [ 1209.508553][T13613] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 1209.967166][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 1210.360413][T13629] hub 9-0:1.0: USB hub found [ 1210.367899][T13629] hub 9-0:1.0: 1 port detected [ 1213.108294][ T9872] Bluetooth: hci6: unexpected event for opcode 0x080f [ 1213.642549][ T5931] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1214.385002][T13676] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 1214.528947][ T5931] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1214.528976][ T5931] usb 2-1: config 0 has no interface number 0 [ 1214.551217][ T5931] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1214.551248][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.551268][ T5931] usb 2-1: Product: syz [ 1214.551283][ T5931] usb 2-1: Manufacturer: syz [ 1214.551297][ T5931] usb 2-1: SerialNumber: syz [ 1214.555724][ T5931] usb 2-1: config 0 descriptor?? [ 1214.558916][ T5931] hub 2-1:0.217: bad descriptor, ignoring hub [ 1214.558957][ T5931] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1215.005354][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1215.016535][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.035709][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1215.035782][ T5931] usb 2-1: media controller created [ 1215.124997][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.256390][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 1215.256421][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1215.295270][T12130] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1215.386100][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 1215.386116][ T5931] Registered IR keymap rc-empty [ 1215.402166][ T5931] dvb-usb: could not initialize remote control. [ 1215.402182][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1215.425215][T12130] usb 8-1: device descriptor read/64, error -71 [ 1215.516940][ T5931] usb 2-1: USB disconnect, device number 39 [ 1215.722547][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1215.788069][T12130] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1215.915470][T12130] usb 8-1: device descriptor read/64, error -71 [ 1215.917161][T13693] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 1215.961939][T13693] bond0: (slave dummy0): Releasing backup interface [ 1215.970384][T13697] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 1216.025705][T12130] usb usb8-port1: attempt power cycle [ 1216.031611][T13693] team0: Port device dummy0 added [ 1216.086499][T13697] team0: Port device dummy0 removed [ 1216.106962][T13697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1216.375452][T12130] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1216.395986][T12130] usb 8-1: device descriptor read/8, error -71 [ 1216.535336][ T5931] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1216.598249][ T5920] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1216.992131][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.994320][ T5931] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1216.994484][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.125640][T12130] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1217.146066][T12130] usb 8-1: device descriptor read/8, error -71 [ 1217.225309][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 1217.227711][ T5920] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1217.227737][ T5920] usb 4-1: config 0 has no interface number 0 [ 1217.227786][ T5920] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1217.233307][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1217.233339][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.233360][ T5920] usb 4-1: Product: syz [ 1217.233375][ T5920] usb 4-1: Manufacturer: syz [ 1217.233390][ T5920] usb 4-1: SerialNumber: syz [ 1217.251499][ T5920] usb 4-1: config 0 descriptor?? [ 1217.264116][ T5920] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1217.264153][ T5920] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1217.268400][T12130] usb usb8-port1: unable to enumerate USB device [ 1217.414026][ T9872] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1217.417588][ T9872] Bluetooth: hci6: Injecting HCI hardware error event [ 1217.422552][ T5852] Bluetooth: hci6: hardware error 0x00 [ 1217.555340][ T5931] usb 2-1: config 0 descriptor?? [ 1217.561129][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 1217.977995][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1217.978965][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 1217.980486][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1217.988311][ T5920] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1218.185850][ T5931] pwc: recv_control_msg error -32 req 04 val 1300 [ 1218.217829][ T5931] pwc: recv_control_msg error -32 req 04 val 1400 [ 1218.221329][ T5931] pwc: recv_control_msg error -32 req 02 val 2000 [ 1218.239869][ T5931] pwc: recv_control_msg error -32 req 02 val 2100 [ 1218.241387][ T5931] pwc: recv_control_msg error -32 req 04 val 1500 [ 1218.243644][ T5931] pwc: recv_control_msg error -32 req 02 val 2500 [ 1218.266240][ T5931] pwc: recv_control_msg error -32 req 02 val 2400 [ 1218.269695][ T5931] pwc: recv_control_msg error -32 req 02 val 2600 [ 1218.273438][ T5931] pwc: recv_control_msg error -32 req 02 val 2900 [ 1218.295229][ T5931] pwc: recv_control_msg error -32 req 02 val 2800 [ 1218.500659][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 1218.538423][ T5931] pwc: Registered as video103. [ 1218.564686][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 1218.609119][ T5931] usb 2-1: USB disconnect, device number 40 [ 1218.708593][ T5920] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1218.708626][ T5920] em28xx 4-1:0.89: board has no eeprom [ 1218.975207][ T5920] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1218.975226][ T5920] em28xx 4-1:0.89: analog set to bulk mode. [ 1218.975501][T12172] em28xx 4-1:0.89: Registering V4L2 extension [ 1219.054789][ T5920] usb 4-1: USB disconnect, device number 38 [ 1219.082852][ T5920] em28xx 4-1:0.89: Disconnecting em28xx [ 1219.208493][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 1219.328258][T12172] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1219.328283][T12172] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1219.328296][T12172] em28xx 4-1:0.89: No AC97 audio processor [ 1219.357753][T12172] usb 4-1: Decoder not found [ 1219.357774][T12172] em28xx 4-1:0.89: failed to create media graph [ 1219.357803][T12172] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1219.387210][T12172] em28xx 4-1:0.89: Registering snapshot button... [ 1219.576776][T12172] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input17 [ 1219.586959][T13748] netlink: 'syz.1.2309': attribute type 10 has an invalid length. [ 1219.653502][T12172] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1219.653547][ T5920] em28xx 4-1:0.89: Closing input extension [ 1219.654485][ T5920] em28xx 4-1:0.89: Deregistering snapshot button [ 1219.665267][ T5852] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1220.074697][ T5920] em28xx 4-1:0.89: Freeing device [ 1220.447253][T13755] tipc: Started in network mode [ 1220.447495][T13755] tipc: Node identity 7f000001, cluster identity 4711 [ 1220.447986][T13755] tipc: Enabling of bearer rejected, failed to enable media [ 1223.703060][T12172] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1223.715489][T13770] hub 9-0:1.0: USB hub found [ 1223.715872][T13770] hub 9-0:1.0: 1 port detected [ 1224.283998][T12172] usb 2-1: device descriptor read/64, error -71 [ 1224.768089][T12172] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1225.155216][T12172] usb 2-1: device descriptor read/64, error -71 [ 1225.267964][T12172] usb usb2-port1: attempt