last executing test programs: 10.024544883s ago: executing program 1 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000019380)=@sha1={0x1, "73c05602f821f1acad5dbec0a402b4a1eb519f2b"}, 0x15, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0xc8cd000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x38, r1, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3]) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50800000080211000001080209000000ff271636535100006c1f49010000000400000000640001000006020202020202"], 0x30) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xfd, 0x17, 0x4}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)) 9.200864952s ago: executing program 1 (id=707): io_uring_setup(0x4f42, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x0, 0x102}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a950", 0x5c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.943066495s ago: executing program 4 (id=710): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000013c0)=""/36) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 6.551133346s ago: executing program 3 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000019380)=@sha1={0x1, "73c05602f821f1acad5dbec0a402b4a1eb519f2b"}, 0x15, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r2, 0xc8cd000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x38, r1, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/52) 6.287277946s ago: executing program 4 (id=717): socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x401, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x10004, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x9, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x9, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x20000001, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x1, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x4, 0x6d01, 0x5, 0x20003b, 0x1, 0x101, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4cd1, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x100006, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x8, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x4f, 0xc8, 0x3ff, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x695, 0x6, 0x1, 0x10000, 0x2, 0x10008, 0x2b91, 0x4, 0x8, 0x9, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0x7f, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x2, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x24, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0xffff, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x2000080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xe8c, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x1, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 6.207900037s ago: executing program 1 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000019380)=@sha1={0x1, "73c05602f821f1acad5dbec0a402b4a1eb519f2b"}, 0x15, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0xc8cd000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x38, r1, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3]) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50800000080211000001080209000000ff271636535100006c1f49010000000400000000640001000006020202020202"], 0x30) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xfd, 0x17, 0x4}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)) 6.080011936s ago: executing program 4 (id=720): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 5.808517701s ago: executing program 4 (id=724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 5.030747078s ago: executing program 2 (id=729): syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x8, 0x60, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9ae, 0xb, 0xdf, 0x7}, {0x6, 0x24, 0x1a, 0xe400, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x823a}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x8c, 0x4}}}}}}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 4.768400074s ago: executing program 3 (id=732): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="15000000653030302e4c"], 0x15) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000001600), 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0x5000000, 0x0) read$FUSE(r8, &(0x7f0000000ac0)={0x2020}, 0x2020) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r10, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x0) 4.661489733s ago: executing program 1 (id=733): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xe0, 0xd4, 0x13, 0x10, 0x2c42, 0x16f8, 0x1292, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0xdd, 0x6, 0x0, 0xe, 0x32, 0xb9, 0x8d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f00000005c0)={0x20, 0x21, 0x7a, {0x7a, 0x7, "17c115b76e0a423ca4cb64ef4fac5c3c9ec0ec55502ba32e5525ef2fbeada7159df837c3257dfb9fa462f4c639fe64d7d007721f9f9a3838e45bf64094c740aa1ed740c897b7cfd602b45f3cfec9625ec3af51ede1dd4f20f798bd9410d562f6beef70ea0f66ebf24c3fc558f347a17a7a7aee87cdca7015"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f00000006c0)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0xa, "03bc"}, @global=@item_4={0x3, 0x1, 0xa, "1dfbef46"}, @global=@item_012={0x1, 0x1, 0x6, "c1"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x8c}}}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000b00)=@multiplanar_fd={0xed, 0x7, 0x4, 0x400, 0xfffffffd, {0x0, 0x2710}, {0x5, 0x1, 0xff, 0x61, 0xd, 0x7, "6aadb307"}, 0x0, 0x4, {&(0x7f0000000180)=[{0x0, 0x8, {}, 0x397}, {0x7, 0x9, {}, 0x6}]}, 0x2a62af19}) socket$nl_route(0x10, 0x3, 0x0) 3.808213642s ago: executing program 3 (id=738): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB='@\x00', @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 3.571828578s ago: executing program 2 (id=741): socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x401, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x10004, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x9, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x9, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x20000001, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x1, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x4, 0x6d01, 0x5, 0x20003b, 0x1, 0x101, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4cd1, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x100006, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x8, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x4f, 0xc8, 0x3ff, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x695, 0x6, 0x1, 0x10000, 0x2, 0x10008, 0x2b91, 0x4, 0x8, 0x9, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0x7f, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x2, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x24, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0xffff, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x2000080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xe8c, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x1, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 3.428750745s ago: executing program 3 (id=742): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11", 0x57}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031", 0x5a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.289987057s ago: executing program 2 (id=744): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) close(r1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) 3.105521926s ago: executing program 2 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, 0xfffffffffffffffe) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000300), 0x800}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000c1140037fea4c9400000000000000000009500000000000000b8094731b75338687cd25379b58c7f1e2208a76c2952268c6d81a800fff2104fe1d4841b49f77f13d619f7f1dacadceea161b8635018531706850eaff4b51b350e5ea12ca995ee8e1d2f26649745837a5d2815f6748b5e8e66e786b5564991e353a69c5c36e26686896ae175cd8b24"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 3.008287472s ago: executing program 4 (id=748): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="15000000653030302e4c"], 0x15) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000001600), 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0x5000000, 0x0) read$FUSE(r8, &(0x7f0000000ac0)={0x2020}, 0x2020) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r10, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x0) 2.995745814s ago: executing program 1 (id=749): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000000000e61a00000018000180140002006475"], 0x2c}}, 0x0) 1.794231229s ago: executing program 2 (id=754): socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x401, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x10004, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x9, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x9, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x20000001, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x1, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x4, 0x6d01, 0x5, 0x20003b, 0x1, 0x101, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4cd1, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x100006, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x8, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x4f, 0xc8, 0x3ff, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x695, 0x6, 0x1, 0x10000, 0x2, 0x10008, 0x2b91, 0x4, 0x8, 0x9, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0x7f, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x2, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x24, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0xffff, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x2000080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xe8c, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x1, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 