last executing test programs: 24.413638627s ago: executing program 0 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000002100)=""/4127, &(0x7f0000000380)=0x101f) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3c}]}, 0x14}], 0x1}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) 21.860784884s ago: executing program 0 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x19d5, &(0x7f0000000040)={0x0, 0x83b0, 0x400, 0x1, 0x68}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) 21.248402735s ago: executing program 0 (id=358): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x3, 0x1}, {0x2, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x38) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0xaaaaaaaaaaaab65, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_uring_enter(r1, 0x47fb, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, &(0x7f0000000300)="c2468968adbb58fbbb9cdd20bf7caf24d867cd501c3550b737540f4368fddd798c76ee8b35a14cf5e306a814ac9536be1684ac58a8b5275171bff6c926669a843ca8789449282770c5110b4e34d01edb2ee83454ef4b4ba38caf1f828645a5bb12554ca03abeb4e2a52a0a2e7e27b9ffcd87332dbb406d96e4878af7d505ba4de42686ac597637c4070a5846db8748b1a65ad7c0cb113b271a821339edbf051c145b"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f00000003c0)={0x10, 0x0, r10}) 17.941531724s ago: executing program 0 (id=368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x19d5, &(0x7f0000000040)={0x0, 0x83b0, 0x400, 0x1, 0x68}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) 17.309437656s ago: executing program 0 (id=371): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="c1", 0x1}, {0x0, 0x60}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private=0xa010100}, 0x2, 0x0, 0x4}}, 0x26) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xc400}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 11.466026086s ago: executing program 1 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b00000000020000000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0xf0006000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 10.541573885s ago: executing program 0 (id=388): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0xb, 0xf}, {0xb, 0x5}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x2000000001, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0xddf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='rpc_socket_nospace\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000300000002"], 0x0, 0x4e}, 0x28) 10.318227827s ago: executing program 2 (id=391): r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000001240)=[{&(0x7f0000000140)="0301995a55243e5400c34b04282b33079a07256d4a4a6e57e9c5c95ff34b90555df9917f53beea84df49215ff3c04f323ceb0a56821a10ff36128a6af6673316e0f5ef763519d5cf8d793b639a4355eb439a44b988ae0b2a1cf6fc1b7a2c6f145a09953aee5abefbbeb05b8b8ee8f2a50166fd87623efa0c103a43ae9b2668dfb6c7"}, {&(0x7f0000000040)="f095d0b1483cb30cde2c891fcc2d9588d3f6fcdffca400a1b8c942aec43cd40c7a25150fb43e62b0084d13bcf5b25abca5a37b982afdacddc09583cc53f2927185cf897fa65c5ccc99cb53b998930b88d3e323437d3b202a2e20f4ccda51f51b805d3cff4bbfdf190cf0250b372b3fa615c654838168897537d4"}, {&(0x7f0000000100)="0367304c1965f5bb97cf6764ced35172597fff3b2a72922779ff4fb8749149b2a38ee0d5c63eacd2fa59d51438c8acbeddce36730a8f81b038a5ed960217"}, {&(0x7f0000001300)="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"}, {&(0x7f0000000240)="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"}], 0x4) 10.303826126s ago: executing program 3 (id=392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x64}, 0x94) 10.145474172s ago: executing program 2 (id=393): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r5, &(0x7f0000000080)="d3", 0x1, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r6, r6, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 9.970067814s ago: executing program 3 (id=394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f00000003c0)="ffc3b5439f2df1f3fcf02b1bfefbbaf33fa4b22ddaa2821828bcbe6bc432ac3fae49bdebf6029a8c59ec1527e76273c14c5126504f10f72812ba8583166eba0f997cc616fafa6a15555a1084600f6297313892d01ed8afdfbb392308029e4f4be7336dceb79756aa113c798b357a2524d04d3f982c499f1b378ea8499d854f2c0507f556", &(0x7f0000000040)=@tcp=r6, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0xc4, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x800}, {}, {0x8}, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0xd, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x2a3e}, {0x7, 0x0, 0x1}, {0x8}, {0xce, 0x0, 0x1}, {0x8}, {0x8}, {0x8, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x7}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5521e, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x26f1, 0x0, 0x1}, {}, {0x3000}, {0xf8ef, 0x0, 0x1}, {0x4}, {0x8}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_VIA={0x14, 0x12, {0x26, "fbe2c36ab9a02e03912c31e9e73c"}}, @RTA_DST={0x8, 0x1, {0xffff9, 0x0, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) 9.915646768s ago: executing program 4 (id=395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x19d5, &(0x7f0000000040)={0x0, 0x83b0, 0x400, 0x1, 0x68}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) 9.680185199s ago: executing program 3 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfe}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 9.522179196s ago: executing program 4 (id=397): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000028000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 9.39848309s ago: executing program 4 (id=398): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 9.369088514s ago: executing program 3 (id=399): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000480)=""/169, 0xa9}], 0x2, 0x7, 0x10001) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r2 = socket(0xa, 0x5, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4044045}, 0x8890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x34000041) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(r3, 0x0, 0x0, 0x100, &(0x7f0000002e00)={0x77359400}) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x9afe, 0x7fff, 0x34363248, 0x1, 0x5, [{0x5fb, 0xd}, {0x4, 0x4}, {0xb, 0x6}, {0x7, 0xe853}, {0x400, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}], 0x9, 0x8, 0x2, 0x1, 0x7}}) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000004c0)={0x81, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@int=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000900)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@jmp={0x5, 0x1, 0xce7c846d5b8c3035, 0x1, 0x1, 0x80, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) 9.150359132s ago: executing program 1 (id=400): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000340)={0x18, r2}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = dup(0xffffffffffffffff) write$binfmt_aout(r4, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x200000000000000, 0x0, 0x854}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) connect$pppl2tp(r3, 0x0, 0x0) 5.082146125s ago: executing program 4 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) 4.568034291s ago: executing program 2 (id=402): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000003f0300000200"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 3.420646306s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002210e0800050000ff0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) 3.405081319s ago: executing program 4 (id=404): socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x60000000006}, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000002400000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a3200000000140000001100"], 0x8c}}, 0x0) r9 = syz_open_pts(r1, 0x0) ioctl$TIOCSBRK(r9, 0x5427) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 3.327510173s ago: executing program 3 (id=405): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x54}}, 0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="a56c0f0030dd2745f167a2ab42a556fbcdcb27fd", 0x14}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='zonefs\x00', 0x2008004, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x54}}, 0x40) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="a56c0f0030dd2745f167a2ab42a556fbcdcb27fd", 0x14}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='zonefs\x00', 0x2008004, 0x0) (async) 2.018255782s ago: executing program 4 (id=406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x1000, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0xff}, 0x8) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.993638487s ago: executing program 1 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x19d5, &(0x7f0000000040)={0x0, 0x83b0, 0x400, 0x1, 0x68}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) 1.920931857s ago: executing program 2 (id=408): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(&(0x7f0000000000), 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000280), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 1.823720002s ago: executing program 1 (id=409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfe}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 1.810759073s ago: executing program 1 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b00000000020000000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0xf0006000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.416159653s ago: executing program 3 (id=411): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(&(0x7f0000000000), 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000280), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 792.788663ms ago: executing program 2 (id=412): sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000058080000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff47ffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x5, 0x0, 0xff, 0x105}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x20004005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) 0s ago: executing program 2 (id=413): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 75.606722][ T5825] cgroup: Unknown subsys name 'net' [ 75.731548][ T5825] cgroup: Unknown subsys name 'cpuset' [ 75.740590][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.166776][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.605450][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.614174][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.622615][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.634970][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.642953][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.651283][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.659790][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.671301][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.672139][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.688514][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.696431][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.709380][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.717300][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.743869][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.753701][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.759661][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.776673][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.784182][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.792435][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.801166][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.810056][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.819262][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.827194][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.848504][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.862925][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.473292][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 82.640268][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 82.710872][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.835800][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 82.897748][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.905589][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.913531][ T5840] bridge_slave_0: entered allmulticast mode [ 82.921659][ T5840] bridge_slave_0: entered promiscuous mode [ 82.935124][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 82.974138][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981993][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.990122][ T5840] bridge_slave_1: entered allmulticast mode [ 82.998374][ T5840] bridge_slave_1: entered promiscuous mode [ 83.110383][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.118480][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.125696][ T5845] bridge_slave_0: entered allmulticast mode [ 83.133068][ T5845] bridge_slave_0: entered promiscuous mode [ 83.142102][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.150282][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.157521][ T5845] bridge_slave_1: entered allmulticast mode [ 83.166505][ T5845] bridge_slave_1: entered promiscuous mode [ 83.200008][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.207174][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.214827][ T5835] bridge_slave_0: entered allmulticast mode [ 83.223178][ T5835] bridge_slave_0: entered promiscuous mode [ 83.271119][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.285714][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.293699][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.302519][ T5835] bridge_slave_1: entered allmulticast mode [ 83.309873][ T5835] bridge_slave_1: entered promiscuous mode [ 83.317006][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.324506][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.331883][ T5848] bridge_slave_0: entered allmulticast mode [ 83.339074][ T5848] bridge_slave_0: entered promiscuous mode [ 83.360826][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.416736][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.424135][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.432002][ T5848] bridge_slave_1: entered allmulticast mode [ 83.441448][ T5848] bridge_slave_1: entered promiscuous mode [ 83.466067][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.498163][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.523725][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.537365][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.561977][ T5840] team0: Port device team_slave_0 added [ 83.584940][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.609345][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.645291][ T5840] team0: Port device team_slave_1 added [ 83.693327][ T5848] team0: Port device team_slave_0 added [ 83.704273][ T5845] team0: Port device team_slave_0 added [ 83.714189][ T5845] team0: Port device team_slave_1 added [ 83.740125][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.747826][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.755092][ T5847] bridge_slave_0: entered allmulticast mode [ 83.763725][ T5847] bridge_slave_0: entered promiscuous mode [ 83.768803][ T51] Bluetooth: hci1: command tx timeout [ 83.773113][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.777759][ T5844] Bluetooth: hci0: command tx timeout [ 83.782882][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.795079][ T5847] bridge_slave_1: entered allmulticast mode [ 83.802529][ T5847] bridge_slave_1: entered promiscuous mode [ 83.812797][ T5835] team0: Port device team_slave_0 added [ 83.822568][ T5835] team0: Port device team_slave_1 added [ 83.831286][ T5848] team0: Port device team_slave_1 added [ 83.848022][ T5844] Bluetooth: hci2: command tx timeout [ 83.917407][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.925353][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.928111][ T5844] Bluetooth: hci3: command tx timeout [ 83.956980][ T51] Bluetooth: hci4: command tx timeout [ 83.965634][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.980414][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.987416][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.014324][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.062706][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.069924][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.096127][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.109929][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.117095][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.143095][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.164809][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.178108][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.188747][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.195872][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.223051][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.235780][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.243917][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.270670][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.283894][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.291201][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.317355][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.363145][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.371093][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.397871][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.450125][ T5847] team0: Port device team_slave_0 added [ 84.525556][ T5847] team0: Port device team_slave_1 added [ 84.568231][ T5845] hsr_slave_0: entered promiscuous mode [ 84.574881][ T5845] hsr_slave_1: entered promiscuous mode [ 84.605591][ T5840] hsr_slave_0: entered promiscuous mode [ 84.612184][ T5840] hsr_slave_1: entered promiscuous mode [ 84.619109][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.626911][ T5840] Cannot create hsr debugfs directory [ 84.663128][ T5848] hsr_slave_0: entered promiscuous mode [ 84.670005][ T5848] hsr_slave_1: entered promiscuous mode [ 84.676988][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.686040][ T5848] Cannot create hsr debugfs directory [ 84.709109][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.716191][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.743455][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.762751][ T5835] hsr_slave_0: entered promiscuous mode [ 84.769357][ T5835] hsr_slave_1: entered promiscuous mode [ 84.775932][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.784066][ T5835] Cannot create hsr debugfs directory [ 84.813649][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.821169][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.847985][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.141783][ T5847] hsr_slave_0: entered promiscuous mode [ 85.148736][ T5847] hsr_slave_1: entered promiscuous mode [ 85.155025][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.163257][ T5847] Cannot create hsr debugfs directory [ 85.534120][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.546652][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.565884][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.576932][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.657468][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.670479][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.684300][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.711499][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.805327][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.819164][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.836516][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.857874][ T5844] Bluetooth: hci0: command tx timeout [ 85.858174][ T51] Bluetooth: hci1: command tx timeout [ 85.873670][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.928740][ T51] Bluetooth: hci2: command tx timeout [ 