last executing test programs: 10m22.615850985s ago: executing program 0 (id=335): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 10m21.234150029s ago: executing program 0 (id=338): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x8}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 10m19.896618043s ago: executing program 0 (id=339): timer_create(0xe0befaf9f602fae2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 10m19.298197757s ago: executing program 0 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 10m15.104454792s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 10m10.40121921s ago: executing program 0 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000046c0), 0x0, 0x20048001) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xfffffffffffffd00) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') 9m54.668990753s ago: executing program 32 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000046c0), 0x0, 0x20048001) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xfffffffffffffd00) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') 9m50.538812736s ago: executing program 1 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000600)='-:s', 0x3) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0x9) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcdd}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) 9m49.930388571s ago: executing program 1 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 9m45.319973527s ago: executing program 1 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat2(r2, 0x0, &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) 9m42.665565063s ago: executing program 1 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat2(r2, 0x0, &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) 9m39.203207249s ago: executing program 1 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000600)='-:s', 0x3) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0x9) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcdd}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) 9m36.81485758s ago: executing program 1 (id=399): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 9m21.710638537s ago: executing program 33 (id=399): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5m48.074718867s ago: executing program 3 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat2(r2, &(0x7f0000000000)='./dev/mapper/control\x00', &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) 5m47.290716257s ago: executing program 3 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000600)='-:', 0x2) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0x9) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcdd}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) 5m45.075042242s ago: executing program 3 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat2(r2, &(0x7f0000000000)='./dev/mapper/control\x00', &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) 5m42.858919177s ago: executing program 3 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 5m39.427754883s ago: executing program 3 (id=875): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) 5m39.290992427s ago: executing program 3 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x180, &(0x7f0000000180)=[0x3, 0xec66, 0xff, 0x8, 0x98c1, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x4, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7f, 0x96, 0xffffffff, 0x9, 0x1, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x2000003, 0xa3de, 0x2cc0000000000000, 0x8, 0x1, 0x400, 0x6, 0xffffffffffffffb7, 0x5, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x200000000000101, 0x7ff, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0xcd, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x2004, 0x7, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xfffffffffffffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x7f, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0xe61b, 0xa, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffd25, 0xb68e, 0x0, 0x8, 0x1000003]}) 5m24.220511404s ago: executing program 34 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x180, &(0x7f0000000180)=[0x3, 0xec66, 0xff, 0x8, 0x98c1, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x4, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7f, 0x96, 0xffffffff, 0x9, 0x1, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x2000003, 0xa3de, 0x2cc0000000000000, 0x8, 0x1, 0x400, 0x6, 0xffffffffffffffb7, 0x5, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x200000000000101, 0x7ff, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0xcd, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x2004, 0x7, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xfffffffffffffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x7f, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0xe61b, 0xa, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffd25, 0xb68e, 0x0, 0x8, 0x1000003]}) 26.378804477s ago: executing program 6 (id=1817): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 26.183288473s ago: executing program 6 (id=1818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd72", 0xa2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 25.430221702s ago: executing program 6 (id=1822): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futimesat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x6) 23.342239964s ago: executing program 7 (id=1826): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 21.91887477s ago: executing program 7 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) chdir(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 19.818315593s ago: executing program 7 (id=1833): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 19.291746666s ago: executing program 6 (id=1834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd72", 0xa2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18.981687573s ago: executing program 7 (id=1835): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) 17.769155625s ago: executing program 5 (id=1837): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x200000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='0', 0x1) 17.413098714s ago: executing program 7 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001140)='./file0\x00', 0xd931d3864d39dcfb) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000600)=ANY=[]) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989a0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 17.412450524s ago: executing program 6 (id=1839): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15.420045714s ago: executing program 6 (id=1843): socket$l2tp6(0xa, 0x2, 0x73) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 15.419704174s ago: executing program 7 (id=1844): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futimesat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x6) 15.418392834s ago: executing program 5 (id=1853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001140)='./file0\x00', 0xd931d3864d39dcfb) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000600)=ANY=[]) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989a0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 11.21534526s ago: executing program 4 (id=1850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd72", 0xa2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11.17927627s ago: executing program 2 (id=1851): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 10.178656806s ago: executing program 2 (id=1852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10.163785666s ago: executing program 5 (id=1854): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x200000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='0', 0x1) 9.923323191s ago: executing program 4 (id=1855): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r1, &(0x7f0000000380)="b8f7", 0x2) 9.866958923s ago: executing program 2 (id=1856): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.749961386s ago: executing program 4 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) 8.211972474s ago: executing program 2 (id=1858): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) writev(r3, &(0x7f0000000800), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.211797954s ago: executing program 4 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) syz_open_pts(r2, 0x0) 8.202618185s ago: executing program 5 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 7.920475531s ago: executing program 4 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 7.850828944s ago: executing program 5 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000004}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl(r1, 0xc138fd03, &(0x7f0000000240)="040000000000000000000000380100000000") socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x94a, 0x8001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/30) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x80, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000080)="0700000000000000a19e08f086dd6b4768440000000000020141fd00190000000000000001fda1dbe21e0acd263744fc816218000000", 0x0, 0x40d5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.841284504s ago: executing program 2 (id=1863): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 166.465636ms ago: executing program 5 (id=1864): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) 86.982148ms ago: executing program 35 (id=1843): socket$l2tp6(0xa, 0x2, 0x73) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 19.874449ms ago: executing program 36 (id=1844): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futimesat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x6) 204.81µs ago: executing program 2 (id=1867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd72", 0xa2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 4 (id=1868): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) syz_clone(0x2006211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.301616][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.424055][ T1276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.487295][ T5683] tipc: Started in network mode [ 291.494526][ T5683] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 291.511453][ T5683] tipc: Enabled bearer , priority 0 [ 291.534639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.560573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.589591][ T5561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.598831][ T5561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.619979][ T5561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.628752][ T5561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.682437][ T1276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.783086][ T1276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.860763][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.880464][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.912953][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.990990][ T1276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.025977][ T5674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.046831][ T5674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.103430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.740308][ T4235] tipc: Node number set to 11578026 [ 300.244266][ T5735] tipc: Started in network mode [ 300.249211][ T5735] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 300.593910][ T5735] tipc: Enabled bearer , priority 0 [ 302.014960][ T23] tipc: Node number set to 11578026 [ 304.871295][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 304.944344][ T1276] device hsr_slave_0 left promiscuous mode [ 305.000041][ T1276] device hsr_slave_1 left promiscuous mode [ 305.007660][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.370362][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.463638][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.947277][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.132868][ T1276] device bridge_slave_1 left promiscuous mode [ 306.150615][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.978245][ T1276] device bridge_slave_0 left promiscuous mode [ 306.986748][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 306.995565][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.635283][ T1276] device veth1_macvtap left promiscuous mode [ 308.731235][ T1276] device veth0_macvtap left promiscuous mode [ 308.737476][ T1276] device veth1_vlan left promiscuous mode [ 308.743578][ T1276] device veth0_vlan left promiscuous mode [ 310.328476][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 311.265006][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 311.366455][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 311.450563][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.558619][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.632485][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 312.883486][ T1276] bond0 (unregistering): Released all slaves [ 313.846071][ T5810] tipc: Started in network mode [ 313.854528][ T5810] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 313.911328][ T5810] tipc: Enabled bearer , priority 0 [ 314.248700][ T5747] chnl_net:caif_netlink_parms(): no params data found [ 314.612215][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.642702][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.684114][ T5747] device bridge_slave_0 entered promiscuous mode [ 314.720752][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.748093][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.971211][ T5747] device bridge_slave_1 entered promiscuous mode [ 315.840063][ T21] tipc: Node number set to 11578026 [ 315.925007][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.003687][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.324975][ T5747] team0: Port device team_slave_0 added [ 316.439242][ T5747] team0: Port device team_slave_1 added [ 317.610693][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.617038][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.750037][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.082798][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.393270][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.531041][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.538065][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.645187][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.851338][ T5747] device hsr_slave_0 entered promiscuous mode [ 319.908418][ T5747] device hsr_slave_1 entered promiscuous mode [ 319.928630][ T5747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.955778][ T5747] Cannot create hsr debugfs directory [ 320.320331][ T5747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.346802][ T5747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.382890][ T5747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 320.420823][ T5747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.480676][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.552180][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.570814][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.592084][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.609539][ T5906] tipc: Started in network mode [ 324.626719][ T5906] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 324.650245][ T5906] tipc: Enabled bearer , priority 0 [ 324.681380][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.708417][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.757125][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.764296][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.856585][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.877469][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.907466][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.942034][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.949175][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.987720][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.024723][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.064588][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.098315][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.135809][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.157080][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.191289][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.237863][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.282778][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.317623][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.350856][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.388470][ T5747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.660268][ T13] tipc: Node number set to 11578026 [ 325.923237][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.971082][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.992050][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.454162][ T5947] capability: warning: `syz.4.452' uses deprecated v2 capabilities in a way that may be insecure [ 328.551617][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.586549][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.711455][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.726986][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.784650][ T5747] device veth0_vlan entered promiscuous mode [ 328.805455][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.834279][ T5978] capability: warning: `syz.5.459' uses 32-bit capabilities (legacy support in use) [ 328.845246][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.898572][ T5747] device veth1_vlan entered promiscuous mode [ 329.092460][ T5747] device veth0_macvtap entered promiscuous mode [ 329.185115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.196289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 329.248998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.600850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.633205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.948925][ T5747] device veth1_macvtap entered promiscuous mode [ 330.216977][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.281755][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.335786][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.429967][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.468295][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.525931][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.574278][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.631991][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.697641][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.775142][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.841336][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.898317][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.957949][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.006535][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.054876][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.098067][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.137729][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.148037][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.240996][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.381944][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.399563][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.435783][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.489288][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 331.509077][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 331.689619][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 331.880701][ T6003] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 332.168669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.187643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.221745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.257685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.286537][ T6003] syz.5.464 (6003) used greatest stack depth: 20752 bytes left [ 332.384555][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 332.406261][ T5747] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.416275][ T5747] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.429726][ T5747] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.446408][ T5747] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.490664][ T1276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.692387][ T1276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.781386][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.799988][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.842948][ T1276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.884210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.933520][ T1276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.984449][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.004167][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.040087][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.790212][ T6048] process 'syz.4.481' launched './file0' with NULL argv: empty string added [ 334.999049][ T6057] binder: BINDER_SET_CONTEXT_MGR already set [ 335.100883][ T6057] binder: 6054:6057 ioctl 4018620d 200000004a80 returned -16 [ 342.391095][ T1276] device hsr_slave_0 left promiscuous mode [ 342.422351][ T1276] device hsr_slave_1 left promiscuous mode [ 342.430945][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.438488][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.513049][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.538017][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.094716][ T1276] device bridge_slave_1 left promiscuous mode [ 343.104609][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.194674][ T1276] device bridge_slave_0 left promiscuous mode [ 343.256572][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.456051][ T1276] device veth1_macvtap left promiscuous mode [ 343.516930][ T1276] device veth0_macvtap left promiscuous mode [ 343.590166][ T1276] device veth1_vlan left promiscuous mode [ 343.596033][ T1276] device veth0_vlan left promiscuous mode [ 346.903263][ T6135] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.746234][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 349.799580][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 349.840754][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.899176][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.126592][ T1276] bond0 (unregistering): Released all slaves [ 351.616618][ T6164] ucma_write: process 350 (syz.4.500) changed security contexts after opening file descriptor, this is not allowed. [ 355.324497][ T6192] tmpfs: Unknown parameter 'quota' [ 357.700526][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.513'. [ 359.639978][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 360.085719][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 360.202413][ T23] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 360.284835][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.775547][ T23] usb 7-1: config 0 descriptor?? [ 360.830397][ T6221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 361.070147][ T23] usbhid 7-1:0.0: can't add hid device: -71 [ 361.076659][ T23] usbhid: probe of 7-1:0.0 failed with error -71 [ 361.147172][ T23] usb 7-1: USB disconnect, device number 2 [ 363.213182][ T6262] netlink: 76 bytes leftover after parsing attributes in process `syz.6.526'. [ 363.263370][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.526'. [ 363.290672][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 364.620997][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 372.740165][ T5116] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 373.494046][ T6353] netlink: 'syz.5.542': attribute type 6 has an invalid length. [ 374.577743][ T6362] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 374.584637][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 374.593582][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 374.910270][ T5116] usb 44-1: SetAddress Request (2) to port 0 [ 374.926776][ T5116] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 375.098514][ T6363] vhci_hcd: connection reset by peer [ 375.113024][ T154] vhci_hcd: stop threads [ 375.118855][ T154] vhci_hcd: release socket [ 375.195488][ T154] vhci_hcd: disconnect device [ 378.735551][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.743104][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.336013][ T5116] usb 44-1: device descriptor read/8, error -110 [ 380.403084][ T6402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 381.024923][ T5116] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 381.032835][ T5116] usb usb44-port1: attempt power cycle [ 381.460894][ T5116] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 382.139981][ T4288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.301450][ T5116] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 382.335575][ T5116] usb usb44-port1: unable to enumerate USB device [ 383.800245][ T4288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.463761][ T4288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 384.550098][ T4288] usb 5-1: string descriptor 0 read error: -71 [ 384.558067][ T4288] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 384.578114][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.660008][ T4288] usb 5-1: can't set config #1, error -71 [ 384.679668][ T4288] usb 5-1: USB disconnect, device number 4 [ 393.832410][ T6538] netlink: 32 bytes leftover after parsing attributes in process `syz.5.584'. [ 397.299944][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 407.123121][ T6640] netlink: 'syz.5.610': attribute type 11 has an invalid length. [ 410.920055][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 410.950681][ T6668] netlink: 136 bytes leftover after parsing attributes in process `syz.4.608'. [ 411.325610][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.616'. [ 415.287540][ T6718] netlink: 'syz.3.622': attribute type 11 has an invalid length. [ 416.059934][ T5116] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 418.477259][ T5116] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.706325][ T5116] usb 3-1: not running at top speed; connect to a high speed hub [ 420.840249][ T5116] usb 3-1: unable to read config index 0 descriptor/all [ 420.847415][ T5116] usb 3-1: can't read configurations, error -71 [ 423.130780][ T6798] netlink: 'syz.6.639': attribute type 11 has an invalid length. [ 428.267641][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 430.435029][ T6852] netlink: 'syz.2.653': attribute type 11 has an invalid length. [ 434.561548][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 434.571464][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 434.579052][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.589131][ T4202] Workqueue: hci5 hci_rx_work [ 434.593898][ T4202] Call Trace: [ 434.597190][ T4202] [ 434.600183][ T4202] dump_stack_lvl+0x188/0x250 [ 434.604897][ T4202] ? show_regs_print_info+0x20/0x20 [ 434.610133][ T4202] ? load_image+0x410/0x410 [ 434.614701][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 434.619837][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 434.624538][ T4202] ? kthread+0x42e/0x520 [ 434.628808][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 434.634049][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 434.639277][ T4202] kobject_add+0x160/0x230 [ 434.643740][ T4202] ? kobject_init+0x1c0/0x1c0 [ 434.648470][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 434.653812][ T4202] ? klist_children_get+0x50/0x50 [ 434.658870][ T4202] ? get_device_parent+0x121/0x3e0 [ 434.664020][ T4202] device_add+0x470/0x1050 [ 434.668467][ T4202] ? device_initialize+0x2a5/0x4d0 [ 434.673682][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 434.678671][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 434.683996][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 434.689146][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 434.694743][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 434.699651][ T4202] ? hci_event_packet+0x363/0x1310 [ 434.704788][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 434.709856][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 434.715945][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 434.721604][ T4202] ? mark_lock+0x94/0x320 [ 434.725959][ T4202] ? mutex_unlock+0x10/0x10 [ 434.730494][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 434.736550][ T4202] ? lock_chain_count+0x20/0x20 [ 434.741431][ T4202] ? __rwlock_init+0x140/0x140 [ 434.746241][ T4202] hci_event_packet+0xe0b/0x1310 [ 434.751212][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 434.756090][ T4202] ? rcu_lock_release+0x20/0x20 [ 434.761008][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 434.766229][ T4202] hci_rx_work+0x255/0xa10 [ 434.770683][ T4202] process_one_work+0x867/0xff0 [ 434.775578][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 434.781247][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 434.786572][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 434.791631][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 434.797202][ T4202] ? wq_worker_running+0x97/0x170 [ 434.802254][ T4202] worker_thread+0xad7/0x12a0 [ 434.806996][ T4202] kthread+0x42e/0x520 [ 434.811081][ T4202] ? rcu_lock_release+0x20/0x20 [ 434.815959][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 434.820589][ T4202] ret_from_fork+0x1f/0x30 [ 434.825059][ T4202] [ 434.832658][ T4202] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 434.846565][ T4202] Bluetooth: hci5: failed to register connection device [ 434.929976][ T5116] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 435.300008][ T5116] usb 7-1: Using ep0 maxpacket: 16 [ 435.430245][ T5116] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.449615][ T5116] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 435.590069][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 