1.702682946s ago: executing program 2 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000019380)=@sha1={0x1, "73c05602f821f1acad5dbec0a402b4a1eb519f2b"}, 0x15, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r2, 0xc8cd000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/52) 1.425603992s ago: executing program 0 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 1.421433922s ago: executing program 4 (id=759): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xe0, 0xd4, 0x13, 0x10, 0x2c42, 0x16f8, 0x1292, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0xdd, 0x6, 0x0, 0xe, 0x32, 0xb9, 0x8d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f00000005c0)={0x20, 0x21, 0x7c, {0x7c, 0x7, "17c115b76e0a423ca4cb64ef4fac5c3c9ec0ec55502ba32e5525ef2fbeada7159df837c3257dfb9fa462f4c639fe64d7d007721f9f9a3838e45bf64094c740aa1ed740c897b7cfd602b45f3cfec9625ec3af51ede1dd4f20f798bd9410d562f6beef70ea0f66ebf24c3fc558f347a17a7a7aee87cdca701559e3"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f00000006c0)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0xa, "03bc"}, @global=@item_4={0x3, 0x1, 0xa, "1dfbef46"}, @global=@item_012={0x1, 0x1, 0x6, "c1"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x8c}}}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000b00)=@multiplanar_fd={0xed, 0x7, 0x4, 0x400, 0xfffffffd, {0x0, 0x2710}, {0x5, 0x1, 0xff, 0x61, 0xd, 0x7, "6aadb307"}, 0x0, 0x4, {&(0x7f0000000180)=[{0x0, 0x8, {}, 0x397}, {0x7, 0x9, {}, 0x6}]}, 0x2a62af19}) socket$nl_route(0x10, 0x3, 0x0) 1.397774019s ago: executing program 3 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 1.197322403s ago: executing program 0 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x4, r4, 0x1bc60, 0x38344}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x4000044) 430.267182ms ago: executing program 0 (id=762): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0301"], 0xc8) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 339.139155ms ago: executing program 0 (id=763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 212.950579ms ago: executing program 0 (id=764): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000013c0)=""/36) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$kcm(0x29, 0x5, 0x0) 166.367064ms ago: executing program 0 (id=765): socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x401, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x10004, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x9, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x9, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x20000001, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x1, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x4, 0x6d01, 0x5, 0x20003b, 0x1, 0x101, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4cd1, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x100006, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x8, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x4f, 0xc8, 0x3ff, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x695, 0x6, 0x1, 0x10000, 0x2, 0x10008, 0x2b91, 0x4, 0x8, 0x9, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0x7f, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x2, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x24, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0xffff, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x2000080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xe8c, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x1, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 105.638896ms ago: executing program 3 (id=766): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000013c0)=""/36) socket$inet6_tcp(0xa, 0x1, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 0s ago: executing program 1 (id=767): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 90.119353][ T5610] cgroup: Unknown subsys name 'net' [ 90.360706][ T5610] cgroup: Unknown subsys name 'cpuset' [ 90.415340][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.029921][ T38] cfg80211: failed to load regulatory.db [ 92.647445][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.420060][ T4939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.448550][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.470285][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.498960][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.501808][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.504834][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.506385][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.512578][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.518082][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.531582][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.545475][ T4939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.615386][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.621368][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.627507][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.640663][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.651120][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.665101][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.684149][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.686423][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.686722][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.689959][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.695943][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.696652][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.711423][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.715396][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.767094][ T60] Bluetooth: hci2: command tx timeout [ 97.845804][ T5643] Bluetooth: hci1: command tx timeout [ 97.845923][ T5643] Bluetooth: hci4: command tx timeout [ 97.846005][ T5643] Bluetooth: hci0: command tx timeout [ 97.846284][ T60] Bluetooth: hci3: command tx timeout [ 98.689769][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.690015][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.690229][ T5623] bridge_slave_0: entered allmulticast mode [ 98.694000][ T5623] bridge_slave_0: entered promiscuous mode [ 98.728185][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.728513][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.728796][ T5624] bridge_slave_0: entered allmulticast mode [ 98.731524][ T5624] bridge_slave_0: entered promiscuous mode [ 98.811219][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.811563][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.811776][ T5623] bridge_slave_1: entered allmulticast mode [ 98.814147][ T5623] bridge_slave_1: entered promiscuous mode [ 98.823546][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.828205][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.840309][ T5624] bridge_slave_1: entered allmulticast mode [ 98.850824][ T5624] bridge_slave_1: entered promiscuous mode [ 98.859939][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.860887][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.862428][ T5626] bridge_slave_0: entered allmulticast mode [ 98.875825][ T5626] bridge_slave_0: entered promiscuous mode [ 98.913929][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.914260][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.914524][ T5627] bridge_slave_0: entered allmulticast mode [ 98.931398][ T5627] bridge_slave_0: entered promiscuous mode [ 98.985403][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.985659][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.986079][ T5626] bridge_slave_1: entered allmulticast mode [ 98.988450][ T5626] bridge_slave_1: entered promiscuous mode [ 98.989715][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.989949][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.990136][ T5625] bridge_slave_0: entered allmulticast mode [ 98.992502][ T5625] bridge_slave_0: entered promiscuous mode [ 99.014166][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.027082][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.028017][ T5627] bridge_slave_1: entered allmulticast mode [ 99.042150][ T5627] bridge_slave_1: entered promiscuous mode [ 99.127937][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.128184][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.128389][ T5625] bridge_slave_1: entered allmulticast mode [ 99.130812][ T5625] bridge_slave_1: entered promiscuous mode [ 99.177453][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.182859][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.258872][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.263512][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.286827][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.321204][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.368754][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.373988][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.393894][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.469920][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.503352][ T5623] team0: Port device team_slave_0 added [ 99.512033][ T5624] team0: Port device team_slave_0 added [ 99.573332][ T5623] team0: Port device team_slave_1 added [ 99.581228][ T5624] team0: Port device team_slave_1 added [ 99.584576][ T5626] team0: Port device team_slave_0 added [ 99.613307][ T5627] team0: Port device team_slave_0 added [ 99.655944][ T5626] team0: Port device team_slave_1 added [ 99.659321][ T5625] team0: Port device team_slave_0 added [ 99.662820][ T5627] team0: Port device team_slave_1 added [ 99.731493][ T5625] team0: Port device team_slave_1 added [ 