last executing test programs: 9m18.747802807s ago: executing program 1 (id=7): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000001040), 0x40009, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000d94000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xa4, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x4000) 9m16.939702391s ago: executing program 1 (id=9): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x118, 0x0, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x42, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x2130b322, 0x4, 0x20005, 0xc69}}) 9m14.640351405s ago: executing program 1 (id=13): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x4a00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) listen(r1, 0x5) accept4(r1, &(0x7f0000000040)=@x25, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) mmap(&(0x7f0000641000/0x2000)=nil, 0x2000, 0xb635773f07ebbee0, 0x30, 0xffffffffffffffff, 0xffffe000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f017, 0x2}) 9m12.452490799s ago: executing program 1 (id=16): syz_open_dev$sndctrl(0x0, 0x10001d, 0x4841c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 9m10.085899163s ago: executing program 1 (id=19): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x21}, {@empty, 0x4e22, 0x3, 0x10001, 0x400fc1a, 0x8}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x840000000002, 0x3, 0x9) sendmmsg$inet(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) truncate(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x1, 0x7fffffff, 0x0, 0xf7, 0xb, 0x80000000000000, 0x800, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) syz_clone3(&(0x7f0000000700)={0x100000400, &(0x7f00000003c0), &(0x7f0000000400), 0x0, {0x3f}, &(0x7f0000000500)=""/201, 0xc9, &(0x7f0000000600)=""/209, 0x0}, 0x58) 9m7.052020994s ago: executing program 1 (id=24): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) utimensat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/38, 0x26}], 0x1}, 0x4}, {{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680), 0x0, &(0x7f0000001700)=""/197, 0xc5}, 0x975}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/74, 0x4a}, 0x2}, {{&(0x7f0000001c00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c80)=""/16, 0x10}, {&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001dc0)=""/220, 0xdc}], 0x3}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002f00)=""/107, 0x6b}], 0x1, &(0x7f00000030c0)=""/129, 0x81}, 0xfffffffc}, {{&(0x7f0000003180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000032c0)=""/23, 0x17}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000003440)=@caif=@rfm, 0x80, &(0x7f00000036c0)=[{&(0x7f00000034c0)=""/122, 0x7a}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/244, 0xf4}, {&(0x7f0000003680)=""/60, 0x3c}], 0x4, &(0x7f0000003700)=""/113, 0x71}, 0x2}], 0x8, 0x0, &(0x7f0000003980)={0x0, 0x3938700}) 8m51.692475912s ago: executing program 32 (id=24): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) utimensat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/38, 0x26}], 0x1}, 0x4}, {{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680), 0x0, &(0x7f0000001700)=""/197, 0xc5}, 0x975}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/74, 0x4a}, 0x2}, {{&(0x7f0000001c00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c80)=""/16, 0x10}, {&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001dc0)=""/220, 0xdc}], 0x3}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002f00)=""/107, 0x6b}], 0x1, &(0x7f00000030c0)=""/129, 0x81}, 0xfffffffc}, {{&(0x7f0000003180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000032c0)=""/23, 0x17}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000003440)=@caif=@rfm, 0x80, &(0x7f00000036c0)=[{&(0x7f00000034c0)=""/122, 0x7a}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/244, 0xf4}, {&(0x7f0000003680)=""/60, 0x3c}], 0x4, &(0x7f0000003700)=""/113, 0x71}, 0x2}], 0x8, 0x0, &(0x7f0000003980)={0x0, 0x3938700}) 1m0.414983998s ago: executing program 2 (id=998): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 56.563787856s ago: executing program 2 (id=1006): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r0, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="049b49085a0c0061"], 0x8) 55.959594377s ago: executing program 2 (id=1008): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 52.97920741s ago: executing program 2 (id=1012): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$kcm(0x11, 0x2, 0x300) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 51.571862684s ago: executing program 2 (id=1016): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 47.169835011s ago: executing program 2 (id=1022): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 29.850466096s ago: executing program 33 (id=1022): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 19.740821884s ago: executing program 0 (id=1062): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 15.868887486s ago: executing program 5 (id=1071): syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x4000008) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 15.863735954s ago: executing program 0 (id=1072): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) lseek(0xffffffffffffffff, 0xae9d, 0x0) 14.31652231s ago: executing program 5 (id=1074): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) fcntl$getown(r0, 0x9) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x84) syz_emit_vhci(0x0, 0x8) 12.44786594s ago: executing program 5 (id=1076): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) 11.819836893s ago: executing program 3 (id=1077): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 10.807226186s ago: executing program 5 (id=1078): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) lseek(0xffffffffffffffff, 0xae9d, 0x0) 8.919448482s ago: executing program 0 (id=1080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0xb0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 8.918900155s ago: executing program 3 (id=1081): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r7, 0xae9d, 0x0) 7.190534244s ago: executing program 3 (id=1083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffb, 0x60082) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000300)={0xa0000000, 0x1, "6ff6ad4d49bf769c2fe25720ed5009622e709195057af5b6837b0b5f886643fa", 0x1, 0x2, 0x10000001, 0x8, 0x1, 0x87, 0x7fffffff, 0x0, [0xfffffffa, 0x10000, 0x0, 0x8]}) 6.886163531s ago: executing program 0 (id=1084): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24000040) 6.104718078s ago: executing program 3 (id=1085): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) socket$inet(0x2, 0x800, 0x8) 5.976182806s ago: executing program 0 (id=1086): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 5.079400572s ago: executing program 5 (id=1087): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 4.949016745s ago: executing program 4 (id=1088): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r7, 0xae9d, 0x0) 2.024941223s ago: executing program 4 (id=1089): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) 2.023499922s ago: executing program 3 (id=1090): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r7, 0xae9d, 0x0) 899.384903ms ago: executing program 4 (id=1091): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 786.018464ms ago: executing program 0 (id=1092): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 718.736225ms ago: executing program 3 (id=1093): connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$MSR(&(0x7f0000000080), 0x80000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a6fa400110800460000200000000000019078ac1e0001ac141492890300003c00907800000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x863, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f0000000000)='W', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000640)="892dea9422337536305a4dfc9100f3d3b4ad898911fd33bcbb5284a6cfcea5a08782caade00a0fc3a834a4148fd36335f951b841561c13de2fe2ec88bbbdc61241c00445014fc75647f4beda4d7ee0e0a4adc4427653f1ff0b6914551e3a18c1cbf11e24a152b0c4385a78c77d8efc5cb61733b8facf9845fb0f95067654d894b9d010f2bf0270e68372dbddec6471a22cba81e0adf7e1271b4f26ee0b0192c19c19b256f2b84bc822420184ae54f5311f3acd04d9b53c301b59b1a121d971b7cd5c00000000000000", 0xc9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000008000000010000008000000032e0d3a0fdeb1fe93a82545b6f8714555542b484c2d5fa2d2f0a5ed33998c19b543c0df4ab63938ab3dca0549c6efff78f3516c97c5e5a10ab8a2ee848a5c183e002d2ceac217297e45c32846df5d8cbb7a73ecfb7dbf7469f17fc56413489d2a8d23af352d1caf88e0d5385afc7ae80e5beda1ad27bacfccd94e54958d87525d5ceb65ea83236e1653083d95c4252c77a62a8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xe}, {0xfff3, 0x3}}}, 0x24}}, 0x24008194) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_setup(0x81, &(0x7f0000000180)) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) 621.585542ms ago: executing program 5 (id=1094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 498.769833ms ago: executing program 4 (id=1095): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) 318.605775ms ago: executing program 4 (id=1096): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 0s ago: executing program 4 (id=1097): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) kernel console output (not intermixed with test programs): evice strings: Mfr=1, Product=2, SerialNumber=3 [ 274.651522][ T5914] usb 4-1: Product: syz [ 274.658776][ T5914] usb 4-1: Manufacturer: syz [ 274.666559][ T5914] usb 4-1: SerialNumber: syz [ 274.730101][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 275.261564][ T5914] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 275.759158][ T7060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.813923][ T7060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.323054][ T7060] team0: Port device team_slave_0 added [ 276.779820][ T5845] Bluetooth: hci3: command tx timeout [ 277.027545][ T5948] usb 4-1: USB disconnect, device number 4 [ 277.162309][ T5948] usblp0: removed [ 277.251102][ T7060] team0: Port device team_slave_1 added [ 277.286837][ T7236] sctp: [Deprecated]: syz.4.270 (pid 7236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.286837][ T7236] Use struct sctp_sack_info instead [ 277.352765][ T7236] sctp: [Deprecated]: syz.4.270 (pid 7236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.352765][ T7236] Use struct sctp_sack_info instead [ 278.790024][ T5845] Bluetooth: hci3: command tx timeout [ 278.900163][ T7240] netlink: 52 bytes leftover after parsing attributes in process `syz.0.271'. [ 279.033366][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.045634][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.080471][ T7060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.111127][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.118150][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.144091][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.196488][ T7248] fuse: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000' [ 279.245800][ T7060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.370481][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 280.868848][ T5845] Bluetooth: hci3: command tx timeout [ 281.116118][ T2892] bridge_slave_1: left allmulticast mode [ 281.140431][ T2892] bridge_slave_1: left promiscuous mode [ 281.160682][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.170803][ T2892] bridge_slave_0: left allmulticast mode [ 281.177414][ T2892] bridge_slave_0: left promiscuous mode [ 281.187399][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.094454][ T2892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.260284][ T2892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.334198][ T2892] bond0 (unregistering): Released all slaves [ 282.757930][ T7060] hsr_slave_0: entered promiscuous mode [ 282.800124][ T7060] hsr_slave_1: entered promiscuous mode [ 282.917691][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 283.121299][ T7284] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 283.196961][ T7293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.229055][ T7293] netlink: 'syz.3.278': attribute type 10 has an invalid length. [ 283.754652][ T2892] hsr_slave_0: left promiscuous mode [ 283.775915][ T2892] hsr_slave_1: left promiscuous mode [ 283.785192][ T7288] 9pnet_fd: Insufficient options for proto=fd [ 283.797923][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.812890][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.523135][ T2892] team0 (unregistering): Port device team_slave_1 removed [ 285.822211][ T2892] team0 (unregistering): Port device team_slave_0 removed [ 288.438941][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'. [ 288.714980][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 290.414772][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 291.238731][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 291.389000][ T24] usb 5-1: device descriptor read/64, error -71 [ 292.109809][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.126617][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.146499][ T7207] bridge_slave_0: entered allmulticast mode [ 292.172315][ T7207] bridge_slave_0: entered promiscuous mode [ 292.821051][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.854796][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.882347][ T7207] bridge_slave_1: entered allmulticast mode [ 292.904152][ T7207] bridge_slave_1: entered promiscuous mode [ 294.291165][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.395734][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.219219][ T918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 295.569775][ T918] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 295.617418][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.666971][ T918] usb 4-1: Product: syz [ 295.691570][ T918] usb 4-1: Manufacturer: syz [ 295.723615][ T918] usb 4-1: SerialNumber: syz [ 295.855491][ T918] usb 4-1: config 0 descriptor?? [ 295.911011][ T918] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005 [ 296.794420][ T918] (null): failure reading functionality [ 296.805877][ T918] i2c i2c-1: failure reading functionality [ 296.878062][ T918] i2c i2c-1: connected i2c-tiny-usb device [ 296.935777][ T918] usb 4-1: USB