last executing test programs: 28m40.49522169s ago: executing program 32 (id=12): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/clear_refs\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010001000000000000000000000000000fe0a86267f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 28m24.341941563s ago: executing program 33 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000300)=0xd0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/119) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 28m17.356689024s ago: executing program 34 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101440, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getpriority(0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x220601, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) prlimit64(r2, 0x2, &(0x7f00000000c0)={0x1, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x8800) 28m10.998353008s ago: executing program 35 (id=51): socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x6417, 0x80, 0x3, 0x3d9}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_complete(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x1, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x4b45, 0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000001500100180012800800"], 0x38}}, 0x2400c080) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x7000000}}], 0x1, 0x2, 0x0) 27m37.484696787s ago: executing program 36 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 27m36.24328588s ago: executing program 37 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000b00)) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x401, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) inotify_init() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket(0x28, 0x5, 0x0) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) 27m18.497030794s ago: executing program 38 (id=72): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0xb) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103381) getdents64(0xffffffffffffffff, &(0x7f0000005080)=""/33, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) epoll_create1(0x0) unshare(0x64000600) 25m30.71205179s ago: executing program 39 (id=90): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2be, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x100000000000000) syz_usb_control_io(r0, 0x0, 0x0) 24m59.400107703s ago: executing program 40 (id=135): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) gettid() socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x210000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x20a}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 24m50.741523668s ago: executing program 41 (id=147): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000300)={0x13}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) 24m11.060150523s ago: executing program 42 (id=191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000034, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75706461746520656372797081667320757365723a0053e3bee18044740d67c1459dad22ab56ea0e078ca867a3eabee131ba993d4faf457e5c009518427832435488a4d032cd740d6faaceea6fa2f914bb0793210933b3408436f70cb7"], 0x16, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(0xffffffffffffffff, 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) 23m51.732667057s ago: executing program 43 (id=211): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) 23m36.050738273s ago: executing program 44 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x1, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x700, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) unshare(0x46000200) 23m13.68961755s ago: executing program 45 (id=247): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x20a}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @rand_addr=0x64010100}, {0x0, @remote}, 0x0, {0x2, 0xffff, @remote}, 'lo\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xe7, 0x19, 0x87, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 20m6.247882079s ago: executing program 46 (id=465): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000280)={0x10000, 0x108000}) 20m0.129709204s ago: executing program 47 (id=480): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0x2b, 0x2ae6f3b123a9eed3, 0x7) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x7, 0x0) 19m26.869535557s ago: executing program 48 (id=522): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x30) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x6c, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0xf}, 0x1, 0x1}) 18m49.844574138s ago: executing program 49 (id=567): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r3, 0xffffffffffffffff}) close(r4) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r6, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r6}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14000801}, 0x40810) 18m29.087251644s ago: executing program 50 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) 17m37.092592567s ago: executing program 51 (id=683): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) fanotify_init(0x200, 0x0) socket(0x10, 0x3, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000380)=0x8000030) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000003c0)=""/133, 0x85}, &(0x7f0000000040), 0x62}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000ff014000"/33]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 16m57.935479515s ago: executing program 52 (id=743): mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x5b}, {@empty, 0x4e22, 0x3, 0x10001, 0x7, 0x8}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() getpgid(r1) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x100, 0xfffffffc) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) landlock_restrict_self(r2, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={0x0, 0x2}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000440)=""/160}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x244) truncate(&(0x7f0000000280)='./file1\x00', 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 16m15.081911479s ago: executing program 53 (id=796): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @broadcast]}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x2c}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x82, &(0x7f0000000200), 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14m22.237416005s ago: executing program 54 (id=950): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x19) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x8080583a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13m58.101998462s ago: executing program 55 (id=976): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="3e8829a2ef3805450119be04184be444921a87ac516d1db5b3885045b39e75de3700b6720ab22154a65e7d4b80afd7f5cecfef7d1a83dbd8e6abad44eb8bb67a8755bc75c52ae6580f2807b700000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10000801}, 0x40810) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) socket$tipc(0x1e, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x120100200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10, 0x0, 0x80000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000003, 0x800, 0x20000}, 0x0, 0x0) 12m37.778569902s ago: executing program 56 (id=1090): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e22, @remote}, 0x10) 11m23.30360237s ago: executing program 57 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x26a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) r3 = socket$inet(0x2, 0x3, 0x9) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 11m20.692955322s ago: executing program 58 (id=1229): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) read(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xfd) 11m18.985557864s ago: executing program 59 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30004020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000000}) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r1, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r8}, &(0x7f0000001780)=0x4, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 11m15.407336106s ago: executing program 60 (id=1233): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe11}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m8.280528276s ago: executing program 61 (id=1281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) fadvise64(r1, 0x0, 0x8000, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000280)=""/108, &(0x7f00000000c0)=0x6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 10m5.090235926s ago: executing program 62 (id=1285): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, &(0x7f0000000280)=""/44, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9m31.484933568s ago: executing program 63 (id=1311): socket(0xf, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x40895}, 0x40004) unshare(0x28000600) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = gettid() capset(&(0x7f0000000000)={0x19980330, r8}, &(0x7f0000000280)={0x4, 0x5, 0x48, 0x7f, 0xffffffff}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 9m21.161953504s ago: executing program 64 (id=1317): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 8m43.946050297s ago: executing program 65 (id=1343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000001340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30004020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000000}) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x414}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0001000919da47150d24532c72000001352117440261a06eff83", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000140), 0x0}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 8m34.896093237s ago: executing program 66 (id=1348): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() io_setup(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 7m44.578510799s ago: executing program 67 (id=1394): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200000000000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) pipe2(&(0x7f0000001180)={0xffffffffffffffff}, 0x4000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) tee(r4, r3, 0x40000000, 0x5) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @private0, 0x4e}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x40) 7m28.126855972s ago: executing program 68 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4089, 0xff9}], 0x1, 0x40000002, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0xdee]}, 0x8}) syz_usb_connect(0x3, 0x41, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x715cb}}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) 6m42.59812269s ago: executing program 69 (id=1465): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6m22.850193019s ago: executing program 70 (id=1494): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r3, r3, 0x0, 0xb) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 5m50.123290889s ago: executing program 71 (id=1540): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x26, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0xd, 0xa, 0xfde6441714b978f1, 0x80, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2c7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001180)='GPL\x00', 0x2, 0xb2, &(0x7f00000011c0)=""/178, 0x41000, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x4, 0x9, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r0, r0, r0, r0, r0, r0, 0x1], 0x0, 0x10, 0xfffffbff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000013c0)='rpcgss_context\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000), 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001100010000fcfffffddbdf2500000000000000000000000001000000000200000014000d00e000200100"/57], 0x3c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, 0x0, 0xc0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x5) 5m45.93564198s ago: executing program 72 (id=1546): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000, 0x100) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x5, 0x10003, 0x6}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x60002003}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x76) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x100000000000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'macvlan0\x00', 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100), 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 5m29.962372922s ago: executing program 73 (id=1562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r3, &(0x7f0000000640)=[{&(0x7f00000011c0)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000180)=""/80, 0x50}, {0x0}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000300)=""/190, 0xbe}], 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m27.100934412s ago: executing program 8 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 5m24.914948686s ago: executing program 8 (id=1578): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xdc1}, 0x18) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xf7, 0x17ef, 0x6009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5b, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xb76}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x0, 0x2e}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x4, 0x5, 0x641a68d2e93271ea}, 0x0, 0x0, 0x1, [{0xb8, &(0x7f0000000300)=@string={0xb8, 0x3, "c5b93ee22cb3ac370e37f1fecd70c10a4ee365956a9c620f5824c2941b4112556d5c92af5cd82c82c5a946d5960bde3603a2139c9fa82942b4f572fa3aae555c7a31c0ae2773ccd720101ad7a59e71280fee119035298d8f506e8cf270911899439e67dabd06576c1f13732c9120d06fca9de293dde5742d428cf4c2af49db49a83cd6b5c7d7f07b25f121d9101b17ef941ae91f703ba1d56101b1aa2660e52cc0a901a180413d1001d738efa18099a072ac88ea3212"}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 5m22.18738088s ago: executing program 8 (id=1580): mkdir(&(0x7f0000004200)='./file0\x00', 0xa) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5m21.261104303s ago: executing program 8 (id=1581): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x4, @private0}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[], 0x0) 5m20.393968441s ago: executing program 8 (id=1583): r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m19.371017861s ago: executing program 8 (id=1585): prctl$PR_GET_TSC(0x43, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 5m3.272410965s ago: executing program 74 (id=1585): prctl$PR_GET_TSC(0x43, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 4m3.352994619s ago: executing program 6 (id=1669): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x4, @private0}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110000000000000000000000000000000000ff0200000000"], 0x0) 4m2.039150915s ago: executing program 6 (id=1674): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xb, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r3, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) socket$inet6(0xa, 0x3, 0x7) memfd_secret(0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 3m56.400594425s ago: executing program 6 (id=1684): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x4, @private0}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110000000000000000000000000000000000ff0200000000"], 0x0) 3m55.209489067s ago: executing program 6 (id=1690): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)="1f", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0x400e802, 0x8001, 0x400, 0x4}}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 3m51.006049143s ago: executing program 6 (id=1699): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 3m49.890465779s ago: executing program 6 (id=1702): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x4, 0xfc}}], 0x30}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) fchdir(r4) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 3m34.267820332s ago: executing program 75 (id=1702): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x4, 0xfc}}], 0x30}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) fchdir(r4) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 2m26.773378096s ago: executing program 7 (id=1873): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000080)=""/21, 0x15}], 0x7}, 0x40002002) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m25.666028094s ago: executing program 7 (id=1876): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m22.945654829s ago: executing program 2 (id=1880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, 0x0, 0x4042014) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xce}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2m21.862299486s ago: executing program 7 (id=1883): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff)="1f", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0x400e802, 0x8001, 0x400, 0x4}}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 2m16.666109936s ago: executing program 2 (id=1891): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x8008af26, &(0x7f0000000680)={0x22f}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x31, 0x0, 0x0) 2m13.990101869s ago: executing program 7 (id=1895): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0xcb37, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m13.023267369s ago: executing program 7 (id=1897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'team_slave_0\x00', 0x4000}) 2m12.105519188s ago: executing program 7 (id=1900): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2m5.271505823s ago: executing program 9 (id=1910): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fanotify_init(0xa00, 0x0) 2m3.862985372s ago: executing program 9 (id=1912): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m3.090651832s ago: executing program 2 (id=1913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 2m1.721712226s ago: executing program 2 (id=1916): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2805, 0xd59f83, 0x19f2, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r4) r5 = dup2(r1, r0) read$FUSE(r5, &(0x7f0000004900)={0x2020}, 0x2020) ioctl$int_in(r1, 0x5421, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) read$FUSE(r5, &(0x7f00000028c0)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=[0x2], &(0x7f0000000580), 0x0}) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 2m0.247628748s ago: executing program 2 (id=1919): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b80)=@newtaction={0x18, 0x1c, 0x1, 0x170bd2b, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) 2m0.141594062s ago: executing program 9 (id=1920): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0xcb37, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.455685976s ago: executing program 2 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x4, 0x20000008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0xe8c83) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000b40)) ptrace(0x10, r4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x7fffffffefff) 1m59.159144552s ago: executing program 9 (id=1923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x4008000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m56.480699693s ago: executing program 76 (id=1900): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 1m54.283137997s ago: executing program 9 (id=1929): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2805, 0xd59f83, 0x19f2, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r4) r5 = dup2(r1, r0) read$FUSE(r5, &(0x7f0000004900)={0x2020}, 0x2020) ioctl$int_in(r1, 0x5421, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) read$FUSE(r5, &(0x7f00000028c0)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=[0x2], &(0x7f0000000580), 0x0}) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1m52.172584079s ago: executing program 9 (id=1931): write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x3, 0x99, 0x5}}, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x10c2) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x34e1, 0x2) lsm_list_modules(0x0, 0x0, 0x13) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000940)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000600)=""/244, 0xf4, 0x0, 0x1, 0x4}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) 1m43.511786818s ago: executing program 77 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x4, 0x20000008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0xe8c83) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000b40)) ptrace(0x10, r4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x7fffffffefff) 1m36.187267683s ago: executing program 78 (id=1931): write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x3, 0x99, 0x5}}, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x10c2) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x34e1, 0x2) lsm_list_modules(0x0, 0x0, 0x13) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000940)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000600)=""/244, 0xf4, 0x0, 0x1, 0x4}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) 11.662989146s ago: executing program 4 (id=2113): mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 11.451162142s ago: executing program 0 (id=2114): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10.938345738s ago: executing program 3 (id=2116): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="2b35cc1d", 0x4}], 0x1}, 0x81) 10.868573898s ago: executing program 4 (id=2117): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.204306725s ago: executing program 3 (id=2119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f0000006680)) r1 = semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000580)=""/133) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, 0xffffffffffffffff, 0x7bc09000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r4, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r4, 0x0, 0x1) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000140)={{@my=0x0}, 0x1}) syz_io_uring_setup(0x759e, &(0x7f0000000480)={0x0, 0x6d55, 0x400, 0x0, 0x8307, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) write$vga_arbiter(r7, &(0x7f00000000c0), 0xf) 8.707185197s ago: executing program 1 (id=2121): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) 7.381506195s ago: executing program 3 (id=2122): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) 7.297767257s ago: executing program 0 (id=2123): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 6.946151955s ago: executing program 1 (id=2124): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0xcb37, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.438444263s ago: executing program 3 (id=2126): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, 0x0, 0x36) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 6.37070627s ago: executing program 0 (id=2127): mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 6.243447293s ago: executing program 4 (id=2128): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r0, r0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x10080, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 5.938783468s ago: executing program 5 (id=2129): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="2b35cc1d", 0x4}], 0x1}, 0x81) 5.523620924s ago: executing program 3 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) 5.379091775s ago: executing program 1 (id=2131): mknod$loop(0x0, 0x400, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000400)={0x0, 0x3f73, 0x82, 0x0, 0x12}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.282655482s ago: executing program 0 (id=2132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f0000006680)) r1 = semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000580)=""/133) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, 0xffffffffffffffff, 0x7bc09000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r3, 0x0, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000140)={{@my=0x0}, 0x1}) syz_io_uring_setup(0x759e, &(0x7f0000000480)={0x0, 0x6d55, 0x400, 0x0, 0x8307, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0), 0xf) 5.183314035s ago: executing program 4 (id=2133): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 5.073640792s ago: executing program 5 (id=2134): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) 4.053532416s ago: executing program 5 (id=2135): r0 = socket(0x10, 0x2, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r2, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xb, 0x1}, {0x4, 0x8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xfc, 0x3, 0xa, 0x0, 0x0, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x10, 0x4, 0x6, 0x9, 0x1, 0x4, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) 3.846791869s ago: executing program 0 (id=2136): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001140)=""/237, 0xed}, {0x0}], 0x2}, 0x1}], 0x1, 0x0, 0x0) 3.84639041s ago: executing program 1 (id=2137): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1c) 2.750084133s ago: executing program 0 (id=2138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2.603117213s ago: executing program 5 (id=2139): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.180198622s ago: executing program 4 (id=2140): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xfe, 0x4}, 0x2}, 0x18, &(0x7f0000000140)={&(0x7f0000000400)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000040) 1.883068094s ago: executing program 1 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x84854}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 1.023551571s ago: executing program 4 (id=2142): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0x3, 0x5000, 0x4e, &(0x7f0000000040)="9ceeb5ace61ee75acf0920628627e39648d297996b2b98585e0d83aacc626f50d6461b543cfa629fb27364187f80a3d317f2044cc15762eb1544f29f66c9384d143b0b77437d478c97afe590db00"}], 0x1}) 916.946617ms ago: executing program 5 (id=2143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3000, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 738.009946ms ago: executing program 1 (id=2144): r0 = socket$can_j1939(0x1d, 0x2, 0x7) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) 200.409904ms ago: executing program 3 (id=2145): r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 5 (id=2146): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): usb 7-1: USB disconnect, device number 10 [ 1751.267485][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1751.297406][T13198] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1751.314307][T14767] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.325052][T14767] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.334323][T14767] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.343589][T14767] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.451352][T13198] usb 4-1: USB disconnect, device number 23 [ 1751.483173][T15002] 9pnet_fd: Insufficient options for proto=fd [ 1752.075740][T10379] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1752.085270][T10379] ath9k_htc: Failed to initialize the device [ 1752.180783][ T5849] usb 7-1: ath9k_htc: USB layer deinitialized [ 1758.808671][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1758.881570][T13282] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1759.308751][T13282] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1759.318568][T13282] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.327033][T13282] usb 7-1: Product: syz [ 1759.331430][T13282] usb 7-1: Manufacturer: syz [ 1759.336168][T13282] usb 7-1: SerialNumber: syz [ 1759.625203][T13282] usb 7-1: config 0 descriptor?? [ 1759.752146][T13282] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 1759.759239][T13282] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1759.773675][T13282] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1759.991503][T13282] usb 7-1: USB disconnect, device number 11 [ 1761.333647][T15071] 9pnet_fd: Insufficient options for proto=fd [ 1761.717126][T11621] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1761.953878][T11621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.051012][T10379] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1762.070262][T11621] usb 5-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1762.080079][T11621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.088253][T11621] usb 5-1: Product: syz [ 1762.092750][T11621] usb 5-1: Manufacturer: syz [ 1762.097526][T11621] usb 5-1: SerialNumber: syz [ 1762.250501][T11621] usb 5-1: config 0 descriptor?? [ 1762.289540][T10379] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1762.298941][T10379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.309000][T10379] usb 4-1: Product: syz [ 1762.313849][T10379] usb 4-1: Manufacturer: syz [ 1762.318615][T10379] usb 4-1: SerialNumber: syz [ 1762.348350][T11621] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1762.420189][T11621] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1762.427006][T11621] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1762.514980][T10379] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1762.559832][T11621] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1762.566816][T11621] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1762.647276][T13198] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1762.760304][T11621] usb 5-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1762.803383][T11621] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1762.956099][T10379] usb 4-1: USB disconnect, device number 24 [ 1763.031233][T11621] usb 5-1: USB disconnect, device number 24 [ 1763.765068][T13198] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1763.773953][T13198] ath9k_htc: Failed to initialize the device [ 1763.931969][T10379] usb 4-1: ath9k_htc: USB layer deinitialized [ 1765.540358][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1766.190077][T10379] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1766.488032][T10379] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1766.497696][T10379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.506263][T10379] usb 5-1: Product: syz [ 1766.510881][T10379] usb 5-1: Manufacturer: syz [ 1766.515732][T10379] usb 5-1: SerialNumber: syz [ 1766.695412][T10379] usb 5-1: config 0 descriptor?? [ 1766.738110][T10379] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1766.745468][T10379] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1766.754134][T10379] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1766.893229][T15122] 9pnet_fd: Insufficient options for proto=fd [ 1767.022017][T13282] usb 5-1: USB disconnect, device number 25 [ 1767.244468][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.252786][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.813647][T10379] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 1767.871389][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.879677][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.129533][T10379] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.212191][T10379] usb 8-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1768.223339][T10379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.231981][T10379] usb 8-1: Product: syz [ 1768.236389][T10379] usb 8-1: Manufacturer: syz [ 1768.241428][T10379] usb 8-1: SerialNumber: syz [ 1768.263947][T13198] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1768.415329][T10379] usb 8-1: config 0 descriptor?? [ 1768.456740][T10379] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1768.569829][T13198] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1768.579546][T13198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.587836][T13198] usb 7-1: Product: syz [ 1768.592787][T13198] usb 7-1: Manufacturer: syz [ 1768.597665][T13198] usb 7-1: SerialNumber: syz [ 1768.610238][T10379] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1768.616873][T10379] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1768.733804][T10379] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1768.743940][T10379] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1768.802715][T13198] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1768.872825][T10379] usb 8-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1768.948838][T10379] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1768.991590][T11621] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1769.128520][T10379] usb 8-1: USB disconnect, device number 68 [ 1769.341659][T13198] usb 7-1: USB disconnect, device number 12 [ 1769.390036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.076982][T11621] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1770.085409][T11621] ath9k_htc: Failed to initialize the device [ 1770.195141][T13198] usb 7-1: ath9k_htc: USB layer deinitialized [ 1773.826122][T15169] 9pnet_fd: Insufficient options for proto=fd [ 1774.780538][T11621] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1775.047629][T11621] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1775.057189][T11621] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.065657][T11621] usb 10-1: Product: syz [ 1775.070149][T11621] usb 10-1: Manufacturer: syz [ 1775.075020][T11621] usb 10-1: SerialNumber: syz [ 1775.253719][T11621] usb 10-1: config 0 descriptor?? [ 1775.320200][T11621] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1775.327346][T11621] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1775.336106][T11621] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1775.604025][T11621] usb 10-1: USB disconnect, device number 46 [ 1775.748067][ T6552] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1775.801295][T13282] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 1776.030282][T13282] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.082697][ T6552] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1776.092291][ T6552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.100825][ T6552] usb 7-1: Product: syz [ 1776.105238][ T6552] usb 7-1: Manufacturer: syz [ 1776.110501][ T6552] usb 7-1: SerialNumber: syz [ 1776.150481][T13282] usb 8-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1776.159987][T13282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.168155][T13282] usb 8-1: Product: syz [ 1776.172655][T13282] usb 8-1: Manufacturer: syz [ 1776.177407][T13282] usb 8-1: SerialNumber: syz [ 1776.218267][ T6552] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1776.302963][T13282] usb 8-1: config 0 descriptor?? [ 1776.368094][ T5849] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1776.416859][T13282] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1776.491372][T13282] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1776.498975][T13282] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1776.611964][T13282] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1776.619930][T13282] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1776.664175][ T6552] usb 7-1: USB disconnect, device number 13 [ 1776.730915][T13282] usb 8-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1776.772051][T13282] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1776.888367][T13282] usb 8-1: USB disconnect, device number 69 [ 1777.434972][ T5849] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1777.443165][ T5849] ath9k_htc: Failed to initialize the device [ 1777.604140][ T6552] usb 7-1: ath9k_htc: USB layer deinitialized [ 1779.502476][T15217] 9pnet_fd: Insufficient options for proto=fd [ 1781.640155][ T6552] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1781.980499][ T6552] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1781.990601][ T6552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.998907][ T6552] usb 8-1: Product: syz [ 1782.003724][ T6552] usb 8-1: Manufacturer: syz [ 1782.008699][ T6552] usb 8-1: SerialNumber: syz [ 1782.217332][ T6552] usb 8-1: config 0 descriptor?? [ 1782.310618][ T6552] usb 8-1: Waiting for MOTU Microbook II to boot up... [ 1782.317806][ T6552] usb 8-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1782.326680][ T6552] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1782.381470][T13198] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1782.521465][ T6552] usb 8-1: USB disconnect, device number 70 [ 1782.570022][T10379] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1782.634031][T13198] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.713774][T13198] usb 10-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1782.724260][T13198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.732853][T13198] usb 10-1: Product: syz [ 1782.737374][T13198] usb 10-1: Manufacturer: syz [ 1782.742505][T13198] usb 10-1: SerialNumber: syz [ 1782.861001][T10379] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1782.870845][T10379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.879149][T10379] usb 4-1: Product: syz [ 1782.883782][T10379] usb 4-1: Manufacturer: syz [ 1782.888670][T10379] usb 4-1: SerialNumber: syz [ 1782.972992][T13198] usb 10-1: config 0 descriptor?? [ 1783.096131][T13198] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1783.140987][T10379] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1783.261726][T13198] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1783.268795][T13198] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1783.372170][T10934] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1783.446791][T13198] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1783.454671][T13198] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1783.549031][T13198] usb 10-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1783.633333][T13198] usb 10-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1783.776867][ T6552] usb 4-1: USB disconnect, device number 25 [ 1783.809585][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1783.863382][T13198] usb 10-1: USB disconnect, device number 47 [ 1784.479583][T10934] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1784.487580][T10934] ath9k_htc: Failed to initialize the device [ 1784.588230][ T6552] usb 4-1: ath9k_htc: USB layer deinitialized [ 1785.083001][T15256] nvme_fabrics: missing parameter 'transport=%s' [ 1785.089983][T15256] nvme_fabrics: missing parameter 'nqn=%s' [ 1785.483472][T15264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1785.670418][T15264] kvm: pic: non byte read [ 1785.676165][T15264] kvm: pic: level sensitive irq not supported [ 1785.722611][T15264] kvm: pic: non byte read [ 1785.821151][T15264] kvm: pic: level sensitive irq not supported [ 1785.821719][T15264] kvm: pic: non byte read [ 1788.090167][ T6552] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1788.360075][ T6552] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1788.369636][ T6552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.378023][ T6552] usb 4-1: Product: syz [ 1788.382836][ T6552] usb 4-1: Manufacturer: syz [ 1788.387691][ T6552] usb 4-1: SerialNumber: syz [ 1788.512461][ T6552] usb 4-1: config 0 descriptor?? [ 1788.619493][ T6552] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1788.626675][ T6552] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1788.635271][ T6552] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1788.833950][ T6552] usb 4-1: USB disconnect, device number 26 [ 1788.871507][T10934] usb 8-1: new full-speed USB device number 71 using dummy_hcd [ 1789.130091][T10934] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.260254][T10934] usb 8-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1789.269966][T10934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.278312][T10934] usb 8-1: Product: syz [ 1789.282986][T10934] usb 8-1: Manufacturer: syz [ 1789.287839][T10934] usb 8-1: SerialNumber: syz [ 1789.478659][T10934] usb 8-1: config 0 descriptor?? [ 1789.494213][T10934] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1789.530300][T10934] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1789.537133][T10934] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1789.659653][ T6552] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1789.666048][T10934] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1789.674447][T10934] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1789.779654][T10934] usb 8-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1789.885168][T10934] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1789.993488][ T6552] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1790.002969][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.011430][ T6552] usb 5-1: Product: syz [ 1790.015862][ T6552] usb 5-1: Manufacturer: syz [ 1790.021199][ T6552] usb 5-1: SerialNumber: syz [ 1790.034816][T10934] usb 8-1: USB disconnect, device number 71 [ 1790.178016][ T6552] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1790.315838][ T5849] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1790.567272][T10934] usb 5-1: USB disconnect, device number 26 [ 1791.442111][ T5849] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1791.450071][ T5849] ath9k_htc: Failed to initialize the device [ 1791.561876][T10934] usb 5-1: ath9k_htc: USB layer deinitialized [ 1795.330158][T10934] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1795.650167][T10934] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1795.660420][T10934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.668807][T10934] usb 8-1: Product: syz [ 1795.673769][T10934] usb 8-1: Manufacturer: syz [ 1795.678729][T10934] usb 8-1: SerialNumber: syz [ 1795.857920][T10934] usb 8-1: config 0 descriptor?? [ 1795.962587][T10934] usb 8-1: Waiting for MOTU Microbook II to boot up... [ 1795.969938][T10934] usb 8-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1795.978384][T10934] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1796.376582][T10934] usb 8-1: USB disconnect, device number 72 [ 1797.111624][ T5849] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1797.341807][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.408398][ T5849] usb 4-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 1797.417902][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.426424][ T5849] usb 4-1: Product: syz [ 1797.430869][ T5849] usb 4-1: Manufacturer: syz [ 1797.435601][ T5849] usb 4-1: SerialNumber: syz [ 1797.615448][ T5849] usb 4-1: config 0 descriptor?? [ 1797.662821][ T5849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1797.755143][ T5849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1797.763529][ T5849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1797.893303][ T5849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1797.903589][ T5849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1797.969897][T10934] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1797.970122][ T5849] usb 4-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 1798.079802][ T5849] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1798.269651][ T5849] usb 4-1: USB disconnect, device number 27 [ 1798.330510][T10934] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1798.339938][T10934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.348171][T10934] usb 8-1: Product: syz [ 1798.352618][T10934] usb 8-1: Manufacturer: syz [ 1798.357366][T10934] usb 8-1: SerialNumber: syz [ 1798.597770][T10934] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1798.776106][T13198] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1799.053069][T10934] usb 8-1: USB disconnect, device number 73 [ 1799.949807][T13198] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1799.958006][T13198] ath9k_htc: Failed to initialize the device [ 1800.602233][T10934] usb 8-1: ath9k_htc: USB layer deinitialized [ 1801.008512][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1718'. [ 1801.320839][ T3935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.670710][ T3935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.995328][ T3935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.205969][ T5849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1802.262069][ T3935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.477508][ T5849] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 1802.487187][ T5849] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1802.497071][ T5849] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1802.506858][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.710637][ T5849] pcwd_usb: This driver only supports 1 device [ 1802.717340][ T5849] usbhid 4-1:241.0: couldn't find an input interrupt endpoint [ 1803.031945][ T3935] bridge_slave_1: left allmulticast mode [ 1803.037963][ T3935] bridge_slave_1: left promiscuous mode [ 1803.045176][ T3935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.228880][ T3935] bridge_slave_0: left allmulticast mode [ 1803.231164][T10379] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1803.235489][ T3935] bridge_slave_0: left promiscuous mode [ 1803.249901][ T3935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.736078][T10379] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1803.745659][T10379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.754206][T10379] usb 8-1: Product: syz [ 1803.758630][T10379] usb 8-1: Manufacturer: syz [ 1803.763600][T10379] usb 8-1: SerialNumber: syz [ 1803.923900][ T3935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.942967][ T3935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.974560][ T3935] bond0 (unregistering): Released all slaves [ 1804.122422][T10379] usb 8-1: config 0 descriptor?? [ 1804.167186][T10379] usb 8-1: Waiting for MOTU Microbook II to boot up... [ 1804.174571][T10379] usb 8-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1804.183275][T10379] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1804.652328][ T5849] usb 8-1: USB disconnect, device number 74 [ 1805.283335][ T5849] usb 4-1: USB disconnect, device number 28 [ 1805.669175][ T3935] hsr_slave_0: left promiscuous mode [ 1805.717823][ T3935] hsr_slave_1: left promiscuous mode [ 1805.725809][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1805.734139][ T3935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.863794][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1805.872424][ T3935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.168873][ T3935] veth1_macvtap: left promiscuous mode [ 1806.174948][ T3935] veth0_macvtap: left promiscuous mode [ 1806.180965][ T3935] veth1_vlan: left promiscuous mode [ 1806.186452][ T3935] veth0_vlan: left promiscuous mode [ 1807.192518][T10379] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1807.534076][T10379] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1807.543995][T10379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.552555][T10379] usb 8-1: Product: syz [ 1807.556986][T10379] usb 8-1: Manufacturer: syz [ 1807.562158][T10379] usb 8-1: SerialNumber: syz [ 1807.655336][ T3935] team0 (unregistering): Port device team_slave_1 removed [ 1807.775490][ T3935] team0 (unregistering): Port device team_slave_0 removed [ 1808.315355][T10379] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1808.541080][T13198] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1808.954756][T10379] usb 8-1: USB disconnect, device number 75 [ 1809.651642][T13198] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1809.659738][T13198] ath9k_htc: Failed to initialize the device [ 1809.692402][T15444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1809.710103][T15444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1809.722576][T15444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1809.806229][T15444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1809.821723][T15444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1809.873095][T10379] usb 8-1: ath9k_htc: USB layer deinitialized [ 1809.972629][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1810.028497][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1810.039072][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1810.070362][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1810.083882][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1812.220435][T15444] Bluetooth: hci3: command tx timeout [ 1812.562769][T13282] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1812.985937][T13282] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1812.996158][T13282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.004668][T13282] usb 10-1: Product: syz [ 1813.009158][T13282] usb 10-1: Manufacturer: syz [ 1813.014321][T13282] usb 10-1: SerialNumber: syz [ 1813.191443][T15442] chnl_net:caif_netlink_parms(): no params data found [ 1813.367152][T13282] usb 10-1: config 0 descriptor?? [ 1813.501500][T13282] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1813.508659][T13282] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1813.517272][T13282] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1814.142980][T15470] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1814.149648][T15470] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1814.290056][T13282] usb 10-1: USB disconnect, device number 48 [ 1815.941517][T15442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.951129][T15442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.958792][T15442] bridge_slave_0: entered allmulticast mode [ 1815.967659][T15442] bridge_slave_0: entered promiscuous mode [ 1816.115973][T15442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.123725][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.131651][T15442] bridge_slave_1: entered allmulticast mode [ 1816.140807][T15442] bridge_slave_1: entered promiscuous mode [ 1816.239801][T10379] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1816.589915][T10379] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1816.599666][T10379] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.608094][T10379] usb 10-1: Product: syz [ 1816.612792][T10379] usb 10-1: Manufacturer: syz [ 1816.617747][T10379] usb 10-1: SerialNumber: syz [ 1816.698370][T10379] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1816.822329][T15442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.861714][T11621] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1817.010380][T15442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.311442][T10379] usb 10-1: USB disconnect, device number 49 [ 1817.862474][T15442] team0: Port device team_slave_0 added [ 1817.969736][T15442] team0: Port device team_slave_1 added [ 1818.029758][T11621] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1818.037639][T11621] ath9k_htc: Failed to initialize the device [ 1818.201438][T10379] usb 10-1: ath9k_htc: USB layer deinitialized [ 1818.505202][T15442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.512651][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.539236][T15442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.884578][T15442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.892075][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.918548][T15442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.343964][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1747'. [ 