99.754374][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.754390][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.754410][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.793662][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.793715][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.793791][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.846723][ T60] Bluetooth: hci2: command tx timeout [ 99.900833][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.900847][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.900870][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.904131][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.904145][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.904165][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.914018][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.914068][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.914143][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.930209][ T5632] Bluetooth: hci0: command tx timeout [ 99.930310][ T5632] Bluetooth: hci4: command tx timeout [ 99.930380][ T5632] Bluetooth: hci1: command tx timeout [ 99.930999][ T60] Bluetooth: hci3: command tx timeout [ 100.014268][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.014319][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.014359][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.113678][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.113692][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.113713][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.547545][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.547559][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.547581][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.549877][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.549891][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.549911][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.651063][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.651079][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.651104][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.848335][ T5623] hsr_slave_0: entered promiscuous mode [ 100.850136][ T5623] hsr_slave_1: entered promiscuous mode [ 100.871981][ T5624] hsr_slave_0: entered promiscuous mode [ 100.873561][ T5624] hsr_slave_1: entered promiscuous mode [ 100.876078][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 100.882006][ T5624] Cannot create hsr debugfs directory [ 100.959106][ T5626] hsr_slave_0: entered promiscuous mode [ 100.961933][ T5626] hsr_slave_1: entered promiscuous mode [ 100.963579][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 100.963605][ T5626] Cannot create hsr debugfs directory [ 101.011015][ T5627] hsr_slave_0: entered promiscuous mode [ 101.012644][ T5627] hsr_slave_1: entered promiscuous mode [ 101.013999][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 101.014029][ T5627] Cannot create hsr debugfs directory [ 101.051781][ T5625] hsr_slave_0: entered promiscuous mode [ 101.053373][ T5625] hsr_slave_1: entered promiscuous mode [ 101.065055][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 101.065131][ T5625] Cannot create hsr debugfs directory [ 101.924863][ T60] Bluetooth: hci2: command tx timeout [ 102.005125][ T5643] Bluetooth: hci1: command tx timeout [ 102.005157][ T5643] Bluetooth: hci4: command tx timeout [ 102.005181][ T5643] Bluetooth: hci0: command tx timeout [ 102.005773][ T60] Bluetooth: hci3: command tx timeout [ 102.353500][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.430884][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.445032][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.491351][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.493125][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.531039][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.563069][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.592542][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.737255][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.772754][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.786108][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.839961][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.842767][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.880528][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.922624][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.953301][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.128695][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.167409][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.183533][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.222762][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.241921][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.283182][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.324464][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.361454][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.584208][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.632842][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.654132][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.679991][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.699349][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.734008][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.784087][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.810216][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.906547][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.007002][ T60] Bluetooth: hci2: command tx timeout [ 104.031841][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.061599][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.083731][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.086608][ T60] Bluetooth: hci3: command tx timeout [ 104.086640][ T60] Bluetooth: hci0: command tx timeout [ 104.086664][ T60] Bluetooth: hci4: command tx timeout [ 104.086685][ T60] Bluetooth: hci1: command tx timeout [ 104.119609][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.134487][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.178989][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.200754][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.239616][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.274346][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.339275][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.339471][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.371815][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.427153][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.427333][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.551293][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.613482][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.613677][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.641049][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.703073][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.703232][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.848544][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.938540][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.939409][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.002120][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.082949][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.083127][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.274483][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.316729][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.342030][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.342210][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.431947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.432116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.633875][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.787933][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.788191][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.901326][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.901601][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.950592][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.032432][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.192604][ T5623] veth0_vlan: entered promiscuous mode [ 107.230100][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.303244][ T5623] veth1_vlan: entered promiscuous mode [ 107.603763][ T5626] veth0_vlan: entered promiscuous mode [ 107.769572][ T5623] veth0_macvtap: entered promiscuous mode [ 107.838908][ T5626] veth1_vlan: entered promiscuous mode [ 107.879485][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.911431][ T5627] veth0_vlan: entered promiscuous mode [ 107.931221][ T5623] veth1_macvtap: entered promiscuous mode [ 107.977530][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.061550][ T5627] veth1_vlan: entered promiscuous mode [ 108.123313][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.178330][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.239808][ T5626] veth0_macvtap: entered promiscuous mode [ 108.261337][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.307929][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.354155][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.371775][ T5626] veth1_macvtap: entered promiscuous mode [ 108.407033][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.559636][ T5624] veth0_vlan: entered promiscuous mode [ 108.620709][ T5627] veth0_macvtap: entered promiscuous mode [ 108.680594][ T5625] veth0_vlan: entered promiscuous mode [ 108.790264][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.807641][ T5627] veth1_macvtap: entered promiscuous mode [ 108.922132][ T5624] veth1_vlan: entered promiscuous mode [ 108.952953][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.007741][ T5625] veth1_vlan: entered promiscuous mode [ 