435.681149][ T5116] usb 7-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 435.737511][ T5116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.798463][ T5116] usb 7-1: Product: syz [ 435.825500][ T5116] usb 7-1: Manufacturer: syz [ 435.856193][ T5116] usb 7-1: SerialNumber: syz [ 435.861728][ T4234] usb 6-1: Using ep0 maxpacket: 8 [ 436.060256][ T4234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.140884][ T4234] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 436.206509][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.272878][ T4234] usb 6-1: config 0 descriptor?? [ 436.354215][ T4234] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 436.520607][ T5116] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 436.657024][ T5116] usb 7-1: USB disconnect, device number 3 [ 436.800298][ T6911] udevd[6911]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.260784][ T4273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 438.282994][ T4234] gspca_vc032x: reg_r err -110 [ 438.287849][ T4234] vc032x: probe of 6-1:0.0 failed with error -110 [ 438.366763][ T4234] usb 6-1: USB disconnect, device number 3 [ 438.559945][ T6766] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 438.736481][ T4273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.761256][ T4273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.785404][ T4273] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.129276][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.135650][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.620031][ T4273] usb 4-1: string descriptor 0 read error: -71 [ 441.626537][ T6766] usb 5-1: device descriptor read/all, error -71 [ 441.747563][ T4273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.758321][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.843097][ T4273] usb 4-1: can't set config #1, error -71 [ 441.933761][ T6962] netlink: 'syz.4.669': attribute type 11 has an invalid length. [ 442.582579][ T4273] usb 4-1: USB disconnect, device number 3 [ 447.600052][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 447.970003][ T7] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 447.988391][ T7] usb 5-1: config 0 has no interface number 0 [ 448.018761][ T7] usb 5-1: config 0 interface 41 has no altsetting 0 [ 449.000110][ T7] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 449.009223][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.058281][ T7] usb 5-1: Product: syz [ 449.070044][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 449.071364][ T7] usb 5-1: Manufacturer: syz [ 449.122319][ T7] usb 5-1: SerialNumber: syz [ 449.133136][ T7] usb 5-1: config 0 descriptor?? [ 449.349907][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 449.502892][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.921852][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.932076][ T21] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.300766][ T7] CoreChips: probe of 5-1:0.41 failed with error -71 [ 451.304975][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.319942][ T7] usb 5-1: USB disconnect, device number 7 [ 451.515669][ T21] usb 6-1: config 0 descriptor?? [ 451.550043][ T21] usb 6-1: can't set config #0, error -71 [ 452.228640][ T21] usb 6-1: USB disconnect, device number 4 [ 454.619915][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 454.910060][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 455.040187][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 456.070058][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.098863][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.127306][ T21] usb 3-1: Product: syz [ 456.151975][ T21] usb 3-1: Manufacturer: syz [ 456.156630][ T21] usb 3-1: SerialNumber: syz [ 456.200349][ T21] usb 3-1: config 0 descriptor?? [ 456.440213][ T7099] netlink: 'syz.3.687': attribute type 11 has an invalid length. [ 458.100203][ T7109] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 458.514669][ T4230] usb 3-1: USB disconnect, device number 4 [ 458.521590][ T7115] device-mapper: ioctl: name not supplied when creating device [ 461.879883][ T5116] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 462.130174][ T5116] usb 7-1: Using ep0 maxpacket: 32 [ 462.250162][ T5116] usb 7-1: config index 0 descriptor too short (expected 164, got 36) [ 462.269792][ T5116] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.325298][ T5116] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.382520][ T5116] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 462.427800][ T5116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.483079][ T5116] usb 7-1: config 0 descriptor?? [ 462.542327][ T5116] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 463.372530][ T5116] usb 7-1: USB disconnect, device number 4 [ 463.794673][ T7167] netlink: 'syz.5.710': attribute type 11 has an invalid length. [ 464.138209][ T7169] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 468.334241][ T7216] netlink: 'syz.5.726': attribute type 11 has an invalid length. [ 474.490443][ T4273] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 474.880375][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.001175][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.050993][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.115227][ T4273] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.168519][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.217492][ T4273] usb 3-1: config 0 descriptor?? [ 475.289203][ T7301] netlink: 'syz.6.742': attribute type 11 has an invalid length. [ 478.145379][ T4273] usbhid 3-1:0.0: can't add hid device: -71 [ 478.165318][ T4273] usbhid: probe of 3-1:0.0 failed with error -71 [ 478.220221][ T4273] usb 3-1: USB disconnect, device number 5 [ 479.650475][ T1108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 479.915662][ T1108] usb 7-1: Using ep0 maxpacket: 16 [ 481.240045][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 481.543365][ T1108] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.570196][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.578576][ T1108] usb 7-1: Product: syz [ 481.613566][ T1108] usb 7-1: Manufacturer: syz [ 481.659659][ T1108] usb 7-1: config 0 descriptor?? [ 481.700398][ T1108] usb 7-1: can't set config #0, error -71 [ 482.532443][ T1108] usb 7-1: USB disconnect, device number 5 [ 485.340004][ T4273] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 485.736279][ T26] audit: type=1326 audit(1787052145.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 485.760330][ T4273] usb 5-1: config 0 has no interfaces? [ 485.822760][ T26] audit: type=1326 audit(1787052145.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 485.898248][ T26] audit: type=1326 audit(1787052145.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 485.920855][ T4273] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 485.979838][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.812716][ T4273] usb 5-1: Product: syz [ 486.816966][ T4273] usb 5-1: Manufacturer: syz [ 486.821670][ T4273] usb 5-1: SerialNumber: syz [ 486.828123][ T4273] usb 5-1: config 0 descriptor?? [ 486.892287][ T26] audit: type=1326 audit(1787052145.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 486.925434][ T26] audit: type=1326 audit(1787052145.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 486.951940][ T7432] netlink: 'syz.3.759': attribute type 11 has an invalid length. [ 487.003268][ T26] audit: type=1326 audit(1787052145.090:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 487.052739][ T26] audit: type=1326 audit(1787052145.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 488.489843][ T26] audit: type=1326 audit(1787052145.110:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 488.598494][ T26] audit: type=1326 audit(1787052145.110:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 488.611200][ T1108] usb 5-1: USB disconnect, device number 8 [ 488.669685][ T26] audit: type=1326 audit(1787052145.110:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.6.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb526d5f0d9 code=0x7ffc0000 [ 489.600163][ T7447] netlink: 'syz.5.789': attribute type 11 has an invalid length. [ 492.073906][ T7494] netlink: 'syz.3.793': attribute type 11 has an invalid length. [ 493.476257][ T7500] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 494.326032][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.664511][ T4230] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 497.460461][ T4230] usb 3-1: not running at top speed; connect to a high speed hub [ 498.339978][ T4230] usb 3-1: unable to read config index 0 descriptor/all [ 498.346996][ T4230] usb 3-1: can't read configurations, error -71 [ 501.254301][ T7570] ======================================================= [ 501.254301][ T7570] WARNING: The mand mount option has been deprecated and [ 501.254301][ T7570] and is ignored by this kernel. Remove the mand [ 501.254301][ T7570] option from the mount to silence this warning. [ 501.254301][ T7570] ======================================================= [ 501.487369][ T7570] overlayfs: unrecognized mount option "/" or missing value [ 501.956941][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.970392][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.639396][ T7584] netlink: 'syz.6.808': attribute type 11 has an invalid length. [ 506.010038][ T5116] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 506.380036][ T5116] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.404438][ T5116] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 506.413915][ T7609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.831'. [ 506.445351][ T5116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.490848][ T7611] overlayfs: unrecognized mount option "/" or missing value [ 507.806079][ T5116] mdc800 6-1:1.0: probe fails -> wrong Interface [ 507.882458][ T7617] Trying to write to read-only block-device nullb0 [ 507.942586][ T5116] usb 6-1: USB disconnect, device number 5 [ 507.955898][ T7617] Trying to write to read-only block-device nullb0 [ 508.086473][ T7620] netlink: 'syz.5.835': attribute type 11 has an invalid length. [ 509.986575][ T7631] program syz.5.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.564668][ T7645] overlayfs: unrecognized mount option "/" or missing value [ 514.809007][ T7678] kvm: apic: phys broadcast and lowest prio [ 515.438571][ T7688] netlink: 'syz.6.849': attribute type 11 has an invalid length. [ 517.829057][ T7699] overlayfs: unrecognized mount option "/" or missing value [ 520.112405][ T7743] netlink: 'syz.6.870': attribute type 11 has an invalid length. [ 522.316252][ T7762] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 522.565928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0e5800: rx timeout, send abort [ 522.781267][ T6020] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 523.066034][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0e7000: rx timeout, send abort [ 523.075150][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0e5800: abort rx timeout. Force session deactivation [ 523.150109][ T6020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.197973][ T6020] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 523.238121][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.366958][ T7790] netlink: 'syz.5.882': attribute type 11 has an invalid length. [ 523.574365][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0e7000: abort rx timeout. Force session deactivation [ 524.150748][ T6020] usb 5-1: config 0 descriptor?? [ 524.192556][ T6020] pwc: Askey VC010 type 2 USB webcam detected. [ 525.181180][ T6020] pwc: recv_control_msg error -32 req 02 val 2b00 [ 525.339929][ T6020] pwc: recv_control_msg error -32 req 02 val 2700 [ 525.386672][ T6020] pwc: recv_control_msg error -32 req 02 val 2c00 [ 525.979284][ T6020] pwc: recv_control_msg error -71 req 04 val 1300 [ 526.019938][ T6020] pwc: recv_control_msg error -71 req 04 val 1400 [ 526.042467][ T6020] pwc: recv_control_msg error -71 req 02 val 2000 [ 526.059941][ T6020] pwc: recv_control_msg error -71 req 02 val 2100 [ 526.080140][ T6020] pwc: recv_control_msg error -71 req 04 val 1500 [ 526.239979][ T6020] pwc: recv_control_msg error -71 req 02 val 2500 [ 526.500685][ T6020] pwc: recv_control_msg error -71 req 02 val 2400 [ 526.529977][ T6020] pwc: recv_control_msg error -71 req 02 val 2600 [ 527.899977][ T6020] pwc: recv_control_msg error -71 req 02 val 2900 [ 527.943027][ T6020] pwc: recv_control_msg error -71 req 02 val 2800 [ 527.995216][ T6020] pwc: recv_control_msg error -71 req 04 val 1100 [ 528.039906][ T6020] pwc: recv_control_msg error -71 req 04 val 1200 [ 528.061567][ T6020] pwc: Registered as video103. [ 528.081725][ T6020] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 528.131168][ T6020] usb 5-1: USB disconnect, device number 9 [ 538.735828][ T7897] netlink: 'syz.6.917': attribute type 11 has an invalid length. [ 540.133691][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 540.272763][ T7897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.672565][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 540.729921][ T5116] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 540.871669][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.878903][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.887467][ T7899] device bridge_slave_0 entered promiscuous mode [ 540.896140][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.904470][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 540.910677][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.918796][ T7899] device bridge_slave_1 entered promiscuous mode [ 540.955516][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.966935][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.999309][ T7899] team0: Port device team_slave_0 added [ 541.000125][ T5116] usb 6-1: Using ep0 maxpacket: 16 [ 541.011571][ T7899] team0: Port device team_slave_1 added [ 541.056351][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.090100][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.149064][ T5116] usb 6-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.149919][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.196372][ T5116] usb 6-1: config 0 interface 0 has no altsetting 0 [ 541.229953][ T5116] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 541.234233][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.239548][ T5116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.278723][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.355851][ T5116] usb 6-1: config 0 descriptor?? [ 541.367466][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.398821][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 541.418454][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 541.444207][ T7916] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 541.469911][ T7916] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 541.486882][ T7916] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 