1819.982268][T15442] hsr_slave_0: entered promiscuous mode [ 1820.089616][T15442] hsr_slave_1: entered promiscuous mode [ 1821.376817][ T4240] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.494899][ T4240] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.750497][ T4240] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.778716][T13282] kernel read not supported for file /dsp (pid: 13282 comm: kworker/0:0) [ 1822.065414][ T4240] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.576101][T11621] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1822.825617][T11621] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1822.835591][T11621] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.844244][T11621] usb 10-1: Product: syz [ 1822.848790][T11621] usb 10-1: Manufacturer: syz [ 1822.853902][T11621] usb 10-1: SerialNumber: syz [ 1822.981959][ T4240] bridge_slave_1: left allmulticast mode [ 1822.988134][ T4240] bridge_slave_1: left promiscuous mode [ 1822.997115][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.007342][T11621] usb 10-1: config 0 descriptor?? [ 1823.104554][ T4240] bridge_slave_0: left allmulticast mode [ 1823.112680][ T4240] bridge_slave_0: left promiscuous mode [ 1823.120901][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.135117][T11621] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1823.142528][T11621] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1823.151291][T11621] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1823.483213][ T6552] usb 10-1: USB disconnect, device number 50 [ 1823.921426][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.988929][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.055977][ T4240] bond0 (unregistering): Released all slaves [ 1824.707333][T15442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1824.794903][T15442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1824.964501][T15442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1825.148386][ T4240] hsr_slave_0: left promiscuous mode [ 1825.178805][ T4240] hsr_slave_1: left promiscuous mode [ 1825.188185][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.196313][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.229927][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.237638][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.307758][ T4240] veth1_macvtap: left promiscuous mode [ 1825.315238][ T4240] veth0_macvtap: left promiscuous mode [ 1825.321410][ T4240] veth1_vlan: left promiscuous mode [ 1825.326999][ T4240] veth0_vlan: left promiscuous mode [ 1825.335159][ T5849] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1825.932125][ T5849] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1825.941761][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.950309][ T5849] usb 10-1: Product: syz [ 1825.955054][ T5849] usb 10-1: Manufacturer: syz [ 1825.960081][ T5849] usb 10-1: SerialNumber: syz [ 1826.074162][ T5849] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1826.210080][ T6552] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1826.574140][ T5849] usb 10-1: USB disconnect, device number 51 [ 1826.976948][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1826.998915][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 1827.024758][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 1827.289945][ T6552] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1827.297784][ T6552] ath9k_htc: Failed to initialize the device [ 1827.330051][ T5849] usb 10-1: ath9k_htc: USB layer deinitialized [ 1827.470727][T15442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1827.748272][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1758'. [ 1829.334379][T15442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1829.645668][T15442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1829.770892][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.778591][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.898571][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.906469][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.929927][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1766'. [ 1830.990488][T10379] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1831.287618][T10379] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1831.297256][T10379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.305738][T10379] usb 5-1: Product: syz [ 1831.310240][T10379] usb 5-1: Manufacturer: syz [ 1831.315064][T10379] usb 5-1: SerialNumber: syz [ 1831.487937][T10379] usb 5-1: config 0 descriptor?? [ 1831.586355][T10379] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1831.593882][T10379] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1831.602401][T10379] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1831.841832][T10379] usb 5-1: USB disconnect, device number 27 [ 1832.390525][T10934] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1832.665109][T10934] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1832.675382][T10934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.684188][T10934] usb 10-1: Product: syz [ 1832.688728][T10934] usb 10-1: Manufacturer: syz [ 1832.693851][T10934] usb 10-1: SerialNumber: syz [ 1832.813932][T15442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.972951][T10934] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1833.168567][T10379] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1833.493060][T10934] usb 10-1: USB disconnect, device number 52 [ 1833.665014][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 1833.821102][T15442] veth0_vlan: entered promiscuous mode [ 1833.959255][T15442] veth1_vlan: entered promiscuous mode [ 1834.236594][T10379] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1834.245094][T10379] ath9k_htc: Failed to initialize the device [ 1834.352095][T10934] usb 10-1: ath9k_htc: USB layer deinitialized [ 1834.565966][T15442] veth0_macvtap: entered promiscuous mode [ 1834.701364][T15442] veth1_macvtap: entered promiscuous mode [ 1835.164241][T15442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.464042][T15442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.821673][T15442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.831921][T15442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.841091][T15442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.850182][T15442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.151726][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 1838.861795][T15650] misc userio: Invalid payload size [ 1838.881766][T10934] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1838.899863][T15650] misc userio: No port type given on /dev/userio [ 1838.920231][T15650] misc userio: The device must be registered before sending interrupts [ 1839.088914][T10934] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1839.098440][T10934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.107201][T10934] usb 8-1: Product: syz [ 1839.111785][T10934] usb 8-1: Manufacturer: syz [ 1839.116665][T10934] usb 8-1: SerialNumber: syz [ 1839.267840][T10934] usb 8-1: config 0 descriptor?? [ 1839.354803][T10934] usb 8-1: Waiting for MOTU Microbook II to boot up... [ 1839.362804][T10934] usb 8-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1839.371613][T10934] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1839.564425][T10934] usb 8-1: USB disconnect, device number 76 [ 1839.851821][T10379] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1840.030556][T11621] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1840.110430][T10379] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1840.120168][T10379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.128418][T10379] usb 4-1: Product: syz [ 1840.132916][T10379] usb 4-1: Manufacturer: syz [ 1840.137668][T10379] usb 4-1: SerialNumber: syz [ 1840.230956][T11621] usb 5-1: Using ep0 maxpacket: 32 [ 1840.244841][T11621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.256242][T11621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.266442][T11621] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1840.275875][T11621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.336725][T10379] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1840.456386][T11621] usb 5-1: config 0 descriptor?? [ 1840.484539][T10934] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1840.610553][T11621] hub 5-1:0.0: USB hub found [ 1840.751430][ T5849] usb 4-1: USB disconnect, device number 29 [ 1840.779545][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1840.868956][ T30] audit: type=1326 audit(2000001537.740:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1840.892524][ T30] audit: type=1326 audit(2000001537.740:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1840.915363][ T30] audit: type=1326 audit(2000001537.740:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1840.996475][T11621] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1841.078847][T11621] usbhid 5-1:0.0: can't add hid device: -71 [ 1841.087689][T11621] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1841.159957][T11621] usb 5-1: USB disconnect, device number 28 [ 1841.200154][ T30] audit: type=1326 audit(2000001537.840:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1841.223114][ T30] audit: type=1326 audit(2000001537.840:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1841.246715][ T30] audit: type=1326 audit(2000001537.840:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1841.768776][T10934] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1841.777391][T10934] ath9k_htc: Failed to initialize the device [ 1842.139952][ T5849] usb 4-1: ath9k_htc: USB layer deinitialized [ 1844.036769][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1790'. [ 1844.521882][T15707] misc userio: Invalid payload size [ 1844.559222][T15707] misc userio: The device must be registered before sending interrupts [ 1846.250202][ T5849] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1846.330079][T15727] capability: warning: `syz.3.1797' uses 32-bit capabilities (legacy support in use) [ 1846.560692][ T5849] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1846.570771][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.579144][ T5849] usb 10-1: Product: syz [ 1846.583974][ T5849] usb 10-1: Manufacturer: syz [ 1846.588915][ T5849] usb 10-1: SerialNumber: syz [ 1846.671156][ T5849] usb 10-1: config 0 descriptor?? [ 1846.744143][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.752547][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.835867][ T5849] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1846.843261][ T5849] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1846.852022][ T5849] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1846.991771][ T5849] usb 10-1: USB disconnect, device number 53 [ 1847.053476][T11621] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1847.063712][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.072063][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.289650][T11621] usb 8-1: Using ep0 maxpacket: 32 [ 1847.493084][T11621] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.505065][T11621] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.517014][T11621] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1847.527096][T11621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.066314][T11621] usb 8-1: config 0 descriptor?? [ 1848.214960][T11621] hub 8-1:0.0: USB hub found [ 1848.407543][ T30] audit: type=1326 audit(2000001545.260:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.429739][T11621] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1848.438530][ T30] audit: type=1326 audit(2000001545.260:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.458454][T11621] usbhid 8-1:0.0: can't add hid device: -71 [ 1848.461760][ T30] audit: type=1326 audit(2000001545.260:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.468343][T11621] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1848.490021][ T30] audit: type=1326 audit(2000001545.270:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.519928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.527541][ T30] audit: type=1326 audit(2000001545.270:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.550026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.556923][ T30] audit: type=1326 audit(2000001545.280:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.579674][ T30] audit: type=1326 audit(2000001545.280:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15728 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1848.601884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.621980][T11621] usb 8-1: USB disconnect, device number 77 [ 1849.313289][T15749] misc userio: Invalid payload size [ 1849.363318][T15749] misc userio: The device must be registered before sending interrupts [ 1849.412317][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 1851.735019][T10934] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1852.011148][T10934] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1852.020899][T10934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.029219][T10934] usb 5-1: Product: syz [ 1852.036806][T10934] usb 5-1: Manufacturer: syz [ 1852.042086][T10934] usb 5-1: SerialNumber: syz [ 1852.215033][T10934] usb 5-1: config 0 descriptor?? [ 1852.300675][T10934] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1852.307833][T10934] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1852.316362][T10934] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1852.581626][T10934] usb 5-1: USB disconnect, device number 29 [ 1852.621143][ T3837] Bluetooth: hci0: Frame reassembly failed (-84) [ 1852.680132][T15782] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1852.855404][ T30] audit: type=1326 audit(2000001549.730:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.9.1814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1852.878151][ T30] audit: type=1326 audit(2000001549.730:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.9.1814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1852.900450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1852.907040][ T30] audit: type=1326 audit(2000001549.730:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.9.1814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1853.802832][T15793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1815'. [ 1853.827978][T15794] misc userio: Invalid payload size [ 1853.872147][T15794] misc userio: The device must be registered before sending interrupts [ 1854.712149][ T5801] Bluetooth: hci0: command 0x1003 tx timeout [ 1854.718628][T15444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1855.134757][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 1856.882170][ T5849] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1857.180476][ T5849] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1857.190123][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.198395][ T5849] usb 10-1: Product: syz [ 1857.203232][ T5849] usb 10-1: Manufacturer: syz [ 1857.208109][ T5849] usb 10-1: SerialNumber: syz [ 1857.412952][ T5849] usb 10-1: config 0 descriptor?? [ 1857.468016][ T5849] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1857.475430][ T5849] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1857.484066][ T5849] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1857.543738][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1857.543818][ T30] audit: type=1326 audit(2000001554.390:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.573696][ T30] audit: type=1326 audit(2000001554.390:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.596198][ T30] audit: type=1326 audit(2000001554.390:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.618399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1857.626058][ T30] audit: type=1326 audit(2000001554.390:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.648796][ T30] audit: type=1326 audit(2000001554.420:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.681501][ T30] audit: type=1326 audit(2000001554.420:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.703751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1857.712797][ T30] audit: type=1326 audit(2000001554.420:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.7.1828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1857.735103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1857.880038][ T5849] usb 10-1: USB disconnect, device number 54 [ 1858.234302][T15852] misc userio: Invalid payload size [ 1860.377892][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1836'. [ 1861.060493][T15790] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1861.208997][T15879] 9pnet_fd: Insufficient options for proto=fd [ 1861.239728][T15790] usb 10-1: device descriptor read/64, error -71 [ 1861.502352][T15790] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1861.511957][ T30] audit: type=1326 audit(2000001558.370:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.7.