disconnect, device number 5 [ 298.075110][ T7207] team0: Port device team_slave_0 added [ 298.460423][ T7207] team0: Port device team_slave_1 added [ 298.942910][ T7404] tmpfs: Bad value for 'mpol' [ 299.003603][ T7407] nfs: Unknown parameter '' [ 299.044673][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.053042][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.088889][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.148356][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.156471][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.217910][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.687443][ T7412] overlayfs: failed to resolve './file0': -2 [ 300.792715][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 300.852416][ T7207] hsr_slave_0: entered promiscuous mode [ 300.859602][ T7207] hsr_slave_1: entered promiscuous mode [ 300.866243][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.900812][ T7207] Cannot create hsr debugfs directory [ 303.242874][ T7060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.119704][ T7060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.309587][ T7437] sctp: [Deprecated]: syz.4.305 (pid 7437) Use of int in maxseg socket option. [ 304.309587][ T7437] Use struct sctp_assoc_value instead [ 304.580629][ T7060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.848375][ T7060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.044306][ T7448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.308'. [ 306.053781][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.308'. [ 307.071572][ T7458] x_tables: duplicate underflow at hook 1 [ 308.829111][ T2892] bridge_slave_1: left allmulticast mode [ 308.834902][ T2892] bridge_slave_1: left promiscuous mode [ 308.929196][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 308.968984][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.016058][ T2892] bridge_slave_0: left allmulticast mode [ 309.025342][ T2892] bridge_slave_0: left promiscuous mode [ 309.076244][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.059480][ T2892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.158841][ T7470] No control pipe specified [ 310.803379][ T2892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.950551][ T2892] bond0 (unregistering): Released all slaves [ 311.081602][ T7458] bridge0: port 3(gretap0) entered blocking state [ 311.088272][ T7458] bridge0: port 3(gretap0) entered disabled state [ 311.095270][ T7458] gretap0: entered allmulticast mode [ 311.104107][ T7458] gretap0: entered promiscuous mode [ 311.110330][ T7458] bridge0: port 3(gretap0) entered blocking state [ 311.117147][ T7458] bridge0: port 3(gretap0) entered forwarding state [ 311.267599][ T7474] Bluetooth: MGMT ver 1.23 [ 311.799776][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.809641][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.818989][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.829304][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.861631][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.906878][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 313.914975][ T5845] Bluetooth: hci4: command tx timeout [ 313.927568][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 314.032795][ T2892] hsr_slave_0: left promiscuous mode [ 314.044755][ T2892] hsr_slave_1: left promiscuous mode [ 314.054522][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.102170][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.716249][ T2892] team0 (unregistering): Port device team_slave_1 removed [ 315.746903][ T2892] team0 (unregistering): Port device team_slave_0 removed [ 316.004634][ T5845] Bluetooth: hci4: command tx timeout [ 316.051735][ T7495] netlink: 'syz.0.318': attribute type 12 has an invalid length. [ 316.072756][ T7495] netlink: 'syz.0.318': attribute type 29 has an invalid length. [ 316.084830][ T7495] netlink: 148 bytes leftover after parsing attributes in process `syz.0.318'. [ 316.097260][ T7495] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 316.105475][ T7495] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 316.118206][ T7495] netlink: 39 bytes leftover after parsing attributes in process `syz.0.318'. [ 316.136945][ T7496] netlink: 'syz.0.318': attribute type 12 has an invalid length. [ 316.158260][ T7496] netlink: 'syz.0.318': attribute type 29 has an invalid length. [ 316.172092][ T7496] netlink: 148 bytes leftover after parsing attributes in process `syz.0.318'. [ 316.299253][ T7496] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 316.333904][ T7496] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 316.381048][ T7496] netlink: 39 bytes leftover after parsing attributes in process `syz.0.318'. [ 317.908879][ T30] audit: type=1326 audit(1745339257.746:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 317.952091][ T30] audit: type=1326 audit(1745339257.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 317.998814][ T30] audit: type=1326 audit(1745339257.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 318.264731][ T30] audit: type=1326 audit(1745339257.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 318.281726][ T5845] Bluetooth: hci4: command tx timeout [ 318.494650][ T7523] ======================================================= [ 318.494650][ T7523] WARNING: The mand mount option has been deprecated and [ 318.494650][ T7523] and is ignored by this kernel. Remove the mand [ 318.494650][ T7523] option from the mount to silence this warning. [ 318.494650][ T7523] ======================================================= [ 319.245549][ T30] audit: type=1326 audit(1745339257.746:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.268531][ T30] audit: type=1326 audit(1745339257.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.443766][ T30] audit: type=1326 audit(1745339257.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.529126][ T30] audit: type=1326 audit(1745339257.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.573508][ T30] audit: type=1326 audit(1745339257.746:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.608807][ T30] audit: type=1326 audit(1745339257.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x50000 [ 319.945580][ T7532] afs: Unknown parameter '0x0000000000000005' [ 320.388800][ T5141] Bluetooth: hci4: command tx timeout [ 321.301426][ T7207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.573028][ T7207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.496852][ T7207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.541452][ T7207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.554598][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.561428][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.725243][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 322.838758][ T5948] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 323.000763][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 323.026112][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.036948][ T5948] usb 5-1: config 2 has an invalid interface number: 120 but max is 0 [ 323.058013][ T5948] usb 5-1: config 2 has no interface number 0 [ 323.077769][ T5948] usb 5-1: config 2 interface 120 has no altsetting 0 [ 323.691367][ T5948] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 323.700662][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.708900][ T5948] usb 5-1: Product: syz [ 323.713192][ T5948] usb 5-1: Manufacturer: syz [ 323.719030][ T5948] usb 5-1: SerialNumber: syz [ 323.779811][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.791198][ T7566] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 323.975187][ T5948] usb 5-1: USB disconnect, device number 8 [ 324.077820][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.109842][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.844948][ T7580] netlink: 128 bytes leftover after parsing attributes in process `syz.3.332'. [ 325.427451][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 325.436771][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 325.446402][ T7577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.331'. [ 327.373537][ T7592] netlink: 512 bytes leftover after parsing attributes in process `syz.4.334'. [ 327.375248][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.441747][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.452872][ T7479] bridge_slave_0: entered allmulticast mode [ 327.525344][ T7479] bridge_slave_0: entered promiscuous mode [ 327.556711][ T7592] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 327.758927][ T5832] block device autoloading is deprecated and will be removed. [ 328.427547][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.444430][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.452716][ T7479] bridge_slave_1: entered allmulticast mode [ 328.471783][ T7479] bridge_slave_1: entered promiscuous mode [ 328.480068][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.487255][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.550252][ T7207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.651296][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.699132][ T6687] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.159075][ T6687] usb 1-1: Using ep0 maxpacket: 32 [ 329.183119][ T6687] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 329.197311][ T6687] usb 1-1: config 0 has no interface number 0 [ 329.215312][ T6687] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.234155][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.241499][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.407796][ T2892] bridge_slave_1: left allmulticast mode [ 329.423288][ T2892] bridge_slave_1: left promiscuous mode [ 329.440281][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.449500][ T6687] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 329.458836][ T6687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.466972][ T6687] usb 1-1: Product: syz [ 329.471638][ T6687] usb 1-1: Manufacturer: syz [ 329.476337][ T6687] usb 1-1: SerialNumber: syz [ 329.477738][ T2892] bridge_slave_0: left allmulticast mode [ 329.485915][ T6687] usb 1-1: config 0 descriptor?? [ 329.612483][ T2892] bridge_slave_0: left promiscuous mode [ 330.144428][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.173279][ T6687] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 330.200067][ T6687] em28xx 1-1:0.132: Video interface 132 found: [ 330.506208][ T2892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.610326][ T6687] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 330.672254][ T2892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.730963][ T2892] bond0 (unregistering): Released all slaves [ 330.982042][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.999420][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.187073][ T6687] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 331.217920][ T6687] em28xx 1-1:0.132: board has no eeprom [ 331.361631][ T6687] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 331.380314][ T6687] em28xx 1-1:0.132: analog set to bulk mode. [ 331.411549][ T5914] em28xx 1-1:0.132: Registering V4L2 extension [ 331.456952][ T7479] team0: Port device team_slave_0 added [ 331.515148][ T7479] team0: Port device team_slave_1 added [ 331.568801][ T5948] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 331.577606][ T7602] loop7: detected capacity change from 0 to 16384 [ 331.907971][ T2892] hsr_slave_0: left promiscuous mode [ 331.914487][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.923458][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 331.933568][ T2892] hsr_slave_1: left promiscuous mode [ 331.950081][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.956046][ T5948] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 332.035476][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.043919][ T7626] loop6: detected capacity change from 0 to 524287999 [ 332.053769][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.055454][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.150584][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.163865][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.180394][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.193495][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.203235][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.212057][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.223431][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.239680][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.250619][ T7626] ldm_validate_partition_table(): Disk read failed. [ 332.262458][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.273823][ T7626] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.304314][ T7626] Dev loop6: unable to read RDB block 0 [ 332.318724][ T5948] usb 4-1: Product: syz [ 332.324777][ T5948] usb 4-1: Manufacturer: syz [ 332.335548][ T7626] loop6: unable to read partition table [ 332.344025][ T5948] usb 4-1: SerialNumber: syz [ 332.366666][ T7626] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 332.452768][ T5948] usb 4-1: config 0 descriptor?? [ 332.474697][ T7631] loop7: detected capacity change from 16384 to 0 [ 332.569476][ C1] I/O error, dev loop7, sector 312 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 332.587651][ C1] I/O error, dev loop7, sector 568 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 332.779325][ T5883] usb 1-1: USB disconnect, device number 5 [ 332.845083][ T5914] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 332.877979][ T5914] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 332.912723][ T5914] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 332.943224][ T5914] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 334.918702][ T5883] em28xx 1-1:0.132: Disconnecting em28xx [ 334.929016][ T47] usb 4-1: USB disconnect, device number 6 [ 335.799603][ T5914] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 335.829034][ T5914] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 335.853003][ T5914] em28xx 1-1:0.132: No AC97 audio processor [ 336.124257][ T7652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.140537][ T5914] usb 1-1: Decoder not found [ 336.169990][ T5914] em28xx 1-1:0.132: failed to create media graph [ 336.176548][ T5914] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 336.261194][ T5914] em28xx 1-1:0.132: Remote control support is not available for this card. [ 336.322535][ T5883] em28xx 1-1:0.132: Closing input extension [ 336.390221][ T5883] em28xx 1-1:0.132: Freeing device [ 336.396026][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.408216][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.426995][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.496239][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.504341][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.618762][ T2153] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 336.824171][ T2892] team0 (unregistering): Port device team_slave_1 removed [ 337.086079][ T2892] team0 (unregistering): Port device team_slave_0 removed [ 338.693812][ T7681] overlayfs: failed to resolve './file1': -2 [ 339.140718][ T5845] Bluetooth: hci3: command tx timeout [ 339.396451][ T2153] usb 4-1: unable to get BOS descriptor or descriptor too short [ 339.413243][ T2153] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 339.422157][ T2153] usb 4-1: can't read configurations, error -71 [ 340.235562][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.402807][ T7697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.349'. [ 340.857170][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.880113][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 340.948697][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.016291][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.125160][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.303074][ T5141] Bluetooth: hci3: command tx timeout [ 341.570517][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.635683][ T7703] tipc: Started in network mode [ 341.651278][ T7703] tipc: Node identity @, cluster identity 4711 [ 341.663581][ T7703] tipc: Enabling of bearer rejected, failed to enable media [ 342.723058][ T7479] hsr_slave_0: entered promiscuous mode [ 342.739889][ T7479] hsr_slave_1: entered promiscuous mode [ 343.389179][ T5141] Bluetooth: hci3: command tx timeout [ 343.851328][ T5141] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 344.849721][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 344.880244][ T7742] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 345.030590][ T5914] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 345.083520][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.430392][ T5141] Bluetooth: hci3: command tx timeout [ 345.588825][ T5914] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 345.598022][ T5914] usb 5-1: config 1 has no interface number 1 [ 345.621877][ T918] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 345.669912][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.733467][ T5914] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 346.136567][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.145926][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.164580][ T5914] usb 5-1: Product: syz [ 346.176241][ T5914] usb 5-1: Manufacturer: syz [ 346.196560][ T5914] usb 5-1: SerialNumber: syz [ 346.205013][ T918] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.219544][ T918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.257239][ T918] usb 1-1: config 0 has no interface number 0 [ 346.273716][ T918] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.347225][ T918] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 346.418708][ T918] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 346.444164][ T918] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 346.476782][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.485804][ T5914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.503128][ T5914] usb 5-1: MIDIStreaming interface descriptor not found [ 346.517709][ T918] usb 1-1: config 0 descriptor?? [ 346.529869][ T918] ldusb 1-1:0.55: Interrupt in endpoint not found [ 347.099032][ T5914] usb 5-1: USB disconnect, device number 9 [ 347.166557][ T5883] usb 1-1: USB disconnect, device number 6 [ 347.262863][ T7761] tipc: Cannot configure node identity twice [ 347.545164][ T7774] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.556774][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 347.662282][ T7765] udevd[7765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.430261][ T7779] netlink: 80 bytes leftover after parsing attributes in process `syz.4.369'. [ 349.049426][ T2892] bridge_slave_1: left allmulticast mode [ 349.210043][ T2892] bridge_slave_1: left promiscuous mode [ 349.215913][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.227706][ T2892] bridge_slave_0: left allmulticast mode [ 349.233817][ T2892] bridge_slave_0: left promiscuous mode [ 349.239847][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.039247][ T2892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.052453][ T2892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.064055][ T2892] bond0 (unregistering): Released all slaves [ 352.801008][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.818532][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.836358][ T7657] bridge_slave_0: entered allmulticast mode [ 352.853356][ T7657] bridge_slave_0: entered promiscuous mode [ 352.902627][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.917711][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.934590][ T7657] bridge_slave_1: entered allmulticast mode [ 352.951640][ T7657] bridge_slave_1: entered promiscuous mode [ 352.971495][ T2892] hsr_slave_0: left promiscuous mode [ 352.984973][ T2892] hsr_slave_1: left promiscuous mode [ 353.003956][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.008358][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 353.029819][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.364438][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.477852][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.680012][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.879642][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.094550][ T24] usb 4-1: config 0 descriptor?? [ 354.104754][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 354.119697][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 354.141001][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 354.173229][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 354.197821][ T24] usb 4-1: media controller created [ 354.223978][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.291118][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 354.297521][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 354.326928][ T7819] dvb-usb: bulk message failed: -22 (2/0) [ 354.346020][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 354.366699][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 354.384795][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.418279][ T24] usb 4-1: USB disconnect, device number 9 [ 354.436711][ T2892] team0 (unregistering): Port device team_slave_1 removed [ 354.470565][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 354.961721][ T2892] team0 (unregistering): Port device team_slave_0 removed [ 355.738781][ T7840] mkiss: ax0: crc mode is auto. [ 356.067579][ T7479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.155821][ T7879] netlink: 'syz.4.400': attribute type 7 has an invalid length. [ 356.166802][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.248399][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.313037][ T7479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.381747][ T7479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.466899][ T7885] tipc: Enabled bearer , priority 10 [ 356.482871][ T7479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.592744][ T7657] team0: Port device team_slave_0 added [ 356.654626][ T7657] team0: Port device team_slave_1 added [ 356.861347][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.880833][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.919459][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.952098][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.969026][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.021260][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.568751][ T24] tipc: Node number set to 1073741870 [ 358.279510][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 358.614267][ T7657] hsr_slave_0: entered promiscuous mode [ 358.644059][ T7657] hsr_slave_1: entered promiscuous mode [ 358.653132][ T7657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.661243][ T7657] Cannot create hsr debugfs directory [ 358.691199][ T7916] gretap0: left allmulticast mode [ 358.696514][ T7916] gretap0: left promiscuous mode [ 358.704278][ T7916] bridge0: port 3(gretap0) entered disabled state [ 358.711135][ T5948] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 358.735243][ T7916] bridge_slave_1: left allmulticast mode [ 358.748309][ T7916] bridge_slave_1: left promiscuous mode [ 358.757991][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.774165][ T7916] bridge_slave_0: left allmulticast mode [ 358.785884][ T7916] bridge_slave_0: left promiscuous mode [ 358.796662][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.882089][ T5948] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 358.896123][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.925207][ T5948] usb 1-1: config 0 has no interface number 0 [ 358.936870][ T5948] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.960198][ T5948] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 358.995941][ T5948] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 359.010440][ T5948] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.022939][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.044201][ T5948] usb 1-1: config 0 descriptor?? [ 359.057651][ T5948] ldusb 1-1:0.55: Interrupt in endpoint not found [ 359.275394][ T2153] usb 1-1: USB disconnect, device number 7 [ 359.314572][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.412623][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.462558][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.469875][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.561799][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.569108][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.678828][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 359.763621][ T7657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.775557][ T7657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.795837][ T7657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.832850][ T5914] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 359.863169][ T5914] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 359.874577][ T7657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.895734][ T5914] usb 4-1: config 171 has no interface number 0 [ 359.923181][ T5914] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 359.959450][ T5914] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 359.972032][ T5914] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 360.208772][ T5914] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 360.217955][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.248708][ T5914] usb 4-1: Product: syz [ 360.253020][ T5914] usb 4-1: Manufacturer: syz [ 360.257642][ T5914] usb 4-1: SerialNumber: syz [ 360.908321][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.971645][ T7928] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.024970][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.059475][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.066675][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.105324][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.112565][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.293709][ T5914] ath6kl: Failed to submit usb control message: -71 [ 361.366711][ T5914] ath6kl: unable to send the bmi data to the device: -71 [ 361.400977][ T5914] ath6kl: Unable to send get target info: -71 [ 361.429414][ T5914] ath6kl: Failed to init ath6kl core: -71 [ 361.544568][ T5914] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 361.758299][ T5914] usb 4-1: USB disconnect, device number 10 [ 361.783068][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.563153][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.680223][ T7479] veth0_vlan: entered promiscuous mode [ 363.793288][ T7479] veth1_vlan: entered promiscuous mode [ 363.949513][ T7657] veth0_vlan: entered promiscuous mode [ 363.995894][ T7657] veth1_vlan: entered promiscuous mode [ 364.066477][ T7479] veth0_macvtap: entered promiscuous mode [ 364.122918][ T7479] veth1_macvtap: entered promiscuous mode [ 364.201459][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.368344][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.116130][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.183756][ T7657] veth0_macvtap: entered promiscuous mode [ 365.225391][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.281737][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.374591][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.416478][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.465069][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.505609][ T7657] veth1_macvtap: entered promiscuous mode [ 365.562892][ T7479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.573728][ T7479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.595349][ T7479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.610939][ T7479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.727605][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.760682][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.794442][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.824845][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.863923][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.061735][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.076500][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.092581][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.104296][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.120481][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.131235][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.163809][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.244584][ T7657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.284237][ T7657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.296827][ T7657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.306487][ T7657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.930215][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.942219][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.230938][ T6254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.266519][ T6254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.378877][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.389832][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.510660][ T6268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.541493][ T6268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.594436][ T8015] bridge_slave_0: default FDB implementation only supports local addresses [ 369.553817][ T8048] loop8: detected capacity change from 0 to 8 [ 369.606857][ T8048] Dev loop8: unable to read RDB block 8 [ 369.633585][ T8048] loop8: unable to read partition table [ 369.659587][ T8048] loop8: partition table beyond EOD, truncated [ 369.680808][ T8048] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 371.732460][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 371.732479][ T30] audit: type=1326 audit(1745339312.036:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.368689][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 372.379677][ T30] audit: type=1326 audit(1745339312.216:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.402360][ T30] audit: type=1326 audit(1745339312.266:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.653681][ T30] audit: type=1326 audit(1745339312.266:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.676662][ T30] audit: type=1326 audit(1745339312.266:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.742715][ T30] audit: type=1326 audit(1745339312.326:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.773280][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 372.822448][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.850107][ T30] audit: type=1326 audit(1745339312.326:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 372.878911][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.917797][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.956980][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.972999][ T30] audit: type=1326 audit(1745339312.326:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 373.023870][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.097115][ T30] audit: type=1326 audit(1745339312.366:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be58e169 code=0x7ffc0000 [ 373.148933][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.173529][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 373.197011][ T30] audit: type=1326 audit(1745339312.366:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32be58cad0 code=0x7ffc0000 [ 373.219647][ T5914] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.227706][ T5914] usb 6-1: Manufacturer: syz [ 373.272738][ T5914] usb 6-1: config 0 descriptor?? [ 374.362470][ T5141] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 374.379970][ T5914] rc_core: IR keymap rc-hauppauge not found [ 374.408914][ T5914] Registered IR keymap rc-empty [ 374.414179][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.498750][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.568543][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 374.624239][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 374.672535][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.709263][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.738972][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.780734][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.808786][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.849230][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.908268][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.969738][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.004641][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.049124][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.105291][ T5914] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 375.145570][ T5914] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 375.249897][ T5914] usb 6-1: USB disconnect, device number 2 [ 376.171237][ T6687] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 376.351847][ T6687] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.408978][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 376.501182][ T6687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 376.517120][ T6687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.528399][ T6687] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.544022][ T6687] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.553419][ T6687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.564439][ T6687] usb 6-1: config 0 descriptor?? [ 376.594879][ T8181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 376.598916][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 376.667690][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.708980][ T5883] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 376.728059][ T5883] usb 1-1: config 127 has no interface number 0 [ 376.738283][ T5883] usb 1-1: config 127 interface 25 has no altsetting 0 [ 376.761547][ T5883] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 376.801409][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.831925][ T5883] usb 1-1: Product: syz [ 376.836347][ T5883] usb 1-1: Manufacturer: syz [ 376.918796][ T5883] usb 1-1: SerialNumber: syz [ 376.934969][ T8205] xt_CT: No such helper "pptp" [ 377.071578][ T6687] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 377.113633][ T6687] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 377.157491][ T5883] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 377.206136][ T6687] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 377.321207][ T6687] usb 6-1: USB disconnect, device number 3 [ 377.919256][ T5883] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 378.005714][ T5883] usb 1-1: USB disconnect, device number 8 [ 378.099703][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 378.248784][ T5883] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 378.288724][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 378.296443][ T47] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 378.305527][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.316108][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.329468][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.340246][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.354175][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 378.364191][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.390896][ T5141] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 378.408780][ T5141] Bluetooth: hci0: Injecting HCI hardware error event [ 378.417684][ T5141] Bluetooth: hci0: hardware error 0x00 [ 378.449899][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 378.478205][ T5883] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 378.498320][ T5883] usb 1-1: can't read configurations, error -71 [ 378.696777][ T47] usb 3-1: usb_control_msg returned -32 [ 378.703184][ T47] usbtmc 3-1:16.0: can't read capabilities [ 379.050152][ T8254] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 379.142023][ T8258] syz_tun: entered allmulticast mode [ 379.251993][ T6687] usb 3-1: USB disconnect, device number 6 [ 379.256769][ T8257] syz_tun: left allmulticast mode [ 380.469031][ T5141] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.127216][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 381.127238][ T30] audit: type=1800 audit(1745339321.426:83): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.515" name="file1" dev="tmpfs" ino=83 res=0 errno=0 [ 381.311032][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.519'. [ 381.668937][ T6687] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 381.844193][ T6687] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.857608][ T6687] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.868912][ T6687] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.881792][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.901926][ T8328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.915786][ T6687] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.948824][ T918] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 382.145288][ T918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.157139][ T918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 382.188430][ T918] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 382.359267][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.447956][ T918] usb 6-1: config 0 descriptor?? [ 382.506674][ T918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 382.575730][ T918] dvb-usb: bulk message failed: -22 (3/0) [ 382.688408][ T918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 382.714759][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.521'. [ 382.756294][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.788380][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.838302][ T918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 382.883551][ T918] usb 6-1: media controller created [ 383.004517][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.161865][ T918] dvb-usb: bulk message failed: -22 (6/0) [ 383.214732][ T918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 383.261845][ T918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 383.831703][ T918] dvb-usb: schedule remote query interval to 150 msecs. [ 383.860661][ T918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 383.928881][ T918] usb 6-1: USB disconnect, device number 4 [ 383.998500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.006139][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.124522][ T918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 385.502711][ T30] audit: type=1326 audit(1745339325.806:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.2.538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4812d8e169 code=0x0 [ 385.523683][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.049303][ T6687] usb 1-1: USB disconnect, device number 11 [ 386.579007][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 386.878751][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 387.077583][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 387.100554][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.139395][ T5914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.198653][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.231993][ T5914] usb 3-1: config 0 descriptor?? [ 387.499092][ T5914] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 387.864201][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 388.304525][ T5914] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 388.400040][ T6687] usb 3-1: USB disconnect, device number 7 [ 388.566128][ T5914] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.576856][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.598520][ T5914] usb 4-1: config 0 has no interface number 0 [ 388.614133][ T5914] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.645539][ T5914] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 388.695393][ T5914] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 388.713036][ T5914] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 388.741377][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.795328][ T5914] usb 4-1: config 0 descriptor?? [ 388.833055][ T5914] ldusb 4-1:0.55: Interrupt in endpoint not found [ 389.894523][ T5914] usb 4-1: USB disconnect, device number 11 [ 391.122226][ T8482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.251377][ T8490] netlink: 72 bytes leftover after parsing attributes in process `syz.4.559'. [ 391.872473][ T6687] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 392.203378][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 392.314812][ T6687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.485767][ T6687] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 392.623629][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.744456][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 392.817573][ T6687] usb 3-1: config 0 descriptor?? [ 392.831054][ T6687] pwc: Askey VC010 type 2 USB webcam detected. [ 392.888479][ T8514] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 393.096158][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 393.242468][ T6687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 393.263776][ T6687] pwc: recv_control_msg error -32 req 02 val 2700 [ 393.282199][ T6687] pwc: recv_control_msg error -32 req 02 val 2c00 [ 393.291763][ T6687] pwc: recv_control_msg error -32 req 04 val 1000 [ 393.303214][ T6687] pwc: recv_control_msg error -32 req 04 val 1300 [ 393.314465][ T6687] pwc: recv_control_msg error -32 req 04 val 1400 [ 393.330339][ T6687] pwc: recv_control_msg error -32 req 02 val 2000 [ 393.344770][ T6687] pwc: recv_control_msg error -32 req 02 val 2100 [ 393.561077][ T6687] pwc: recv_control_msg error -71 req 02 val 2500 [ 393.581524][ T6687] pwc: recv_control_msg error -71 req 02 val 2400 [ 393.604366][ T6687] pwc: recv_control_msg error -71 req 02 val 2600 [ 393.614722][ T6687] pwc: recv_control_msg error -71 req 02 val 2900 [ 393.634611][ T6687] pwc: recv_control_msg error -71 req 02 val 2800 [ 393.646150][ T6687] pwc: recv_control_msg error -71 req 04 val 1100 [ 393.657523][ T6687] pwc: recv_control_msg error -71 req 04 val 1200 [ 393.674370][ T6687] pwc: Registered as video103. [ 393.686133][ T6687] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 393.789581][ T6687] usb 3-1: USB disconnect, device number 8 [ 396.104520][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.137597][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.545011][ T8578] [U] 1WT`8H$09\ [ 396.551369][ T8578] [U] ;2}ugVĥ#O9ե>-Sݢp [ 397.077326][ T8576] [U] 4XZ^Y)ഴmc. opOW [ 398.696933][ T8607] overlayfs: failed to clone upperpath [ 