power cycle [ 1226.440819][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 1226.573536][T13793] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 1227.390040][T13800] netlink: 'syz.7.2324': attribute type 10 has an invalid length. [ 1227.997201][T13804] netlink: 'syz.0.2325': attribute type 4 has an invalid length. [ 1228.741538][T13820] hub 9-0:1.0: USB hub found [ 1228.746657][T13820] hub 9-0:1.0: 1 port detected [ 1229.569558][T13821] Invalid ELF header magic: != ELF [ 1229.800213][T13834] No control pipe specified [ 1229.835415][ T9723] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1229.858683][T13836] 9pnet_fd: Insufficient options for proto=fd [ 1230.001207][ T9723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.001241][ T9723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.001282][ T9723] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1230.001306][ T9723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.085280][ T9723] usb 5-1: config 0 descriptor?? [ 1230.175455][T13840] netlink: 'syz.0.2338': attribute type 10 has an invalid length. [ 1230.467044][T13847] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 1230.917775][ T9723] usbhid 5-1:0.0: can't add hid device: -71 [ 1230.917906][ T9723] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1230.968545][ T9723] usb 5-1: USB disconnect, device number 46 [ 1231.037229][T13856] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2343'. [ 1231.117015][ T5920] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1231.275295][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1231.277973][ T5920] usb 2-1: config 8 has an invalid interface number: 215 but max is 1 [ 1231.277999][ T5920] usb 2-1: config 8 has no interface number 1 [ 1231.278048][ T5920] usb 2-1: config 8 interface 0 has no altsetting 0 [ 1231.278067][ T5920] usb 2-1: config 8 interface 215 has no altsetting 0 [ 1231.321409][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.1d [ 1231.321438][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.321458][ T5920] usb 2-1: Product: syz [ 1231.321485][ T5920] usb 2-1: Manufacturer: syz [ 1231.321500][ T5920] usb 2-1: SerialNumber: syz [ 1231.634759][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1231.643633][ T5920] gspca_vc032x: reg_r err -71 [ 1231.643694][ T5920] vc032x 2-1:8.0: probe with driver vc032x failed with error -71 [ 1231.678482][ T5920] usb 2-1: USB disconnect, device number 44 [ 1231.789869][T13864] Invalid ELF header magic: != ELF [ 1236.755690][T13927] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 1236.755712][T13927] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 1236.755726][T13927] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1236.759897][T13927] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 1236.759918][T13927] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 1236.759933][T13927] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1236.891143][ T9723] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1236.944960][ T9723] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1237.120019][T13935] fido_id[13935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1237.414416][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 1238.953242][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.953379][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.026383][T13972] netlink: 'syz.7.2383': attribute type 1 has an invalid length. [ 1244.026404][T13972] netlink: 'syz.7.2383': attribute type 4 has an invalid length. [ 1244.026417][T13972] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2383'. [ 1244.026851][T13972] netlink: 'syz.7.2383': attribute type 1 has an invalid length. [ 1244.026867][T13972] netlink: 'syz.7.2383': attribute type 4 has an invalid length. [ 1244.026880][T13972] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2383'. [ 1245.242330][ T9723] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1245.255358][ T9723] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1246.152885][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 1252.740823][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2395'. [ 1252.996432][T14010] netlink: 'syz.7.2397': attribute type 1 has an invalid length. [ 1252.996456][T14010] netlink: 'syz.7.2397': attribute type 4 has an invalid length. [ 1252.996469][T14010] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1252.997081][T14010] netlink: 'syz.7.2397': attribute type 1 has an invalid length. [ 1252.997098][T14010] netlink: 'syz.7.2397': attribute type 4 has an invalid length. [ 1252.997111][T14010] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1255.946261][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 1256.803581][ T9872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1256.842280][ T9872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1256.863535][ T9872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1256.895458][ T9872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1256.900454][ T9872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1257.178049][ T9723] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1257.293166][ T9723] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1257.351837][T14039] lo speed is unknown, defaulting to 1000 [ 1258.745479][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 1259.175220][ T9872] Bluetooth: hci4: command tx timeout [ 1260.455001][T14039] chnl_net:caif_netlink_parms(): no params data found [ 1260.921927][T14089] hub 9-0:1.0: USB hub found [ 1260.925191][T14089] hub 9-0:1.0: 1 port detected [ 1261.416866][ T9872] Bluetooth: hci4: command tx timeout [ 1261.764733][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2421'. [ 1262.465226][ T9598] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1262.877938][ T9598] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.877996][ T9598] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1262.878041][ T9598] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.878073][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.883958][ T9598] usb 8-1: config 0 descriptor?? [ 1263.682684][ T9872] Bluetooth: hci4: command tx timeout [ 1263.713757][ T9598] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1263.745434][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 1265.546579][T14134] hub 9-0:1.0: USB hub found [ 1265.549689][T14134] hub 9-0:1.0: 1 port detected [ 1265.735772][ T9872] Bluetooth: hci4: command tx timeout [ 1266.105153][ T9723] usb 8-1: USB disconnect, device number 9 [ 1266.434788][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2435'. [ 1267.198850][T14039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.198991][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.199237][T14039] bridge_slave_0: entered allmulticast mode [ 1267.203696][T14039] bridge_slave_0: entered promiscuous mode [ 1267.857155][T14039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.857298][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.857543][T14039] bridge_slave_1: entered allmulticast mode [ 1267.875366][T14039] bridge_slave_1: entered promiscuous mode [ 1268.147194][T14162] netlink: 'syz.7.2443': attribute type 10 has an invalid length. [ 1268.375481][T14039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.625346][ T9723] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1268.649326][T14039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.353265][ T9723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.353325][ T9723] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1269.353370][ T9723] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.353395][ T9723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.467020][ T9723] usb 4-1: config 0 descriptor?? [ 