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1861.512188][ T30] audit: type=1326 audit(2000001558.370:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.7.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1861.512414][ T30] audit: type=1326 audit(2000001558.380:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.7.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1861.766561][T15790] usb 10-1: device descriptor read/64, error -71 [ 1861.881262][T15790] usb usb10-port1: attempt power cycle [ 1862.199790][T15870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1862.270376][T15790] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1862.355984][T15790] usb 10-1: device descriptor read/8, error -71 [ 1862.409776][T15870] usb 5-1: Using ep0 maxpacket: 32 [ 1862.458735][T15870] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1862.467562][T15870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.478874][T15870] usb 5-1: config 0 has no interface number 0 [ 1862.486156][T15870] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1862.543390][ T9039] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1862.620656][T15870] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1862.621313][T15790] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1862.630106][T15870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.646625][T15870] usb 5-1: Product: syz [ 1862.651360][T15870] usb 5-1: Manufacturer: syz [ 1862.656218][T15870] usb 5-1: SerialNumber: syz [ 1862.712117][T15790] usb 10-1: device descriptor read/8, error -71 [ 1862.804848][ T9039] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1862.814485][ T9039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.824650][ T9039] usb 3-1: Product: syz [ 1862.829080][ T9039] usb 3-1: Manufacturer: syz [ 1862.834043][ T9039] usb 3-1: SerialNumber: syz [ 1862.836329][T15790] usb usb10-port1: unable to enumerate USB device [ 1862.854589][T15870] usb 5-1: config 0 descriptor?? [ 1862.893168][T15901] misc userio: Invalid payload size [ 1862.953943][ T9039] usb 3-1: config 0 descriptor?? [ 1863.001952][ T9039] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1863.009126][ T9039] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1863.017856][ T9039] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1863.226764][ T9039] usb 3-1: USB disconnect, device number 11 [ 1865.974215][ T6843] usb 5-1: USB disconnect, device number 30 [ 1866.254840][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1866.903403][ T9039] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1867.068827][T15940] misc userio: Invalid payload size [ 1867.140156][ T9039] usb 8-1: Using ep0 maxpacket: 32 [ 1867.180068][ T9039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.191663][ T9039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.202135][ T9039] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1867.211539][ T9039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.353206][ T9039] usb 8-1: config 0 descriptor?? [ 1867.413696][ T9039] hub 8-1:0.0: USB hub found [ 1867.572091][ T9039] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1867.680079][T15870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1867.832968][T15870] usb 3-1: device descriptor read/64, error -71 [ 1868.100642][ T9039] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 1868.130270][T15870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1868.300707][T15870] usb 3-1: device descriptor read/64, error -71 [ 1868.324540][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1868.324621][ T30] audit: type=1326 audit(2000001565.200:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.353865][ T30] audit: type=1326 audit(2000001565.200:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.447573][T15870] usb usb3-port1: attempt power cycle [ 1868.562593][ T6843] usb 8-1: USB disconnect, device number 78 [ 1868.588198][ T30] audit: type=1326 audit(2000001565.260:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.612057][ T30] audit: type=1326 audit(2000001565.260:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.634221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.642309][ T30] audit: type=1326 audit(2000001565.260:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.664872][ T30] audit: type=1326 audit(2000001565.290:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.687336][ T30] audit: type=1326 audit(2000001565.290:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.709753][ T30] audit: type=1326 audit(2000001565.290:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 1868.731892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.807271][T15790] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1868.942024][T15870] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1869.030140][T15870] usb 3-1: device descriptor read/8, error -71 [ 1869.119018][T15790] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1869.129106][T15790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.137621][T15790] usb 4-1: Product: syz [ 1869.142282][T15790] usb 4-1: Manufacturer: syz [ 1869.147150][T15790] usb 4-1: SerialNumber: syz [ 1869.227720][T15953] fido_id[15953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1869.268674][T15790] usb 4-1: config 0 descriptor?? [ 1869.300530][T15870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1869.347968][T15870] usb 3-1: device descriptor read/8, error -71 [ 1869.380962][T15790] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1869.388134][T15790] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1869.396740][T15790] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1869.484565][T15870] usb usb3-port1: unable to enumerate USB device [ 1869.597756][T15790] usb 4-1: USB disconnect, device number 30 [ 1871.384683][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 1871.621449][T15790] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1871.829763][T15790] usb 10-1: Using ep0 maxpacket: 32 [ 1871.882938][T15790] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1871.891715][T15790] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.902524][T15790] usb 10-1: config 0 has no interface number 0 [ 1871.909003][T15790] usb 10-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1871.976874][T15790] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1871.986580][T15790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.995150][T15790] usb 10-1: Product: syz [ 1871.999767][T15790] usb 10-1: Manufacturer: syz [ 1872.004741][T15790] usb 10-1: SerialNumber: syz [ 1872.015898][T15790] usb 10-1: config 0 descriptor?? [ 1873.629747][T15790] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1873.813608][T15790] usb 3-1: Using ep0 maxpacket: 32 [ 1873.878156][T15790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.889993][T15790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.900590][T15790] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1873.909966][T15790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.052244][T15790] usb 3-1: config 0 descriptor?? [ 1874.144604][T15790] hub 3-1:0.0: USB hub found [ 1874.290440][T15790] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1874.739190][T16017] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1873'. [ 1874.753440][T16016] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1873'. [ 1874.876714][T15790] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1874.969568][ T30] audit: type=1326 audit(2000001571.830:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1874.995450][ T30] audit: type=1326 audit(2000001571.850:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1875.017570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1875.024342][ T30] audit: type=1326 audit(2000001571.850:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1875.034318][ T6843] usb 10-1: USB disconnect, device number 59 [ 1875.046829][ T30] audit: type=1326 audit(2000001571.850:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1875.047072][ T30] audit: type=1326 audit(2000001571.850:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1875.123112][T15790] usb 3-1: USB disconnect, device number 16 [ 1875.677288][ T30] audit: type=1326 audit(2000001572.000:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 1875.699584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1876.020523][T16020] fido_id[16020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1876.149895][T15790] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1876.420214][T15870] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1876.521929][T15790] usb 8-1: no configurations [ 1876.526718][T15790] usb 8-1: can't read configurations, error -22 [ 1876.711397][T15790] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1876.969669][T15870] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1876.979916][T15870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.988698][T15870] usb 10-1: Product: syz [ 1876.994031][T15870] usb 10-1: Manufacturer: syz [ 1876.999211][T15870] usb 10-1: SerialNumber: syz [ 1877.021737][T15790] usb 8-1: no configurations [ 1877.026650][T15790] usb 8-1: can't read configurations, error -22 [ 1877.048295][T15790] usb usb8-port1: attempt power cycle [ 1877.131475][T15870] usb 10-1: config 0 descriptor?? [ 1877.186529][T15870] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1877.194745][T15870] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1877.200604][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 1877.203848][T15870] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1877.485448][T15870] usb 10-1: USB disconnect, device number 60 [ 1877.579793][T15790] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1877.655054][T15790] usb 8-1: no configurations [ 1877.660010][T15790] usb 8-1: can't read configurations, error -22 [ 1877.849922][T15790] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1877.946664][T15790] usb 8-1: no configurations [ 1877.951654][T15790] usb 8-1: can't read configurations, error -22 [ 1877.997877][T15790] usb usb8-port1: unable to enumerate USB device [ 1880.009945][T15870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1880.260325][T15870] usb 4-1: Using ep0 maxpacket: 32 [ 1880.342629][T15870] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1880.351292][T15870] usb 4-1: config 0 has no interface number 0 [ 1880.357668][T15870] usb 4-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.533555][T15870] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1880.543178][T15870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.551787][T15870] usb 4-1: Product: syz [ 1880.556198][T15870] usb 4-1: Manufacturer: syz [ 1880.561254][T15870] usb 4-1: SerialNumber: syz [ 1880.703272][T15870] usb 4-1: config 0 descriptor?? [ 1882.064344][T15790] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1882.240270][T15790] usb 10-1: Using ep0 maxpacket: 32 [ 1882.290783][T15790] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.302617][T15790] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.313128][T15790] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1882.322698][T15790] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.401103][T15790] usb 10-1: config 0 descriptor?? [ 1882.431896][T15790] hub 10-1:0.0: USB hub found [ 1882.614001][T15790] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1883.089801][T15790] hid-generic 0003:046D:C31C.001F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1883.350355][ T30] audit: type=1326 audit(2000001580.130:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.373377][ T30] audit: type=1326 audit(2000001580.130:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.396166][ T30] audit: type=1326 audit(2000001580.130:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.418711][ T30] audit: type=1326 audit(2000001580.130:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.441678][ T30] audit: type=1326 audit(2000001580.130:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.464313][ T30] audit: type=1326 audit(2000001580.140:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.486983][ T30] audit: type=1326 audit(2000001580.140:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.509663][ T30] audit: type=1326 audit(2000001580.140:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.9.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1883.611084][T13198] usb 10-1: USB disconnect, device number 61 [ 1883.756405][T16077] fido_id[16077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1884.002182][ T5849] usb 4-1: USB disconnect, device number 31 [ 1885.105405][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1885.437274][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 1886.329670][ T6843] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1886.500154][T13198] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1886.593739][ T6843] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1886.603520][ T6843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.612223][ T6843] usb 10-1: Product: syz [ 1886.616766][ T6843] usb 10-1: Manufacturer: syz [ 1886.621983][ T6843] usb 10-1: SerialNumber: syz [ 1886.672019][ T6843] usb 10-1: config 0 descriptor?? [ 1886.717741][T13198] usb 4-1: no configurations [ 1886.722840][T13198] usb 4-1: can't read configurations, error -22 [ 1886.756630][ T6843] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1886.763889][ T6843] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1886.772696][ T6843] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1886.900002][T13198] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1886.935674][ T5849] usb 10-1: USB disconnect, device number 62 [ 1887.061450][T13198] usb 4-1: no configurations [ 1887.066250][T13198] usb 4-1: can't read configurations, error -22 [ 1887.126133][T13198] usb usb4-port1: attempt power cycle [ 1887.323345][T16101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1887.509669][T13198] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1887.565282][T13198] usb 4-1: no configurations [ 1887.570566][T13198] usb 4-1: can't read configurations, error -22 [ 1887.776800][T13198] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1887.855912][T13198] usb 4-1: no configurations [ 1887.861124][T13198] usb 4-1: can't read configurations, error -22 [ 1887.937694][T13198] usb usb4-port1: unable to enumerate USB device [ 1888.414786][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1888.440333][T16106] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1889.079708][ T5849] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1889.285300][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 1889.381685][ T5849] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1889.390813][ T5849] usb 5-1: config 0 has no interface number 0 [ 1889.397522][ T5849] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1889.512213][ T5849] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1889.521720][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.530483][ T5849] usb 5-1: Product: syz [ 1889.535313][ T5849] usb 5-1: Manufacturer: syz [ 1889.541331][ T5849] usb 5-1: SerialNumber: syz [ 1889.616041][ T5849] usb 5-1: config 0 descriptor?? [ 1892.681552][ T5849] usb 5-1: USB disconnect, device number 31 [ 1893.339007][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 1894.901686][T16138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1895.842319][T13198] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1896.073159][ T30] audit: type=1326 audit(2000001592.950:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.096276][ T30] audit: type=1326 audit(2000001592.950:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.306392][T13198] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1896.315955][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.324451][T13198] usb 5-1: Product: syz [ 1896.328897][T13198] usb 5-1: Manufacturer: syz [ 1896.333757][T13198] usb 5-1: SerialNumber: syz [ 1896.604269][ T30] audit: type=1326 audit(2000001593.020:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.628310][ T30] audit: type=1326 audit(2000001593.020:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.650911][ T30] audit: type=1326 audit(2000001593.020:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.673730][ T30] audit: type=1326 audit(2000001593.070:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.696226][ T30] audit: type=1326 audit(2000001593.070:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.720252][ T30] audit: type=1326 audit(2000001593.070:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.743769][ T30] audit: type=1326 