541.501692][ T7916] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 541.518143][ T7916] device geneve2 entered promiscuous mode [ 541.875854][ T5116] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 541.898046][ T1174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.918609][ T5116] glorious 0003:22D4:1503.0002: unknown main item tag 0x4 [ 541.926025][ T5116] glorious 0003:22D4:1503.0002: ignoring exceeding usage max [ 541.942497][ T7899] device hsr_slave_0 entered promiscuous mode [ 541.956688][ T5116] glorious 0003:22D4:1503.0002: unknown main item tag 0x7 [ 541.962237][ T7899] device hsr_slave_1 entered promiscuous mode [ 541.979886][ T5116] glorious 0003:22D4:1503.0002: item fetching failed at offset 41/42 [ 541.999929][ T5116] glorious: probe of 0003:22D4:1503.0002 failed with error -22 [ 542.022867][ T1174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.093890][ T4288] usb 6-1: USB disconnect, device number 6 [ 542.213230][ T1174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.318813][ T1174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.667896][ T1174] tipc: Disabling bearer [ 542.674854][ T1174] tipc: Left network mode [ 542.683969][ T7899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.705705][ T7899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.715256][ T7899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.724727][ T7899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.020869][ T1348] Bluetooth: hci0: command 0x041b tx timeout [ 544.066019][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.085091][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.249461][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.295091][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.435773][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.554134][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.676082][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.683266][ T4695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.070025][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 546.375598][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.431002][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.472881][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.487748][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.494876][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.636427][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.646121][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.689755][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.732781][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.769094][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.786149][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.825282][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.839104][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.857985][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.877987][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.917091][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.953264][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.981277][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 547.621408][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 547.633628][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 547.685592][ T7958] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 547.783451][ T7958] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 547.835883][ T7958] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 547.861359][ T7958] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 547.914607][ T7958] device geneve2 entered promiscuous mode [ 549.799076][ T1174] device hsr_slave_0 left promiscuous mode [ 549.836776][ T1174] device hsr_slave_1 left promiscuous mode [ 549.869593][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.892065][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.925165][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.124842][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.133108][ T1174] device bridge_slave_1 left promiscuous mode [ 550.139394][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.149019][ T1174] device bridge_slave_0 left promiscuous mode [ 550.155265][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.167910][ T1174] device veth1_macvtap left promiscuous mode [ 550.193764][ T1174] device veth0_macvtap left promiscuous mode [ 551.790256][ T1174] device veth1_vlan left promiscuous mode [ 551.796108][ T1174] device veth0_vlan left promiscuous mode [ 552.398296][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 552.425027][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 552.447348][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.500114][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.517071][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 552.668892][ T1174] bond0 (unregistering): Released all slaves [ 552.831577][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.838675][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.882402][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.156591][ T7650] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 553.287548][ T7] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 553.530033][ T7650] usb 7-1: not running at top speed; connect to a high speed hub [ 554.130048][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 554.181841][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.190201][ T7650] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 554.219849][ T7650] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 554.239501][ T7] usb 6-1: config 0 descriptor?? [ 554.400983][ T7650] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 555.139121][ T7650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.160079][ T7] ath6kl: Failed to submit usb control message: -71 [ 555.181366][ T7650] usb 7-1: Product: syz [ 555.181796][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 555.208749][ T7650] usb 7-1: Manufacturer: syz [ 555.228953][ T7650] usb 7-1: SerialNumber: syz [ 555.240038][ T7] ath6kl: Unable to send get target info: -71 [ 555.298750][ T7] ath6kl: Failed to init ath6kl core: -71 [ 555.301434][ T8015] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 555.342129][ T7650] oti6858 7-1:1.0: oti6858 converter detected [ 555.348396][ T7] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 555.371938][ T7650] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 555.381136][ T7] usb 6-1: USB disconnect, device number 7 [ 555.418245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.457954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.550979][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.580143][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.640394][ T7899] device veth0_vlan entered promiscuous mode [ 555.927965][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.169374][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.307013][ T5116] usb 7-1: USB disconnect, device number 6 [ 556.361707][ T7899] device veth1_vlan entered promiscuous mode [ 556.381325][ T5116] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 556.441288][ T5116] oti6858 7-1:1.0: device disconnected [ 556.467774][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.503261][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.675598][ T7899] device veth0_macvtap entered promiscuous mode [ 556.690789][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 556.730334][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.766070][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 556.788387][ T7899] device veth1_macvtap entered promiscuous mode [ 558.140803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.184127][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.945'. [ 558.196554][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 558.247859][ T8044] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 558.280021][ T8044] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 558.309988][ T8044] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 558.343471][ T8044] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 558.384171][ T8044] device geneve2 entered promiscuous mode [ 558.409265][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.449798][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.459694][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.522167][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.542437][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.565939][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.587122][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.613556][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.643992][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.707000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.750605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.785415][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.820175][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.163567][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.320138][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.990040][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.087236][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.107487][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.119965][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.165802][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.371852][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.622357][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.939627][ T7899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.816697][ T7899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.826646][ T7899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.835893][ T7899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.192288][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.198781][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.439904][ T7650] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 563.548925][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.580450][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.625618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 563.689167][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.709407][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.780494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 564.079920][ T7650] usb 6-1: not running at top speed; connect to a high speed hub [ 564.759936][ T7650] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 564.779825][ T7650] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 565.180055][ T7650] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 565.189147][ T7650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.229917][ T7650] usb 6-1: can't set config #1, error -71 [ 565.848082][ T7650] usb 6-1: USB disconnect, device number 8 [ 568.145323][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.964'. [ 568.179488][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.964'. [ 568.202686][ T8152] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 568.219830][ T8152] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 568.238918][ T8152] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 568.269056][ T8152] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 568.310237][ T8152] device geneve2 entered promiscuous mode [ 568.348518][ T8180] netlink: 'syz.4.977': attribute type 11 has an invalid length. [ 570.497241][ T8202] tipc: Failed to remove unknown binding: 66,0,0/0:2449657122/2449657123 [ 570.559510][ T8202] tipc: Failed to remove unknown binding: 66,0,0/0:2449657122/2449657123 [ 571.986602][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.987'. [ 573.328379][ T8227] netlink: 'syz.5.990': attribute type 11 has an invalid length. [ 573.549895][ T4233] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 573.870142][ T4233] usb 8-1: not running at top speed; connect to a high speed hub [ 573.950189][ T4233] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 573.985206][ T4233] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 574.159925][ T4233] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 574.169043][ T4233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.177526][ T4233] usb 8-1: Product: syz [ 574.182093][ T4233] usb 8-1: Manufacturer: syz [ 574.186717][ T4233] usb 8-1: SerialNumber: syz [ 574.220360][ T8220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 574.242416][ T4233] oti6858 8-1:1.0: oti6858 converter detected [ 574.261264][ T4233] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 574.752387][ T4233] usb 8-1: USB disconnect, device number 2 [ 574.765984][ T4233] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 574.777396][ T4233] oti6858 8-1:1.0: device disconnected [ 577.025755][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.991'. [ 577.736326][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.991'. [ 577.760312][ T8301] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 577.769050][ T8301] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 577.778132][ T8301] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 577.787096][ T8301] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 577.796697][ T8301] device geneve2 entered promiscuous mode [ 579.149960][ T4233] Bluetooth: hci0: command 0x0405 tx timeout [ 579.270003][ T4288] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 579.590002][ T4288] usb 5-1: not running at top speed; connect to a high speed hub [ 579.740401][ T4288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 579.751737][ T4288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 579.801624][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1007'. [ 579.829868][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1007'. [ 579.886409][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1007'. [ 579.919889][ T8337] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 579.960804][ T4288] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 579.993797][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.007824][ T4288] usb 5-1: Product: syz [ 580.012206][ T4288] usb 5-1: Manufacturer: syz [ 580.016829][ T4288] usb 5-1: SerialNumber: syz [ 580.080569][ T8324] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 580.101041][ T4288] oti6858 5-1:1.0: oti6858 converter detected [ 580.144209][ T4288] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 580.283792][ T8352] netlink: 'syz.5.1003': attribute type 11 has an invalid length. [ 581.492322][ T23] usb 5-1: USB disconnect, device number 10 [ 581.573674][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 581.645445][ T23] oti6858 5-1:1.0: device disconnected [ 584.270930][ T8409] netlink: 'syz.5.1023': attribute type 11 has an invalid length. [ 585.274108][ T8413] netlink: 'syz.6.1026': attribute type 10 has an invalid length. [ 586.671420][ T8413] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.712716][ T8413] bond0: (slave