399.838816][ T2153] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 400.668689][ T2153] usb 1-1: config 1 has an invalid interface number: 31 but max is 0 [ 400.728858][ T2153] usb 1-1: config 1 has no interface number 0 [ 400.744300][ T2153] usb 1-1: config 1 interface 31 altsetting 14 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 400.779633][ T2153] usb 1-1: config 1 interface 31 altsetting 14 endpoint 0xC has invalid wMaxPacketSize 0 [ 400.829247][ T2153] usb 1-1: config 1 interface 31 has no altsetting 0 [ 400.851339][ T2153] usb 1-1: New USB device found, idVendor=05ac, idProduct=8218, bcdDevice=11.5c [ 400.872818][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.892434][ T2153] usb 1-1: Product: syz [ 400.896738][ T2153] usb 1-1: Manufacturer: syz [ 400.932690][ T2153] usb 1-1: SerialNumber: syz [ 400.963694][ T8624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.028127][ T8642] syzkaller0: entered promiscuous mode [ 401.044558][ T8642] syzkaller0: entered allmulticast mode [ 401.203209][ T2153] usb 1-1: USB disconnect, device number 12 [ 401.494182][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 401.673552][ T5141] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 402.615211][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 403.683400][ T8655] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 405.191055][ T8704] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 405.191055][ T8704] program syz.0.613 not setting count and/or reply_len properly [ 405.787768][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 406.143354][ T918] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 406.440396][ T918] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 406.448562][ T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.459553][ T918] usb 4-1: config 0 has no interface number 0 [ 406.466444][ T918] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.653294][ T918] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 406.774423][ T918] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 406.905511][ T918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 407.025781][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.576845][ T918] usb 4-1: config 0 descriptor?? [ 407.599758][ T918] ldusb 4-1:0.55: Interrupt in endpoint not found [ 408.409083][ T5948] usb 4-1: USB disconnect, device number 12 [ 412.079128][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 412.098923][ T5914] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 412.318953][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 412.478808][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 412.494792][ T5914] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 412.514828][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.588789][ T5948] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 412.723535][ T5914] usb 3-1: config 0 descriptor?? [ 412.752196][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.785316][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.810253][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.821465][ T24] usb 4-1: config 0 descriptor?? [ 412.832489][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 412.840985][ T5948] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 412.857284][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.874019][ T5948] usb 1-1: config 0 has no interface number 0 [ 412.884618][ T5948] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.901441][ T5948] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 412.913514][ T5948] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 412.924273][ T5948] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 412.934312][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.960120][ T5914] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 412.971774][ T5948] usb 1-1: config 0 descriptor?? [ 412.988427][ T5948] ldusb 1-1:0.55: Interrupt in endpoint not found [ 413.358758][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 413.371730][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 413.373452][ T5948] usb 1-1: USB disconnect, device number 13 [ 413.387530][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 413.405813][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 414.095595][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 414.119464][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 414.154036][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 414.172393][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 414.185911][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 414.395840][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 415.160212][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 415.170634][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 415.179291][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 415.212509][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 415.277212][ T24] pwc: Registered as video103. [ 415.294018][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 415.325396][ T24] usb 4-1: USB disconnect, device number 13 [ 416.282754][ T5914] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 416.298672][ T5914] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 416.327035][ T5914] asix 3-1:0.0: probe with driver asix failed with error -71 [ 416.339711][ T5914] usb 3-1: USB disconnect, device number 9 [ 418.378390][ T8817] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8817] [ 418.448869][ T8821] syz_tun: entered allmulticast mode [ 418.477347][ T8820] syz_tun: left allmulticast mode [ 418.529133][ T30] audit: type=1326 audit(1745339358.836:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.599610][ T30] audit: type=1326 audit(1745339358.856:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.679037][ T30] audit: type=1326 audit(1745339358.856:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.759315][ T30] audit: type=1326 audit(1745339358.856:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.807727][ T30] audit: type=1326 audit(1745339358.856:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.841083][ T30] audit: type=1326 audit(1745339358.856:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.866931][ T30] audit: type=1326 audit(1745339358.876:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7ffc0000 [ 418.889428][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 418.897463][ T30] audit: type=1326 audit(1745339358.876:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ed5f90087 code=0x7ffc0000 [ 419.019362][ T30] audit: type=1326 audit(1745339358.876:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6ed5f8fffc code=0x7ffc0000 [ 419.108955][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 419.119381][ T30] audit: type=1326 audit(1745339358.876:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8823 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6ed5f8ff34 code=0x7ffc0000 [ 419.306801][ T24] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 419.317864][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.335740][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.345598][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.354057][ T24] usb 6-1: Product: syz [ 419.358472][ T24] usb 6-1: Manufacturer: syz [ 419.363485][ T24] usb 6-1: SerialNumber: syz [ 420.704606][ T24] usb 6-1: 0:2 : does not exist [ 420.716544][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 420.762806][ T24] usb 6-1: USB disconnect, device number 5 [ 421.055705][ T7880] udevd[7880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.478735][ T2153] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 421.689209][ T2153] usb 1-1: Using ep0 maxpacket: 8 [ 421.710640][ T2153] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 421.736009][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 421.851431][ T2153] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.864688][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.888301][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 422.563249][ T2153] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 422.596852][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 422.765597][ T2153] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.822654][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 422.996413][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 423.020544][ T2153] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 423.028039][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 423.040603][ T2153] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.155580][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 423.767648][ T2153] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 423.787240][ T2153] usb 1-1: string descriptor 0 read error: -22 [ 423.794025][ T2153] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 423.803572][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.858976][ T2153] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 424.073603][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 424.209953][ T5833] usb 1-1: USB disconnect, device number 14 [ 424.400299][ T2153] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 425.621093][ T2153] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 425.653026][ T2153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.712823][ T2153] usb 4-1: config 0 has no interface number 0 [ 425.725912][ T2153] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.758670][ T2153] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 425.793784][ T2153] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 425.853661][ T2153] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.966878][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.177540][ T2153] usb 4-1: config 0 descriptor?? [ 426.486410][ T2153] ldusb 4-1:0.55: Interrupt in endpoint not found [ 426.621241][ T8887] netlink: 'syz.2.663': attribute type 4 has an invalid length. [ 426.931148][ T2153] usb 4-1: USB disconnect, device number 14 [ 429.483754][ T8905] gtp0: entered promiscuous mode [ 431.091095][ T5833] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 431.759542][ T2153] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 431.862184][ T5833] usb 6-1: device descriptor read/all, error -71 [ 432.038910][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 432.071435][ T2153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.106121][ T2153] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 432.375045][ T8932] 9pnet_fd: Insufficient options for proto=fd [ 433.136889][ T2153] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.146214][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.178941][ T2153] usb 4-1: config 0 descriptor?? [ 433.203425][ T2153] usb 4-1: can't set config #0, error -71 [ 433.431291][ T2153] usb 4-1: USB disconnect, device number 15 [ 433.803402][ T8934] program syz.5.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.340047][ T5830] Bluetooth: hci3: link tx timeout [ 435.346274][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 435.833684][ T5830] Bluetooth: hci3: link tx timeout [ 435.839129][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 436.119144][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 436.356800][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 436.713113][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 436.753072][ T5914] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 436.768030][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 437.268713][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 437.336718][ T5914] usb 4-1: Product: syz [ 437.352668][ T5914] usb 4-1: Manufacturer: syz [ 437.362965][ T5914] usb 4-1: SerialNumber: syz [ 437.379414][ T5914] usb 4-1: config 0 descriptor?? [ 437.400208][ T8948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.430949][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 437.456003][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub [ 437.515771][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5 [ 438.531435][ T5914] usb 4-1: USB disconnect, device number 16 [ 439.197031][ T8977] 9pnet_fd: Insufficient options for proto=fd [ 442.158916][ T5884] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 443.518696][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 443.542834][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 443.558696][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.782201][ T5948] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 444.453261][ T5884] usb 4-1: Product: syz [ 444.458951][ T5884] usb 4-1: Manufacturer: syz [ 444.463665][ T5884] usb 4-1: SerialNumber: syz [ 444.479100][ T5884] usb 4-1: config 0 descriptor?? [ 444.491224][ T5948] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 444.516564][ T5948] usb 6-1: config 0 has no interface number 0 [ 444.554511][ T5948] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=b1.52 [ 444.574246][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.700732][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 444.810896][ T5948] usb 6-1: Product: syz [ 444.816203][ T5948] usb 6-1: Manufacturer: syz [ 444.821245][ T5948] usb 6-1: SerialNumber: syz [ 444.841831][ T5948] usb 6-1: config 0 descriptor?? [ 444.860704][ T5948] cypress_m8 6-1:0.8: HID->COM RS232 Adapter converter detected [ 444.906724][ T5948] cyphidcom ttyUSB0: required endpoint is missing [ 444.942344][ T9022] syz.0.702: attempt to access beyond end of device [ 444.942344][ T9022] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 444.956046][ T9022] (syz.0.702,9022,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 444.963820][ T9022] (syz.0.702,9022,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 444.971190][ T9022] (syz.0.702,9022,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 444.979882][ T9022] (syz.0.702,9022,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 445.442429][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.454614][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.491702][ T9021] 9pnet_fd: Insufficient options for proto=fd [ 445.542301][ T9009] program syz.5.