85.949484][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.986933][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.001389][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.008961][ T51] Bluetooth: hci3: command tx timeout [ 86.008972][ T5844] Bluetooth: hci4: command tx timeout [ 86.046664][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.054810][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.135578][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.172904][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.180385][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.198031][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.213362][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.223789][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.255251][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.291934][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.299116][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.344844][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.422400][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.444638][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.451907][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.479882][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.487087][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.545301][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.623583][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.635232][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.655875][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.715356][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.764669][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.780806][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.788023][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.812821][ T48] cfg80211: failed to load regulatory.db [ 86.822720][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.829949][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.884809][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.892199][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.942241][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.956480][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.963718][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.022272][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.051769][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.058962][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.096237][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.113074][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.120330][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.200874][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.426679][ T5835] veth0_vlan: entered promiscuous mode [ 87.477099][ T5845] veth0_vlan: entered promiscuous mode [ 87.512466][ T5835] veth1_vlan: entered promiscuous mode [ 87.592135][ T5845] veth1_vlan: entered promiscuous mode [ 87.642609][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.697173][ T5845] veth0_macvtap: entered promiscuous mode [ 87.733611][ T5835] veth0_macvtap: entered promiscuous mode [ 87.751727][ T5845] veth1_macvtap: entered promiscuous mode [ 87.783039][ T5835] veth1_macvtap: entered promiscuous mode [ 87.829717][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.856345][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.873007][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.885611][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.902382][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.912137][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.921806][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.932199][ T51] Bluetooth: hci0: command tx timeout [ 87.932282][ T5844] Bluetooth: hci1: command tx timeout [ 87.938576][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964188][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.008326][ T5844] Bluetooth: hci2: command tx timeout [ 88.039192][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.053057][ T5840] veth0_vlan: entered promiscuous mode [ 88.065793][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.081145][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.092419][ T5844] Bluetooth: hci4: command tx timeout [ 88.098143][ T5844] Bluetooth: hci3: command tx timeout [ 88.107524][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.116414][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.207132][ T5840] veth1_vlan: entered promiscuous mode [ 88.259785][ T5848] veth0_vlan: entered promiscuous mode [ 88.314944][ T5848] veth1_vlan: entered promiscuous mode [ 88.361618][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.372715][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.474792][ T5840] veth0_macvtap: entered promiscuous mode [ 88.492594][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.494424][ T5840] veth1_macvtap: entered promiscuous mode [ 88.507271][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.537768][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.540251][ T5848] veth0_macvtap: entered promiscuous mode [ 88.545890][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.592778][ T5848] veth1_macvtap: entered promiscuous mode [ 88.633475][ T5847] veth0_vlan: entered promiscuous mode [ 88.667522][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.673334][ T5847] veth1_vlan: entered promiscuous mode [ 88.702526][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.710798][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.719194][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.746121][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.759451][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.775743][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.803079][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.821740][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.832016][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.841226][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.875447][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.900719][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.909991][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.919025][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.948179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.122728][ T5958] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 89.131197][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.358073][ T5958] batman_adv: batadv0: Adding interface: virt_wifi0 [ 89.364983][ T5958] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.394931][ T5958] batman_adv: batadv0: Interface activated: virt_wifi0 [ 89.477455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.477556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.533180][ T5847] veth0_macvtap: entered promiscuous mode [ 89.609630][ T5847] veth1_macvtap: entered promiscuous mode [ 89.724055][ T5961] NILFS (nullb0): couldn't find nilfs on the device [ 89.728092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.133198][ T5844] Bluetooth: hci0: command tx timeout [ 90.139370][ T5844] Bluetooth: hci1: command tx timeout [ 90.146175][ T5844] Bluetooth: hci2: command tx timeout [ 90.173519][ T51] Bluetooth: hci3: command tx timeout [ 90.267335][ T5844] Bluetooth: hci4: command tx timeout [ 90.399256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.501477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.603929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.815810][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.816565][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.855044][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.860643][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.918352][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.929317][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.951067][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.969246][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.003474][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.007960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.029809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.049401][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.078856][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.134236][ T5969] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 91.143084][ T5969] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 91.412782][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.414853][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.485222][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.498139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.508171][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.722535][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.746311][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.067066][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.089859][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.348681][ T5981] overlay: filesystem on ./bus not supported as upperdir [ 92.408424][ T5982] tipc: Started in network mode [ 92.433879][ T5982] tipc: Node identity ac1414aa, cluster identity 4711 [ 92.507326][ T5982] tipc: Enabled bearer , priority 10 [ 92.662141][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.804147][ T5986] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 93.576052][ T5993] trusted_key: syz.0.11 sent an empty control message without MSG_MORE. [ 93.609379][ T5955] tipc: Node number set to 2886997162 [ 93.775896][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.157716][ T5900] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 94.321056][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 94.341865][ T24] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 94.389824][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.436512][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 