team0): Enslaving as an active interface with an up link [ 587.779866][ T4233] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 588.219971][ T4233] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 588.799850][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.865874][ T8467] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 588.901818][ T8467] netlink: 'syz.2.1034': attribute type 2 has an invalid length. [ 589.384685][ T4233] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 590.282632][ T4233] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 590.300561][ T4233] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.0003/input/input7 [ 590.591364][ T8489] netlink: 'syz.5.1038': attribute type 11 has an invalid length. [ 591.396367][ T4233] usb 8-1: USB disconnect, device number 3 [ 592.960449][ T8494] fido_id[8494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 594.661332][ T5116] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 595.050227][ T5116] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 595.094322][ T5116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 595.390064][ T5116] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 595.424446][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.449932][ T5116] usb 3-1: Product: syz [ 595.454133][ T5116] usb 3-1: Manufacturer: syz [ 595.499457][ T5116] usb 3-1: SerialNumber: syz [ 595.545954][ T5116] usb 3-1: config 0 descriptor?? [ 595.612875][ T5116] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 595.697897][ T8520] overlayfs: failed to resolve './file1/file0': -2 [ 596.939869][ T5116] gspca_sunplus: reg_r err -71 [ 596.945635][ T5116] sunplus: probe of 3-1:0.0 failed with error -71 [ 596.959970][ T5116] usb 3-1: USB disconnect, device number 8 [ 597.127030][ T8563] netlink: 'syz.7.1053': attribute type 11 has an invalid length. [ 598.726353][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 599.101227][ T8580] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1057'. [ 599.388259][ T8571] syz.2.1056 (8571) used greatest stack depth: 20656 bytes left [ 599.576064][ T8590] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 1038 - 0 [ 599.584564][ T8590] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.059608][ T8606] netlink: 'syz.2.1064': attribute type 11 has an invalid length. [ 601.248584][ T8620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1069'. [ 602.749863][ T4232] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 602.829920][ T4308] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 603.760042][ T4308] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 603.769157][ T4308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.810307][ T4232] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 603.821125][ T8641] program syz.6.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.849913][ T4232] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 604.070298][ T4232] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 604.089833][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.129892][ T4232] usb 5-1: Product: syz [ 604.143550][ T4232] usb 5-1: Manufacturer: syz [ 604.158412][ T4232] usb 5-1: SerialNumber: syz [ 604.170116][ T4232] usb 5-1: config 0 descriptor?? [ 604.230030][ T4232] usb 5-1: can't set config #0, error -71 [ 604.246339][ T4232] usb 5-1: USB disconnect, device number 11 [ 604.293699][ T4308] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 604.345901][ T4308] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 604.411302][ T4308] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0004/input/input10 [ 604.560232][ C1] wacom 0003:056A:033B.0004: Event data for report 2 was too short (9 vs 2) [ 604.567847][ T8661] syz.4.1077: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 604.584626][ T8661] CPU: 0 PID: 8661 Comm: syz.4.1077 Not tainted syzkaller #0 [ 604.592042][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.602126][ T8661] Call Trace: [ 604.605436][ T8661] [ 604.608385][ T8661] dump_stack_lvl+0x188/0x250 [ 604.613101][ T8661] ? rcu_lock_release+0x5/0x20 [ 604.617892][ T8661] ? show_regs_print_info+0x20/0x20 [ 604.623138][ T8661] ? load_image+0x410/0x410 [ 604.627700][ T8661] warn_alloc+0x245/0x320 [ 604.632104][ T8661] ? rcu_lock_release+0x20/0x20 [ 604.637000][ T8661] ? zone_watermark_ok_safe+0x250/0x250 [ 604.642606][ T8661] ? kfree+0xef/0x2a0 [ 604.646637][ T8661] __vmalloc_node_range+0x2b1/0x8b0 [ 604.651895][ T8661] ? mutex_lock_io_nested+0x60/0x60 [ 604.657153][ T8661] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 604.662998][ T8661] vmalloc+0x75/0x80 [ 604.666934][ T8661] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 604.672778][ T8661] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 604.678452][ T8661] dvb_demux_do_ioctl+0x450/0x530 [ 604.683511][ T8661] dvb_usercopy+0x191/0x2b0 [ 604.688044][ T8661] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 604.693626][ T8661] ? dvb_generic_ioctl+0xb0/0xb0 [ 604.698602][ T8661] ? dvb_demux_poll+0x210/0x210 [ 604.703472][ T8661] dvb_demux_ioctl+0x25/0x30 [ 604.708122][ T8661] __se_sys_ioctl+0xfa/0x170 [ 604.712780][ T8661] do_syscall_64+0x4c/0xa0 [ 604.717227][ T8661] ? clear_bhb_loop+0x30/0x80 [ 604.721944][ T8661] ? clear_bhb_loop+0x30/0x80 [ 604.726667][ T8661] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 604.732611][ T8661] RIP: 0033:0x7f2da69c50d9 [ 604.737056][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.756702][ T8661] RSP: 002b:00007f2da4bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.765154][ T8661] RAX: ffffffffffffffda RBX: 00007f2da6c4d090 RCX: 00007f2da69c50d9 [ 604.773158][ T8661] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 604.781156][ T8661] RBP: 00007f2da6a5c024 R08: 0000000000000000 R09: 0000000000000000 [ 604.789169][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.797184][ T8661] R13: 00007f2da6c4d128 R14: 00007f2da6c4d090 R15: 00007ffcba42aed8 [ 604.805211][ T8661] [ 604.889492][ T8661] Mem-Info: [ 604.895252][ T8661] active_anon:314 inactive_anon:27678 isolated_anon:0 [ 604.895252][ T8661] active_file:22240 inactive_file:38129 isolated_file:0 [ 604.895252][ T8661] unevictable:768 dirty:97 writeback:0 [ 604.895252][ T8661] slab_reclaimable:21398 slab_unreclaimable:95784 [ 604.895252][ T8661] mapped:29771 shmem:21942 pagetables:774 bounce:0 [ 604.895252][ T8661] kernel_misc_reclaimable:0 [ 604.895252][ T8661] free:1336233 free_pcp:11435 free_cma:0 [ 604.943909][ T8661] Node 0 active_anon:1232kB inactive_anon:110112kB active_file:88764kB inactive_file:152516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119032kB dirty:392kB writeback:0kB shmem:85600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:3136kB all_unreclaimable? no [ 604.981265][ T8661] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 605.011379][ C1] wacom 0003:056A:033B.0004: Event data for report 2 was too short (9 vs 6) [ 605.081691][ T8661] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.168315][ T8669] netlink: 'syz.2.1078': attribute type 11 has an invalid length. [ 605.684968][ T5116] usb 6-1: USB disconnect, device number 9 [ 605.800233][ T8661] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 605.810679][ T8661] Node 0 DMA32 free:1416384kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1232kB inactive_anon:102028kB active_file:88768kB inactive_file:152516kB unevictable:1536kB writepending:436kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:42380kB local_pcp:21180kB free_cma:0kB [ 605.842993][ T8661] lowmem_reserve[]: 0 0 0 0 0 [ 605.849699][ T8661] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 605.934119][ T8661] lowmem_reserve[]: 0 0 0 0 0 [ 605.955529][ T8661] Node 1 Normal free:3921148kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3128kB local_pcp:3128kB free_cma:0kB [ 606.253182][ T8661] lowmem_reserve[]: 0 0 0 0 0 [ 606.406469][ T8661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.490551][ T8661] Node 0 DMA32: 263*4kB (ME) 1350*8kB (UME) 1085*16kB (UME) 809*32kB (UME) 1026*64kB (UME) 554*128kB (UM) 207*256kB (UM) 143*512kB (UM) 106*1024kB (UM) 40*2048kB (UME) 226*4096kB (UM) = 1434044kB [ 606.547044][ T8661] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 606.578299][ T8661] Node 1 Normal: 149*4kB (UME) 43*8kB (UME) 33*16kB (UME) 172*32kB (UME) 65*64kB (UME) 21*128kB (UE) 9*256kB (UME) 3*512kB (U) 2*1024kB (UE) 3*2048kB (UME) 951*4096kB (M) = 3921148kB [ 606.599045][ T8690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1082'. [ 606.649644][ T8661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.679966][ T8661] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.689565][ T8661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.700023][ T8661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.709611][ T8661] 82105 total pagecache pages [ 606.715501][ T8661] 0 pages in swap cache [ 606.720663][ T8661] Swap cache stats: add 3206, delete 3206, find 37/70 [ 606.727633][ T8661] Free swap = 124416kB [ 606.732826][ T8661] Total swap = 124996kB [ 606.737148][ T8661] 2097051 pages RAM [ 606.743481][ T8661] 0 pages HighMem/MovableOnly [ 606.748448][ T8661] 411499 pages reserved [ 606.753253][ T8661] 0 pages cma reserved [ 607.103670][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 607.229901][ T4233] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 608.231013][ T4233] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 608.252608][ T4233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 608.600319][ T4233] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 608.637446][ T8725] netlink: 'syz.4.1092': attribute type 11 has an invalid length. [ 609.453939][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.492979][ T4233] usb 6-1: Product: syz [ 609.503071][ T4233] usb 6-1: Manufacturer: syz [ 609.519932][ T4233] usb 6-1: SerialNumber: syz [ 609.580584][ T4233] usb 6-1: config 0 descriptor?? [ 609.648635][ T4233] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 609.785701][ T4232] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 610.179890][ T4288] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 610.190217][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.370057][ T4232] usb 5-1: New USB device found, idVendor=040a, idProduct=0300, bcdDevice= 0.00 [ 610.379310][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 610.387630][ T4232] usb 5-1: Product: syz [ 610.392105][ T4232] usb 5-1: Manufacturer: syz [ 610.443053][ T4232] gspca_main: spca500-2.14.0 probing 040a:0300 [ 610.540630][ T4288] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 610.549711][ T4288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.645787][ T5116] usb 5-1: USB disconnect, device number 12 [ 610.899901][ T4233] gspca_sunplus: reg_r err -71 [ 610.904738][ T4233] sunplus: probe of 6-1:0.0 failed with error -71 [ 610.920898][ T4233] usb 6-1: USB disconnect, device number 10 [ 611.043750][ T4288] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 611.054360][ T4288] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0 [ 611.067104][ T4288] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0005/input/input13 [ 611.224860][ T8739] netlink: 'syz.2.1106': attribute type 11 has an invalid length. [ 611.281836][ T8742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1096'. [ 611.639829][ C0] wacom 0003:056A:033B.0005: Event data for report 2 was too short (9 vs 6) [ 611.891034][ T4233] usb 7-1: USB disconnect, device number 7 [ 611.943005][ T4232] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 612.940051][ T4232] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.977842][ T4232] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 612.997498][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.061690][ T4232] usb-storage 8-1:1.0: USB Mass Storage device detected [ 613.395393][ T4233] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 613.528411][ T8777] netlink: 'syz.5.1110': attribute type 11 has an invalid length. [ 613.772406][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 613.792893][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.801054][ T4233] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.811526][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.870804][ T4233] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.040899][ T4233] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 614.137757][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 614.238351][ T4233] usb 7-1: SerialNumber: syz [ 614.573619][ T4232] usb 8-1: USB disconnect, device number 4 [ 614.643635][ T4233] usb 7-1: 0:2 : does not exist [ 614.677300][ T4233] usb 7-1: unit 5 not found! [ 614.705369][ T4233] usb 7-1: USB disconnect, device number 8 [ 614.755861][ T8670] udevd[8670]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.201942][ T1348] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 616.440033][ T4232] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 616.480114][ T1348] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 616.488849][ T1348] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 616.636617][ T8815] netlink: 'syz.2.1123': attribute type 11 has an invalid length. [ 616.680014][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 616.740403][ T1348] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 616.749511][ T1348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.778080][ T1348] usb 8-1: Product: syz [ 616.782945][ T1348] usb 8-1: Manufacturer: syz [ 616.796561][ T1348] usb 8-1: SerialNumber: syz [ 616.800804][ T4232] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 616.817550][ T1348] usb 8-1: config 0 descriptor?? [ 616.887776][ T1348] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 616.914564][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.922841][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.731492][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.741599][ T4232] usb 7-1: config 0 descriptor?? [ 617.782216][ T4232] gspca_main: sunplus-2.14.0 probing 041e:400b [ 618.210013][ T4233] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 618.259884][ T1111] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 618.260703][ T1348] gspca_sunplus: reg_r err -71 [ 618.276082][ T1348] sunplus: probe of 8-1:0.0 failed with error -71 [ 618.284331][ T1348] usb 8-1: USB disconnect, device number 5 [ 618.619978][ T1111] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 618.620355][ T4233] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.630286][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.652882][ T4233] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 618.663159][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.711015][ T4233] usb-storage 6-1:1.0: USB Mass Storage device detected [ 619.851206][ T1111] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 619.892364][ T1111] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 619.920242][ T1111] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0006/input/input16 [ 620.059921][ T4232] gspca_sunplus: reg_w_riv err -71 [ 620.065314][ T4232] sunplus: probe of 7-1:0.0 failed with error -71 [ 620.133222][ T4232] usb 7-1: USB disconnect, device number 9 [ 620.239833][ C1] wacom 0003:056A:033B.0006: Event data for report 2 was too short (9 vs 2) [ 620.368212][ T6766] usb 6-1: USB disconnect, device number 11 [ 620.439960][ C1] wacom 0003:056A:033B.0006: Event data for report 2 was too short (9 vs 6) [ 620.590519][ T8855] netlink: 'syz.2.1136': attribute type 11 has an invalid length. [ 620.644990][ T6766] usb 5-1: USB disconnect, device number 13 [ 621.332827][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.346174][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.354081][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.382551][ T8896] netlink: 'syz.5.1149': attribute type 11 has an invalid length. [ 624.480060][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.486408][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.493216][ T5116] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 625.009960][ T5116] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.029922][ T5116] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 625.049184][ T5116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.120840][ T5116] usb-storage 7-1:1.0: USB Mass Storage device detected [ 626.040094][ T5116] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 626.450008][ T5116] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 626.732938][ T6020] usb 7-1: USB disconnect, device number 10 [ 626.944593][ T5116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.952978][ T4233] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 627.027351][ T8929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 627.041599][ T8929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.050133][ T8929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.161787][ T8932] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 627.210015][ T4233] usb 8-1: Using ep0 maxpacket: 32 [ 627.330881][ T4233] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 627.346055][ T8934] program syz.5.