1269.495333][T12130] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1269.499935][ T9723] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1269.745752][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2448'. [ 1269.758105][T12130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.758164][T12130] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1269.758188][T12130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.779038][T12130] usb 2-1: config 0 descriptor?? [ 1269.799800][T12130] pwc: Askey VC010 type 2 USB webcam detected. [ 1269.919874][T14039] team0: Port device team_slave_0 added [ 1270.012572][T14039] team0: Port device team_slave_1 added [ 1270.013626][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 1270.192730][T12130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1270.193513][T12130] pwc: recv_control_msg error -32 req 02 val 2700 [ 1270.194193][T12130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1270.416341][T12130] pwc: recv_control_msg error -32 req 04 val 1300 [ 1270.417298][T12130] pwc: recv_control_msg error -32 req 04 val 1400 [ 1270.424001][T12130] pwc: recv_control_msg error -32 req 02 val 2000 [ 1270.434170][T12130] pwc: recv_control_msg error -32 req 02 val 2100 [ 1270.435111][T12130] pwc: recv_control_msg error -32 req 04 val 1500 [ 1270.445916][T12130] pwc: recv_control_msg error -32 req 02 val 2500 [ 1270.464896][T12130] pwc: recv_control_msg error -32 req 02 val 2400 [ 1270.486590][T12130] pwc: recv_control_msg error -32 req 02 val 2600 [ 1270.487289][T12130] pwc: recv_control_msg error -32 req 02 val 2900 [ 1270.487976][T12130] pwc: recv_control_msg error -32 req 02 val 2800 [ 1270.529452][T14039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.529470][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.529561][T14039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.636614][T14039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.636632][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.636657][T14039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.911165][T12130] pwc: recv_control_msg error -71 req 04 val 1200 [ 1270.914753][T12130] pwc: Registered as video103. [ 1270.930417][T12130] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 1270.959456][T12130] usb 2-1: USB disconnect, device number 45 [ 1271.937402][ T9598] usb 4-1: USB disconnect, device number 39 [ 1272.317844][T14214] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 1272.317867][T14214] netlink: 'syz.1.2459': attribute type 4 has an invalid length. [ 1272.317880][T14214] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1272.318288][T14214] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 1272.318304][T14214] netlink: 'syz.1.2459': attribute type 4 has an invalid length. [ 1272.318317][T14214] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1273.417601][T14039] hsr_slave_0: entered promiscuous mode [ 1273.418893][T14039] hsr_slave_1: entered promiscuous mode [ 1273.419742][T14039] debugfs: 'hsr0' already exists in 'hsr' [ 1273.419765][T14039] Cannot create hsr debugfs directory [ 1273.817818][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'. [ 1273.867780][T12130] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1274.032848][T12130] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.032906][T12130] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1274.032950][T12130] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.032973][T12130] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.086477][T12130] usb 8-1: config 0 descriptor?? [ 1274.116858][T12130] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1275.362627][T14250] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 1275.362653][T14250] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 1275.362667][T14250] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1275.363094][T14250] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 1275.363110][T14250] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 1275.363123][T14250] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1275.518312][ T3525] bridge_slave_1: left allmulticast mode [ 1275.518345][ T3525] bridge_slave_1: left promiscuous mode [ 1275.518600][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.545181][ T9598] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1275.626995][ T3525] bridge_slave_0: left allmulticast mode [ 1275.627027][ T3525] bridge_slave_0: left promiscuous mode [ 1275.627479][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.702268][ T9598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.702328][ T9598] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1275.702352][ T9598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.715009][ T9598] usb 5-1: config 0 descriptor?? [ 1275.738322][ T9598] pwc: Askey VC010 type 2 USB webcam detected. [ 1276.170723][ T9598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1276.172132][ T9598] pwc: recv_control_msg error -32 req 02 val 2700 [ 1276.172842][ T9598] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1276.177244][T14262] hub 9-0:1.0: USB hub found [ 1276.178414][T14262] hub 9-0:1.0: 1 port detected [ 1276.374278][ T9598] pwc: recv_control_msg error -32 req 04 val 1300 [ 1276.375014][ T9598] pwc: recv_control_msg error -32 req 04 val 1400 [ 1276.379300][ T9598] pwc: recv_control_msg error -32 req 02 val 2000 [ 1276.385586][ T9598] pwc: recv_control_msg error -32 req 02 val 2100 [ 1276.389424][ T9598] pwc: recv_control_msg error -32 req 04 val 1500 [ 1276.399655][ T9598] pwc: recv_control_msg error -32 req 02 val 2500 [ 1276.403630][ T9598] pwc: recv_control_msg error -32 req 02 val 2400 [ 1276.415635][ T9598] pwc: recv_control_msg error -32 req 02 val 2600 [ 1276.428061][ T9598] pwc: recv_control_msg error -32 req 02 val 2900 [ 1276.428857][ T9598] pwc: recv_control_msg error -32 req 02 val 2800 [ 1276.630802][ T9598] pwc: recv_control_msg error -71 req 04 val 1200 [ 1276.659125][ T9598] pwc: Registered as video103. [ 1276.704326][ T9598] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1276.731909][ T9598] usb 5-1: USB disconnect, device number 47 [ 1276.815353][ T5942] usb 8-1: USB disconnect, device number 10 [ 1277.535731][ T5934] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1277.687710][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.687753][ T5934] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 1277.687776][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.744323][ T5934] usb 5-1: config 0 descriptor?? [ 1278.185793][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 1278.185928][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1278.214801][ T5934] usb 5-1: USB disconnect, device number 48 [ 1278.745980][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.827816][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.886450][ T3525] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1278.931360][ T3525] bond0 (unregistering): Released all slaves [ 1279.616021][ T3525] tipc: Left network mode [ 1279.721979][ T3525] IPVS: stopping master sync thread 10602 ... [ 1281.092828][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 1281.976396][ T5934] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1282.242245][ T5934] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1282.242275][ T5934] usb 8-1: config 0 has no interface number 0 [ 1282.242324][ T5934] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.242351][ T5934] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.242373][ T5934] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1282.242419][ T5934] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1282.242442][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.371852][ T5934] usb 8-1: config 0 descriptor?? [ 1283.065654][ T5934] input: HID 28bd:0042 