94.451391][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 94.473939][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.521707][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 94.552867][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.579134][ T24] usb 4-1: Product: syz [ 94.583448][ T24] usb 4-1: Manufacturer: syz [ 94.627952][ T24] usb 4-1: config 0 descriptor?? [ 94.665352][ T5900] usb 3-1: config 0 descriptor?? [ 94.683563][ T24] gspca_main: 2770:9120 too many config [ 94.713936][ T5999] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 96.341423][ T9] usb 4-1: USB disconnect, device number 2 [ 96.370395][ T5900] logitech 0003:046D:C298.0001: unknown main item tag 0x4 [ 96.387113][ T5900] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 96.411019][ T5900] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 96.421473][ T5900] logitech 0003:046D:C298.0001: unbalanced collection at end of report description [ 96.432884][ T5900] logitech 0003:046D:C298.0001: parse failed [ 96.446114][ T5900] logitech 0003:046D:C298.0001: probe with driver logitech failed with error -22 [ 96.540338][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.574165][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.624991][ T5936] usb 3-1: USB disconnect, device number 2 [ 96.818821][ T6016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.937030][ T6029] Zero length message leads to an empty skb [ 98.431368][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.750736][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.011867][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.042730][ T9] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 99.075679][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.161985][ T9] usb 3-1: config 0 descriptor?? [ 99.712772][ T9] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 99.784454][ T9] semitek 0003:1EA7:0907.0002: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.2-1/input0 [ 100.053930][ T9] usb 3-1: USB disconnect, device number 3 [ 100.900274][ T6044] block device autoloading is deprecated and will be removed. [ 101.042239][ T6045] fido_id[6045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.378054][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 102.456727][ T6068] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.466012][ T6068] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.475064][ T6068] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.485405][ T6068] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.084380][ T6068] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.093571][ T6068] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.104247][ T6068] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.114462][ T6068] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.868145][ T6112] Bluetooth: MGMT ver 1.23 [ 105.994876][ T6114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.033266][ T6116] process 'syz.1.42' launched './file1' with NULL argv: empty string added [ 108.209864][ T6127] syz.2.44 (6127) used greatest stack depth: 17992 bytes left [ 109.348234][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.432504][ T6142] vivid-003: ================= START STATUS ================= [ 110.440625][ T6142] vivid-003: Radio HW Seek Mode: Bounded [ 110.446569][ T6142] vivid-003: Radio Programmable HW Seek: false [ 110.454019][ T6142] vivid-003: RDS Rx I/O Mode: Block I/O [ 110.460959][ T6142] vivid-003: Generate RBDS Instead of RDS: false [ 110.468318][ T6142] vivid-003: RDS Reception: true [ 110.477032][ T6142] vivid-003: RDS Program Type: 0 inactive [ 110.483199][ T6142] vivid-003: RDS PS Name: inactive [ 110.489011][ T6142] vivid-003: RDS Radio Text: inactive [ 110.495957][ T6142] vivid-003: RDS Traffic Announcement: false inactive [ 110.503249][ T6142] vivid-003: RDS Traffic Program: false inactive [ 110.509832][ T6142] vivid-003: RDS Music: false inactive [ 110.515369][ T6142] vivid-003: ================== END STATUS ================== [ 110.793715][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 110.803656][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.813176][ T24] usb 4-1: Product: syz [ 110.817851][ T24] usb 4-1: Manufacturer: syz [ 110.822578][ T24] usb 4-1: SerialNumber: syz [ 110.884034][ T24] usb 4-1: config 0 descriptor?? [ 110.899342][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 110.907710][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 110.907710][ T24] [ 110.915394][ T24] usb 4-1: selecting invalid altsetting 3 [ 110.921969][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 110.921969][ T24] [ 110.933883][ T6141] trusted_key: encrypted_key: insufficient parameters specified [ 110.988217][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 111.119760][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 112.219460][ T24] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 114.855448][ T6171] smk_cipso_doi:692 cipso add rc = -22 [ 114.889013][ T24] usb 4-1: USB disconnect, device number 3 [ 117.491335][ T6197] Bluetooth: MGMT ver 1.23 [ 117.547249][ T6197] program syz.2.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.111042][ T6208] vivid-001: ================= START STATUS ================= [ 118.118931][ T6208] vivid-001: Radio HW Seek Mode: Bounded [ 118.124831][ T6208] vivid-001: Radio Programmable HW Seek: false [ 118.132089][ T6208] vivid-001: RDS Rx I/O Mode: Block I/O [ 118.141219][ T6208] vivid-001: Generate RBDS Instead of RDS: false [ 118.148127][ T6208] vivid-001: RDS Reception: true [ 118.155003][ T6208] vivid-001: RDS Program Type: 0 inactive [ 118.161866][ T6208] vivid-001: RDS PS Name: inactive [ 118.167582][ T6208] vivid-001: RDS Radio Text: inactive [ 118.175378][ T6208] vivid-001: RDS Traffic Announcement: false inactive [ 118.184046][ T6208] vivid-001: RDS Traffic Program: false inactive [ 118.191441][ T6208] vivid-001: RDS Music: false inactive [ 118.199015][ T6208] vivid-001: ================== END STATUS ================== [ 120.637973][ T6226] netlink: 420 bytes leftover after parsing attributes in process `syz.1.70'. [ 124.400814][ T6248] xt_policy: neither incoming nor outgoing policy selected [ 126.212054][ T6263] overlayfs: failed to resolve './file0': -2 [ 126.969204][ T6274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.288420][ T6264] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.910528][ T6281] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.935170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947296][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.833548][ T6332] loop8: detected capacity change from 0 to 7 [ 136.930690][ T6332] Dev loop8: unable to read RDB block 7 [ 136.937088][ T6332] loop8: AHDI p1 p2 p3 [ 136.941602][ T6332] loop8: partition table partially beyond EOD, truncated [ 136.951890][ T6332] loop8: p1 start 1601398130 is beyond EOD, truncated [ 136.958982][ T6332] loop8: p2 start 1702059890 is beyond EOD, truncated [ 138.607982][ T6326] capability: warning: `syz.1.97' uses deprecated v2 capabilities in a way that may be insecure [ 139.437085][ T6337] SET target dimension over the limit! [ 145.104504][ T6383] program syz.3.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.688501][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 145.850945][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.882567][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 146.029643][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 146.813500][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.869502][ T24] usb 2-1: config 0 descriptor?? [ 147.350030][ T24] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 147.460214][ T24] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 147.476219][ T24] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 147.502710][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.526984][ T24] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 147.536033][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.566618][ T24] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 147.684597][ T24] usb 2-1: USB disconnect, device number 2 [ 148.283378][ T6406] fido_id[6406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 148.359095][ T6414] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 151.246806][ T6448] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 154.479951][ T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 154.661404][ T24] usb 4-1: device descriptor read/64, error -71 [ 155.383522][ T24] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 155.524028][ T24] usb 4-1: device descriptor read/64, error -71 [ 155.728882][ T24] usb usb4-port1: attempt power cycle [ 155.903682][ T6502] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.368676][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 156.419467][ T24] usb 4-1: device descriptor read/8, error -71 [ 157.038269][ T24] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 157.084637][ T24] usb 4-1: device descriptor read/8, error -71 [ 157.209041][ T24] usb usb4-port1: unable to enumerate USB device [ 157.419551][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.620647][ T5907] usb 2-1: config 3 has an invalid interface number: 203 but max is 0 [ 157.651943][ T5907] usb 2-1: config 3 has no interface number 0 [ 157.687062][ T5907] usb 2-1: config 3 interface 203 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.241735][ T5907] usb 2-1: config 3 interface 203 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.301088][ T5907] usb 2-1: New USB device found, idVendor=1b80, idProduct=d3b2, bcdDevice=ff.9e [ 158.333857][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.635622][ T24] usb 2-1: USB disconnect, device number 3 [ 160.393154][ T6555] tipc: Enabled bearer , priority 0 [ 160.594620][ T6559] netlink: 'syz.1.159': attribute type 29 has an invalid length. [ 160.612898][ T6560] netlink: 'syz.1.159': attribute type 29 