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.371466][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.428448][ T4233] usb 8-1: config 0 descriptor?? [ 627.512687][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 627.629648][ T8942] netlink: 'syz.5.1162': attribute type 11 has an invalid length. [ 628.456229][ T5116] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 628.555814][ T5116] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 628.611437][ T5116] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0007/input/input19 [ 628.754274][ T5116] usb 3-1: USB disconnect, device number 9 [ 629.029538][ T8950] fido_id[8950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 629.771361][ T8959] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 629.780193][ T4233] gspca_sunplus: reg_w_riv err -71 [ 629.780310][ T4233] sunplus: probe of 8-1:0.0 failed with error -71 [ 629.818365][ T4233] usb 8-1: USB disconnect, device number 6 [ 631.270142][ T1111] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 631.744135][ T1111] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.789777][ T1111] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 631.798940][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.935618][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 632.004960][ T8987] netlink: 'syz.7.1176': attribute type 11 has an invalid length. [ 632.655779][ T1111] usb-storage 5-1:1.0: USB Mass Storage device detected [ 633.897036][ T6766] usb 5-1: USB disconnect, device number 14 [ 634.133475][ T4233] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 634.218493][ T9006] input: syz1 as /devices/virtual/input/input22 [ 634.959225][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 635.165368][ T6766] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 635.639893][ T4233] usb 7-1: Using ep0 maxpacket: 8 [ 635.670086][ T6766] usb 6-1: Using ep0 maxpacket: 32 [ 635.972543][ T6766] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 636.013176][ T4233] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.028927][ T6766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.096396][ T6766] usb 6-1: config 0 descriptor?? [ 636.178033][ T6766] gspca_main: sunplus-2.14.0 probing 041e:400b [ 636.279923][ T4233] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 636.287956][ T4233] usb 7-1: can't read configurations, error -71 [ 636.307635][ T9029] netlink: 'syz.6.1189': attribute type 11 has an invalid length. [ 637.660193][ T6766] gspca_sunplus: reg_w_riv err -110 [ 637.665510][ T6766] sunplus: probe of 6-1:0.0 failed with error -110 [ 638.639872][ T4308] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 638.757714][ T5116] usb 6-1: USB disconnect, device number 12 [ 638.774196][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1197'. [ 639.830008][ T4233] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 639.849985][ T4308] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.891925][ T4308] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 639.936847][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.091153][ T4308] usb-storage 3-1:1.0: USB Mass Storage device detected [ 640.260083][ T4233] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.289927][ T4233] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.338672][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.362944][ T4233] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 640.394812][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.444525][ T4233] usb 5-1: config 0 descriptor?? [ 640.995211][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.360199][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.386804][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.418916][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.458552][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.497343][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.526214][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.535821][ T9091] netlink: 'syz.2.1203': attribute type 11 has an invalid length. [ 641.557841][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.572275][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.588065][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.598183][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.614246][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.639552][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.665319][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.675910][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.695623][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.708393][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.725777][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.735955][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.751352][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.799102][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.816573][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.836826][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 641.857212][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.075043][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.105324][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.140163][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.147246][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.193119][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.213615][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.235779][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.259991][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.267061][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.311803][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.318915][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.365465][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.377728][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.385302][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.392673][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.400094][ T4233] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 642.420275][ T4233] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71 [ 642.432302][ T4233] usb 5-1: USB disconnect, device number 15 [ 642.442473][ T8670] udevd[8670]: setting owner of /dev/bus/usb/005/015 to uid=0, gid=0 failed: No such file or directory [ 642.455829][ T1348] nvmet: connect request for invalid subsystem te! [ 642.462958][ T4308] usb 3-1: USB disconnect, device number 10 [ 642.474126][ T9105] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 643.193915][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1215'. [ 643.461921][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1218'. [ 644.146398][ T9140] netlink: 'syz.6.1220': attribute type 11 has an invalid length. [ 644.334829][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 644.629911][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 644.831120][ T9152] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(1954183539.3239022.0), cmd(3) [ 645.885741][ T4233] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 645.895840][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.929381][ T4233] usb 5-1: config 0 descriptor?? [ 646.021662][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 646.205037][ T4233] gspca_sunplus: reg_w_riv err -71 [ 646.215419][ T4233] sunplus: probe of 5-1:0.0 failed with error -71 [ 646.257154][ T4233] usb 5-1: USB disconnect, device number 16 [ 646.408325][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 647.106284][ T9188] netlink: 'syz.5.1236': attribute type 11 has an invalid length. [ 647.485474][ T7] nvmet: connect request for invalid subsystem te! [ 647.494579][ T9201] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 648.665841][ T9213] netlink: 'syz.5.1250': attribute type 11 has an invalid length. [ 649.992226][ T9245] comedi comedi4: bad chanlist[0]=0x0000009b chan=155 range length=2 [ 650.063198][ T5116] nvmet: connect request for invalid subsystem te! [ 650.074227][ T9242] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 650.873073][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 652.149828][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 652.520074][ T7] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 652.585387][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.606306][ T7] usb 3-1: config 0 descriptor?? [ 652.666582][ T5116] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 652.683616][ T5116] Bluetooth: hci1: Injecting HCI hardware error event [ 652.691725][ T7] gspca_main: sunplus-2.14.0 probing 041e:400b [ 652.701173][ T4202] Bluetooth: hci1: hardware error 0x00 [ 653.005327][ T1348] nvmet: connect request for invalid subsystem te! [ 653.018512][ T9285] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 656.497123][ T7] gspca_sunplus: reg_w_riv err -71 [ 656.508210][ T7] sunplus: probe of 3-1:0.0 failed with error -71 [ 656.518191][ T7] usb 3-1: USB disconnect, device number 11 [ 657.091419][ T9322] syz.4.1280 uses obsolete (PF_INET,SOCK_PACKET) [ 657.202393][ T9318] netlink: 'syz.7.1275': attribute type 11 has an invalid length. [ 660.411051][ T9367] CIFS: Attempting to mount \\127.0.0.1\share [ 660.470554][ T9369] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 660.478421][ T9367] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 660.486702][ T9367] CIFS: VFS: cifs_mount failed w/return code = -11 [ 662.038627][ T9380] netlink: 'syz.5.1300': attribute type 11 has an invalid length. [ 662.339820][ T6766] Bluetooth: hci0: command 0x0406 tx timeout [ 667.113980][ T9448] netlink: 'syz.6.1320': attribute type 11 has an invalid length. [ 672.369611][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1333'. [ 672.991340][ T9501] netlink: 'syz.2.1336': attribute type 11 has an invalid length. [ 676.384253][ T9537] cramfs: checking physical address 0x00000000224dd000 for linear cramfs image [ 676.394055][ T9537] cramfs: wrong magic [ 676.411149][ T9537] cramfs: wrong magic [ 676.975813][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 676.975827][ T26] audit: type=1326 audit(1787052336.280:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 677.159474][ T26] audit: type=1326 audit(1787052336.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 678.264821][ T26] audit: type=1326 audit(1787052336.500:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 678.293841][ T9557] netlink: 'syz.4.1354': attribute type 11 has an invalid length. [ 679.366200][ T26] audit: type=1326 audit(1787052336.500:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 679.553414][ T26] audit: type=1326 audit(1787052336.500:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 679.577715][ T26] audit: type=1326 audit(1787052336.500:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 679.839862][ T26] audit: type=1326 audit(1787052336.500:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 679.864104][ T26] audit: type=1326 audit(1787052336.500:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.1353" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe95d9160d9 code=0x7ffc0000 [ 681.138852][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1363'. [ 684.448880][ T9600] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 685.871651][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.877995][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.916903][ T9646] netlink: 'syz.5.1382': attribute type 11 has an invalid length. [ 689.850654][ T7] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 690.820832][ T7] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 690.829133][ T7] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 690.900526][ T7] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 690.922664][ T7] usb 8-1: config 220 has no interface number 2 [ 690.932568][ T7] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 690.949033][ T9660] kernel profiling enabled (shift: 63) [ 690.954997][ T9660] profiling shift: 63 too large [ 692.220550][ T7] usb 8-1: config 220 interface 0 has no altsetting 0 [ 692.227393][ T7] usb 8-1: config 220 interface 76 has no altsetting 0 [ 692.244734][ T7] usb 8-1: config 220 interface 1 has no altsetting 0 [ 693.912757][ T7] usb 8-1: string descriptor 0 read error: -71 [ 693.930311][ T7] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 693.939388][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.070104][ T7] usb 8-1: can't set config #220, error -71 [ 694.206600][ T7] usb 8-1: USB disconnect, device number 7 [ 703.357034][ T9757] netlink: 'syz.5.1412': attribute type 11 has an invalid length. [ 706.845369][ T9808] netlink: 'syz.5.1425': attribute type 11 has an invalid length. [ 709.227570][ T9834] netlink: 'syz.7.1434': attribute type 16 has an invalid length. [ 712.095349][ T9871] netlink: 'syz.7.1441': attribute type 11 has an invalid length. [ 718.856869][ T9928] netlink: 'syz.5.1455': attribute type 11 has an invalid