audit(2000001593.090:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 1896.766144][ T30] audit: type=1326 audit(2000001593.140:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.9.1910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22558 code=0x7ffc0000 [ 1896.802956][T13198] usb 5-1: config 0 descriptor?? [ 1896.880857][T13198] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1896.888015][T13198] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1896.896699][T13198] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1897.124566][ T5849] usb 5-1: USB disconnect, device number 32 [ 1897.850919][T13198] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1898.092641][T13198] usb 10-1: no configurations [ 1898.097727][T13198] usb 10-1: can't read configurations, error -22 [ 1898.290256][T13198] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1898.513202][T13198] usb 10-1: no configurations [ 1898.518310][T13198] usb 10-1: can't read configurations, error -22 [ 1898.825731][T13198] usb usb10-port1: attempt power cycle [ 1898.903856][T15957] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1899.315088][T13198] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1899.379711][T15957] usb 5-1: Using ep0 maxpacket: 32 [ 1899.392582][T13198] usb 10-1: no configurations [ 1899.397499][T13198] usb 10-1: can't read configurations, error -22 [ 1899.415605][T15957] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1899.424238][T15957] usb 5-1: config 0 has no interface number 0 [ 1899.430891][T15957] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.512824][T15957] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1899.522542][T15957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.531026][T15957] usb 5-1: Product: syz [ 1899.535451][T15957] usb 5-1: Manufacturer: syz [ 1899.540427][T15957] usb 5-1: SerialNumber: syz [ 1899.623240][T15957] usb 5-1: config 0 descriptor?? [ 1899.631660][T13198] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1899.736078][T13198] usb 10-1: no configurations [ 1899.741213][T13198] usb 10-1: can't read configurations, error -22 [ 1899.792291][T13198] usb usb10-port1: unable to enumerate USB device [ 1900.164851][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 1902.609188][T15957] usb 5-1: USB disconnect, device number 33 [ 1902.739818][T13198] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1902.961951][T13198] usb 4-1: Using ep0 maxpacket: 32 [ 1903.012459][T13198] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1903.021179][T13198] usb 4-1: config 0 has no interface number 0 [ 1903.027549][T13198] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1903.179429][T13198] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1903.188802][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.197321][T13198] usb 4-1: Product: syz [ 1903.201984][T13198] usb 4-1: Manufacturer: syz [ 1903.206855][T13198] usb 4-1: SerialNumber: syz [ 1903.412633][T13198] usb 4-1: config 0 descriptor?? [ 1903.765188][ T5849] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1904.004693][ T5849] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1904.014830][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.023158][ T5849] usb 5-1: Product: syz [ 1904.027461][ T5849] usb 5-1: Manufacturer: syz [ 1904.032356][ T5849] usb 5-1: SerialNumber: syz [ 1904.050051][ T5849] usb 5-1: config 0 descriptor?? [ 1904.087742][ T5849] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1904.095064][ T5849] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1904.104017][ T5849] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1904.310989][ T5849] usb 5-1: USB disconnect, device number 34 [ 1906.137561][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1906.147119][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1906.179451][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1906.198538][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1906.214099][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1906.447422][ T5849] usb 4-1: USB disconnect, device number 36 [ 1906.480579][T15444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1906.580089][T15444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1906.657787][T15444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1906.871171][T15444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1906.972631][T15444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1908.032077][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1929'. [ 1908.213486][ T5849] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1908.430398][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.440927][ T5849] usb 5-1: config 0 has no interfaces? [ 1908.446560][ T5849] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1908.456289][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.514365][ T5849] usb 5-1: config 0 descriptor?? [ 1909.029760][T15444] Bluetooth: hci0: command tx timeout [ 1909.291852][T16225] chnl_net:caif_netlink_parms(): no params data found [ 1911.099527][T15444] Bluetooth: hci0: command tx timeout [ 1911.512254][T16078] usb 5-1: USB disconnect, device number 35 [ 1911.665231][T16225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.673298][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.681128][T16225] bridge_slave_0: entered allmulticast mode [ 1911.690000][T16225] bridge_slave_0: entered promiscuous mode [ 1911.868572][T16225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.877123][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.884947][T16225] bridge_slave_1: entered allmulticast mode [ 1911.893615][T16225] bridge_slave_1: entered promiscuous mode [ 1912.353659][T16225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.481472][T16225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.880715][T16225] team0: Port device team_slave_0 added [ 1912.991169][T16225] team0: Port device team_slave_1 added [ 1913.181394][T15444] Bluetooth: hci0: command tx timeout [ 1913.632873][T16225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.642720][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.669643][T16225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.830401][T16225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.837703][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.863857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1913.870687][T16225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.034445][T13198] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1914.420330][ T5849] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1914.437927][T13198] usb 4-1: Using ep0 maxpacket: 32 [ 1914.519987][T13198] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1914.528512][T13198] usb 4-1: config 0 has no interface number 0 [ 1914.535127][T13198] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1914.667463][ T5849] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1914.676964][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.685551][ T5849] usb 5-1: Product: syz [ 1914.690045][ T5849] usb 5-1: Manufacturer: syz [ 1914.694847][ T5849] usb 5-1: SerialNumber: syz [ 1914.790892][T13198] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1914.800410][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.805289][T16225] hsr_slave_0: entered promiscuous mode [ 1914.808587][T13198] usb 4-1: Product: syz [ 1914.808694][T13198] usb 4-1: Manufacturer: syz [ 1914.820230][T16225] hsr_slave_1: entered promiscuous mode [ 1914.823851][T13198] usb 4-1: SerialNumber: syz [ 1914.833295][T16225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1914.843422][T16225] Cannot create hsr debugfs directory [ 1914.912398][ T5849] usb 5-1: config 0 descriptor?? [ 1915.052687][T13198] usb 4-1: config 0 descriptor?? [ 1915.075929][ T5849] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1915.083383][ T5849] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1915.092404][ T5849] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1915.260437][T15444] Bluetooth: hci0: command tx timeout [ 1916.147700][T16275] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1916.154352][T16275] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1916.232279][T16078] usb 5-1: USB disconnect, device number 36 [ 1916.751504][ T4240] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.211871][ T4240] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.495600][ T4240] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.827450][ T4240] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.049813][T16078] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1918.084251][ T5849] usb 4-1: USB disconnect, device number 37 [ 1918.271116][T16078] usb 5-1: Using ep0 maxpacket: 32 [ 1918.338295][T16078] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1918.347231][T16078] usb 5-1: config 0 has no interface number 0 [ 1918.353720][T16078] usb 5-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1918.551235][T16078] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1918.561118][T16078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.571507][T16078] usb 5-1: Product: syz [ 1918.576087][T16078] usb 5-1: Manufacturer: syz [ 1918.581692][T16078] usb 5-1: SerialNumber: syz [ 1918.763181][T16078] usb 5-1: config 0 descriptor?? [ 1918.861831][T16225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1918.949640][ T4240] bridge_slave_1: left allmulticast mode [ 1918.955765][ T4240] bridge_slave_1: left promiscuous mode [ 1918.962940][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.363784][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1919.406317][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1919.425775][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1919.462586][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1919.489580][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1919.729496][T15444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1919.740829][T15444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1919.777020][T15444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1919.820339][T15444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1919.949853][T15444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1919.959841][ T4240] bridge_slave_0: left allmulticast mode [ 1919.965770][ T4240] bridge_slave_0: left promiscuous mode [ 1919.972373][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.778082][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1920.862403][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1920.892577][ T4240] bond0 (unregistering): Released all slaves [ 1920.967133][ T5849] usb 5-1: USB disconnect, device number 37 [ 1921.065447][T16225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1921.180815][T16225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1921.577262][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 1921.620072][T16225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1922.061658][T15444] Bluetooth: hci4: command tx timeout [ 1922.094597][ T4240] hsr_slave_0: left promiscuous mode [ 1922.149640][ T4240] hsr_slave_1: left promiscuous mode [ 1922.157746][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1922.166042][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.354094][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.363521][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.535537][ T4240] veth1_macvtap: left promiscuous mode [ 1922.543551][ T4240] veth0_macvtap: left promiscuous mode [ 1922.549893][ T4240] veth1_vlan: left promiscuous mode [ 1922.555538][ T4240] veth0_vlan: left promiscuous mode [ 1922.979941][ T5849] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1923.225012][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.236063][ T5849] usb 4-1: config 0 has no interfaces? [ 1923.241836][ T5849] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1923.251143][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.414752][ T5849] usb 4-1: config 0 descriptor?? [ 1923.681231][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 1923.744181][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 1924.148874][T15444] Bluetooth: hci4: command tx timeout [ 1925.094633][T16293] chnl_net:caif_netlink_parms(): no params data found [ 1925.693711][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1926.035132][T16225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1926.228265][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.235763][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1926.248875][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.256339][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.280779][T15444] Bluetooth: hci4: command tx timeout [ 1926.339666][T13198] usb 4-1: USB disconnect, device number 38 [ 1926.479040][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1926.507300][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1926.559513][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1926.603811][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1926.624517][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1927.826592][T16293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.834348][T16293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.842604][T16293] bridge_slave_0: entered allmulticast mode [ 1927.852346][T16293] bridge_slave_0: entered promiscuous mode [ 1928.083018][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.091820][T16293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.099937][T16293] bridge_slave_1: entered allmulticast mode [ 1928.110041][T16293] bridge_slave_1: entered promiscuous mode [ 1928.277896][ T5849] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1928.310027][ T5801] Bluetooth: hci4: command tx timeout [ 1928.503173][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 1928.546154][ T5849] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1928.556328][ T5849] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1928.566488][ T5849] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1928.703881][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1928.713888][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.722391][ T5849] usb 5-1: Product: syz [ 1928.726766][ T5849] usb 5-1: Manufacturer: syz [ 1928.731760][ T5849] usb 5-1: SerialNumber: syz [ 1928.738455][ T5853] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1928.810624][ T5801] Bluetooth: hci5: command tx timeout [ 1928.866071][T16344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1928.931838][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 1928.950934][ T5853] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1928.960106][ T5853] usb 4-1: config 0 has no interface number 0 [ 1928.966856][ T5853] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1929.009422][T16293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.204032][T16293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.225874][ T5853] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1929.236268][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.244725][ T5853] usb 4-1: Product: syz [ 1929.249146][ T5853] usb 4-1: Manufacturer: syz [ 1929.254324][ T5853] usb 4-1: SerialNumber: syz [ 1929.312427][ T5849] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1929.349144][ T3837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.421818][ T5853] usb 4-1: config 0 descriptor?? [ 1929.697315][ T3837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.840130][ T3837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.905754][T16293] team0: Port device team_slave_0 added [ 1929.982037][ T3837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.042923][T16293] team0: Port device team_slave_1 added [ 1930.385083][T16293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.392461][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.418466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.425348][T16293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.448806][T16331] chnl_net:caif_netlink_parms(): no params data found [ 1930.481522][T16225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.590818][ T5849] usb 5-1: USB disconnect, device number 38 [ 1930.618579][ T5849] usblp0: removed [ 1930.765269][T16293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.774223][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.800362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.807911][T16293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1930.907232][ T5801] Bluetooth: hci5: command tx timeout [ 1931.168206][ T3837] bridge_slave_1: left allmulticast mode [ 1931.174278][ T3837] bridge_slave_1: left promiscuous mode [ 1931.180825][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.282988][ T3837] bridge_slave_0: left allmulticast mode [ 1931.289002][ T3837] bridge_slave_0: left promiscuous mode [ 1931.297703][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.413541][ T5853] usb 4-1: USB disconnect, device number 39 [ 