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0042.0010/input/input20 [ 1283.410662][ T5934] uclogic 0003:28BD:0042.0010: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.7-1/input1 [ 1283.473453][ T5934] usb 8-1: USB disconnect, device number 11 [ 1283.637997][T14323] fido_id[14323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1284.031033][ T3525] hsr_slave_0: left promiscuous mode [ 1284.100111][ T3525] hsr_slave_1: left promiscuous mode [ 1284.102601][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.142330][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.096575][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 1287.418199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.590043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.649750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.710800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.770143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.826513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.898734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.949241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.019597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.084934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.136822][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 1288.178742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.230288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.289290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.341006][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.377844][ T3525] team0 (unregistering): Port device C removed [ 1288.417913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.411510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.448863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.513656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.571154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.631856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.697015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.740570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.801830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.854648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.919381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.965773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.029095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.099373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.164148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.230350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.284769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.447860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.504743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.554769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.613368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.663172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.714745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.751890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.808478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.850330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.005376][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.079705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.251910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.355538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.658023][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1295.045442][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1297.884198][T14395] siw: device registration error -23 [ 1298.868230][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 1300.524856][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.524934][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.520984][T14039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1302.709045][T14039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1302.874774][T14039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1302.980426][T14039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1305.969649][T14039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.026492][T14039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.048773][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.048942][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.082427][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.082952][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.126576][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1306.173687][T14039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1306.173709][T14039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.623519][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1307.321397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.327889][ T10] usb 2-1: config 8 has an invalid interface number: 97 but max is 0 [ 1307.327917][ T10] usb 2-1: config 8 has no interface number 0 [ 1307.327951][ T10] usb 2-1: config 8 interface 97 has no altsetting 0 [ 1307.339687][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=d4.ce [ 1307.339716][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.339737][ T10] usb 2-1: Product: syz [ 1307.339751][ T10] usb 2-1: Manufacturer: syz [ 1307.339765][ T10] usb 2-1: SerialNumber: syz [ 1307.385741][ T9598] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1307.546516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.632686][ T9598] usb 4-1: Using ep0 maxpacket: 8 [ 1307.642943][ T10] ftdi_sio 2-1:8.97: FTDI USB Serial Device converter detected [ 1307.653238][ T10] ftdi_sio ttyUSB0: unknown device type: 0xd4ce [ 1307.656751][ T9598] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1307.656779][ T9598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.656799][ T9598] usb 4-1: Product: syz [ 1307.656812][ T9598] usb 4-1: Manufacturer: syz [ 1307.656827][ T9598] usb 4-1: SerialNumber: syz [ 1307.673462][ T9598] usb 4-1: config 0 descriptor?? [ 1307.690761][ T10] usb 2-1: USB disconnect, device number 46 [ 1307.703815][ T10] ftdi_sio 2-1:8.97: device disconnected [ 1307.888156][ T9598] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1307.933723][T14039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.327302][T14039] veth0_vlan: entered promiscuous mode [ 1309.355108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.361049][ T9598] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1309.417411][T14039] veth1_vlan: entered promiscuous mode [ 1309.482137][T12130] usb 4-1: USB disconnect, device number 40 [ 1309.545293][T12172] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1309.611135][T14039] veth0_macvtap: entered promiscuous mode [ 1309.624736][T14039] veth1_macvtap: entered promiscuous mode [ 1309.660351][T14039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.677449][T14039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.695176][T12172] usb 2-1: Using ep0 maxpacket: 8 [ 1309.966549][T12172] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1309.966578][T12172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.966596][T12172] usb 2-1: Product: syz [ 1309.966609][T12172] usb 2-1: Manufacturer: syz [ 1309.966622][T12172] usb 2-1: SerialNumber: syz [ 1310.007386][ T3525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.008200][ T3525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.009605][T12172] usb 2-1: config 0 descriptor?? [ 1310.013734][ T3525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.354906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.381782][T12172] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1310.842390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.846133][ T3525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.091035][T14517] binder: 14513:14517 ioctl c0306201 