109.100267][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.121360][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.146952][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.174143][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.200445][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.200509][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.230265][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.336923][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.519704][ T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.519725][ T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.525720][ T536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.582197][ T536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.643110][ T536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.740088][ T536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.820184][ T5624] veth0_macvtap: entered promiscuous mode [ 109.908937][ T5625] veth0_macvtap: entered promiscuous mode [ 109.994084][ T5624] veth1_macvtap: entered promiscuous mode [ 110.074587][ T5625] veth1_macvtap: entered promiscuous mode [ 110.104896][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.104918][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.338925][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.500251][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.529930][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.690866][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.696414][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.696436][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.758563][ T301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.805303][ T301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.810620][ T301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.819729][ T301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.550501][ T301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.592745][ T301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.612025][ T301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.790209][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.790231][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.815839][ T301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.408848][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.408869][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.036215][ T5835] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 114.277531][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.277553][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.767034][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.818675][ T366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.818697][ T366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.858470][ T39] audit: type=1326 audit(1781065282.014:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d629ece59 code=0x7ffc0000 [ 114.858531][ T39] audit: type=1326 audit(1781065282.024:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d629ece59 code=0x7ffc0000 [ 114.858581][ T39] audit: type=1326 audit(1781065282.024:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d629ece59 code=0x7ffc0000 [ 114.858786][ T39] audit: type=1326 audit(1781065282.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d629ece59 code=0x7ffc0000 [ 114.859161][ T39] audit: type=1326 audit(1781065282.024:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d629ece59 code=0x7ffc0000 [ 114.918861][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.023862][ T39] audit: type=1326 audit(1781065282.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d629ad68e code=0x7ffc0000 [ 115.029509][ T39] audit: type=1326 audit(1781065282.194:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d629ad68e code=0x7ffc0000 [ 115.080312][ T39] audit: type=1326 audit(1781065282.244:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d629ad68e code=0x7ffc0000 [ 115.142133][ T39] audit: type=1326 audit(1781065282.304:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d629ad68e code=0x7ffc0000 [ 115.143115][ T39] audit: type=1326 audit(1781065282.304:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d629ad68e code=0x7ffc0000 [ 115.224583][ T5831] usb 2-1: config 0 has no interfaces? [ 115.224618][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.225146][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.410373][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.410393][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.642168][ T5831] usb 2-1: config 0 descriptor?? [ 115.940861][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.940883][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.524055][ T10] usb 2-1: USB disconnect, device number 2 [ 117.649910][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 118.396820][ T5875] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 119.381828][ T5880] netlink: 172 bytes leftover after parsing attributes in process `syz.3.19'. [ 119.421100][ T5880] netlink: 172 bytes leftover after parsing attributes in process `syz.3.19'. [ 122.699443][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 124.029683][ T5912] syz_tun: entered allmulticast mode [ 127.444780][ T32] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 127.660495][ T38] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.699193][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.699231][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.699271][ T32] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.699297][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.746729][ T5936] binder: 5935:5936 ioctl c0306201 200000000680 returned -14 [ 127.873908][ T32] usb 2-1: config 0 descriptor?? [ 127.908465][ T38] usb 5-1: Using ep0 maxpacket: 16 [ 127.916490][ T38] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.916561][ T38] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.932117][ T38] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.932157][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.932184][ T38] usb 5-1: Product: syz [ 127.932200][ T38] usb 5-1: Manufacturer: syz [ 127.932216][ T38] usb 5-1: SerialNumber: syz [ 128.213554][ T38] usb 5-1: config 0 descriptor?? [ 129.234865][ T5761] usb 5-1: USB disconnect, device number 2 [ 130.220896][ T32] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 130.220939][ T32] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 130.220976][ T32] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 130.221004][ T32] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 130.221033][ T32] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 130.250193][ T32] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 130.767799][ T32] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 130.889045][ T32] usb 2-1: USB disconnect, device number 3 [ 131.695995][ T5632] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 132.127858][ T5983] fido_id[5983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.924815][ T5760] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.921352][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.923998][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 136.924015][ T39] audit: type=1326 audit(1781065304.084:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.66" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x0 [ 137.174789][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 137.180858][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.180922][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.195373][ T5760] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.195452][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.195506][ T5760] usb 2-1: Product: syz [ 137.195549][ T5760] usb 2-1: Manufacturer: syz [ 137.195591][ T5760] usb 2-1: SerialNumber: syz [ 137.409396][ T5760] usb 2-1: config 0 descriptor?? [ 137.425044][ T5761] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.584825][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 137.588314][ T5761] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 137.593194][ T5761] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.593226][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.593248][ T5761] usb 3-1: Product: syz [ 137.593263][ T5761] usb 3-1: Manufacturer: syz [ 137.593278][ T5761] usb 3-1: SerialNumber: syz [ 137.678205][ T5761] r8152-cfgselector 3-1: Unknown version 0x0000 [ 137.678244][ T5761] r8152-cfgselector 3-1: config 0 descriptor?? [ 137.803719][ T5760] usb 2-1: USB disconnect, device number 4 [ 138.155807][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.166557][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.704434][ T39] audit: type=1804 audit(1781065305.834:40): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.73" name="/newroot/16/file0" dev="tmpfs" ino=99 res=1 errno=0 [ 139.981388][ T5761] r8152-cfgselector 3-1: Unknown version 0x0000 [ 140.034866][ T5761] r8152-cfgselector 3-1: No union descriptors [ 140.099283][ T5761] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 140.138807][ T39] audit: type=1804 audit(1781065307.224:41): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.73" name="/newroot/16/file0" dev="tmpfs" ino=99 res=1 errno=0 [ 140.317966][ T6053] uprobe: syz.4.73:6053 failed to unregister, leaking uprobe [ 143.172853][ T39] audit: type=1804 audit(1781065310.334:42): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.92" name="/newroot/19/file0" dev="tmpfs" ino=115 res=1 errno=0 [ 143.190569][ T39] audit: type=1804 audit(1781065310.354:43): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.92" name="/newroot/19/file0" dev="tmpfs" ino=115 res=1 errno=0 [ 143.612933][ T6112] uprobe: syz.3.92:6112 failed to unregister, leaking uprobe [ 143.732135][ T6129] nfs: Unknown parameter 'ÿÿÿÿ' [ 146.466398][ T6167] nfs: Unknown parameter 'ÿÿÿÿ' [ 