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.578888][ T5883] usb 6-1: USB disconnect, device number 8 [ 445.592402][ T5883] cypress_m8 6-1:0.8: device disconnected [ 446.007783][ T9032] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 449.027636][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 449.073383][ T5884] usb 4-1: USB disconnect, device number 17 [ 450.201865][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.301030][ T9071] overlayfs: failed to clone upperpath [ 451.200091][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.038928][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.372248][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.625725][ T9082] syz.3.717 (9082): drop_caches: 2 [ 456.818970][ T12] bridge_slave_1: left allmulticast mode [ 456.824843][ T12] bridge_slave_1: left promiscuous mode [ 456.854688][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.855026][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.868535][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.883254][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.891188][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.898868][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.185888][ T12] bridge_slave_0: left allmulticast mode [ 457.284366][ T9110] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 457.992988][ T12] bridge_slave_0: left promiscuous mode [ 458.006939][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.690127][ T5845] Bluetooth: hci3: command tx timeout [ 461.824537][ T5845] Bluetooth: hci3: command tx timeout [ 463.883709][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.897530][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.910285][ T12] bond0 (unregistering): Released all slaves [ 463.919111][ T5845] Bluetooth: hci3: command tx timeout [ 465.896331][ T9188] fuse: Bad value for 'group_id' [ 465.901749][ T9188] fuse: Bad value for 'group_id' [ 466.000092][ T5845] Bluetooth: hci3: command tx timeout [ 466.557518][ T12] hsr_slave_0: left promiscuous mode [ 466.571390][ T12] hsr_slave_1: left promiscuous mode [ 466.603217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.616362][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.654115][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.473595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.615059][ T12] veth1_macvtap: left promiscuous mode [ 467.691595][ T12] veth0_macvtap: left promiscuous mode [ 467.749890][ T12] veth1_vlan: left promiscuous mode [ 467.795143][ T12] veth0_vlan: left promiscuous mode [ 469.856718][ T9224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.065242][ T9239] nfs4: Unknown parameter 'H"㍢f5X:d [ 473.065242][ T9239] n"pm-wSY2E4 ۡx\x$Q#cʷhz/hmO>mLcm^' [ 474.024751][ T12] team0 (unregistering): Port device team_slave_1 removed [ 474.122555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 474.199497][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 476.090659][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 478.371836][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.390065][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.397683][ T9105] bridge_slave_0: entered allmulticast mode [ 478.406774][ T9105] bridge_slave_0: entered promiscuous mode [ 478.422163][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.430027][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.437441][ T9105] bridge_slave_1: entered allmulticast mode [ 478.446187][ T9105] bridge_slave_1: entered promiscuous mode [ 479.480808][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.530881][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.643425][ T9298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'. [ 481.096020][ T9105] team0: Port device team_slave_0 added [ 481.298401][ T9105] team0: Port device team_slave_1 added [ 481.367088][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.076772][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.118948][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.159985][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.172283][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.203370][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.435881][ T9105] hsr_slave_0: entered promiscuous mode [ 483.499048][ T9105] hsr_slave_1: entered promiscuous mode [ 483.505646][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.514629][ T9105] Cannot create hsr debugfs directory [ 483.898649][ T9330] openvswitch: netlink: Missing key (keys=40, expected=100) [ 488.648656][ T5948] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 488.983044][ T5948] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 489.046732][ T5948] usb 6-1: config 0 has no interface number 0 [ 489.165952][ T5948] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 489.187117][ T5948] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.346252][ T5948] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 489.626268][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.648659][ T5948] usb 6-1: Product: syz [ 489.658130][ T5948] usb 6-1: Manufacturer: syz [ 489.684749][ T5948] usb 6-1: SerialNumber: syz [ 489.705009][ T5948] usb 6-1: config 0 descriptor?? [ 489.715276][ T9355] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.771122][ T5948] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 489.907696][ T5948] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 489.992400][ T9372] input: syz0 as /devices/virtual/input/input15 [ 490.264342][ T9105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.315771][ T9105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.518087][ T9105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.796640][ T9105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.883952][ T9379] 9pnet_fd: Insufficient options for proto=fd [ 491.743132][ T5884] usb 6-1: USB disconnect, device number 9 [ 491.780102][ T5884] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 491.861998][ T5884] cyberjack 6-1:0.69: device disconnected [ 492.993812][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.102403][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.192702][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.200058][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.461385][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.787'. [ 493.746716][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.754001][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.254032][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 494.693114][ T6687] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 494.759742][ T9412] x_tables: duplicate underflow at hook 2 [ 494.900920][ T6687] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 494.936837][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 494.936865][ T30] audit: type=1326 audit(1745339435.236:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x0 [ 494.951459][ T6687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.028882][ T6687] usb 1-1: config 0 has no interface number 0 [ 495.035103][ T6687] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.075726][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.085320][ T6687] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 495.098049][ T6687] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 495.111238][ T6687] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 495.158644][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.210053][ T9105] veth0_vlan: entered promiscuous mode [ 495.378905][ T9105] veth1_vlan: entered promiscuous mode [ 495.513154][ T9105] veth0_macvtap: entered promiscuous mode [ 495.546885][ T9105] veth1_macvtap: entered promiscuous mode [ 495.614093][ T6687] usb 1-1: config 0 descriptor?? [ 495.622596][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.634230][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.646918][ T6687] ldusb 1-1:0.55: Interrupt in endpoint not found [ 495.657405][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.668056][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.680695][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.691594][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.702360][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.736248][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.753396][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.763363][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.774085][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.791854][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.839816][ T9105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.874141][ T6687] usb 1-1: USB disconnect, device number 15 [ 495.900341][ T9105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.919325][ T9105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.935641][ T9105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.210744][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.353369][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.359603][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.375087][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.325484][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 500.111221][ T9478] syz.2.714: attempt to access beyond end of device [ 500.111221][ T9478] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 500.124063][ T9478] (syz.2.714,9478,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 500.133980][ T9478] (syz.2.714,9478,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 500.141306][ T9478] (syz.2.714,9478,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 500.149996][ T9478] (syz.2.714,9478,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 500.210405][ T9479] 9pnet_fd: Insufficient options for proto=fd [ 501.581759][ T9486] netlink: 68 bytes leftover after parsing attributes in process `syz.4.801'. [ 502.472433][ T9489] ALSA: mixer_oss: invalid OSS volume '' [ 504.882552][ T9511] erofs (device nullb0): cannot find valid erofs superblock [ 504.960945][ T9511] overlayfs: upper fs does not support file handles, falling back to index=off. [ 504.970963][ T9511] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 506.320280][ T30] audit: type=1326 audit(1745339446.606:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.413192][ T30] audit: type=1326 audit(1745339446.616:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.435759][ T30] audit: type=1326 audit(1745339446.626:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.457886][ T30] audit: type=1326 audit(1745339446.626:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.482564][ T30] audit: type=1326 audit(1745339446.626:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.659048][ T30] audit: type=1326 audit(1745339446.626:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.682437][ T30] audit: type=1326 audit(1745339446.626:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 506.804610][ T9530] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 506.812974][ T9530] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 506.822233][ T9530] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 506.830466][ T9530] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 507.350596][ T30] audit: type=1326 audit(1745339446.626:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 507.379967][ T30] audit: type=1326 audit(1745339446.666:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 507.404853][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.411427][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.521379][ T30] audit: type=1326 audit(1745339446.666:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 508.069557][ T9542] 9pnet_fd: Insufficient options for proto=fd [ 508.081817][ T9543] 9pnet_fd: Insufficient options for proto=fd [ 512.105673][ T9570] syz.2.818: attempt to access beyond end of device [ 512.105673][ T9570] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 519.261341][ T9649] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 524.926270][ T9678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 524.934973][ T9678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 527.565419][ T9702] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.753314][ T9705] netlink: 308 bytes leftover after parsing attributes in process `syz.0.849'. [ 528.256359][ T9705] block device autoloading is deprecated and will be removed. [ 534.680590][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 534.680609][ T30] audit: type=1326 audit(1745339474.976:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed5f8e169 code=0x7fc00000 [ 538.586547][ T30] audit: type=1326 audit(1745339478.866:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 538.648703][ T30] audit: type=1326 audit(1745339478.866:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 538.864178][ T9787] No such timeout policy "syz1" [ 539.283500][ T30] audit: type=1326 audit(1745339478.866:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 539.284710][ T9792] block device autoloading is deprecated and will be removed. [ 539.306005][ T30] audit: type=1326 audit(1745339478.866:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 539.313505][ T9792] syz.5.871: attempt to access beyond end of device [ 539.313505][ T9792] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 539.488011][ T30] audit: type=1326 audit(1745339478.876:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 539.518604][ T30] audit: type=1326 audit(1745339478.876:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 539.839031][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 540.456727][ T30] audit: type=1326 audit(1745339478.876:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 540.496960][ T30] audit: type=1326 audit(1745339478.876:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3643f90087 code=0x7ffc0000 [ 540.904468][ T30] audit: type=1326 audit(1745339478.876:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3643f8fffc code=0x7ffc0000 [ 541.069267][ T30] audit: type=1326 audit(1745339478.876:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 541.536388][ T30] audit: type=1326 audit(1745339478.876:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 541.676465][ T30] audit: type=1326 audit(1745339478.876:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3643f8cdca code=0x7ffc0000 [ 541.759771][ T30] audit: type=1326 audit(1745339478.876:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 541.800736][ T30] audit: type=1326 audit(1745339478.876:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 541.864674][ T30] audit: type=1326 audit(1745339478.876:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 542.041133][ T30] audit: type=1326 audit(1745339478.876:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 545.705237][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 545.705252][ T30] audit: type=1326 audit(1745339486.006:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 545.788974][ T30] audit: type=1326 audit(1745339486.046:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 546.709269][ T5884] IPVS: starting estimator thread 0... [ 546.879086][ T9863] IPVS: using max 25 ests per chain, 60000 per kthread [ 547.751812][ T24] IPVS: starting estimator thread 0... [ 547.938726][ T9872] IPVS: using max 24 ests per chain, 57600 per kthread [ 552.778256][ T9913] bridge_slave_0: default FDB implementation only supports local addresses [ 552.841907][ T30] audit: type=1326 audit(1745339493.146:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 552.924213][ T30] audit: type=1326 audit(1745339493.146:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 553.242149][ T30] audit: type=1326 audit(1745339493.286:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 553.502702][ T30] audit: type=1326 audit(1745339493.286:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.018623][ T30] audit: type=1326 audit(1745339493.296:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.050920][ T30] audit: type=1326 audit(1745339493.536:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.136981][ T30] audit: type=1326 audit(1745339493.536:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.164428][ T30] audit: type=1326 audit(1745339493.586:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.186175][ T30] audit: type=1326 audit(1745339493.586:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 554.236305][ T30] audit: type=1326 audit(1745339493.586:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 558.527294][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.912'. [ 558.903942][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 558.903961][ T30] audit: type=1326 audit(1745339499.206:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 558.989104][ T30] audit: type=1326 audit(1745339499.206:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 559.029360][ T30] audit: type=1326 audit(1745339499.206:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 559.206158][ T30] audit: type=1326 audit(1745339499.236:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 559.228836][ T30] audit: type=1326 audit(1745339499.286:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 559.251336][ T30] audit: type=1326 audit(1745339499.286:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 559.275093][ T30] audit: type=1326 audit(1745339499.296:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3643f90087 code=0x7ffc0000 [ 559.297453][ T30] audit: type=1326 audit(1745339499.296:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3643f8fffc code=0x7ffc0000 [ 559.890033][ T30] audit: type=1326 audit(1745339499.296:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 559.912963][ T30] audit: type=1326 audit(1745339499.296:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 560.806054][ T9964] team0 (unregistering): Port device team_slave_0 removed [ 560.828430][ T9964] team0 (unregistering): Port device team_slave_1 removed [ 565.696913][T10018] xt_TCPMSS: Only works on TCP SYN packets [ 566.746296][T10031] netlink: 'syz.3.935': attribute type 4 has an invalid length. [ 567.477963][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 567.477986][ T30] audit: type=1326 audit(1745339507.776:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 567.527068][ T30] audit: type=1326 audit(1745339507.776:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 567.598375][ T30] audit: type=1326 audit(1745339507.896:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 567.708722][ T30] audit: type=1326 audit(1745339507.896:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 567.730254][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.926713][ T30] audit: type=1326 audit(1745339507.926:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 568.185890][ T30] audit: type=1326 audit(1745339507.966:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 568.215396][ T30] audit: type=1326 audit(1745339507.976:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352ff90087 code=0x7ffc0000 [ 568.239415][ T30] audit: type=1326 audit(1745339507.986:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f352ff8fffc code=0x7ffc0000 [ 568.307485][ T30] audit: type=1326 audit(1745339507.986:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f352ff8ff34 code=0x7ffc0000 [ 568.329125][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.346576][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.358854][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.422441][ T30] audit: type=1326 audit(1745339507.986:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10024 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f352ff8ff34 code=0x7ffc0000 [ 573.267479][ T5883] IPVS: starting estimator thread 0... [ 573.427740][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 574.399870][T10091] IPVS: using max 28 ests per chain, 67200 per kthread [ 575.744615][T10108] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 575.768293][T10108] team0: Device ipvlan1 failed to register rx_handler [ 575.931488][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803424fc00: rx timeout, send abort [ 576.431598][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880652c9400: rx timeout, send abort [ 576.441517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803424fc00: abort rx timeout. Force session deactivation [ 576.939900][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880652c9400: abort rx timeout. Force session deactivation [ 582.561192][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 582.561215][ T30] audit: type=1326 audit(1745339522.676:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 583.311804][ T30] audit: type=1326 audit(1745339522.676:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 583.626430][ T30] audit: type=1326 audit(1745339523.366:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 583.648021][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.239304][ T30] audit: type=1326 audit(1745339523.366:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 584.260957][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.319085][ T30] audit: type=1326 audit(1745339523.416:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3643f90087 code=0x7ffc0000 [ 584.392177][ T30] audit: type=1326 audit(1745339523.416:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3643f8fffc code=0x7ffc0000 [ 584.413639][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.617828][ T30] audit: type=1326 audit(1745339523.426:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 586.435033][ T30] audit: type=1326 audit(1745339523.426:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3643f8ff34 code=0x7ffc0000 [ 586.462105][ T30] audit: type=1326 audit(1745339523.426:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3643f8cdca code=0x7ffc0000 [ 586.484102][ T30] audit: type=1326 audit(1745339523.426:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643f8e169 code=0x7ffc0000 [ 593.962225][T10267] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 593.980397][T10267] team0: Device ipvlan1 failed to register rx_handler [ 594.298690][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 594.298711][ T30] audit: type=1326 audit(1745339534.596:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.370128][ T30] audit: type=1326 audit(1745339534.596:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.395245][ T30] audit: type=1326 audit(1745339534.606:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.422404][ T30] audit: type=1326 audit(1745339534.606:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.450537][ T30] audit: type=1326 audit(1745339534.606:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.473068][ T30] audit: type=1326 audit(1745339534.606:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.495642][ T30] audit: type=1326 audit(1745339534.616:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.527555][ T30] audit: type=1326 audit(1745339534.616:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb338e169 code=0x7ffc0000 [ 594.564267][ T30] audit: type=1326 audit(1745339534.636:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdb3390087 code=0x7ffc0000 [ 594.593785][ T30] audit: type=1326 audit(1745339534.636:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbdb338fffc code=0x7ffc0000 [ 596.897154][T10267] syz.3.994 (10267) used greatest stack depth: 17608 bytes left [ 600.282166][T10319] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.076956][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 603.076977][ T30] audit: type=1326 audit(1745339543.376:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 603.249542][ T30] audit: type=1326 audit(1745339543.376:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 603.274219][ T30] audit: type=1326 audit(1745339543.376:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 603.317966][ T30] audit: type=1326 audit(1745339543.576:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 603.529349][ T30] audit: type=1326 audit(1745339543.626:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 603.593263][ T30] audit: type=1326 audit(1745339543.896:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 604.225496][ T30] audit: type=1326 audit(1745339543.896:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 604.408597][ T30] audit: type=1326 audit(1745339544.706:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 605.288592][ T30] audit: type=1326 audit(1745339544.706:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 605.383164][ T30] audit: type=1326 audit(1745339544.706:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 612.851150][ T2153] IPVS: starting estimator thread 0... [ 615.430112][T10399] IPVS: using max 27 ests per chain, 64800 per kthread [ 619.929562][T10431] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.341111][T10446] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.779471][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.786103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.865991][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.883112][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.893940][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.921885][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.933795][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.327512][T10476] chnl_net:caif_netlink_parms(): no params data found [ 631.711020][T10504] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.068802][ T5141] Bluetooth: hci5: command tx timeout [ 634.148793][ T5141] Bluetooth: hci5: command tx timeout [ 635.275789][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'. [ 635.576372][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.279000][ T5141] Bluetooth: hci5: command tx timeout [ 636.556716][T10542] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.881923][ T30] audit: type=1326 audit(1745339578.186:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 637.907453][ T30] audit: type=1326 audit(1745339578.186:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 637.967473][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.990593][ T30] audit: type=1326 audit(1745339578.256:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 638.017908][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.033645][ T30] audit: type=1326 audit(1745339578.266:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 638.033918][T10476] bridge_slave_0: entered allmulticast mode [ 638.057026][ T30] audit: type=1326 audit(1745339578.276:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 638.091947][ T30] audit: type=1326 audit(1745339578.286:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 638.098097][T10476] bridge_slave_0: entered promiscuous mode [ 638.133404][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.145652][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.153579][T10476] bridge_slave_1: entered allmulticast mode [ 638.174088][T10476] bridge_slave_1: entered promiscuous mode [ 638.241480][ T30] audit: type=1326 audit(1745339578.316:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 638.268663][ T30] audit: type=1326 audit(1745339578.326:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352ff90087 code=0x7ffc0000 [ 638.308714][ T5141] Bluetooth: hci5: command tx timeout [ 638.314474][ T30] audit: type=1326 audit(1745339578.326:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f352ff8fffc code=0x7ffc0000 [ 638.336729][ T30] audit: type=1326 audit(1745339578.326:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f352ff8ff34 code=0x7ffc0000 [ 638.467727][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.202693][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.522291][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.973855][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.137808][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.808054][T10587] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.433103][T10476] team0: Port device team_slave_0 added [ 644.452967][T10476] team0: Port device team_slave_1 added [ 645.691226][T10617] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.110177][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.128967][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.373979][T10625] fuse: Bad value for 'fd' [ 647.745543][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.758366][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.776193][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.868736][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.981390][ T63] bridge_slave_1: left allmulticast mode [ 649.987348][ T63] bridge_slave_1: left promiscuous mode [ 650.235386][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.934387][ T63] bridge_slave_0: left allmulticast mode [ 650.959398][ T63] bridge_slave_0: left promiscuous mode [ 650.974233][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.056027][T10652] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 651.384422][T10660] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.790063][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.801832][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.812359][ T63] bond0 (unregistering): Released all slaves [ 653.839978][T10476] hsr_slave_0: entered promiscuous mode [ 653.846776][T10476] hsr_slave_1: entered promiscuous mode [ 653.856622][T10476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.864630][T10476] Cannot create hsr debugfs directory [ 655.457412][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 655.637063][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 655.637085][ T30] audit: type=1326 audit(1745339595.936:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 655.665289][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.716186][ T30] audit: type=1326 audit(1745339595.936:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 655.742971][ T30] audit: type=1326 audit(1745339595.936:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 655.764606][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.777643][ T30] audit: type=1326 audit(1745339595.996:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 655.799159][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.810186][ T30] audit: type=1326 audit(1745339596.006:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352ff8e169 code=0x7ffc0000 [ 655.831803][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.851901][ T30] audit: type=1326 audit(1745339596.016:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352ff90087 code=0x7ffc0000 [ 655.884116][ T30] audit: type=1326 audit(1745339596.016:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f352ff8fffc code=0x7ffc0000 [ 655.926732][ T30] audit: type=1326 audit(1745339596.016:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f352ff8ff34 code=0x7ffc0000 [ 655.988975][ T31] INFO: task kworker/0:4:5901 blocked for more than 143 seconds. [ 655.997245][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 656.019041][ T30] audit: type=1326 audit(1745339596.016:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f352ff8ff34 code=0x7ffc0000 [ 656.027992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.116218][ T31] task:kworker/0:4 state:D stack:23720 pid:5901 tgid:5901 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 656.128807][ T30] audit: type=1326 audit(1745339596.016:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10689 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f352ff8cdca code=0x7ffc0000 [ 656.303504][ T31] Workqueue: usb_hub_wq hub_event [ 656.308831][ T31] Call Trace: [ 656.317075][ T31] [ 656.320505][ T31] __schedule+0x1b33/0x51f0 [ 656.325181][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 656.330359][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 656.336152][ T31] ? schedule+0x163/0x360 [ 656.340722][ T31] ? __pfx___schedule+0x10/0x10 [ 656.345967][ T31] ? schedule+0x90/0x360 [ 656.350465][ T31] ? schedule+0x90/0x360 [ 656.355058][ T31] schedule+0x163/0x360 [ 656.359439][ T31] usb_kill_urb+0x1c5/0x2e0 [ 656.364746][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 656.372114][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 656.379789][ T31] usb_start_wait_urb+0x1b2/0x530 [ 656.385497][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 656.393855][ T31] usb_control_msg+0x2b3/0x4c0 [ 656.401049][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 656.406665][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 656.445577][ T31] hub_port_init+0xcbe/0x2730 [ 656.454401][ T31] hub_event+0x281c/0x50f0 [ 656.459656][ T31] ? __pfx_hub_event+0x10/0x10 [ 656.464754][ T31] ? __lock_acquire+0xad5/0xd80 [ 656.471366][ T31] ? init_memory_mapping+0x481/0xe70 [ 656.477023][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 656.483815][ T31] process_scheduled_works+0xac3/0x18e0 [ 656.490491][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.496638][ T31] ? assign_work+0x367/0x3d0 [ 656.502565][ T31] worker_thread+0x870/0xd50 [ 656.507311][ T31] ? __kthread_parkme+0x1a8/0x200 [ 656.513657][ T31] ? __pfx_worker_thread+0x10/0x10 [ 656.527033][ T31] kthread+0x7b7/0x940 [ 656.532385][ T31] ? __pfx_worker_thread+0x10/0x10 [ 656.538101][ T31] ? __pfx_kthread+0x10/0x10 [ 656.548731][ T31] ? __pfx_kthread+0x10/0x10 [ 656.553511][ T31] ? __pfx_kthread+0x10/0x10 [ 656.558164][ T31] ? __pfx_kthread+0x10/0x10 [ 656.588910][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.594344][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 656.611399][ T31] ? __pfx_kthread+0x10/0x10 [ 656.626459][ T31] ret_from_fork+0x4b/0x80 [ 656.637737][ T31] ? __pfx_kthread+0x10/0x10 [ 656.643116][ T31] ret_from_fork_asm+0x1a/0x30 [ 656.648159][ T31] [ 656.658879][ T31] [ 656.658879][ T31] Showing all locks held in the system: [ 656.667129][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 656.674298][ T31] #0: ffff8880b8639998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 656.684793][ T31] 1 lock held by khungtaskd/31: [ 656.690175][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 656.700527][ T31] 5 locks held by kworker/u8:2/36: [ 656.705757][ T31] #0: ffff8880b8639998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 656.716088][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 656.728171][ T31] #2: ffff88804c740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xcf/0x490 [ 656.739492][ T31] #3: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 656.750084][ T31] #4: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xb8/0x23b0 [ 656.760436][ T31] 5 locks held by kworker/u8:4/63: [ 656.765634][ T31] #0: ffff88801bef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 656.777579][ T31] #1: ffffc90001567c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 656.789119][ T31] #2: ffffffff900de7d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 656.800011][ T31] #3: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 656.811396][ T31] #4: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 656.822580][ T31] 1 lock held by dhcpcd/5495: [ 656.827515][ T31] #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 656.836985][ T31] 2 locks held by getty/5584: [ 656.842265][ T31] #0: ffff88803196e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.852679][ T31] #1: ffffc900033462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 656.863311][ T31] 5 locks held by kworker/0:4/5901: [ 656.868716][ T31] #0: ffff888021eaed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 656.880677][ T31] #1: ffffc90004687c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 656.893723][ T31] #2: ffff888146793198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 656.903397][ T31] #3: ffff8881463fa510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 656.914569][ T31] #4: ffff888146722368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 656.924887][ T31] 3 locks held by kworker/u8:13/6268: [ 656.931100][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 656.943071][ T31] #1: ffffc90004757c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 656.954834][ T31] #2: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 656.964401][ T31] 2 locks held by syz-executor/10476: [ 656.970441][ T31] #0: ffffffff905efbb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 656.980637][ T31] #1: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 656.990394][ T31] 1 lock held by syz.4.1097/10703: [ 656.995726][ T31] [ 656.998171][ T31] ============================================= [ 656.998171][ T31] [ 657.007002][ T31] NMI backtrace for cpu 1 [ 657.007030][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 657.007055][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.007068][ T31] Call Trace: [ 657.007077][ T31] [ 657.007085][ T31] dump_stack_lvl+0x241/0x360 [ 657.007121][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.007150][ T31] ? __pfx__printk+0x10/0x10 [ 657.007188][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 657.007224][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 657.007254][ T31] ? _printk+0xd5/0x120 [ 657.007279][ T31] ? __wake_up_klogd+0xcc/0x110 [ 657.007303][ T31] ? __pfx__printk+0x10/0x10 [ 657.007332][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.007365][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 657.007397][ T31] watchdog+0x1058/0x10a0 [ 657.007424][ T31] ? watchdog+0x1ea/0x10a0 [ 657.007453][ T31] ? __pfx_watchdog+0x10/0x10 [ 657.007477][ T31] kthread+0x7b7/0x940 [ 657.007501][ T31] ? __pfx_watchdog+0x10/0x10 [ 657.007526][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007545][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007566][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007586][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007607][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.007636][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 657.007663][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007686][ T31] ret_from_fork+0x4b/0x80 [ 657.007704][ T31] ? __pfx_kthread+0x10/0x10 [ 657.007726][ T31] ret_from_fork_asm+0x1a/0x30 [ 657.007771][ T31] [ 657.007801][ T31] Sending NMI from CPU 1 to CPUs 0: [ 657.179245][ C0] NMI backtrace for cpu 0 [ 657.179266][ C0] CPU: 0 UID: 0 PID: 2937 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 657.179291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.179306][ C0] Workqueue: bat_events batadv_nc_worker [ 657.179342][ C0] RIP: 0010:lockdep_softirqs_on+0xc9/0x1d0 [ 657.179371][ C0] Code: 00 01 00 00 00 49 89 9e b0 0a 00 00 41 8b 86 88 0a 00 00 ff c0 41 89 86 88 0a 00 00 41 89 86 bc 0a 00 00 65 8b 05 df f5 c6 11 <85> c0 74 6b 41 83 be e8 0a 00 00 00 7e 61 4d 89 f7 49 81 c7 f0 0a [ 657.179397][ C0] RSP: 0018:ffffc9000b29f928 EFLAGS: 00000006 [ 657.179414][ C0] RAX: 0000000000000000 RBX: ffffffff8bf23762 RCX: ffffffff81caaeac [ 657.179430][ C0] RDX: 0000000000000000 RSI: ffffffff8e4f231b RDI: ffffffff8ca0e280 [ 657.179444][ C0] RBP: ffffc9000b29fa10 R08: ffffffff905ebb77 R09: 1ffffffff20bd76e [ 657.179460][ C0] R10: dffffc0000000000 R11: fffffbfff20bd76f R12: ffffffff93651020 [ 657.179476][ C0] R13: dffffc0000000000 R14: ffff88803089da00 R15: 0000000000000201 [ 657.179491][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 657.179508][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.179522][ C0] CR2: 00007f3644180178 CR3: 0000000034426000 CR4: 00000000003526f0 [ 657.179540][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.179551][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.179564][ C0] Call Trace: [ 657.179572][ C0] [ 657.179582][ C0] __local_bh_enable_ip+0x123/0x200 [ 657.179615][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 657.179646][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 657.179675][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 657.179705][ C0] batadv_nc_purge_paths+0x312/0x3b0 [ 657.179738][ C0] batadv_nc_worker+0x328/0x610 [ 657.179763][ C0] ? batadv_nc_worker+0xcb/0x610 [ 657.179789][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 657.179814][ C0] process_scheduled_works+0xac3/0x18e0 [ 657.179852][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.179881][ C0] ? assign_work+0x367/0x3d0 [ 657.179907][ C0] worker_thread+0x870/0xd50 [ 657.179939][ C0] ? __kthread_parkme+0x1a8/0x200 [ 657.179967][ C0] ? __pfx_worker_thread+0x10/0x10 [ 657.179992][ C0] kthread+0x7b7/0x940 [ 657.180011][ C0] ? __pfx_worker_thread+0x10/0x10 [ 657.180037][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180054][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180071][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180087][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180105][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.180129][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 657.180145][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180163][ C0] ret_from_fork+0x4b/0x80 [ 657.180178][ C0] ? __pfx_kthread+0x10/0x10 [ 657.180195][ C0] ret_from_fork_asm+0x1a/0x30 [ 657.180229][ C0] [ 657.184813][ T63] hsr_slave_0: left promiscuous mode [ 657.195004][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 657.195030][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 657.195060][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.195075][ T31] Call Trace: [ 657.195085][ T31] [ 657.195097][ T31] dump_stack_lvl+0x241/0x360 [ 657.195137][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.195170][ T31] ? __pfx__printk+0x10/0x10 [ 657.195207][ T31] ? vscnprintf+0x5d/0x90 [ 657.195246][ T31] panic+0x349/0x880 [ 657.195272][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 657.195308][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 657.195343][ T31] ? __pfx_panic+0x10/0x10 [ 657.195367][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 657.195408][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 657.195433][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 657.195463][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 657.195499][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 657.195535][ T31] watchdog+0x1097/0x10a0 [ 657.195565][ T31] ? watchdog+0x1ea/0x10a0 [ 657.195598][ T31] ? __pfx_watchdog+0x10/0x10 [ 657.195627][ T31] kthread+0x7b7/0x940 [ 657.195662][ T31] ? __pfx_watchdog+0x10/0x10 [ 657.195692][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195714][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195739][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195763][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195786][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.195817][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 657.195840][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195865][ T31] ret_from_fork+0x4b/0x80 [ 657.195885][ T31] ? __pfx_kthread+0x10/0x10 [ 657.195909][ T31] ret_from_fork_asm+0x1a/0x30 [ 657.195960][ T31] [ 657.202360][ T31] Kernel Offset: disabled