200000000640 returned -22 [ 1311.373322][T12172] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1311.373418][T12172] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1311.437788][T12172] usb 2-1: USB disconnect, device number 47 [ 1312.636146][ T4799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.636167][ T4799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.830273][T14552] netlink: 'syz.4.2560': attribute type 10 has an invalid length. [ 1314.225355][ T5942] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1314.311453][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1314.316325][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1314.321576][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1314.322677][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1314.323684][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1314.385191][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 1314.392151][ T5942] usb 2-1: config 8 has an invalid interface number: 215 but max is 1 [ 1314.392181][ T5942] usb 2-1: config 8 has no interface number 1 [ 1314.392231][ T5942] usb 2-1: config 8 interface 0 has no altsetting 0 [ 1314.392250][ T5942] usb 2-1: config 8 interface 215 has no altsetting 0 [ 1314.438885][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.1d [ 1314.438917][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.438937][ T5942] usb 2-1: Product: syz [ 1314.438952][ T5942] usb 2-1: Manufacturer: syz [ 1314.438968][ T5942] usb 2-1: SerialNumber: syz [ 1314.787919][ T5942] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1314.791547][ T5942] gspca_vc032x: reg_r err -71 [ 1314.791638][ T5942] vc032x 2-1:8.0: probe with driver vc032x failed with error -71 [ 1314.859401][ T5942] usb 2-1: USB disconnect, device number 48 [ 1315.669106][ T5852] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1315.737340][T14580] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 1316.455430][ T5852] Bluetooth: hci0: command tx timeout [ 1317.282611][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.283081][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.779981][T14568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.789980][T14568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.557059][ T5852] Bluetooth: hci0: command tx timeout [ 1319.353916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.518445][ T3525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.735188][ T5852] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1319.740816][ T5852] Bluetooth: hci2: Injecting HCI hardware error event [ 1319.744571][ T5852] Bluetooth: hci2: hardware error 0x00 [ 1319.923184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.936794][ T3525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.969855][T14605] pim6reg1: entered promiscuous mode [ 1319.969885][T14605] pim6reg1: entered allmulticast mode [ 1320.346379][T14628] 9pnet_fd: Insufficient options for proto=fd [ 1320.418387][ T1278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.617791][ T9872] Bluetooth: hci0: command tx timeout [ 1320.643637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.678878][ T3525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.682578][T14558] lo speed is unknown, defaulting to 1000 [ 1321.488471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.557980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.903429][ T3525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.055231][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1322.238294][T12172] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1322.285254][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2593'. [ 1322.357508][ T1278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.427664][T12172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.427692][T12172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1322.460198][T12172] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1322.460228][T12172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.460245][T12172] usb 4-1: Product: syz [ 1322.460257][T12172] usb 4-1: Manufacturer: syz [ 1322.460271][T12172] usb 4-1: SerialNumber: syz [ 1322.695223][ T5852] Bluetooth: hci0: command tx timeout [ 1322.829548][T14656] 9pnet_fd: Insufficient options for proto=fd [ 1322.903840][ T1278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.093409][T12172] usb 4-1: 0:2 : does not exist [ 1323.215355][ T5934] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1323.330000][ T1278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.388088][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.388121][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.388166][ T5934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.388189][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.410570][ T5934] usb 2-1: config 0 descriptor?? [ 1323.438428][ T5934] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1323.685619][ T5934] usb 4-1: USB disconnect, device number 41 [ 1323.709065][T14598] udevd[14598]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1324.271114][T14664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1324.287491][T14664] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1324.319620][T14676] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 1324.710174][T14664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1324.710263][T14664] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1324.789911][T14664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1324.790012][T14664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1324.803304][T14558] chnl_net:caif_netlink_parms(): no params data found [ 1324.910032][T14664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1325.166878][ T1278] bridge_slave_1: left allmulticast mode [ 1325.166922][ T1278] bridge_slave_1: left promiscuous mode [ 1325.167165][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.350041][ T1278] bridge_slave_0: left allmulticast mode [ 1325.350076][ T1278] bridge_slave_0: left promiscuous mode [ 1325.350342][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.394674][T14697] 9pnet_fd: Insufficient options for proto=fd [ 1326.075357][T12172] usb 2-1: USB disconnect, device number 49 [ 1326.425215][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 1326.582538][T14714] rdma_op ffff88805b807a70 conn xmit_rdma 0000000000000000 [ 1327.225241][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 1327.225498][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 1328.693010][ T9872] Bluetooth: hci1: command 0x0406 tx timeout [ 1329.303808][ T9872] Bluetooth: hci0: command 0x0c1a tx timeout [ 1329.303836][ T9872] Bluetooth: hci3: command 0x0406 tx timeout [ 1329.886882][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1329.959900][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1330.630393][T14738] hub 9-0:1.0: USB hub found [ 1330.633601][T14738] hub 9-0:1.0: 1 port detected [ 1331.345780][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 1332.081907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.372565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.939282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.986347][ T1278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.046109][ T1278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.090569][ T1278] bond0 (unregistering): Released all slaves [ 1333.243746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.395144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.485349][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.485430][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.485599][T14558] bridge_slave_0: entered allmulticast mode [ 1333.487269][T14558] bridge_slave_0: entered promiscuous mode [ 