147.500357][ T39] audit: type=1804 audit(1781065314.634:44): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.118" name="/newroot/14/file0" dev="tmpfs" ino=89 res=1 errno=0 [ 147.557664][ T39] audit: type=1804 audit(1781065314.704:45): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.118" name="/newroot/14/file0" dev="tmpfs" ino=89 res=1 errno=0 [ 147.734897][ T6163] uprobe: syz.1.118:6163 failed to unregister, leaking uprobe [ 148.894842][ T38] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.094940][ T38] usb 4-1: Using ep0 maxpacket: 16 [ 149.097949][ T38] usb 4-1: config 6 has an invalid interface number: 221 but max is 0 [ 149.097978][ T38] usb 4-1: config 6 has no interface number 0 [ 149.098012][ T38] usb 4-1: config 6 interface 221 has no altsetting 0 [ 149.102684][ T38] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 149.102718][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.102740][ T38] usb 4-1: Product: syz [ 149.102756][ T38] usb 4-1: Manufacturer: syz [ 149.102781][ T38] usb 4-1: SerialNumber: syz [ 149.404769][ T1275] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.560800][ T1275] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.562258][ T1275] usb 5-1: config 3 has an invalid interface number: 73 but max is 1 [ 149.562285][ T1275] usb 5-1: config 3 has no interface number 1 [ 149.562337][ T1275] usb 5-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 149.562364][ T1275] usb 5-1: config 3 interface 0 has no altsetting 0 [ 149.562382][ T1275] usb 5-1: config 3 interface 73 has no altsetting 0 [ 149.690998][ T1275] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 149.691031][ T1275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.691054][ T1275] usb 5-1: Product: syz [ 149.691071][ T1275] usb 5-1: Manufacturer: syz [ 149.691087][ T1275] usb 5-1: SerialNumber: syz [ 150.011639][ T38] f81534a_ctrl 4-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 150.158523][ T38] usb 4-1: USB disconnect, device number 2 [ 150.198800][ T1275] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 150.198962][ T1275] dvb_usb_af9035 5-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 150.338685][ T1275] usb 5-1: USB disconnect, device number 3 [ 150.704715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.724720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.734702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.744737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.754714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.764709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.774704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.784711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.794699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.804708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.950156][ T1275] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.088100][ T1275] usb 5-1: device descriptor read/64, error -71 [ 156.374918][ T1275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.524946][ T1275] usb 5-1: device descriptor read/64, error -71 [ 156.637894][ T1275] usb usb5-port1: attempt power cycle [ 156.666166][ T6288] 9p: Bad value for 'rfdno' [ 156.908888][ T6297] syz_tun: entered allmulticast mode [ 157.026929][ T1275] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.047288][ T1275] usb 5-1: device descriptor read/8, error -71 [ 157.288252][ T1275] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.306903][ T1275] usb 5-1: device descriptor read/8, error -71 [ 157.354004][ T39] audit: type=1326 audit(1781065324.514:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.354066][ T39] audit: type=1326 audit(1781065324.514:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.354113][ T39] audit: type=1326 audit(1781065324.514:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.358445][ T39] audit: type=1326 audit(1781065324.514:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.360063][ T39] audit: type=1326 audit(1781065324.524:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.360157][ T39] audit: type=1326 audit(1781065324.524:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.370782][ T39] audit: type=1326 audit(1781065324.514:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.370949][ T39] audit: type=1326 audit(1781065324.534:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.371075][ T39] audit: type=1326 audit(1781065324.534:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.393137][ T39] audit: type=1326 audit(1781065324.524:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 157.544364][ T1275] usb usb5-port1: unable to enumerate USB device [ 159.027554][ T5747] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.284918][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 159.287465][ T5747] usb 4-1: config 6 has an invalid interface number: 221 but max is 0 [ 159.287494][ T5747] usb 4-1: config 6 has no interface number 0 [ 159.287528][ T5747] usb 4-1: config 6 interface 221 has no altsetting 0 [ 159.290024][ T5747] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 159.290052][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.290072][ T5747] usb 4-1: Product: syz [ 159.290086][ T5747] usb 4-1: Manufacturer: syz [ 159.290101][ T5747] usb 4-1: SerialNumber: syz [ 159.679427][ T5747] f81534a_ctrl 4-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 159.708130][ T5747] usb 4-1: USB disconnect, device number 3 [ 160.205113][ T1275] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.334854][ T1275] usb 3-1: device descriptor read/64, error -71 [ 160.579040][ T1275] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.826734][ T1275] usb 3-1: device descriptor read/64, error -71 [ 160.942987][ T1275] usb usb3-port1: attempt power cycle [ 161.932876][ T1275] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.997837][ T1275] usb 3-1: device descriptor read/8, error -71 [ 162.789875][ T1275] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.807012][ T1275] usb 3-1: device descriptor read/8, error -71 [ 162.918180][ T1275] usb usb3-port1: unable to enumerate USB device [ 165.939537][ T1275] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.104899][ T1275] usb 4-1: device descriptor read/64, error -71 [ 166.194886][ T5740] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.461820][ T1275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.931667][ T5740] usb 2-1: Using ep0 maxpacket: 32 [ 166.954890][ T1275] usb 4-1: device descriptor read/64, error -71 [ 167.070786][ T1275] usb usb4-port1: attempt power cycle [ 167.494786][ T5740] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 167.494820][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.494843][ T5740] usb 2-1: Product: syz [ 167.494859][ T5740] usb 2-1: Manufacturer: syz [ 167.494876][ T5740] usb 2-1: SerialNumber: syz [ 167.569662][ T5740] usb 2-1: config 0 descriptor?? [ 167.622164][ T5740] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 167.802274][ T5740] gspca_ov534_9: reg_w failed -71 [ 167.895228][ T1275] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.359613][ T5740] gspca_ov534_9: Unknown sensor 0000 [ 168.359722][ T5740] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 169.375012][ T5740] usb 2-1: USB disconnect, device number 5 [ 169.516454][ T1275] usb 4-1: device descriptor read/8, error -71 [ 173.745865][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.965076][ T32] usb 4-1: device descriptor read/64, error -71 [ 174.904804][ T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.040546][ T6525] nfs: Unknown parameter 'ÿÿÿÿ' [ 175.067868][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.070264][ T39] kauditd_printk_skb: 600 callbacks suppressed [ 175.070282][ T39] audit: type=1326 audit(1781065342.234:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.2.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x0 [ 175.119734][ T32] usb 4-1: device descriptor read/64, error -71 [ 175.225250][ T32] usb usb4-port1: attempt power cycle [ 175.751883][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.005677][ T32] usb 4-1: device descriptor read/8, error -71 [ 176.244798][ T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.267504][ T32] usb 4-1: device descriptor read/8, error -71 [ 176.501528][ T32] usb usb4-port1: unable to enumerate USB device [ 180.205568][ T1275] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.470703][ T1275] usb 2-1: Using ep0 maxpacket: 8 [ 180.473147][ T1275] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 180.473177][ T1275] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 180.473199][ T1275] usb 2-1: config 6 has no interface number 0 [ 180.473233][ T1275] usb 2-1: config 6 interface 220 has no altsetting 0 [ 180.484073][ T1275] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 180.484108][ T1275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.484131][ T1275] usb 2-1: Product: syz [ 180.484147][ T1275] usb 2-1: Manufacturer: syz [ 180.484164][ T1275] usb 2-1: SerialNumber: syz [ 180.624009][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.146255][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 181.255482][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.255541][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.261961][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.261995][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.262018][ T32] usb 4-1: Product: syz [ 181.262034][ T32] usb 4-1: Manufacturer: syz [ 181.262051][ T32] usb 4-1: SerialNumber: syz [ 181.426007][ T32] usb 4-1: config 0 descriptor?? [ 181.620987][ T1275] uvcvideo 2-1:6.220: probe with driver uvcvideo failed with error -22 [ 181.647144][ T1275] usb 2-1: USB disconnect, device number 6 [ 183.297899][ T10] usb 4-1: USB disconnect, device number 12 [ 