has an invalid length. [ 160.808156][ T6561] syzkaller0: entered promiscuous mode [ 160.841523][ T6561] syzkaller0: entered allmulticast mode [ 160.909387][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.400575][ T6553] tipc: Resetting bearer [ 161.457939][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.470634][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.495758][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 161.497706][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 161.533875][ T6553] tipc: Disabling bearer [ 161.550964][ T9] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 161.576509][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.604022][ T9] usb 3-1: config 0 descriptor?? [ 162.464778][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 162.474378][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.521636][ T9] usb 3-1: USB disconnect, device number 4 [ 162.792322][ T6590] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.020473][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 166.978683][ T6630] random: crng reseeded on system resumption [ 168.424713][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 169.357722][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.531377][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 169.581740][ T5899] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 169.597579][ T5907] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.624770][ T5907] usb 3-1: config 0 has no interface number 0 [ 169.644678][ T5907] usb 3-1: config 0 interface 184 has no altsetting 0 [ 169.877843][ T5899] usb 5-1: Invalid ep0 maxpacket: 16 [ 170.008323][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 170.020780][ T5899] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 170.033541][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.042537][ T5907] usb 3-1: Product: syz [ 170.048569][ T5907] usb 3-1: Manufacturer: syz [ 170.053371][ T5907] usb 3-1: SerialNumber: syz [ 170.088844][ T5907] usb 3-1: config 0 descriptor?? [ 170.124612][ T5907] smsc75xx v1.0.0 [ 170.302081][ T5899] usb 5-1: Invalid ep0 maxpacket: 16 [ 170.322046][ T5899] usb usb5-port1: attempt power cycle [ 170.688076][ T5899] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 170.741993][ T5899] usb 5-1: Invalid ep0 maxpacket: 16 [ 170.764749][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 170.781765][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 170.966679][ T5899] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 171.318085][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 171.332733][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 171.351913][ T5899] usb 5-1: Invalid ep0 maxpacket: 16 [ 171.378014][ T5899] usb usb5-port1: unable to enumerate USB device [ 171.426795][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 171.438323][ T5907] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 171.907029][ T5907] usb 3-1: USB disconnect, device number 5 [ 172.095348][ T6679] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 172.276576][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 172.355069][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 172.561975][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.629718][ T6681] bond1: (slave bridge1): making interface the new active one [ 172.692675][ T6681] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 174.100514][ T6701] vivid-001: ================= START STATUS ================= [ 174.108348][ T6701] vivid-001: Radio HW Seek Mode: Bounded [ 174.114191][ T6701] vivid-001: Radio Programmable HW Seek: false [ 174.120638][ T6701] vivid-001: RDS Rx I/O Mode: Block I/O [ 174.126291][ T6701] vivid-001: Generate RBDS Instead of RDS: false [ 174.132856][ T6701] vivid-001: RDS Reception: true [ 174.137994][ T6701] vivid-001: RDS Program Type: 0 inactive [ 174.143885][ T6701] vivid-001: RDS PS Name: inactive [ 174.149327][ T6701] vivid-001: RDS Radio Text: inactive [ 174.155034][ T6701] vivid-001: RDS Traffic Announcement: false inactive [ 174.162757][ T6701] vivid-001: RDS Traffic Program: false inactive [ 174.170237][ T6701] vivid-001: RDS Music: false inactive [ 174.176138][ T6701] vivid-001: ================== END STATUS ================== [ 175.219385][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 175.235301][ T6703] ip6gretap0: entered promiscuous mode [ 175.253849][ T6703] ip6gretap0: left promiscuous mode [ 175.940122][ T6721] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.351684][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 177.768140][ T6724] input: syz0 as /devices/virtual/input/input5 [ 178.296403][ T6741] tipc: Started in network mode [ 178.360979][ T6741] tipc: Node identity da97a79d88e2, cluster identity 4711 [ 178.627819][ T6741] tipc: Enabled bearer , priority 0 [ 178.648222][ T6743] syzkaller0: entered promiscuous mode [ 178.653789][ T6743] syzkaller0: entered allmulticast mode [ 178.735814][ T6741] tipc: Resetting bearer [ 178.916924][ T6748] vivid-000: ================= START STATUS ================= [ 178.924758][ T6748] vivid-000: Radio HW Seek Mode: Bounded [ 178.930593][ T6748] vivid-000: Radio Programmable HW Seek: false [ 178.936909][ T6748] vivid-000: RDS Rx I/O Mode: Block I/O [ 178.942655][ T6748] vivid-000: Generate RBDS Instead of RDS: false [ 178.949202][ T6748] vivid-000: RDS Reception: true [ 178.954333][ T6748] vivid-000: RDS Program Type: 0 inactive [ 178.960290][ T6748] vivid-000: RDS PS Name: inactive [ 178.965663][ T6748] vivid-000: RDS Radio Text: inactive [ 178.972650][ T6748] vivid-000: RDS Traffic Announcement: false inactive [ 178.980495][ T6748] vivid-000: RDS Traffic Program: false inactive [ 178.987029][ T6748] vivid-000: RDS Music: false inactive [ 178.993419][ T6748] vivid-000: ================== END STATUS ================== [ 179.646035][ T6733] tipc: Resetting bearer [ 179.833801][ T5991] tipc: Node number set to 1383442333 [ 179.840463][ T6733] tipc: Disabling bearer [ 180.612669][ T6759] FAULT_INJECTION: forcing a failure. [ 180.612669][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.626766][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.0.220 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 180.626790][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.626811][ T6759] Call Trace: [ 180.626822][ T6759] [ 180.626831][ T6759] dump_stack_lvl+0x189/0x250 [ 180.626868][ T6759] ? __pfx____ratelimit+0x10/0x10 [ 180.626889][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.626911][ T6759] ? __pfx__printk+0x10/0x10 [ 180.626955][ T6759] should_fail_ex+0x414/0x560 [ 180.626980][ T6759] _copy_from_user+0x2d/0xb0 [ 180.627008][ T6759] sctp_setsockopt+0x19f/0x1200 [ 180.627034][ T6759] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.627062][ T6759] do_sock_setsockopt+0x179/0x1b0 [ 180.627095][ T6759] __x64_sys_setsockopt+0x13f/0x1b0 [ 180.627128][ T6759] do_syscall_64+0xfa/0x3b0 [ 180.627150][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.627168][ T6759] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 180.627184][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 180.627201][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.627218][ T6759] RIP: 0033:0x7fc4d018ebe9 [ 180.627239][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.627258][ T6759] RSP: 002b:00007fc4d0f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.627284][ T6759] RAX: ffffffffffffffda RBX: 00007fc4d03b6180 RCX: 00007fc4d018ebe9 [ 180.627298][ T6759] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 180.627309][ T6759] RBP: 00007fc4d0f5a090 R08: 000000000000009c R09: 0000000000000000 [ 180.627321][ T6759] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 180.627333][ T6759] R13: 00007fc4d03b6218 R14: 00007fc4d03b6180 R15: 00007ffef6409338 [ 180.627365][ T6759] [ 180.859505][ T6758] binder: 6753:6758 ioctl 400c620e 200000000000 returned -22 [ 181.108451][ T5991] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 181.279805][ T5991] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 181.816569][ T5991] usb 5-1: config 0 has no interface number 0 [ 181.866227][ T5991] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 181.942916][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.992480][ T5991] usb 5-1: Product: syz [ 182.017995][ T5991] usb 5-1: Manufacturer: syz [ 182.036880][ T5991] usb 5-1: SerialNumber: syz [ 182.081612][ T5991] usb 5-1: config 0 descriptor?? [ 182.234498][ T5991] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 182.290626][ T5991] usb 5-1: Detected SIO [ 183.150327][ T5991] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.858872][ T5991] usb 5-1: USB disconnect, device number 6 [ 183.924758][ T5991] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.954342][ T5991] ftdi_sio 5-1:0.23: device disconnected [ 184.529335][ T6791] vivid-003: ================= START STATUS ================= [ 184.537207][ T6791] vivid-003: Radio HW Seek Mode: Bounded [ 184.542943][ T6791] vivid-003: Radio Programmable HW Seek: false [ 184.549415][ T6791] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.555081][ T6791] vivid-003: Generate RBDS Instead of RDS: false [ 184.561580][ T6791] vivid-003: RDS Reception: true [ 184.566554][ T6791] vivid-003: RDS Program Type: 0 inactive [ 184.572486][ T6791] vivid-003: RDS PS Name: inactive [ 184.577800][ T6791] vivid-003: RDS Radio Text: inactive [ 184.583301][ T6791] vivid-003: RDS Traffic Announcement: false inactive [ 184.590167][ T6791] vivid-003: RDS Traffic Program: false inactive [ 184.596631][ T6791] vivid-003: RDS Music: false inactive [ 184.602189][ T6791] vivid-003: ================== END STATUS ================== [ 184.752900][ T6794] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.533366][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 187.855104][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.242'. [ 188.061540][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 188.785281][ T6844] vivid-000: ================= START STATUS ================= [ 188.793155][ T6844] vivid-000: Radio HW Seek Mode: Bounded [ 188.799135][ T6844] vivid-000: Radio Programmable HW Seek: false [ 188.806172][ T6844] vivid-000: RDS Rx I/O Mode: Block I/O [ 188.812693][ T6844] vivid-000: Generate RBDS Instead of RDS: false [ 188.819422][ T6844] vivid-000: RDS Reception: true [ 188.824533][ T6844] vivid-000: RDS Program Type: 0 inactive [ 188.830525][ T6844] vivid-000: RDS PS Name: inactive [ 188.835943][ T6844] vivid-000: RDS Radio Text: inactive [ 188.841660][ T6844] vivid-000: RDS Traffic Announcement: false inactive [ 188.848687][ T6844] vivid-000: RDS Traffic Program: false inactive [ 188.855327][ T6844] vivid-000: RDS Music: false inactive [ 188.861097][ T6844] vivid-000: ================== END STATUS ================== [ 189.292055][ T6846] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.924861][ T6857] netlink: 'syz.0.250': attribute type 3 has an invalid length. [ 189.934514][ T6857] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 189.942329][ T6857] netlink: 216 bytes leftover after parsing attributes in process `syz.0.250'. [ 189.951447][ T6857] NCSI netlink: No device for ifindex 33022 [ 190.512128][ T6861] hub 8-0:1.0: USB hub found [ 190.518205][ T6861] hub 8-0:1.0: 1 port detected [ 191.089893][ T6870] sock: sock_set_timeout: `syz.3.252' (pid 6870) tries to set negative timeout [ 191.141976][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 191.620794][ T6881] vlan2: entered promiscuous mode [ 191.648077][ T6881] dummy0: entered promiscuous mode [ 191.655375][ T6881] vlan2: entered allmulticast mode [ 191.661133][ T6881] dummy0: entered allmulticast mode [ 193.569167][ T6900] vivid-004: ================= START STATUS ================= [ 193.576925][ T6900] vivid-004: Radio HW Seek Mode: Bounded [ 193.582848][ T6900] vivid-004: Radio Programmable HW Seek: false [ 193.589309][ T6900] vivid-004: RDS Rx I/O Mode: Block I/O [ 193.595087][ T6900] vivid-004: Generate RBDS Instead of RDS: false [ 193.602164][ T6900] vivid-004: RDS Reception: true [ 193.607391][ T6900] vivid-004: RDS Program Type: 0 inactive [ 193.613528][ T6900] vivid-004: RDS PS Name: inactive [ 193.619896][ T6900] vivid-004: RDS Radio Text: inactive [ 193.625637][ T6900] vivid-004: RDS Traffic Announcement: false inactive [ 193.633405][ T6900] vivid-004: RDS Traffic Program: false inactive [ 193.640000][ T6900] vivid-004: RDS Music: false inactive [ 193.645702][ T6900] vivid-004: ================== END STATUS ================== [ 194.413626][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420359][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825543][ T6909] Illegal XDP return value 4294967274 on prog (id 78) dev syz_tun, expect packet loss! [ 195.166349][ T6918] capability: warning: `syz.4.266' uses 32-bit capabilities (legacy support in use) [ 195.463815][ T6923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.267'. [ 195.505006][ T6923] netlink: 43 bytes leftover after parsing attributes in process `syz.1.267'. [ 195.531194][ T6923] netlink: 'syz.1.267': attribute type 6 has an invalid length. [ 195.551134][ T6923] netlink: 'syz.1.267': attribute type 5 has an invalid length. [ 195.568910][ T6923] netlink: 43 bytes leftover after parsing attributes in process `syz.1.267'. [ 195.730924][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 195.818508][ T6910] netlink: 'syz.3.263': attribute type 12 has an invalid length. [ 195.832042][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 198.692619][ T6958] vivid-000: ================= START STATUS ================= [ 198.700449][ T6958] vivid-000: Radio HW Seek Mode: Bounded [ 198.706250][ T6958] vivid-000: Radio Programmable HW Seek: false [ 198.712661][ T6958] vivid-000: RDS Rx I/O Mode: Block I/O [ 198.718424][ T6958] vivid-000: Generate RBDS Instead of RDS: false [ 198.724907][ T6958] vivid-000: RDS Reception: true [ 198.730303][ T6958] vivid-000: RDS Program Type: 0 inactive [ 198.736234][ T6958] vivid-000: RDS PS Name: inactive [ 198.742563][ T6958] vivid-000: RDS Radio Text: inactive [ 198.749027][ T6958] vivid-000: RDS Traffic Announcement: false inactive [ 198.755989][ T6958] vivid-000: RDS Traffic Program: false inactive [ 198.762581][ T6958] vivid-000: RDS Music: false inactive [ 198.768342][ T6958] vivid-000: ================== END STATUS ================== [ 200.080849][ T6973] program syz.3.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.160089][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 205.210555][ T5936] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 205.382346][ T5936] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 205.413539][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.450880][ T5936] usb 5-1: Product: syz [ 205.465610][ T5936] usb 5-1: Manufacturer: syz [ 205.481800][ T5936] usb 5-1: SerialNumber: syz [ 205.513377][ T5936] usb 5-1: config 0 descriptor?? [ 205.555818][ T5936] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 205.575428][ T5936] pctv452e: pctv452e_power_ctrl: 1 [ 205.575428][ T5936] [ 205.591287][ T5936] usb 5-1: selecting invalid altsetting 3 [ 205.605887][ T5936] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 205.605887][ T5936] [ 205.620355][ T5936] dvb-usb: bulk message failed: -22 (5/0) [ 205.643487][ T5936] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 205.667539][ T5936] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 205.928776][ T7018] lo speed is unknown, defaulting to 1000 [ 205.936236][ T7018] lo speed is unknown, defaulting to 1000 [ 205.950721][ T7018] lo speed is unknown, defaulting to 1000 [ 205.995311][ T7018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.124664][ T7018] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 206.931640][ T7018] lo speed is unknown, defaulting to 1000 [ 206.950953][ T7018] lo speed is unknown, defaulting to 1000 [ 206.966572][ T7018] lo speed is unknown, defaulting to 1000 [ 206.978474][ T7018] lo speed is unknown, defaulting to 1000 [ 206.994765][ T7018] lo speed is unknown, defaulting to 1000 [ 207.127730][ T7008] Bluetooth: hci1: command 0x0406 tx timeout [ 207.133964][ T7008] Bluetooth: hci0: command 0x0406 tx timeout [ 207.141154][ T7008] Bluetooth: hci2: command 0x0406 tx timeout [ 207.148033][ T7008] Bluetooth: hci4: command 0x0406 tx timeout [ 207.154134][ T7008] Bluetooth: hci3: command 0x0406 tx timeout [ 209.865819][ T7028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.294'. [ 209.939028][ T7028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.294'. [ 210.018565][ T7030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.294'. [ 210.348082][ T24] usb 5-1: USB disconnect, device number 7 [ 210.496603][ T7035] netlink: 'syz.2.298': attribute type 26 has an invalid length. [ 212.035520][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 212.570745][ T5907] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.785677][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 212.851724][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 213.069702][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.105172][ T5907] usb 5-1: config 0 has no interface number 0 [ 213.124640][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0 [ 213.152821][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 213.173777][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.296075][ T5907] usb 5-1: Product: syz [ 213.301008][ T5907] usb 5-1: Manufacturer: syz [ 213.305636][ T5907] usb 5-1: SerialNumber: syz [ 213.328255][ T5907] usb 5-1: config 0 descriptor?? [ 215.431932][ T5907] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 215.485032][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 215.485067][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 215.485141][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 216.744303][ T7083] vivid-002: ================= START STATUS ================= [ 216.752182][ T7083] vivid-002: Radio HW Seek Mode: Bounded [ 216.782046][ T7083] vivid-002: Radio Programmable HW Seek: false [ 216.788658][ T7083] vivid-002: RDS Rx I/O Mode: Block I/O [ 216.794253][ T7083] vivid-002: Generate RBDS Instead of RDS: false [ 216.800795][ T7083] vivid-002: RDS Reception: true [ 216.806030][ T7083] vivid-002: RDS Program Type: 0 inactive [ 216.811935][ T7083] vivid-002: RDS PS Name: inactive [ 216.817277][ T7083] vivid-002: RDS Radio Text: inactive [ 216.822846][ T7083] vivid-002: RDS Traffic Announcement: false inactive [ 216.829711][ T7083] vivid-002: RDS Traffic Program: false inactive [ 216.836096][ T7083] vivid-002: RDS Music: false inactive [ 216.841692][ T7083] vivid-002: ================== END STATUS ================== [ 217.052645][ T7087] mmap: syz.2.311 (7087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.338785][ T5907] usb 5-1: USB disconnect, device number 8 [ 217.431575][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 217.448519][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 217.461671][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 217.472786][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 217.505406][ T30] audit: type=1107 audit(1755855654.112:2): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 217.543751][ T7094] netlink: 5 bytes leftover after parsing attributes in process `syz.1.312'. [ 218.013936][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.317'. [ 218.016879][ T7109] FAULT_INJECTION: forcing a failure. [ 218.016879][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 218.041079][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.3.316 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 218.041103][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.041113][ T7109] Call Trace: [ 218.041120][ T7109] [ 218.041128][ T7109] dump_stack_lvl+0x189/0x250 [ 218.041154][ T7109] ? __pfx____ratelimit+0x10/0x10 [ 218.041174][ T7109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.041194][ T7109] ? __pfx__printk+0x10/0x10 [ 218.041217][ T7109] ? __pfx___might_resched+0x10/0x10 [ 218.041236][ T7109] ? fs_reclaim_acquire+0x7d/0x100 [ 218.041263][ T7109] should_fail_ex+0x414/0x560 [ 218.041286][ T7109] should_failslab+0xa8/0x100 [ 218.041308][ T7109] __kmalloc_noprof+0xcb/0x4f0 [ 218.041325][ T7109] ? tomoyo_encode+0x28b/0x550 [ 218.041353][ T7109] tomoyo_encode+0x28b/0x550 [ 218.041384][ T7109] tomoyo_realpath_from_path+0x58d/0x5d0 [ 218.041420][ T7109] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.041440][ T7109] tomoyo_path_number_perm+0x1e8/0x5a0 [ 218.041464][ T7109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.041506][ T7109] ? __lock_acquire+0xab9/0xd20 [ 218.041546][ T7109] ? __fget_files+0x2a/0x420 [ 218.041569][ T7109] ? __fget_files+0x2a/0x420 [ 218.041584][ T7109] ? __fget_files+0x3a0/0x420 [ 218.041602][ T7109] ? __fget_files+0x2a/0x420 [ 218.041626][ T7109] security_file_ioctl+0xcb/0x2d0 [ 218.041651][ T7109] __se_sys_ioctl+0x47/0x170 [ 218.041681][ T7109] do_syscall_64+0xfa/0x3b0 [ 218.041701][ T7109] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.041722][ T7109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.041741][ T7109] ? clear_bhb_loop+0x60/0xb0 [ 218.041764][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.041782][ T7109] RIP: 0033:0x7f380e98ebe9 [ 218.041798][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.041813][ T7109] RSP: 002b:00007f380f7c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.041833][ T7109] RAX: ffffffffffffffda RBX: 00007f380ebb6180 RCX: 00007f380e98ebe9 [ 218.041848][ T7109] RDX: 0000200000000040 RSI: 00000000c01864c6 RDI: 0000000000000005 [ 218.041860][ T7109] RBP: 00007f380f7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 218.041872][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.041882][ T7109] R13: 00007f380ebb6218 R14: 00007f380ebb6180 R15: 00007ffe82647d28 [ 218.041914][ T7109] [ 218.298224][ T7109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.136191][ T7130] vivid-004: ================= START STATUS ================= [ 224.144332][ T7130] vivid-004: Radio HW Seek Mode: Bounded [ 224.150794][ T7130] vivid-004: Radio Programmable HW Seek: false [ 224.157430][ T7130] vivid-004: RDS Rx I/O Mode: Block I/O [ 224.163459][ T7130] vivid-004: Generate RBDS Instead of RDS: false [ 224.170119][ T7130] vivid-004: RDS Reception: true [ 224.175353][ T7130] vivid-004: RDS Program Type: 0 inactive [ 224.181477][ T7130] vivid-004: RDS PS Name: inactive [ 224.187028][ T7130] vivid-004: RDS Radio Text: inactive [ 224.192932][ T7130] vivid-004: RDS Traffic Announcement: false inactive [ 224.200263][ T7130] vivid-004: RDS Traffic Program: false inactive [ 224.206995][ T7130] vivid-004: RDS Music: false inactive [ 224.212890][ T7130] vivid-004: ================== END STATUS ================== [ 225.592001][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 227.336569][ T7161] Bluetooth: MGMT ver 1.23 [ 227.717839][ T7168] vivid-001: ================= START STATUS ================= [ 227.726514][ T7168] vivid-001: Radio HW Seek Mode: Bounded [ 227.732296][ T7168] vivid-001: Radio Programmable HW Seek: false [ 227.738931][ T7168] vivid-001: RDS Rx I/O Mode: Block I/O [ 227.744518][ T7168] vivid-001: Generate RBDS Instead of RDS: false [ 227.750920][ T7168] vivid-001: RDS Reception: true [ 227.755923][ T7168] vivid-001: RDS Program Type: 0 inactive [ 227.761737][ T7168] vivid-001: RDS PS Name: inactive [ 227.767028][ T7168] vivid-001: RDS Radio Text: inactive [ 227.772850][ T7168] vivid-001: RDS Traffic Announcement: false inactive [ 227.780352][ T7168] vivid-001: RDS Traffic Program: false inactive [ 227.786910][ T7168] vivid-001: RDS Music: false inactive [ 227.792823][ T7168] vivid-001: ================== END STATUS ================== [ 230.879486][ T7200] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.441214][ T7218] vivid-004: ================= START STATUS ================= [ 231.449258][ T7218] vivid-004: Radio HW Seek Mode: Bounded [ 231.455160][ T7218] vivid-004: Radio Programmable HW Seek: false [ 231.461568][ T7218] vivid-004: RDS Rx I/O Mode: Block I/O [ 231.467443][ T7218] vivid-004: Generate RBDS Instead of RDS: false [ 231.474028][ T7218] vivid-004: RDS Reception: true [ 231.479156][ T7218] vivid-004: RDS Program Type: 0 inactive [ 231.485093][ T7218] vivid-004: RDS PS Name: inactive [ 231.490666][ T7218] vivid-004: RDS Radio Text: inactive [ 231.496229][ T7218] vivid-004: RDS Traffic Announcement: false inactive [ 231.503264][ T7218] vivid-004: RDS Traffic Program: false inactive [ 231.510810][ T7218] vivid-004: RDS Music: false inactive [ 231.516524][ T7218] vivid-004: ================== END STATUS ================== [ 232.503249][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 233.177757][ T5907] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 233.188155][ T7241] netlink: 'syz.2.353': attribute type 8 has an invalid length. [ 233.799510][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.850450][ T5907] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.889457][ T5907] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.919196][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.949884][ T7228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.970642][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.637192][ T5907] usb 5-1: USB disconnect, device number 9 [ 235.030806][ T7267] binder: 7255:7267 ioctl 400c620e 200000000000 returned -22 [ 235.239602][ T7269] vivid-004: ================= START STATUS ================= [ 235.247313][ T7269] vivid-004: Radio HW Seek Mode: Bounded [ 235.253225][ T7269] vivid-004: Radio Programmable HW Seek: false [ 235.259657][ T7269] vivid-004: RDS Rx I/O Mode: Block I/O [ 235.265329][ T7269] vivid-004: Generate RBDS Instead of RDS: false [ 235.271906][ T7269] vivid-004: RDS Reception: true [ 235.276945][ T7269] vivid-004: RDS Program Type: 0 inactive [ 235.282867][ T7269] vivid-004: RDS PS Name: inactive [ 235.304810][ T7269] vivid-004: RDS Radio Text: inactive [ 235.310532][ T7269] vivid-004: RDS Traffic Announcement: false inactive [ 235.317478][ T7269] vivid-004: RDS Traffic Program: false inactive [ 235.324344][ T7269] vivid-004: RDS Music: false inactive [ 235.330485][ T7269] vivid-004: ================== END STATUS ================== [ 235.997914][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.006456][ T7277] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 236.049198][ T7277] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 236.689707][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.701010][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.749421][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.823990][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.875156][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.915320][ T24] usb 5-1: config 0 descriptor?? [ 236.958450][ T24] usb 5-1: can't set config #0, error -71 [ 236.984767][ T24] usb 5-1: USB disconnect, device number 10 [ 237.074539][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'. [ 238.587964][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'. [ 239.485996][ T7311] vivid-002: ================= START STATUS ================= [ 239.494531][ T7311] vivid-002: Radio HW Seek Mode: Bounded [ 239.501121][ T7311] vivid-002: Radio Programmable HW Seek: false [ 239.507445][ T7311] vivid-002: RDS Rx I/O Mode: Block I/O [ 239.513201][ T7311] vivid-002: Generate RBDS Instead of RDS: false [ 239.520544][ T7311] vivid-002: RDS Reception: true [ 239.525643][ T7311] vivid-002: RDS Program Type: 0 inactive [ 239.531650][ T7311] vivid-002: RDS PS Name: inactive [ 239.537079][ T7311] vivid-002: RDS Radio Text: inactive [ 239.542822][ T7311] vivid-002: RDS Traffic Announcement: false inactive [ 239.550252][ T7311] vivid-002: RDS Traffic Program: false inactive [ 239.556785][ T7311] vivid-002: RDS Music: false inactive [ 239.562508][ T7311] vivid-002: ================== END STATUS ================== [ 240.560328][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 241.806966][ T30] audit: type=1107 audit(1755855678.342:3): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 242.703321][ T7347] PKCS8: Unsupported PKCS#8 version [ 244.631987][ T7365] vivid-004: ================= START STATUS ================= [ 244.639991][ T7365] vivid-004: Radio HW Seek Mode: Bounded [ 244.645841][ T7365] vivid-004: Radio Programmable HW Seek: false [ 244.652347][ T7365] vivid-004: RDS Rx I/O Mode: Block I/O [ 244.658268][ T7365] vivid-004: Generate RBDS Instead of RDS: false [ 244.664803][ T7365] vivid-004: RDS Reception: true [ 244.669998][ T7365] vivid-004: RDS Program Type: 0 inactive [ 244.675926][ T7365] vivid-004: RDS PS Name: inactive [ 244.681417][ T7365] vivid-004: RDS Radio Text: inactive [ 244.687085][ T7365] vivid-004: RDS Traffic Announcement: false inactive [ 244.694118][ T7365] vivid-004: RDS Traffic Program: false inactive [ 244.700930][ T7365] vivid-004: RDS Music: false inactive [ 244.706598][ T7365] vivid-004: ================== END STATUS ================== [ 245.927977][ T5997] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 246.094134][ T5997] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 246.234492][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.264533][ T7397] tipc: Started in network mode [ 246.271377][ T7397] tipc: Node identity ac1414aa, cluster identity 4711 [ 246.275521][ T5997] usb 3-1: Product: syz [ 246.282696][ T7397] tipc: Enabled bearer , priority 10 [ 246.295796][ T5997] usb 3-1: Manufacturer: syz [ 246.337781][ T5997] usb 3-1: SerialNumber: syz [ 246.345546][ T5997] usb 3-1: config 0 descriptor?? [ 246.407943][ T5997] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 246.415921][ T5997] pctv452e: pctv452e_power_ctrl: 1 [ 246.415921][ T5997] [ 246.647813][ T5997] usb 3-1: selecting invalid altsetting 3 [ 246.653609][ T5997] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 246.653609][ T5997] [ 247.425232][ T5900] tipc: Node number set to 2886997162 [ 250.677355][ T7405] sctp: [Deprecated]: syz.3.399 (pid 7405) Use of int in max_burst socket option deprecated. [ 250.677355][ T7405] Use struct sctp_assoc_value instead [ 250.726339][ T5997] dvb-usb: bulk message failed: -22 (5/0) [ 251.104301][ T5997] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 251.326206][ T5997] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 251.340936][ T5997] usb 3-1: USB disconnect, device number 6 [ 251.671720][ T7417] vivid-003: ================= START STATUS ================= [ 251.680548][ T7417] vivid-003: Radio HW Seek Mode: Bounded [ 251.686355][ T7417] vivid-003: Radio Programmable HW Seek: false [ 251.693521][ T7417] vivid-003: RDS Rx I/O Mode: Block I/O [ 251.699288][ T7417] vivid-003: Generate RBDS Instead of RDS: false [ 251.705780][ T7417] vivid-003: RDS Reception: true [ 251.711032][ T7417] vivid-003: RDS Program Type: 0 inactive [ 251.716967][ T7417] vivid-003: RDS PS Name: inactive [ 251.722427][ T7417] vivid-003: RDS Radio Text: inactive [ 251.728191][ T7417] vivid-003: RDS Traffic Announcement: false inactive [ 251.735183][ T7417] vivid-003: RDS Traffic Program: false inactive [ 251.741833][ T7417] vivid-003: RDS Music: false inactive [ 251.747511][ T7417] vivid-003: ================== END STATUS ================== [ 252.521837][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 253.781026][ T7429] /dev/nullb0: Can't open blockdev [ 253.902690][ T7388] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1e0 pfn:0x33792 [ 253.944147][ T7388] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.028442][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 254.261977][ T7388] memcg:ffff88801cee0c80 [ 254.266399][ T7388] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 254.303380][ T7388] raw: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 254.850559][ T7388] raw: 00000000000001e0 0000000000000000 00000001ffffffff ffff88801cee0c80 [ 254.871163][ T7388] head: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 254.898496][ T7388] head: 00000000000001e0 0000000000000000 00000001ffffffff ffff88801cee0c80 [ 254.917800][ T7388] head: 00fff00000000201 ffffea0000cde481 00000000ffffffff 00000000ffffffff [ 254.945801][ T7388] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 254.967680][ T7388] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 255.382046][ T7388] page_owner tracks the page as allocated [ 255.410075][ T7388] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7388, tgid 7374 (syz.0.388), ts 253902655774, free_ts 253897080803 [ 255.435462][ T7388] post_alloc_hook+0x240/0x2a0 [ 255.440649][ T7388] get_page_from_freelist+0x21d5/0x22b0 [ 255.446465][ T7388] __alloc_frozen_pages_noprof+0x181/0x370 [ 255.456893][ T7388] alloc_pages_mpol+0x232/0x4a0 [ 255.462547][ T7388] alloc_pages_noprof+0xa9/0x190 [ 255.473870][ T7388] folio_alloc_noprof+0x1e/0x30 [ 255.491488][ T7388] filemap_alloc_folio_noprof+0xdf/0x470 [ 255.500287][ T7388] page_cache_ra_order+0x5e5/0xc70 [ 255.505454][ T7388] filemap_fault+0x59e/0x1200 [ 255.545160][ T7388] __do_fault+0x138/0x390 [ 255.662763][ T7388] __handle_mm_fault+0x37ed/0x5620 [ 255.732173][ T7388] handle_mm_fault+0x2d5/0x7f0 [ 255.737025][ T7388] do_user_addr_fault+0x764/0x1390 [ 255.758358][ T7388] exc_page_fault+0x76/0xf0 [ 255.762985][ T7388] asm_exc_page_fault+0x26/0x30 [ 255.771736][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.797715][ T7388] page last free pid 7430 tgid 7428 stack trace: [ 255.808675][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 255.830007][ T7388] free_unref_folios+0xcd2/0x1570 [ 255.835146][ T7388] folios_put_refs+0x559/0x640 [ 255.840744][ T7388] truncate_inode_pages_range+0x346/0xda0 [ 255.847043][ T7388] set_blocksize+0x32a/0x500 [ 255.852307][ T7388] blkdev_bszset+0x1ac/0x220 [ 255.857695][ T7388] blkdev_ioctl+0x430/0x6d0 [ 255.977867][ T7388] __se_sys_ioctl+0xfc/0x170 [ 255.984277][ T7388] do_syscall_64+0xfa/0x3b0 [ 255.990023][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.998303][ T7388] ------------[ cut here ]------------ [ 256.003795][ T7388] kernel BUG at mm/filemap.c:868! [ 256.010915][ T7388] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 256.017188][ T7388] CPU: 1 UID: 0 PID: 7388 Comm: syz.0.388 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 256.026996][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.037231][ T7388] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 256.043307][ T7388] Code: 6c ca ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 0b 99 0e 00 90 0f 0b e8 53 6c ca ff 4c 89 e7 48 c7 c6 e0 24 94 8b e8 f4 98 0e 00 90 <0f> 0b e8 3c 6c ca ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 dd 98 0e 00 [ 256.063005][ T7388] RSP: 0018:ffffc9000bb871a0 EFLAGS: 00010246 [ 256.069251][ T7388] RAX: 4fd240332b441b00 RBX: 0000000000000001 RCX: 0000000000000000 [ 256.077226][ T7388] RDX: 0000000000000007 RSI: ffffffff8d982fba RDI: 00000000ffffffff [ 256.085197][ T7388] RBP: ffffc9000bb87308 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 256.093172][ T7388] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffea0000cde480 [ 256.101158][ T7388] R13: dffffc0000000000 R14: ffffea0000cde488 R15: 0000000000000002 [ 256.109647][ T7388] FS: 00007fc4d0f7b6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 256.118577][ T7388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.125157][ T7388] CR2: 00007fc5a12bbf98 CR3: 0000000075b4e000 CR4: 00000000003526f0 [ 256.133131][ T7388] Call Trace: [ 256.136404][ T7388] [ 256.139368][ T7388] ? percpu_ref_put+0x19/0x180 [ 256.144133][ T7388] ? __pfx___filemap_add_folio+0x10/0x10 [ 256.149774][ T7388] ? percpu_ref_put+0xf9/0x180 [ 256.154558][ T7388] filemap_add_folio+0xd5/0x270 [ 256.159420][ T7388] page_cache_ra_order+0x74c/0xc70 [ 256.164538][ T7388] filemap_fault+0x59e/0x1200 [ 256.169301][ T7388] ? __pfx_filemap_fault+0x10/0x10 [ 256.174495][ T7388] ? __handle_mm_fault+0x296f/0x5620 [ 256.179804][ T7388] __do_fault+0x138/0x390 [ 256.184138][ T7388] __handle_mm_fault+0x37ed/0x5620 [ 256.189296][ T7388] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.194774][ T7388] ? find_vma+0xe7/0x160 [ 256.199021][ T7388] ? __pfx_find_vma+0x10/0x10 [ 256.203790][ T7388] handle_mm_fault+0x2d5/0x7f0 [ 256.209090][ T7388] do_user_addr_fault+0x764/0x1390 [ 256.214214][ T7388] exc_page_fault+0x76/0xf0 [ 256.218718][ T7388] asm_exc_page_fault+0x26/0x30 [ 256.223565][ T7388] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 256.229380][ T7388] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 256.249072][ T7388] RSP: 0018:ffffc9000bb87a18 EFLAGS: 00050206 [ 256.255141][ T7388] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 256.263194][ T7388] RDX: 0000000000000001 RSI: 00002000001c0000 RDI: ffffc9000bb87aa0 [ 256.271158][ T7388] RBP: ffffc9000bb87c30 R08: ffffc9000bb87ad7 R09: 1ffff92001770f5a [ 256.279133][ T7388] R10: dffffc0000000000 R11: fffff52001770f5b R12: 0000000000000002 [ 256.287103][ T7388] R13: dffffc0000000000 R14: ffffc9000bb87aa0 R15: 00002000001c0000 [ 256.295084][ T7388] _copy_from_user+0x7a/0xb0 [ 256.299693][ T7388] ___sys_recvmsg+0x12e/0x510 [ 256.304365][ T7388] ? __pfx____sys_recvmsg+0x10/0x10 [ 256.309573][ T7388] ? __might_fault+0xb0/0x130 [ 256.314260][ T7388] do_recvmmsg+0x307/0x770 [ 256.318708][ T7388] ? __pfx_do_recvmmsg+0x10/0x10 [ 256.323642][ T7388] ? __pfx_do_futex+0x10/0x10 [ 256.328363][ T7388] __x64_sys_recvmmsg+0x190/0x240 [ 256.333387][ T7388] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 256.338937][ T7388] ? rcu_is_watching+0x15/0xb0 [ 256.343713][ T7388] ? do_syscall_64+0xbe/0x3b0 [ 256.348390][ T7388] do_syscall_64+0xfa/0x3b0 [ 256.352890][ T7388] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.358086][ T7388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.364149][ T7388] ? clear_bhb_loop+0x60/0xb0 [ 256.368827][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.374764][ T7388] RIP: 0033:0x7fc4d018ebe9 [ 256.379175][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.398887][ T7388] RSP: 002b:00007fc4d0f7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 256.407306][ T7388] RAX: ffffffffffffffda RBX: 00007fc4d03b6090 RCX: 00007fc4d018ebe9 [ 256.415275][ T7388] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 256.423366][ T7388] RBP: 00007fc4d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.431335][ T7388] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 256.439386][ T7388] R13: 00007fc4d03b6128 R14: 00007fc4d03b6090 R15: 00007ffef6409338 [ 256.447363][ T7388] [ 256.450386][ T7388] Modules linked in: [ 256.455737][ T7388] ---[ end trace 0000000000000000 ]--- [ 256.874577][ T7388] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 256.880774][ T7388] Code: 6c ca ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 0b 99 0e 00 90 0f 0b e8 53 6c ca ff 4c 89 e7 48 c7 c6 e0 24 94 8b e8 f4 98 0e 00 90 <0f> 0b e8 3c 6c ca ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 dd 98 0e 00 [ 256.900587][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.969170][ T7388] RSP: 0018:ffffc9000bb871a0 EFLAGS: 00010246 [ 256.975287][ T7388] RAX: 4fd240332b441b00 RBX: 0000000000000001 RCX: 0000000000000000 [ 257.011361][ T7388] RDX: 0000000000000007 RSI: ffffffff8d982fba RDI: 00000000ffffffff [ 257.019990][ T7388] RBP: ffffc9000bb87308 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 257.070111][ T7388] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffea0000cde480 [ 257.085571][ T7388] R13: dffffc0000000000 R14: ffffea0000cde488 R15: 0000000000000002 [ 257.096747][ T7388] FS: 00007fc4d0f7b6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 257.116281][ T7388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.124685][ T7388] CR2: 00007f380eb83ad8 CR3: 0000000075b4e000 CR4: 00000000003526f0 [ 257.133122][ T7388] Kernel panic - not syncing: Fatal exception [ 257.139456][ T7388] Kernel Offset: disabled [ 257.143827][ T7388] Rebooting in 86400 seconds..