1333.536962][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.537141][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.537372][T14558] bridge_slave_1: entered allmulticast mode [ 1333.539765][T14558] bridge_slave_1: entered promiscuous mode [ 1333.570394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.613016][ T6403] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1333.778038][ T6403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.778082][ T6403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.778106][ T6403] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1333.778149][ T6403] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1333.778172][ T6403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.800834][ T6403] usb 5-1: config 0 descriptor?? [ 1334.239257][ T6403] usbhid 5-1:0.0: can't add hid device: -71 [ 1334.239387][ T6403] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1334.259532][ T6403] usb 5-1: USB disconnect, device number 49 [ 1334.401366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.558338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.145944][T14766] hub 9-0:1.0: USB hub found [ 1335.147124][T14766] hub 9-0:1.0: 1 port detected [ 1335.150098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.375942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1336.145513][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.389040][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.462929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.212054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.339363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.417219][T14558] team0: Port device team_slave_0 added [ 1339.235133][ T6403] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1339.387791][ T6403] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 1339.387825][ T6403] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31914, setting to 64 [ 1339.390979][ T6403] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1339.391009][ T6403] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.391030][ T6403] usb 8-1: Product: syz [ 1339.391044][ T6403] usb 8-1: Manufacturer: syz [ 1339.391059][ T6403] usb 8-1: SerialNumber: syz [ 1339.451496][ T6403] usb 8-1: config 0 descriptor?? [ 1339.452831][T14800] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1339.640814][T14558] team0: Port device team_slave_1 added [ 1340.439094][T14800] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1340.759416][ T10] usb 8-1: USB disconnect, device number 12 [ 1340.925260][T14749] udevd[14749]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.725268][ T1278] hsr_slave_0: left promiscuous mode [ 1341.789579][ T1278] hsr_slave_1: left promiscuous mode [ 1341.793129][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.793569][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.904608][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.904639][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.128363][ T1278] veth1_macvtap: left promiscuous mode [ 1342.128482][ T1278] veth0_macvtap: left promiscuous mode [ 1342.130761][ T1278] veth1_vlan: left promiscuous mode [ 1342.130980][ T1278] veth0_vlan: left promiscuous mode [ 1344.165228][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1344.315229][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1344.318005][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.318052][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1344.318076][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.331397][ T10] usb 5-1: config 0 descriptor?? [ 1345.739836][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.739872][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.739899][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.739927][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.739953][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.739980][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.740007][ T10] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 1345.741171][ T10] corsair 0003:1B1C:1B3E.0011: failed to start in urb: -90 [ 1345.814465][ T10] corsair 0003:1B1C:1B3E.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 1345.935801][ T6403] usb 5-1: USB disconnect, device number 50 [ 1346.104890][T14871] fido_id[14871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1347.666500][ T1278] team0 (unregistering): Port device team_slave_1 removed [ 1347.936009][ T1278] team0 (unregistering): Port device team_slave_0 removed [ 1348.694155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.744372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.816659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.958849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.011285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.079823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.219576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.656963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.732085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.789428][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.858040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.903200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.993499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.053002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.119661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.170002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.219117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.279848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.337485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.399014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.459263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.519773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.569705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.621613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.688644][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.761939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.038914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.207416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.215601][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.215617][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.215643][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.352837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.358227][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.358245][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.358272][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.579952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.758744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.352223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.216250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.275253][ T5942] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1353.397184][T14558] hsr_slave_0: entered promiscuous mode [ 1353.398478][T14558] hsr_slave_1: entered promiscuous mode [ 1353.461615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.462461][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 1353.474598][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.474655][ T5942] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1353.474680][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.511324][ T5942] usb 4-1: config 0 descriptor?? [ 1353.537283][ T5942] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 1353.601236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.625172][ T6403] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1353.671941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.785237][ T6403] usb 5-1: Using ep0 maxpacket: 32 [ 1353.787535][ T10] usb 4-1: USB disconnect, device number 