183.438149][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 183.438175][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 183.688184][ T780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.688433][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 183.688453][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 183.688596][ T780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.690041][ T6603] Zero length message leads to an empty skb [ 183.690116][ T780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.690161][ T780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.885926][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.035898][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 184.061762][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.061793][ T5831] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.061848][ T5831] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 184.061874][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.129435][ T5831] usb 5-1: config 0 descriptor?? [ 186.714271][ T5831] usb 5-1: USB disconnect, device number 8 [ 186.925790][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 186.925816][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 187.056819][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.075374][ T39] audit: type=1326 audit(1781065354.224:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.4.313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9656ce59 code=0x0 [ 187.132641][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 187.133093][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 187.965864][ T67] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.223845][ T67] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.223900][ T67] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.223941][ T67] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.739977][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.759371][ T5760] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.915587][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 190.915776][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 190.922098][ T10] usb 4-1: config 6 has an invalid interface number: 221 but max is 0 [ 190.922126][ T10] usb 4-1: config 6 has no interface number 0 [ 190.922159][ T10] usb 4-1: config 6 interface 221 has no altsetting 0 [ 190.922562][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.973854][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 190.973888][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.973910][ T10] usb 4-1: Product: syz [ 190.973926][ T10] usb 4-1: Manufacturer: syz [ 190.973943][ T10] usb 4-1: SerialNumber: syz [ 191.011438][ T5760] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 191.011473][ T5760] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 191.032665][ T5760] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.032699][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.032722][ T5760] usb 3-1: Product: syz [ 191.032739][ T5760] usb 3-1: Manufacturer: syz [ 191.032755][ T5760] usb 3-1: SerialNumber: syz [ 191.491288][ T5760] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 191.491775][ T5760] cdc_ncm 3-1:1.0: bind() failure [ 191.601468][ T5760] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 191.601586][ T5760] cdc_ncm 3-1:1.1: bind() failure [ 191.693144][ T10] f81534a_ctrl 4-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 191.721032][ T5760] usb 3-1: USB disconnect, device number 7 [ 191.736403][ T10] usb 4-1: USB disconnect, device number 13 [ 193.535795][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.694746][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 193.767597][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.768535][ T32] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.806046][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.806079][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.806101][ T32] usb 5-1: Product: syz [ 193.806123][ T32] usb 5-1: Manufacturer: syz [ 193.806140][ T32] usb 5-1: SerialNumber: syz [ 193.893122][ T32] usb 5-1: config 0 descriptor?? [ 194.158577][ T5740] usb 5-1: USB disconnect, device number 9 [ 194.755025][ T5760] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.797470][ T39] audit: type=1326 audit(1781065361.954:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.800423][ T39] audit: type=1326 audit(1781065361.964:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.800479][ T39] audit: type=1326 audit(1781065361.964:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.800528][ T39] audit: type=1326 audit(1781065361.964:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.800579][ T39] audit: type=1326 audit(1781065361.964:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.800626][ T39] audit: type=1326 audit(1781065361.964:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.804824][ T39] audit: type=1326 audit(1781065361.964:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.805802][ T39] audit: type=1326 audit(1781065361.974:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.805938][ T39] audit: type=1326 audit(1781065361.974:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 194.806066][ T39] audit: type=1326 audit(1781065361.974:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8556cce59 code=0x7ffc0000 [ 195.284759][ T5760] usb 2-1: Using ep0 maxpacket: 8 [ 195.287490][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.287548][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 195.287594][ T5760] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 195.287619][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.370719][ T5760] usb 2-1: config 0 descriptor?? [ 195.523007][ T5760] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 196.513671][ T6733] syz.3.347 (6733) used greatest stack depth: 18336 bytes left [ 196.628230][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.786469][ T6811] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.585869][ T837] usb 2-1: USB disconnect, device number 7 [ 199.542752][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.542865][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.321128][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.336866][ T39] kauditd_printk_skb: 686 callbacks suppressed [ 200.336885][ T39] audit: type=1326 audit(1781065367.484:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.4.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9656ce59 code=0x0 [ 204.329726][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 204.475308][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 204.482799][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.482854][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 204.482900][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 204.482925][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.551686][ T10] usb 4-1: config 0 descriptor?? [ 204.660314][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 205.206838][ T6935] syz_tun: entered allmulticast mode [ 205.657937][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.660602][ T39] audit: type=1326 audit(1781065372.824:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.4.437" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9656ce59 code=0x0 [ 207.194331][ T837] usb 4-1: USB disconnect, device number 14 [ 208.391492][ T5632] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 208.576665][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.578979][ T39] audit: type=1326 audit(1781065375.744:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.456" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9656ce59 code=0x0 [ 209.816539][ T7001] Attempt to restore checkpoint with obsolete wellknown handles [ 209.896803][ T7005] binder: 7004:7005 ioctl c0306201 200000000680 returned -14 [ 210.000628][ T32] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 211.485955][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 211.489393][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.489451][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 211.489495][ T32] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 211.489521][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.700131][ T5632] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 211.831807][ T32] usb 4-1: config 0 descriptor?? [ 211.886572][ T32] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.967635][ T5831] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 212.128005][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.131191][ T5831] usb 3-1: config 3 has an invalid interface number: 73 but max is 1 [ 212.131220][ T5831] usb 3-1: config 3 has no interface number 1 [ 212.131267][ T5831] usb 3-1: config 3 interface 0 has no altsetting 0 [ 212.131288][ T5831] usb 3-1: config 3 interface 73 has no altsetting 0 [ 212.188491][ T5831] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 212.188526][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.188549][ T5831] usb 3-1: Product: syz [ 212.188565][ T5831] usb 3-1: Manufacturer: syz [ 212.188582][ T5831] usb 3-1: SerialNumber: syz [ 212.514233][ T5831] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 212.514337][ T5831] dvb_usb_af9035 3-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 212.581753][ T5831] usb 3-1: USB disconnect, device number 8 [ 213.148880][ T5831] usb 4-1: USB disconnect, device number 15 [ 215.595561][ T5632] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 217.621528][ T7073] binder: BINDER_SET_CONTEXT_MGR already set [ 217.621546][ T7073] binder: 7072:7073 ioctl 4018620d 2000000002c0 returned -16 [ 217.626069][ T7073] binder: 7072:7073 ioctl c0306201 200000000680 returned -14 [ 217.728217][ T7075] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 