1932.663948][ T3837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.772732][ T3837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.850980][ T3837] bond0 (unregistering): Released all slaves [ 1932.959789][ T5801] Bluetooth: hci5: command tx timeout [ 1933.000116][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1933.075182][T10379] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1933.244250][T16293] hsr_slave_0: entered promiscuous mode [ 1933.254753][T16293] hsr_slave_1: entered promiscuous mode [ 1933.263865][T16293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1933.271821][T16293] Cannot create hsr debugfs directory [ 1933.303167][T10379] usb 4-1: Using ep0 maxpacket: 32 [ 1933.329963][T10379] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1933.338469][T10379] usb 4-1: config 0 has no interface number 0 [ 1933.345028][T10379] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1933.453169][T10379] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1933.462798][T10379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.471538][T10379] usb 4-1: Product: syz [ 1933.475970][T10379] usb 4-1: Manufacturer: syz [ 1933.481138][T10379] usb 4-1: SerialNumber: syz [ 1933.638039][T10379] usb 4-1: config 0 descriptor?? [ 1933.706923][T10379] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1933.717208][T10379] em28xx 4-1:0.132: Video interface 132 found: [ 1934.182076][T10379] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1934.191406][ T3837] hsr_slave_0: left promiscuous mode [ 1934.213632][ T3837] hsr_slave_1: left promiscuous mode [ 1934.222253][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1934.230209][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1934.303936][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1934.311788][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1934.422863][T10379] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1934.432903][T10379] em28xx 4-1:0.132: board has no eeprom [ 1934.463412][ T3837] veth1_macvtap: left promiscuous mode [ 1934.470898][ T3837] veth0_macvtap: left promiscuous mode [ 1934.477164][ T3837] veth1_vlan: left promiscuous mode [ 1934.483293][ T3837] veth0_vlan: left promiscuous mode [ 1934.520090][T10379] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1934.528245][T10379] em28xx 4-1:0.132: analog set to bulk mode. [ 1934.539141][ T6843] em28xx 4-1:0.132: Registering V4L2 extension [ 1934.820789][T10379] usb 4-1: USB disconnect, device number 40 [ 1934.828949][T10379] em28xx 4-1:0.132: Disconnecting em28xx [ 1935.020635][ T5801] Bluetooth: hci5: command tx timeout [ 1935.227696][ T3837] team0 (unregistering): Port device team_slave_1 removed [ 1935.317449][ T3837] team0 (unregistering): Port device team_slave_0 removed [ 1935.671371][T16225] veth0_vlan: entered promiscuous mode [ 1936.132425][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.140791][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.148395][T16331] bridge_slave_0: entered allmulticast mode [ 1936.157779][T16331] bridge_slave_0: entered promiscuous mode [ 1936.240101][T16225] veth1_vlan: entered promiscuous mode [ 1936.375113][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.385442][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.393813][T16331] bridge_slave_1: entered allmulticast mode [ 1936.404403][T16331] bridge_slave_1: entered promiscuous mode [ 1936.804019][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1937.023545][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1937.101502][ T6843] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1937.108994][ T6843] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1937.116764][ T6843] em28xx 4-1:0.132: No AC97 audio processor [ 1937.292378][ T6843] usb 4-1: Decoder not found [ 1937.297278][ T6843] em28xx 4-1:0.132: failed to create media graph [ 1937.304197][ T6843] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1937.452454][T16331] team0: Port device team_slave_0 added [ 1937.526367][ T6843] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1937.543366][T16225] veth0_macvtap: entered promiscuous mode [ 1937.594027][T16331] team0: Port device team_slave_1 added [ 1937.599885][T10379] em28xx 4-1:0.132: Closing input extension [ 1937.611085][T10379] em28xx 4-1:0.132: Freeing device [ 1937.667354][T16225] veth1_macvtap: entered promiscuous mode [ 1938.095726][T10379] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1938.384453][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.384841][T10379] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1938.393105][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.403399][T10379] usb 4-1: config 0 has no interfaces? [ 1938.403566][T10379] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1938.429935][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.435261][T10379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.683964][T16225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.782072][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.789535][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.816266][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.893540][T16225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1939.051099][T16225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.060533][T16225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.069784][T16225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.078841][T16225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.103168][T10379] usb 4-1: config 0 descriptor?? [ 1939.276868][T16293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1939.542325][T16331] hsr_slave_0: entered promiscuous mode [ 1939.553512][T16331] hsr_slave_1: entered promiscuous mode [ 1939.566661][T16293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1939.960877][T16293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1940.168773][T16293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1940.631059][ T5849] usb 4-1: USB disconnect, device number 41 [ 1941.456614][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.693572][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.095837][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.297657][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.973736][ T14] bridge_slave_1: left allmulticast mode [ 1942.980209][ T14] bridge_slave_1: left promiscuous mode [ 1942.986977][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.094914][ T14] bridge_slave_0: left allmulticast mode [ 1943.102591][ T14] bridge_slave_0: left promiscuous mode [ 1943.109447][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.929902][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1944.001251][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1944.045074][ T14] bond0 (unregistering): Released all slaves [ 1944.201230][T16331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1944.290173][T16293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.302839][T16331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1944.432613][T16331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1944.579913][T13198] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1944.607485][T16293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.621380][T16331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1944.746587][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.754333][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1944.801504][T13198] usb 4-1: Using ep0 maxpacket: 32 [ 1944.879549][T13198] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1944.888266][T13198] usb 4-1: config 0 has no interface number 0 [ 1944.895095][T13198] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1944.958428][ T14] hsr_slave_0: left promiscuous mode [ 1944.997602][T13198] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1945.009613][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.017947][T13198] usb 4-1: Product: syz [ 1945.022624][T13198] usb 4-1: Manufacturer: syz [ 1945.027495][T13198] usb 4-1: SerialNumber: syz [ 1945.041697][ T14] hsr_slave_1: left promiscuous mode [ 1945.050547][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1945.058349][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1945.071178][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1945.079133][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1945.092972][T13198] usb 4-1: config 0 descriptor?? [ 1945.188628][ T14] veth1_macvtap: left promiscuous mode [ 1945.196398][ T14] veth0_macvtap: left promiscuous mode [ 1945.202717][ T14] veth1_vlan: left promiscuous mode [ 1945.208322][ T14] veth0_vlan: left promiscuous mode [ 1946.063947][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1946.101226][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1946.295324][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.303051][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.637431][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1947.742796][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 1947.871337][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1947.982439][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.990164][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1948.057236][T13198] usb 4-1: USB disconnect, device number 42 [ 1948.064043][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.064448][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.181289][T13282] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1949.399005][T13282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.410015][T13282] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1949.419627][T13282] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1949.428989][T13282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.561424][T13282] usb 5-1: config 0 descriptor?? [ 1949.569805][T16293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1949.849571][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1950.158630][T16293] veth0_vlan: entered promiscuous mode [ 1950.268988][T16293] veth1_vlan: entered promiscuous mode [ 1950.657389][T16293] veth0_macvtap: entered promiscuous mode [ 1950.687971][ T3837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.697319][ T3837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.702651][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1950.749066][T16293] veth1_macvtap: entered promiscuous mode [ 1950.923019][T16293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1951.032779][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.041168][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.086197][T16293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1951.219576][T16293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.228636][T16293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.238018][T16293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.248405][T16293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.633745][T13198] usb 5-1: USB disconnect, device number 39 [ 1954.252175][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 1954.516109][T16331] veth0_vlan: entered promiscuous mode [ 1954.653582][T16331] veth1_vlan: entered promiscuous mode [ 1955.116758][T16331] veth0_macvtap: entered promiscuous mode [ 1955.187565][T16331] veth1_macvtap: entered promiscuous mode [ 1955.458083][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1955.562877][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1955.710742][T16331] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.721965][T16331] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.731331][T16331] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.741314][T16331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.181271][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.191522][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.541422][T16564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1959.570776][T16564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1959.981425][T16564] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.991036][T16564] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.000598][T16564] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.010065][T16564] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.770674][T10379] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1961.009854][T10379] usb 5-1: Using ep0 maxpacket: 32 [ 1961.028869][T10379] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1961.037721][T10379] usb 5-1: config 0 has no interface number 0 [ 1961.044318][T10379] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1961.249531][T10379] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1961.258897][T10379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.268772][T10379] usb 5-1: Product: syz [ 1961.273268][T10379] usb 5-1: Manufacturer: syz [ 1961.278137][T10379] usb 5-1: SerialNumber: syz [ 1961.376696][T10379] usb 5-1: config 0 descriptor?? [ 1961.451824][T10379] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1961.462514][T10379] em28xx 5-1:0.132: Video interface 132 found: [ 1961.510268][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.518344][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.829843][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.838139][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.881579][T10379] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1961.895671][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 1962.105690][T10379] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1962.115597][T10379] em28xx 5-1:0.132: board has no eeprom [ 1962.259556][T10379] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1962.267880][T10379] em28xx 5-1:0.132: analog set to bulk mode. [ 1962.279732][T13198] em28xx 5-1:0.132: Registering V4L2 extension [ 1962.371367][T10379] usb 5-1: USB disconnect, device number 40 [ 1962.379795][T10379] em28xx 5-1:0.132: Disconnecting em28xx [ 1962.810531][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1962.865335][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1963.709938][T13198] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1963.717301][T13198] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1963.725552][T13198] em28xx 5-1:0.132: No AC97 audio processor [ 1963.834007][T13198] usb 5-1: Decoder not found [ 1963.838999][T13198] em28xx 5-1:0.132: failed to create media graph [ 1963.845990][T13198] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1963.961834][T13198] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1964.024462][T10379] em28xx 5-1:0.132: Closing input extension [ 1964.061659][T10379] em28xx 5-1:0.132: Freeing device [ 1965.699778][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.708000][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1966.153308][ T3837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1966.161574][ T3837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1966.397212][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 1966.650060][T13198] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1966.869715][T13198] usb 2-1: Using ep0 maxpacket: 32 [ 1966.922968][T13198] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1966.931626][T13198] usb 2-1: config 0 has no interface number 0 [ 1966.938016][T13198] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1967.109940][T13198] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1967.120358][T13198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.128677][T13198] usb 2-1: Product: syz [ 1967.133783][T13198] usb 2-1: Manufacturer: syz [ 1967.138622][T13198] usb 2-1: SerialNumber: syz [ 1967.323932][T13198] usb 2-1: config 0 descriptor?? [ 1967.392059][T13198] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1967.402347][T13198] em28xx 2-1:0.132: Video interface 132 found: [ 1967.802270][T13198] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1968.050107][T13198] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1968.059126][T13198] em28xx 2-1:0.132: board has no eeprom [ 1968.193808][T13198] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1968.202111][T13198] em28xx 2-1:0.132: analog set to bulk mode. [ 1968.212694][T15957] em28xx 2-1:0.132: Registering V4L2 extension [ 1968.304955][T13198] usb 2-1: USB disconnect, device number 42 [ 1968.313708][T13198] em28xx 2-1:0.132: Disconnecting em28xx [ 1969.996173][T15957] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1970.003932][T15957] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1970.011711][T15957] em28xx 2-1:0.132: No AC97 audio processor [ 1970.130642][T15957] usb 2-1: Decoder not found [ 1970.135541][T15957] em28xx 2-1:0.132: failed to create media graph [ 1970.142979][T15957] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1970.244896][T15957] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1970.399710][T13198] em28xx 2-1:0.132: Closing input extension [ 1970.459537][T13198] em28xx 2-1:0.132: Freeing