42 [ 1353.792882][ T6403] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1353.814572][ T6403] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1353.814598][ T6403] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1353.814616][ T6403] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1353.843264][ T6403] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1353.843295][ T6403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.843316][ T6403] usb 5-1: Product: syz [ 1353.843330][ T6403] usb 5-1: Manufacturer: syz [ 1353.843344][ T6403] usb 5-1: SerialNumber: syz [ 1354.950168][ T6403] usb 5-1: 0:2 : does not exist [ 1355.010315][ T6403] usb 5-1: USB disconnect, device number 51 [ 1356.117054][T14918] udevd[14918]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1357.565614][T14954] netlink: 'syz.4.2685': attribute type 10 has an invalid length. [ 1358.045179][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1358.219382][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.219450][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1358.219474][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.236171][ T10] usb 2-1: config 0 descriptor?? [ 1358.262771][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1358.824683][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1358.920671][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1359.251709][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1359.453806][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1359.454849][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1359.471223][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1359.472109][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1359.472916][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1359.473834][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1359.474552][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1359.510432][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1359.512150][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1359.513724][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1359.752071][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1359.768343][ T10] pwc: Registered as video103. [ 1359.771717][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 1359.832406][ T10] usb 2-1: USB disconnect, device number 50 [ 1360.486550][T14558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1360.588404][T14558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1361.607277][T14558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1361.787170][T14558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.831440][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.831521][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.458976][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.537517][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.567094][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.567353][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.595729][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.595945][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.777759][T14994] netlink: 'syz.1.2697': attribute type 10 has an invalid length. [ 1366.120625][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.212936][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1366.249436][T14558] veth0_vlan: entered promiscuous mode [ 1366.284565][T14558] veth1_vlan: entered promiscuous mode [ 1366.384466][T14558] veth0_macvtap: entered promiscuous mode [ 1366.410962][T14558] veth1_macvtap: entered promiscuous mode [ 1366.450989][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.478785][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.507451][ T1397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.507732][ T1397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.507771][ T1397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.507804][ T1397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.105262][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1368.257818][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1368.264616][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1368.264647][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.264667][ T10] usb 5-1: Product: syz [ 1368.264681][ T10] usb 5-1: Manufacturer: syz [ 1368.264696][ T10] usb 5-1: SerialNumber: syz [ 1368.318116][ T10] usb 5-1: config 0 descriptor?? [ 1368.563932][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1369.834589][T15038] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 1369.905617][T15038] team0: Port device dummy0 added [ 1369.946036][ T7463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.946056][ T7463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.182176][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1370.231894][ T10] usb 5-1: USB disconnect, device number 52 [ 1370.283105][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.283127][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.335631][T15044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1370.335658][T15044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1370.381724][T15044] vhci_hcd vhci_hcd.0: Device attached [ 1370.679069][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.625457][ T5931] usb 40-1: SetAddress Request (2) to port 0 [ 1371.625551][ T5931] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1371.677877][T15048] vhci_hcd: connection reset by peer [ 1371.761589][ T1397] vhci_hcd: stop threads [ 1371.769575][ T1397] vhci_hcd: release socket [ 1371.787684][ T1397] vhci_hcd: disconnect device [ 1372.126802][T15065] netlink: 'syz.7.2716': attribute type 4 has an invalid length. [ 1372.495183][ T5920] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1372.667339][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.667359][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.667371][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1372.667402][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1372.667415][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.670939][ T5920] usb 3-1: config 0 descriptor?? [ 1373.045143][ T5942] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1373.120269][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 1373.120410][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1373.135471][ T5920] usb 3-1: USB disconnect, device number 55 [ 1373.227499][ T5942] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1373.227526][ T5942] usb 4-1: config 0 has no interface number 0 [ 1373.227572][ T5942] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.227605][ T5942] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.227625][ T5942] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.227668][ T5942] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1373.227693][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.307777][ T5942] usb 4-1: config 0 descriptor?? [ 1373.376076][T12130] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1373.506702][T12130] usb 8-1: device descriptor read/64, error -71 [ 1373.734123][ T5942] usbhid 4-1:0.1: can't add hid device: -71 [ 1373.734257][ T5942] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1373.755182][T12130] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1373.775270][ T5942] usb 4-1: USB disconnect, device number 43 [ 1373.915226][T12130] usb 8-1: device descriptor read/64, error -71 [ 1374.025798][T12130] usb usb8-port1: attempt power cycle [ 1374.765608][T12130] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1375.858032][T12130] usb 8-1: device descriptor read/8, error -71 [ 1376.136017][T12130] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1377.671564][T12130] usb 8-1: device descriptor read/8, error -71 [ 1377.785439][T12130] usb