217.728262][ T7075] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 217.728317][ T7075] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 217.781454][ T7075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.810961][ T7075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 217.905719][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 218.486565][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 218.527382][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.527442][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.533257][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.533291][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.533314][ T9] usb 5-1: Product: syz [ 218.533331][ T9] usb 5-1: Manufacturer: syz [ 218.533347][ T9] usb 5-1: SerialNumber: syz [ 218.624134][ T9] usb 5-1: config 0 descriptor?? [ 218.952289][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 218.976909][ T9] usb 5-1: USB disconnect, device number 10 [ 219.297780][ T439] smbdirect: ib_dev[syz2] removed [ 220.591894][ T7110] binder_alloc: 7108: binder_alloc_buf, no vma [ 220.592413][ T7110] binder: 7108:7110 ioctl c0306201 200000000680 returned -14 [ 220.677589][ T7100] dvmrp0: entered allmulticast mode [ 221.615023][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.005796][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 222.021259][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.021327][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.024442][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.024473][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.024494][ T9] usb 3-1: Product: syz [ 222.024510][ T9] usb 3-1: Manufacturer: syz [ 222.024526][ T9] usb 3-1: SerialNumber: syz [ 222.099408][ T9] usb 3-1: config 0 descriptor?? [ 222.166048][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 222.183166][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 222.246007][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 222.246238][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 222.252693][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 222.426234][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 222.534236][ T38] usb 3-1: USB disconnect, device number 9 [ 222.630782][ T7156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.631975][ T39] audit: type=1326 audit(1781065389.794:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac45ace59 code=0x0 [ 224.891064][ T7201] binder: 7196:7201 ioctl c0306201 200000000680 returned -14 [ 225.345346][ T5740] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.928054][ T5740] usb 2-1: Using ep0 maxpacket: 16 [ 225.936459][ T5740] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.936518][ T5740] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.939839][ T5740] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.939872][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.939895][ T5740] usb 2-1: Product: syz [ 225.939911][ T5740] usb 2-1: Manufacturer: syz [ 225.939928][ T5740] usb 2-1: SerialNumber: syz [ 225.958904][ T5740] usb 2-1: config 0 descriptor?? [ 226.080066][ T7213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.103597][ T39] audit: type=1326 audit(1781065393.264:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7212 comm="syz.4.545" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9656ce59 code=0x0 [ 226.176204][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.541'. [ 226.235708][ T5761] usb 2-1: USB disconnect, device number 8 [ 230.870006][ T7266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.956617][ T39] audit: type=1326 audit(1781065398.034:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.3.564" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe6ace59 code=0x0 [ 232.696234][ T39] audit: type=1804 audit(1781065399.854:1360): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.580" name="/newroot/67/file0" dev="tmpfs" ino=359 res=1 errno=0 [ 232.697868][ T7306] uprobe: syz.1.580:7306 failed to unregister, leaking uprobe [ 234.671826][ T39] audit: type=1804 audit(1781065401.834:1361): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.597" name="/newroot/80/file0" dev="tmpfs" ino=423 res=1 errno=0 [ 234.970075][ T7349] uprobe: syz.3.597:7349 failed to unregister, leaking uprobe [ 236.344801][ T5831] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.498673][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 236.505653][ T5831] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 236.516098][ T5831] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 236.516192][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.516255][ T5831] usb 3-1: Product: syz [ 236.516298][ T5831] usb 3-1: Manufacturer: syz [ 236.516340][ T5831] usb 3-1: SerialNumber: syz [ 236.590772][ T5831] r8152-cfgselector 3-1: Unknown version 0x0000 [ 236.590800][ T5831] r8152-cfgselector 3-1: config 0 descriptor?? [ 236.875243][ T5831] r8152-cfgselector 3-1: Unknown version 0x0000 [ 236.875750][ T5831] r8152-cfgselector 3-1: No union descriptors [ 236.927080][ T5831] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 237.114827][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.304791][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 237.307396][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.307452][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.352069][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.352102][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.352123][ T10] usb 4-1: Product: syz [ 237.352139][ T10] usb 4-1: Manufacturer: syz [ 237.352155][ T10] usb 4-1: SerialNumber: syz [ 237.397935][ T10] usb 4-1: config 0 descriptor?? [ 237.651723][ T10] usb 4-1: USB disconnect, device number 16 [ 238.158125][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 238.158151][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 238.159672][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 238.159694][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 238.578919][ T5831] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.734953][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 238.761674][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 238.761729][ T5831] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 238.761755][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.821544][ T5831] usb 5-1: config 0 descriptor?? [ 238.839514][ T5831] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 239.220713][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 239.220739][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 239.231644][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 239.231706][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 240.594844][ T5761] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.745717][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 240.763445][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.763519][ T5761] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.790893][ T5761] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.790934][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.790965][ T5761] usb 3-1: Product: syz [ 240.790988][ T5761] usb 3-1: Manufacturer: syz [ 240.791011][ T5761] usb 3-1: SerialNumber: syz [ 240.837222][ T5761] usb 3-1: config 0 descriptor?? [ 241.062469][ T5761] usb 3-1: USB disconnect, device number 11 [ 241.347233][ T10] usb 5-1: USB disconnect, device number 11 [ 241.996317][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 241.996338][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 242.109946][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.146475][ T39] audit: type=1326 audit(1781065409.304:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.3.665" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe6ace59 code=0x0 [ 242.332969][ T39] audit: type=1804 audit(1781065409.494:1363): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.668" name="/newroot/87/file0" dev="tmpfs" ino=460 res=1 errno=0 [ 242.368123][ T39] audit: type=1804 audit(1781065409.534:1364): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.668" name="/newroot/87/file0" dev="tmpfs" ino=460 res=1 errno=0 [ 242.458731][ T7502] uprobe: syz.4.668:7502 failed to unregister, leaking uprobe [ 242.936347][ T1259] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.088001][ T1259] usb 5-1: Using ep0 maxpacket: 8 [ 243.090861][ T1259] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 243.090916][ T1259] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 243.090933][ T1259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.148508][ T1259] usb 5-1: config 0 descriptor?? [ 243.176257][ T1259] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 243.640309][ T39] audit: type=1804 audit(1781065410.804:1365): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.688" name="/newroot/107/file0" dev="tmpfs" ino=557 res=1 errno=0 [ 243.669668][ T39] audit: type=1804 audit(1781065410.834:1366): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.688" name="/newroot/107/file0" dev="tmpfs" ino=557 res=1 errno=0 [ 245.191734][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.271779][ T39] audit: type=1326 audit(1781065412.434:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac45ace59 code=0x0 [ 245.757139][ T5831] usb 5-1: USB disconnect, device number 12 [ 249.103075][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.129106][ T39] audit: type=1326 audit(1781065416.284:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac45ace59 code=0x0 [ 249.245512][ T5831] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 249.405056][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 249.416118][ T5831] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 249.421473][ T5831] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 249.421507][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.421530][ T5831] usb 4-1: Product: syz [ 249.421546][ T5831] usb 4-1: Manufacturer: syz [ 249.421563][ T5831] usb 4-1: SerialNumber: syz [ 249.479923][ T5831] r8152-cfgselector 4-1: Unknown version 0x0000 [ 249.479951][ T5831] r8152-cfgselector 4-1: config 0 descriptor?? [ 249.750580][ T5831] r8152-cfgselector 4-1: Unknown version 0x0000 [ 249.751183][ T5831] r8152-cfgselector 4-1: No union descriptors [ 249.775069][ T5831] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 250.438378][ T5831] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.595204][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 250.598843][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.601654][ T5831] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 250.601687][ T5831] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 250.642583][ T5831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.642617][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.642639][ T5831] usb 3-1: Product: syz [ 250.642654][ T5831] usb 3-1: Manufacturer: syz [ 250.642670][ T5831] usb 3-1: SerialNumber: syz [ 250.814770][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 250.903601][ T39] audit: type=1804 audit(1781065418.064:1369): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.732" name="/newroot/90/file0" dev="tmpfs" ino=474 res=1 errno=0 [ 250.903660][ T39] audit: type=1804 audit(1781065418.064:1370): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.732" name="/newroot/90/file0" dev="tmpfs" ino=474 res=1 errno=0 [ 250.968227][ T5831] cdc_ncm 3-1:1.0: bind() failure [ 250.979921][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 250.992513][ T32] usb 2-1: config 6 has an invalid interface number: 221 but max is 0 [ 250.992542][ T32] usb 2-1: config 6 has no interface number 0 [ 250.992576][ T32] usb 2-1: config 6 interface 221 has no altsetting 0 [ 251.016218][ T32] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 251.016253][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.016296][ T32] usb 2-1: Product: syz [ 251.016313][ T32] usb 2-1: Manufacturer: syz [ 251.016329][ T32] usb 2-1: SerialNumber: syz [ 251.079691][ T5831] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 251.079743][ T5831] cdc_ncm 3-1:1.1: bind() failure [ 251.150912][ T5831] usb 3-1: USB disconnect, device number 12 [ 251.588384][ T32] f81534a_ctrl 2-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 251.631664][ T32] usb 2-1: USB disconnect, device number 9 [ 252.413768][ T39] audit: type=1804 audit(1781065419.574:1371): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.748" name="/newroot/94/file0" dev="tmpfs" ino=496 res=1 errno=0 [ 253.008545][ T32] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 253.164810][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 253.167339][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.167394][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.170434][ T32] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.170464][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.170487][ T32] usb 2-1: Product: syz [ 253.170510][ T32] usb 2-1: Manufacturer: syz [ 253.170527][ T32] usb 2-1: SerialNumber: syz [ 253.256348][ T32] usb 2-1: config 0 descriptor?? [ 253.353752][ T39] audit: type=1804 audit(1781065420.514:1372): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.748" name="/newroot/94/file0" dev="tmpfs" ino=496 res=1 errno=0 [ 253.530533][ T10] usb 2-1: USB disconnect, device number 10 [ 253.747834][ T1259] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 253.894813][ T1259] usb 3-1: Using ep0 maxpacket: 16 [ 253.897338][ T1259] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 253.901368][ T1259] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.901400][ T1259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.901423][ T1259] usb 3-1: Product: syz [ 253.901439][ T1259] usb 3-1: Manufacturer: syz [ 253.901456][ T1259] usb 3-1: SerialNumber: syz [ 254.068458][ T1259] r8152-cfgselector 3-1: Unknown version 0x0000 [ 254.068485][ T1259] r8152-cfgselector 3-1: config 0 descriptor?? [ 254.986522][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.051045][ T1259] r8152-cfgselector 3-1: Unknown version 0x0000 [ 255.051586][ T1259] r8152-cfgselector 3-1: No union descriptors [ 255.122761][ T1259] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 255.154780][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 255.162027][ T10] usb 5-1: config 6 has an invalid interface number: 221 but max is 0 [ 255.162048][ T10] usb 5-1: config 6 has no interface number 0 [ 255.162073][ T10] usb 5-1: config 6 interface 221 has no altsetting 0 [ 255.194043][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 255.194077][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.194100][ T10] usb 5-1: Product: syz [ 255.194122][ T10] usb 5-1: Manufacturer: syz [ 255.194134][ T10] usb 5-1: SerialNumber: syz [ 255.260014][ T0] ------------[ cut here ]------------ [ 255.260028][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 255.260040][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#0: swapper/0/0 [ 255.260076][ T0] Modules linked in: [ 255.260116][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.260140][ T0] Tainted: [L]=SOFTLOCKUP [ 255.260146][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.260161][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 255.260179][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 70 [ 255.260194][ T0] RSP: 0018:ffffffff8dc07b98 EFLAGS: 00010097 [ 255.260209][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 255.260221][ T0] RDX: ffff8880319f5d00 RSI: ffffffff8d8bb44d RDI: ffffffff8baa5680 [ 255.260234][ T0] RBP: ffffffff8dc07dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 255.260246][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 255.260259][ T0] R13: ffffffff8d8f1018 R14: ffffffff8dcfef40 R15: ffff8880b863c620 [ 255.260272][ T0] FS: 0000000000000000(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000 [ 255.260286][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.260298][ T0] CR2: 00007f7ac53556b8 CR3: 0000000038738000 CR4: 00000000003526f0 [ 255.260316][ T0] Call Trace: [ 255.260328][ T0] [ 255.260340][ T0] put_prev_task_idle+0xd/0x20 [ 255.260357][ T0] __schedule+0x3da0/0x5550 [ 255.260400][ T0] ? __pfx___schedule+0x10/0x10 [ 255.260418][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.260447][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 255.260478][ T0] schedule_idle+0x51/0x90 [ 255.260497][ T0] do_idle+0x4a6/0x540 [ 255.260527][ T0] ? __pfx_do_idle+0x10/0x10 [ 255.260561][ T0] cpu_startup_entry+0x43/0x60 [ 255.260589][ T0] rest_init+0x2de/0x300 [ 255.260617][ T0] start_kernel+0x392/0x3e0 [ 255.260647][ T0] x86_64_start_reservations+0x24/0x30 [ 255.260669][ T0] x86_64_start_kernel+0x143/0x1c0 [ 255.260691][ T0] common_startup_64+0x13e/0x157 [ 255.260722][ T0] [ 255.260731][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.260745][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.260769][ T0] Tainted: [L]=SOFTLOCKUP [ 255.260775][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.260785][ T0] Call Trace: [ 255.260791][ T0] [ 255.260798][ T0] vpanic+0x56c/0xa60 [ 255.260833][ T0] ? __pfx__printk+0x10/0x10 [ 255.260851][ T0] ? __pfx_vpanic+0x10/0x10 [ 255.260874][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 255.260903][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 255.260937][ T0] panic+0xc5/0xd0 [ 255.260962][ T0] ? __pfx_panic+0x10/0x10 [ 255.260994][ T0] ? common_startup_64+0x13e/0x157 [ 255.261016][ T0] __warn+0x315/0x4c0 [ 255.261041][ T0] ? update_curr_idle+0x1cf/0x260 [ 255.261059][ T0] ? update_curr_idle+0x1cf/0x260 [ 255.261077][ T0] __report_bug+0x339/0x540 [ 255.261105][ T0] ? update_curr_idle+0x1cf/0x260 [ 255.261123][ T0] ? __pfx___report_bug+0x10/0x10 [ 255.261153][ T0] ? pick_task_fair+0x21a/0x1410 [ 255.261174][ T0] ? update_curr_idle+0x1cf/0x260 [ 255.261191][ T0] report_bug+0x16a/0x220 [ 255.261213][ T0] ? update_curr_idle+0x1cf/0x260 [ 255.261229][ T0] ? update_curr_idle+0x1d1/0x260 [ 255.261245][ T0] handle_bug+0x9c/0x200 [ 255.261271][ T0] exc_invalid_op+0x1a/0x50 [ 255.261296][ T0] asm_exc_invalid_op+0x1a/0x20 [ 255.261316][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 255.261334][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 70 [ 255.261348][ T0] RSP: 0018:ffffffff8dc07b98 EFLAGS: 00010097 [ 255.261363][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 255.261374][ T0] RDX: ffff8880319f5d00 RSI: ffffffff8d8bb44d RDI: ffffffff8baa5680 [ 255.261388][ T0] RBP: ffffffff8dc07dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 255.261400][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 255.261413][ T0] R13: ffffffff8d8f1018 R14: ffffffff8dcfef40 R15: ffff8880b863c620 [ 255.261430][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 255.261454][ T0] ? update_curr_idle+0xab/0x260 [ 255.261474][ T0] put_prev_task_idle+0xd/0x20 [ 255.261490][ T0] __schedule+0x3da0/0x5550 [ 255.261530][ T0] ? __pfx___schedule+0x10/0x10 [ 255.261548][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.261577][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 255.261607][ T0] schedule_idle+0x51/0x90 [ 255.261626][ T0] do_idle+0x4a6/0x540 [ 255.261655][ T0] ? __pfx_do_idle+0x10/0x10 [ 255.261690][ T0] cpu_startup_entry+0x43/0x60 [ 255.261718][ T0] rest_init+0x2de/0x300 [ 255.261745][ T0] start_kernel+0x392/0x3e0 [ 255.261772][ T0] x86_64_start_reservations+0x24/0x30 [ 255.261793][ T0] x86_64_start_kernel+0x143/0x1c0 [ 255.261825][ T0] common_startup_64+0x13e/0x157 [ 255.261855][ T0] [ 256.366354][ T0] Shutting down cpus with NMI [ 256.367091][ T0] Kernel Offset: disabled