length. [ 723.005743][ T9971] netlink: 'syz.6.1470': attribute type 11 has an invalid length. [ 724.919773][ T4232] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 725.423289][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.730456][ T4232] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 725.739886][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.748029][ T4232] usb 5-1: Product: syz [ 725.809819][ T4232] usb 5-1: Manufacturer: syz [ 725.820218][ T4232] usb 5-1: SerialNumber: syz [ 725.957673][ T4232] sisusb 5-1:1.0: Invalid USB2VGA device [ 725.963566][ T4232] sisusb: probe of 5-1:1.0 failed with error -22 [ 726.163630][ T4232] usb 5-1: USB disconnect, device number 17 [ 728.285975][T10026] netlink: 'syz.5.1485': attribute type 11 has an invalid length. [ 731.750169][ T7650] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 732.450289][ T7650] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 732.519914][ T7650] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 732.735088][ T7650] usb 6-1: Product: syz [ 732.818835][ T7650] usb 6-1: SerialNumber: syz [ 733.227510][ T7650] usb 6-1: config 0 descriptor?? [ 733.964501][ T7650] hso 6-1:0.0: Failed to find BULK IN ep [ 734.102443][T10077] netlink: 'syz.4.1502': attribute type 11 has an invalid length. [ 734.182005][ T1108] usb 6-1: USB disconnect, device number 13 [ 735.804160][T10104] tipc: Started in network mode [ 735.891686][T10104] tipc: Node identity ac1414aa, cluster identity 4711 [ 735.927204][T10104] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.940787][T10104] tipc: Enabled bearer , priority 10 [ 736.060238][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.199866][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.355011][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.490347][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.629836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.769936][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.909870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.053847][ T1108] tipc: Node number set to 2886997162 [ 737.189845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.459880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.553661][T10133] netlink: 'syz.4.1516': attribute type 11 has an invalid length. [ 738.776354][T10153] netlink: 'syz.4.1521': attribute type 3 has an invalid length. [ 739.317271][T10153] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1521'. [ 740.929911][ T1348] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 741.060024][ C0] net_ratelimit: 2 callbacks suppressed [ 741.060043][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.199851][ T1348] usb 8-1: Using ep0 maxpacket: 16 [ 742.255878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 742.401139][ T1348] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.019938][ T1348] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 743.033133][ T1348] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 743.054969][ T1348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.111969][ T1348] usb 8-1: config 0 descriptor?? [ 743.192898][ T1348] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 743.299939][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 744.321596][ T1348] usb 8-1: USB disconnect, device number 8 [ 744.349848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 745.390012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.160719][ T1348] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 746.420073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.504785][T10223] netlink: 'syz.2.1544': attribute type 11 has an invalid length. [ 747.312993][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.319379][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.359963][ T1348] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 9 [ 747.389392][ T1348] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25964, setting to 1024 [ 747.459935][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 747.520029][ T1348] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 9 [ 747.556050][ T1348] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25964, setting to 1024 [ 748.509883][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 748.545698][ T1348] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 748.562850][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.628324][ T1348] usb 5-1: Product: syz [ 748.648449][ T1348] usb 5-1: Manufacturer: syz [ 748.680236][ T1348] usb 5-1: SerialNumber: syz [ 748.860054][ T1348] usb 5-1: can't set config #2, error -71 [ 748.888512][ T1348] usb 5-1: USB disconnect, device number 18 [ 749.644328][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 750.516468][T10284] netlink: 'syz.7.1557': attribute type 11 has an invalid length. [ 751.223429][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.259990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.309841][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.490639][T10296] fuse: root generation should be zero [ 753.514548][T10293] netlink: 'syz.7.1573': attribute type 11 has an invalid length. [ 755.229759][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.259890][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.424681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.509863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.828522][T10350] netlink: 'syz.4.1581': attribute type 11 has an invalid length. [ 758.843824][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1582'. [ 759.547043][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.279622][T10361] device syzkaller0 entered promiscuous mode [ 760.579847][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.961309][ T4308] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 761.619904][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.956555][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 763.060013][ T4308] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 763.069194][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.119753][ T4308] usb 5-1: Product: syz [ 763.123986][ T4308] usb 5-1: Manufacturer: syz [ 763.128599][ T4308] usb 5-1: SerialNumber: syz [ 763.171385][ T4308] usb 5-1: config 0 descriptor?? [ 763.211404][ T4308] ch341 5-1:0.0: ch341-uart converter detected [ 763.775250][T10406] netlink: 'syz.5.1596': attribute type 11 has an invalid length. [ 764.020072][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.589899][ T4308] ch341-uart ttyUSB0: failed to read break control: -71 [ 764.768513][ T4308] ch341-uart: probe of ttyUSB0 failed with error -71 [ 764.792188][ T4308] usb 5-1: USB disconnect, device number 19 [ 764.812000][ T4308] ch341 5-1:0.0: device disconnected [ 765.059844][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.109912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.975172][T10434] program syz.4.1607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.149917][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.125623][T10442] netlink: 'syz.7.1608': attribute type 11 has an invalid length. [ 768.180426][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.363210][ T4202] Bluetooth: hci0: SCO packet for unknown connection handle 2504 [ 769.219880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.259960][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.299825][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.812062][T10488] program syz.2.1621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.852521][T10490] netlink: 'syz.7.1622': attribute type 11 has an invalid length. [ 772.554244][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.619897][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.901561][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 775.939840][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 775.997878][T10531] device syzkaller1 entered promiscuous mode [ 776.258823][T10536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 776.275116][T10536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 776.298364][T10541] netlink: 'syz.5.1634': attribute type 11 has an invalid length. [ 776.979915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 778.020759][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.059995][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.132914][T10574] program syz.5.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.636321][T10585] netlink: 'syz.6.1646': attribute type 11 has an invalid length. [ 780.044058][T10589] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 780.100719][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.152275][T10589] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 781.139916][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 782.229968][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.299934][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.445948][T10636] netlink: 'syz.6.1660': attribute type 11 has an invalid length. [ 784.171071][T10643] program syz.6.1661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.340035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.769326][T10651] tipc: Enabled bearer , priority 10 [ 785.379866][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 786.092138][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1669'. [ 786.419843][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.139248][ T5116] Bluetooth: hci0: command 0x0405 tx timeout [ 787.203041][T10681] netlink: 'syz.5.1672': attribute type 11 has an invalid length. [ 787.888745][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 789.299196][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.339906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.433834][T10698] netlink: 'syz.5.1686': attribute type 11 has an invalid length. [ 791.379832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 791.689975][ T5116] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 791.959826][ T5116] usb 3-1: Using ep0 maxpacket: 16 [ 792.090681][ T5116] usb 3-1: config 12 has an invalid interface number: 159 but max is 0 [ 792.099005][ T5116] usb 3-1: config 12 has no interface number 0 [ 792.140246][ T5116] usb 3-1: config 12 interface 159 altsetting 234 endpoint 0x1 has an invalid bInterval 28, changing to 7 [ 792.183413][ T5116] usb 3-1: config 12 interface 159 altsetting 234 bulk endpoint 0xC has invalid maxpacket 8 [ 792.250904][ T5116] usb 3-1: config 12 interface 159 altsetting 234 bulk endpoint 0xF has invalid maxpacket 32 [ 792.307574][ T5116] usb 3-1: config 12 interface 159 has no altsetting 0 [ 792.540789][ T5116] usb 3-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 792.609396][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.715137][ T5116] usb 3-1: Product: syz [ 792.774929][ T5116] usb 3-1: Manufacturer: syz [ 792.779604][ T5116] usb 3-1: SerialNumber: syz [ 792.860260][T10704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 792.867449][T10704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 792.895885][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.246785][ T5116] usb-storage 3-1:12.159: USB Mass Storage device detected [ 793.326181][ T5116] usb 3-1: USB disconnect, device number 12 [ 793.931904][T10741] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 793.940090][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.999917][T10741] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 794.980278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 796.019930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.059964][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.385932][T10774] netlink: 'syz.2.1694': attribute type 11 has an invalid length. [ 797.870598][ T1108] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 798.099997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 798.549842][ T1108] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.557889][ T1108] usb 6-1: config 0 has no interface number 0 [ 798.769984][ T1108] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 798.779095][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.817762][ T1108] usb 6-1: Product: syz [ 798.822436][ T1108] usb 6-1: Manufacturer: syz [ 799.139930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.489038][ T1108] usb 6-1: SerialNumber: syz [ 799.520757][ T1108] usb 6-1: config 0 descriptor?? [ 799.563230][ T1108] usb 6-1: selecting invalid altsetting 1 [ 799.594088][ T1108] dvb_ttusb_budget: ttusb_init_controller: error [ 799.621473][ T1108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 799.796118][ T1108] DVB: Unable to find symbol stv0299_attach() [ 800.971183][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 801.612763][ T1108] DVB: Unable to find symbol tda8083_attach() [ 801.618890][ T1108] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 801.679914][T10816] netlink: 'syz.2.1711': attribute type 11 has an invalid length. [ 801.701936][ T1108] usb 6-1: USB disconnect, device number 14 [ 802.020312][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 802.649783][ T5116] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 803.060104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 803.090004][ T5116] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.109692][ T5116] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.856867][ T1108] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 803.862158][ T5116] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 803.976091][ T5116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 804.009720][ T5116] usb 7-1: SerialNumber: syz [ 804.100200][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 804.225220][ T1108] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.239843][ T1108] usb 8-1: config 0 has no interface number 0 [ 804.312762][ T5116] usb 7-1: 0:2 : does not exist [ 804.355486][ T5116] usb 7-1: USB disconnect, device number 13 [ 804.404137][ T1108] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 804.434518][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.455208][ T1108] usb 8-1: Product: syz [ 804.459415][ T1108] usb 8-1: Manufacturer: syz [ 804.464428][ T1108] usb 8-1: SerialNumber: syz [ 804.482952][ T1108] usb 8-1: config 0 descriptor?? [ 804.521570][ T1108] usb 8-1: selecting invalid altsetting 1 [ 804.527413][ T1108] dvb_ttusb_budget: ttusb_init_controller: error [ 804.544251][ T1108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 804.600360][ T1108] DVB: Unable to find symbol stv0299_attach() [ 804.633173][ T1108] DVB: Unable to find symbol tda8083_attach() [ 804.640846][T10820] udevd[10820]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.668667][ T1108] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 805.586370][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 805.890150][ T5116] usb 8-1: USB disconnect, device number 9 [ 806.430253][T10864] netlink: 'syz.2.1724': attribute type 11 has an invalid length. [ 806.659944][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 