usb8-port1: unable to enumerate USB device [ 1377.885824][T15099] netlink: 'syz.7.2728': attribute type 4 has an invalid length. [ 1377.938938][ T5931] usb 40-1: device descriptor read/8, error -110 [ 1378.422866][ T5931] usb usb40-port1: attempt power cycle [ 1378.471839][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1379.465164][ T5931] usb usb40-port1: unable to enumerate USB device [ 1379.499009][T15103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.457073][T15114] ------------[ cut here ]------------ [ 1380.457089][T15114] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1380.457607][T15114] WARNING: CPU: 1 PID: 15114 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 1380.457653][T15114] Modules linked in: [ 1380.457675][T15114] CPU: 1 UID: 0 PID: 15114 Comm: syz.3.2729 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1380.457699][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1380.457712][T15114] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1380.457739][T15114] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 19 4c be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 40 d6 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1380.457757][T15114] RSP: 0018:ffffc90003f97ae0 EFLAGS: 00010246 [ 1380.457774][T15114] RAX: 5abb4a64f032b600 RBX: 1ffff110048d5801 RCX: 0000000000080000 [ 1380.457790][T15114] RDX: ffffc900102b2000 RSI: 00000000000006fb RDI: 00000000000006fc [ 1380.457803][T15114] RBP: ffffc90003f97be0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.457827][T15114] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff88802461f000 [ 1380.457842][T15114] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 1380.457856][T15114] FS: 00007f1eaefb16c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1380.457874][T15114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.457888][T15114] CR2: 0000559b8e81ede0 CR3: 000000005e2f2000 CR4: 00000000003526f0 [ 1380.457906][T15114] Call Trace: [ 1380.457914][T15114] [ 1380.457929][T15114] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1380.457957][T15114] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1380.457986][T15114] ? rt_spin_unlock+0x65/0x80 [ 1380.458016][T15114] ? drm_vblank_get+0x148/0x260 [ 1380.458039][T15114] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1380.458064][T15114] drm_fb_helper_ioctl+0x116/0x140 [ 1380.458090][T15114] do_fb_ioctl+0x45c/0x750 [ 1380.458116][T15114] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1380.458153][T15114] ? smk_tskacc+0x2fc/0x370 [ 1380.458193][T15114] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1380.458230][T15114] ? __fget_files+0x3a6/0x420 [ 1380.458257][T15114] ? __fget_files+0x2a/0x420 [ 1380.458287][T15114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1380.458292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.458310][T15114] ? __pfx_fb_ioctl+0x10/0x10 [ 1380.458332][T15114] __se_sys_ioctl+0xff/0x170 [ 1380.458358][T15114] do_syscall_64+0xfa/0x3b0 [ 1380.458375][T15114] ? lockdep_hardirqs_on+0x9c/0x150 [ 1380.458402][T15114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.458420][T15114] ? clear_bhb_loop+0x60/0xb0 [ 1380.458445][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.458465][T15114] RIP: 0033:0x7f1eb11aec29 [ 1380.458483][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1380.458500][T15114] RSP: 002b:00007f1eaefb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.458521][T15114] RAX: ffffffffffffffda RBX: 00007f1eb13f6270 RCX: 00007f1eb11aec29 [ 1380.458536][T15114] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 1380.458547][T15114] RBP: 00007f1eb1231e41 R08: 0000000000000000 R09: 0000000000000000 [ 1380.458559][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.458569][T15114] R13: 00007f1eb13f6308 R14: 00007f1eb13f6270 R15: 00007ffed47cb5f8 [ 1380.458598][T15114] [ 1380.458616][T15114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1380.458631][T15114] CPU: 1 UID: 0 PID: 15114 Comm: syz.3.2729 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1380.458656][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1380.458669][T15114] Call Trace: [ 1380.458678][T15114] [ 1380.458687][T15114] dump_stack_lvl+0x99/0x250 [ 1380.458716][T15114] ? __asan_memcpy+0x40/0x70 [ 1380.458738][T15114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1380.458768][T15114] ? __pfx__printk+0x10/0x10 [ 1380.458800][T15114] vpanic+0x281/0x750 [ 1380.458836][T15114] ? __pfx__printk+0x10/0x10 [ 1380.458858][T15114] ? __pfx_vpanic+0x10/0x10 [ 1380.458886][T15114] ? is_bpf_text_address+0x26/0x2b0 [ 1380.458923][T15114] panic+0xb9/0xc0 [ 1380.458948][T15114] ? __pfx_panic+0x10/0x10 [ 1380.458987][T15114] __warn+0x31b/0x4b0 [ 1380.459010][T15114] ? drm_wait_one_vblank+0x571/0x5b0 [ 1380.459036][T15114] ? drm_wait_one_vblank+0x571/0x5b0 [ 1380.459060][T15114] report_bug+0x2be/0x4f0 [ 1380.459088][T15114] ? drm_wait_one_vblank+0x571/0x5b0 [ 1380.459113][T15114] ? drm_wait_one_vblank+0x571/0x5b0 [ 1380.459140][T15114] ? drm_wait_one_vblank+0x573/0x5b0 [ 1380.459165][T15114] handle_bug+0x84/0x160 [ 1380.459189][T15114] exc_invalid_op+0x1a/0x50 [ 1380.459210][T15114] asm_exc_invalid_op+0x1a/0x20 [ 1380.459230][T15114] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1380.459257][T15114] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 19 4c be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 40 d6 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1380.459274][T15114] RSP: 0018:ffffc90003f97ae0 EFLAGS: 00010246 [ 1380.459292][T15114] RAX: 5abb4a64f032b600 RBX: 1ffff110048d5801 RCX: 0000000000080000 [ 1380.459309][T15114] RDX: ffffc900102b2000 RSI: 00000000000006fb RDI: 00000000000006fc [ 1380.459324][T15114] RBP: ffffc90003f97be0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.459338][T15114] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff88802461f000 [ 1380.459355][T15114] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 1380.459394][T15114] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1380.459422][T15114] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1380.459450][T15114] ? rt_spin_unlock+0x65/0x80 [ 1380.459480][T15114] ? drm_vblank_get+0x148/0x260 [ 1380.459502][T15114] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1380.459527][T15114] drm_fb_helper_ioctl+0x116/0x140 [ 1380.459554][T15114] do_fb_ioctl+0x45c/0x750 [ 1380.459582][T15114] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1380.459616][T15114] ? smk_tskacc+0x2fc/0x370 [ 1380.459654][T15114] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1380.459688][T15114] ? __fget_files+0x3a6/0x420 [ 1380.459714][T15114] ? __fget_files+0x2a/0x420 [ 1380.459740][T15114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1380.459760][T15114] ? __pfx_fb_ioctl+0x10/0x10 [ 1380.459782][T15114] __se_sys_ioctl+0xff/0x170 [ 1380.459814][T15114] do_syscall_64+0xfa/0x3b0 [ 1380.459832][T15114] ? lockdep_hardirqs_on+0x9c/0x150 [ 1380.459860][T15114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.459879][T15114] ? clear_bhb_loop+0x60/0xb0 [ 1380.459903][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.459923][T15114] RIP: 0033:0x7f1eb11aec29 [ 1380.459940][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1380.459958][T15114] RSP: 002b:00007f1eaefb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.459979][T15114] RAX: ffffffffffffffda RBX: 00007f1eb13f6270 RCX: 00007f1eb11aec29 [ 1380.459995][T15114] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 1380.460009][T15114] RBP: 00007f1eb1231e41 R08: 0000000000000000 R09: 0000000000000000 [ 1380.460022][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.460035][T15114] R13: 00007f1eb13f6308 R14: 00007f1eb13f6270 R15: 00007ffed47cb5f8 [ 1380.460068][T15114] [ 1380.460335][T15114] Kernel Offset: disabled