807.699811][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.743372][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.747566][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.750185][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.779814][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.469232][T10907] netlink: 'syz.2.1736': attribute type 11 has an invalid length. [ 810.829933][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.909822][ T1348] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 811.859830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.245886][ T1348] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 812.320755][ T1348] usb 3-1: config 0 has no interface number 0 [ 812.350968][T10917] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(1954183539.3239022.0), cmd(3) [ 812.485539][ T1348] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 812.499745][ T1348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.522308][ T1348] usb 3-1: Product: syz [ 812.526525][ T1348] usb 3-1: Manufacturer: syz [ 812.549715][ T1348] usb 3-1: SerialNumber: syz [ 812.575074][ T1348] usb 3-1: config 0 descriptor?? [ 812.630311][ T1348] usb 3-1: selecting invalid altsetting 1 [ 812.652414][ T1348] dvb_ttusb_budget: ttusb_init_controller: error [ 812.658801][ T1348] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 812.675384][T10920] netlink: 'syz.7.1748': attribute type 11 has an invalid length. [ 812.802412][ T1348] DVB: Unable to find symbol stv0299_attach() [ 812.867004][ T1348] DVB: Unable to find symbol tda8083_attach() [ 812.873487][ T1348] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 812.899945][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.938994][ T1348] usb 3-1: USB disconnect, device number 13 [ 814.930289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.939990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 816.979842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.353849][T10973] netlink: 'syz.2.1754': attribute type 11 has an invalid length. [ 817.999826][ T5116] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 818.029906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.427751][ T5116] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.444508][ T5116] usb 7-1: config 0 has no interface number 0 [ 818.609894][ T5116] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 818.619244][ T5116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.640580][ T5116] usb 7-1: Product: syz [ 818.644891][ T5116] usb 7-1: Manufacturer: syz [ 818.649640][ T5116] usb 7-1: SerialNumber: syz [ 818.673706][ T5116] usb 7-1: config 0 descriptor?? [ 818.731952][ T5116] usb 7-1: selecting invalid altsetting 1 [ 818.738028][ T5116] dvb_ttusb_budget: ttusb_init_controller: error [ 818.779747][ T5116] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 818.836791][ T5116] DVB: Unable to find symbol stv0299_attach() [ 818.883063][ T5116] DVB: Unable to find symbol tda8083_attach() [ 818.889359][ T5116] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 819.005717][ T5116] usb 7-1: USB disconnect, device number 14 [ 819.059799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.100215][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.225814][T11020] netlink: 'syz.6.1769': attribute type 11 has an invalid length. [ 821.511194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 822.579903][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.619845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 824.659916][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.699804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 826.739903][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 827.144420][T11074] netlink: 'syz.2.1786': attribute type 11 has an invalid length. [ 827.779806][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.114620][T11092] netlink: 'syz.2.1803': attribute type 11 has an invalid length. [ 828.819869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 829.859892][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 829.965553][T11115] netlink: 'syz.6.1809': attribute type 11 has an invalid length. [ 830.899925][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 831.939852][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.990280][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 834.019835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 835.070213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 835.296916][T11172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 835.344130][T11174] netlink: 'syz.6.1817': attribute type 11 has an invalid length. [ 836.109861][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.331177][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 836.343776][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 836.351364][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.361445][ T4202] Workqueue: hci4 hci_rx_work [ 836.366167][ T4202] Call Trace: [ 836.369464][ T4202] [ 836.372418][ T4202] dump_stack_lvl+0x188/0x250 [ 836.377154][ T4202] ? show_regs_print_info+0x20/0x20 [ 836.382384][ T4202] ? load_image+0x410/0x410 [ 836.386976][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 836.392115][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 836.396818][ T4202] ? kthread+0x42e/0x520 [ 836.401091][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 836.406321][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 836.411556][ T4202] kobject_add+0x160/0x230 [ 836.415995][ T4202] ? kobject_init+0x1c0/0x1c0 [ 836.420699][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 836.426009][ T4202] ? klist_children_get+0x50/0x50 [ 836.431062][ T4202] ? get_device_parent+0x121/0x3e0 [ 836.436207][ T4202] device_add+0x470/0x1050 [ 836.440657][ T4202] ? device_initialize+0x2a5/0x4d0 [ 836.445809][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 836.450781][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 836.456096][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 836.461235][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 836.466812][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 836.471696][ T4202] ? mark_lock+0x94/0x320 [ 836.476040][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 836.482041][ T4202] ? lock_chain_count+0x20/0x20 [ 836.486915][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 836.493000][ T4202] ? rcu_is_watching+0x11/0xa0 [ 836.497785][ T4202] ? asm_common_interrupt+0x22/0x40 [ 836.503004][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 836.508232][ T4202] ? asm_common_interrupt+0x22/0x40 [ 836.513453][ T4202] ? hci_event_packet+0x5b7/0x1310 [ 836.518590][ T4202] hci_event_packet+0xe0b/0x1310 [ 836.523546][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 836.528408][ T4202] ? rcu_lock_release+0x20/0x20 [ 836.533281][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 836.538508][ T4202] hci_rx_work+0x255/0xa10 [ 836.542956][ T4202] process_one_work+0x867/0xff0 [ 836.547850][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 836.553522][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 836.558839][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 836.563879][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 836.569454][ T4202] ? wq_worker_running+0x97/0x170 [ 836.574535][ T4202] worker_thread+0xad7/0x12a0 [ 836.579259][ T4202] kthread+0x42e/0x520 [ 836.583339][ T4202] ? rcu_lock_release+0x20/0x20 [ 836.588204][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 836.592814][ T4202] ret_from_fork+0x1f/0x30 [ 836.597271][ T4202] [ 836.605011][ T4202] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 836.618933][ T4202] Bluetooth: hci4: failed to register connection device [ 837.139914][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 838.179822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 839.229916][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 841.133573][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.189877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.229794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.701541][ T1348] Bluetooth: hci4: command 0x0406 tx timeout [ 844.269860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.832670][T11266] netlink: 'syz.4.1831': attribute type 11 has an invalid length. [ 845.299808][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 846.349883][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 847.389794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 848.660973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.701625][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 850.584831][T11306] netlink: 'syz.2.1851': attribute type 11 has an invalid length. [ 850.739881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.779778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 852.829891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 853.978499][ C0] hrtimer: interrupt took 126196590 ns [ 853.984195][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 861.486849][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 952.761645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 952.772146][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.778461][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 959.459632][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 959.466640][ C1] (detected by 1, t=10502 jiffies, g=54909, q=997) [ 959.473246][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 8410 (4295033056-4295024646), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 959.486533][ C1] rcu: rcu_preempt kthread starved for 8410 jiffies! g54909 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 959.497733][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 959.507702][ C1] rcu: RCU grace-period kthread stack dump: [ 959.513676][ C1] task:rcu_preempt state:R running task stack:27440 pid: 15 ppid: 2 flags:0x00004000 [ 959.524484][ C1] Call Trace: [ 959.527779][ C1] [ 959.530734][ C1] __schedule+0x11c3/0x4350 [ 959.535283][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 959.541194][ C1] ? rcu_is_watching+0x11/0xa0 [ 959.545973][ C1] ? release_firmware_map_entry+0x190/0x190 [ 959.551897][ C1] schedule+0x11b/0x1e0 [ 959.556089][ C1] schedule_timeout+0x184/0x2d0 [ 959.560988][ C1] ? console_conditional_schedule+0x40/0x40 [ 959.566898][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 959.572804][ C1] ? update_process_times+0x200/0x200 [ 959.578205][ C1] ? prepare_to_swait_event+0x33d/0x360 [ 959.583770][ C1] rcu_gp_fqs_loop+0x2be/0x11f0 [ 959.588637][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 959.594806][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 959.599641][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 959.604874][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 959.610105][ C1] rcu_gp_kthread+0x9a/0x370 [ 959.614713][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 959.619850][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 959.625758][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 959.630799][ C1] kthread+0x42e/0x520 [ 959.634903][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 959.640031][ C1] ? kthread_blkcg+0xd0/0xd0 [ 959.644642][ C1] ret_from_fork+0x1f/0x30 [ 959.649091][ C1] [ 959.652122][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 959.658452][ C1] Sending NMI from CPU 1 to CPUs 0: [ 959.663664][ C0] NMI backtrace for cpu 0 [ 959.663673][ C0] CPU: 0 PID: 1348 Comm: kworker/0:3 Not tainted syzkaller #0 [ 959.663687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.663698][ C0] Workqueue: events_power_efficient gc_worker [ 959.663713][ C0] RIP: 0010:rcu_is_watching+0x4/0xa0 [ 959.663729][ C0] Code: 3b 44 24 70 75 1b 48 8d 65 e8 5b 41 5e 41 5f 5d c3 e8 60 74 5b 08 41 f7 c7 00 02 00 00 75 bd eb bc e8 40 74 5b 08 41 57 41 56 <53> 65 ff 05 7c cf 9d 7e e8 3f 84 5b 08 89 c3 83 f8 08 73 5c 49 bf [ 959.663742][ C0] RSP: 0018:ffffc90000007cb8 EFLAGS: 00000002 [ 959.663753][ C0] RAX: ffffffff881a7dc2 RBX: 0000000000000001 RCX: ffff8880224f1dc0 [ 959.663764][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 959.663773][ C0] RBP: ffff88805ebfab60 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 959.663785][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: 18cce2d5b7595f14 [ 959.663796][ C0] R13: dffffc0000000000 R14: ffff88801ec60980 R15: ffff88805ebfa800 [ 959.663807][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 959.663819][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.663830][ C0] CR2: 00007f5620d256c8 CR3: 00000000620c5000 CR4: 00000000003506f0 [ 959.663844][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 959.663852][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 959.663862][ C0] Call Trace: [ 959.663867][ C0] [ 959.663873][ C0] advance_sched+0x6cb/0x920 [ 959.663893][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 959.663909][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 959.663927][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 959.663950][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 959.663968][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 959.663986][ C0] hrtimer_interrupt+0x397/0x8b0 [ 959.664013][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 959.664030][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 959.664047][ C0] [ 959.664051][ C0] [ 959.664055][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 959.664072][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x196/0x1d0 [ 959.664091][ C0] Code: f9 4d 85 e4 75 16 e8 09 32 51 f9 eb 15 e8 02 32 51 f9 e8 dd 49 98 01 4d 85 e4 74 ea e8 f3 31 51 f9 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 959.664103][ C0] RSP: 0018:ffffc90004847a20 EFLAGS: 00000293 [ 959.664115][ C0] RAX: ffffffff8827cabd RBX: 0000000000000000 RCX: ffff8880224f1dc0 [ 959.664125][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.664134][ C0] RBP: ffffc90004847ad0 R08: ffffffff901ee15f R09: 1ffffffff203dc2b [ 959.664145][ C0] R10: dffffc0000000000 R11: fffffbfff203dc2c R12: 0000000000000200 [ 959.664155][ C0] R13: dffffc0000000000 R14: 1ffff92000908f44 R15: dffffc0000000000 [ 959.664170][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 959.664192][ C0] ? nf_conntrack_hash_check_insert+0x6e0/0x6e0 [ 959.664222][ C0] gc_worker+0x2e5/0x13d0 [ 959.664243][ C0] ? read_lock_is_recursive+0x10/0x10 [ 959.664261][ C0] ? init_conntrack+0x1530/0x1530 [ 959.664275][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 959.664291][ C0] process_one_work+0x867/0xff0 [ 959.664315][ C0] ? worker_detach_from_pool+0x240/0x240 [ 959.664330][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 959.664347][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 959.664361][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 959.664376][ C0] ? wq_worker_running+0x97/0x170 [ 959.664392][ C0] worker_thread+0xad7/0x12a0 [ 959.664421][ C0] kthread+0x42e/0x520 [ 959.664434][ C0] ? rcu_lock_release+0x20/0x20 [ 959.664448][ C0] ? kthread_blkcg+0xd0/0xd0 [ 959.664462][ C0] ret_from_fork+0x1f/0x30 [ 959.664484][ C0]