device [ 1970.884250][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 1976.027154][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 1978.350246][T16758] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1979.031942][T16760] binder_alloc: 16759: binder_alloc_buf size 16432 failed, no address space [ 1979.041554][T16760] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1981.424476][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 1983.546853][T13198] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1983.767604][T13198] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.778407][T13198] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1983.787956][T13198] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1983.797461][T13198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.906540][T13198] usb 4-1: config 0 descriptor?? [ 1986.682273][T13198] usb 4-1: USB disconnect, device number 43 [ 1987.637891][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 1990.190384][T13198] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1990.424614][T13198] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.435390][T13198] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1990.444957][T13198] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1990.454442][T13198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.465576][ T5849] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1990.652603][T13198] usb 6-1: config 0 descriptor?? [ 1990.717699][ T5849] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1990.727535][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.736141][ T5849] usb 2-1: Product: syz [ 1990.740743][ T5849] usb 2-1: Manufacturer: syz [ 1990.745629][ T5849] usb 2-1: SerialNumber: syz [ 1990.882840][ T5849] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1991.146112][ T5853] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1991.479624][ T5849] usb 2-1: USB disconnect, device number 43 [ 1992.229895][ T5853] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1992.237657][ T5853] ath9k_htc: Failed to initialize the device [ 1992.321196][ T5849] usb 2-1: ath9k_htc: USB layer deinitialized [ 1993.159680][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2064'. [ 1993.369039][T13198] usb 6-1: USB disconnect, device number 11 [ 1995.707132][T16919] 9pnet_fd: Insufficient options for proto=fd [ 1997.663395][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'. [ 1997.699616][T13198] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1997.710354][T15957] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1997.951656][T15957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.962364][T15957] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1997.971989][T15957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.057042][T13198] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1998.067258][T13198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.075815][T13198] usb 6-1: Product: syz [ 1998.080363][T13198] usb 6-1: Manufacturer: syz [ 1998.085238][T13198] usb 6-1: SerialNumber: syz [ 1998.152992][T15957] usb 4-1: config 0 descriptor?? [ 1998.219117][T15957] pwc: Askey VC010 type 2 USB webcam detected. [ 1998.334064][T13198] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.479704][T10379] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1998.705803][T15957] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1998.718953][T15957] pwc: recv_control_msg error -32 req 02 val 2700 [ 1998.745597][ T5849] usb 6-1: USB disconnect, device number 12 [ 1998.790284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.796737][T15957] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1998.828364][T15957] pwc: recv_control_msg error -32 req 04 val 1000 [ 1998.839074][T15957] pwc: recv_control_msg error -32 req 04 val 1300 [ 1998.857305][T15957] pwc: recv_control_msg error -32 req 04 val 1400 [ 1998.879092][T15957] pwc: recv_control_msg error -32 req 02 val 2000 [ 1998.939801][T15957] pwc: recv_control_msg error -32 req 02 val 2100 [ 1998.973858][T15957] pwc: recv_control_msg error -32 req 04 val 1500 [ 1999.025035][T15957] pwc: recv_control_msg error -32 req 02 val 2500 [ 1999.071991][T15957] pwc: recv_control_msg error -32 req 02 val 2400 [ 1999.113819][T15957] pwc: recv_control_msg error -71 req 02 val 2600 [ 1999.143103][T15957] pwc: recv_control_msg error -71 req 02 val 2900 [ 1999.180985][T15957] pwc: recv_control_msg error -71 req 02 val 2800 [ 1999.233928][T15957] pwc: recv_control_msg error -71 req 04 val 1100 [ 1999.253349][T15957] pwc: recv_control_msg error -71 req 04 val 1200 [ 1999.322778][T15957] pwc: Registered as video103. [ 1999.332379][T15957] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1999.428411][T15957] usb 4-1: USB disconnect, device number 44 [ 1999.607534][T10379] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1999.615546][T10379] ath9k_htc: Failed to initialize the device [ 1999.716264][ T5849] usb 6-1: ath9k_htc: USB layer deinitialized [ 2001.445200][T16963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2086'. [ 2003.586963][ T5849] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2003.832342][ T5849] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2003.845200][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.853979][ T5849] usb 4-1: Product: syz [ 2003.858389][ T5849] usb 4-1: Manufacturer: syz [ 2003.863366][ T5849] usb 4-1: SerialNumber: syz [ 2003.881448][T10379] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2004.044641][ T5849] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2004.150875][ T5853] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2004.169756][T10379] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.180420][T10379] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2004.191672][T10379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.473269][T10379] usb 6-1: config 0 descriptor?? [ 2004.520510][T15957] usb 4-1: USB disconnect, device number 45 [ 2004.559096][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 2004.623075][T10379] pwc: Askey VC010 type 2 USB webcam detected. [ 2005.182221][T10379] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2005.281975][ T5853] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2005.290848][ T5853] ath9k_htc: Failed to initialize the device [ 2005.438794][T15957] usb 4-1: ath9k_htc: USB layer deinitialized [ 2005.549735][T10379] pwc: recv_control_msg error -32 req 02 val 2700 [ 2005.560875][T10379] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2005.662340][T10379] pwc: recv_control_msg error -32 req 04 val 1000 [ 2005.730289][T10379] pwc: recv_control_msg error -32 req 04 val 1300 [ 2005.810126][T10379] pwc: recv_control_msg error -32 req 04 val 1400 [ 2005.855826][T10379] pwc: recv_control_msg error -32 req 02 val 2000 [ 2005.949994][T10379] pwc: recv_control_msg error -32 req 02 val 2100 [ 2006.000201][T10379] pwc: recv_control_msg error -32 req 04 val 1500 [ 2006.040258][T10379] pwc: recv_control_msg error -32 req 02 val 2500 [ 2006.105945][T10379] pwc: recv_control_msg error -32 req 02 val 2400 [ 2006.143439][T10379] pwc: recv_control_msg error -71 req 02 val 2600 [ 2006.179100][T10379] pwc: recv_control_msg error -71 req 02 val 2900 [ 2006.220638][T10379] pwc: recv_control_msg error -71 req 02 val 2800 [ 2006.260051][T10379] pwc: recv_control_msg error -71 req 04 val 1100 [ 2006.312741][T10379] pwc: recv_control_msg error -71 req 04 val 1200 [ 2006.352231][T10379] pwc: Registered as video103. [ 2006.361718][T10379] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 2006.457656][T10379] usb 6-1: USB disconnect, device number 13 [ 2008.603464][T17036] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2008.773609][T17036] kvm: pic: non byte read [ 2008.831389][T17036] kvm: pic: level sensitive irq not supported [ 2008.831825][T17036] kvm: pic: non byte read [ 2010.209632][T10379] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2010.727305][T10379] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.737009][T10379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.747715][T10379] usb 1-1: Product: syz [ 2010.752984][T10379] usb 1-1: Manufacturer: syz [ 2010.757813][T10379] usb 1-1: SerialNumber: syz [ 2010.792123][T10379] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2011.192121][ T5853] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2011.344593][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.489684][T15957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2011.607828][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.620690][ T5853] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2011.630274][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.812421][T10379] usb 1-1: USB disconnect, device number 37 [ 2011.852886][ C1] vkms_vblank_simulate: vblank timer overrun [ 2012.259592][ T5853] usb 5-1: config 0 descriptor?? [ 2012.863722][T15957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2012.869758][ T5853] pwc: Askey VC010 type 2 USB webcam detected. [ 2012.872031][T15957] ath9k_htc: Failed to initialize the device [ 2013.166440][ T5853] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2013.189638][T10379] usb 1-1: ath9k_htc: USB layer deinitialized [ 2013.207860][ T5853] pwc: recv_control_msg error -32 req 02 val 2700 [ 2013.276864][ T5853] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2013.341583][ T5853] pwc: recv_control_msg error -32 req 04 val 1000 [ 2013.393830][ T5853] pwc: recv_control_msg error -32 req 04 val 1300 [ 2013.426084][T17079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2013.478827][ T5853] pwc: recv_control_msg error -32 req 04 val 1400 [ 2013.581671][ T5853] pwc: recv_control_msg error -32 req 02 val 2000 [ 2013.680317][ T5853] pwc: recv_control_msg error -32 req 02 val 2100 [ 2013.710072][ T5853] pwc: recv_control_msg error -32 req 04 val 1500 [ 2013.748416][ T5853] pwc: recv_control_msg error -32 req 02 val 2500 [ 2013.789839][ T5853] pwc: recv_control_msg error -32 req 02 val 2400 [ 2013.813900][ T5853] pwc: recv_control_msg error -71 req 02 val 2600 [ 2013.869052][ T5853] pwc: recv_control_msg error -71 req 02 val 2900 [ 2013.880674][ T5853] pwc: recv_control_msg error -71 req 02 val 2800 [ 2013.929029][ T5853] pwc: recv_control_msg error -71 req 04 val 1100 [ 2013.990054][ T5853] pwc: recv_control_msg error -71 req 04 val 1200 [ 2014.047444][ T5853] pwc: Registered as video103. [ 2014.056684][ T5853] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 2014.181562][ T5853] usb 5-1: USB disconnect, device number 41 [ 2014.730083][T17094] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2014.889937][T17094] kvm: pic: non byte read [ 2014.895896][T17094] kvm: pic: level sensitive irq not supported [ 2014.896270][T17094] kvm: pic: non byte read [ 2016.680036][ T5853] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2016.951161][ T5853] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2016.960861][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.969163][ T5853] usb 5-1: Product: syz [ 2016.973960][ T5853] usb 5-1: Manufacturer: syz [ 2016.978773][ T5853] usb 5-1: SerialNumber: syz [ 2017.173022][ T5853] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2017.299557][T13282] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2017.789801][ T5853] usb 5-1: USB disconnect, device number 42 [ 2017.839262][ C0] vkms_vblank_simulate: vblank timer overrun [ 2018.399606][T13282] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2018.407487][T13282] ath9k_htc: Failed to initialize the device [ 2018.540173][ T5853] usb 5-1: ath9k_htc: USB layer deinitialized [ 2018.776908][T15957] IPVS: starting estimator thread 0... [ 2018.869700][T17142] IPVS: using max 240 ests per chain, 12000 per kthread [ 2020.579774][ T5853] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2020.769730][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 2020.855827][ T5853] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2020.868310][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.878163][ T5853] usb 5-1: Product: syz [ 2020.885914][ T5853] usb 5-1: Manufacturer: syz [ 2020.890988][ T5853] usb 5-1: SerialNumber: syz [ 2020.945787][ T5853] usb 5-1: config 0 descriptor?? [ 2021.017309][ T5853] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2021.026745][ T5853] usb 5-1: setting power ON [ 2021.031530][ T5853] dvb-usb: bulk message failed: -22 (2/0) [ 2021.215729][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2021.251138][T17152] dvb-usb: bulk message failed: -22 (3/0) [ 2021.257350][T17152] ===================================================== [ 2021.264929][T17152] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 2021.272332][T17152] cxusb_i2c_xfer+0x1303/0x18e0 [ 2021.277316][T17152] __i2c_transfer+0xeca/0x30e0 [ 2021.282260][T17152] i2c_transfer+0x300/0x4b0 [ 2021.288257][T17152] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2021.293795][T17152] compat_i2cdev_ioctl+0xaa3/0xb40 [ 2021.299034][T17152] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 2021.304881][T17152] ia32_sys_call+0x2d07/0x42c0 [ 2021.309878][T17152] __do_fast_syscall_32+0xb0/0x110 [ 2021.315146][T17152] do_fast_syscall_32+0x38/0x80 [ 2021.320212][T17152] do_SYSENTER_32+0x1f/0x30 [ 2021.326432][T17152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2021.333024][T17152] [ 2021.335411][T17152] Local variable timer created at: [ 2021.340687][T17152] schedule_timeout+0x44/0x240 [ 2021.345600][T17152] wait_for_completion_interruptible+0x345/0x8a0 [ 2021.352144][T17152] [ 2021.354578][T17152] CPU: 0 UID: 0 PID: 17152 Comm: syz.4.2142 Not tainted 6.15.0-rc6-syzkaller-00234-g83a896549f92 #0 PREEMPT(undef) [ 2021.366990][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2021.377278][T17152] ===================================================== [ 2021.384332][T17152] Disabling lock debugging due to kernel taint [ 2021.391963][T17152] Kernel panic - not syncing: kmsan.panic set ... [ 2021.398475][T17152] CPU: 0 UID: 0 PID: 17152 Comm: syz.4.2142 Tainted: G B 6.15.0-rc6-syzkaller-00234-g83a896549f92 #0 PREEMPT(undef) [ 2021.412359][T17152] Tainted: [B]=BAD_PAGE [ 2021.416581][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2021.426738][T17152] Call Trace: [ 2021.430125][T17152] [ 2021.433131][T17152] __dump_stack+0x26/0x30 [ 2021.437588][T17152] dump_stack_lvl+0x53/0x270 [ 2021.442304][T17152] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2021.448277][T17152] dump_stack+0x1e/0x25 [ 2021.452559][T17152] panic+0x4bd/0xd50 [ 2021.456626][T17152] kmsan_report+0x29d/0x2a0 [ 2021.461302][T17152] ? vprintk_default+0x3f/0x50 [ 2021.466313][T17152] ? __msan_warning+0x96/0x120 [ 2021.471216][T17152] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 2021.476381][T17152] ? __i2c_transfer+0xeca/0x30e0 [ 2021.481433][T17152] ? i2c_transfer+0x300/0x4b0 [ 2021.486300][T17152] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2021.491517][T17152] ? compat_i2cdev_ioctl+0xaa3/0xb40 [ 2021.497027][T17152] ? __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 2021.502883][T17152] ? ia32_sys_call+0x2d07/0x42c0 [ 2021.507942][T17152] ? __do_fast_syscall_32+0xb0/0x110 [ 2021.513413][T17152] ? do_fast_syscall_32+0x38/0x80 [ 2021.518568][T17152] ? do_SYSENTER_32+0x1f/0x30 [ 2021.523383][T17152] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2021.530049][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.535414][T17152] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2021.541974][T17152] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2021.548192][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.553567][T17152] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2021.560057][T17152] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2021.566284][T17152] ? mutex_unlock+0x29/0x50 [ 2021.570935][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.576305][T17152] __msan_warning+0x96/0x120 [ 2021.581040][T17152] cxusb_i2c_xfer+0x1303/0x18e0 [ 2021.586065][T17152] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2021.592075][T17152] ? should_fail_ex+0x45/0x8a0 [ 2021.597034][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.602381][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.607742][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.613117][T17152] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 2021.618472][T17152] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 2021.623822][T17152] __i2c_transfer+0xeca/0x30e0 [ 2021.628714][T17152] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2021.635204][T17152] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 2021.641079][T17152] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2021.647317][T17152] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 2021.653253][T17152] i2c_transfer+0x300/0x4b0 [ 2021.657914][T17152] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2021.663027][T17152] compat_i2cdev_ioctl+0xaa3/0xb40 [ 2021.668302][T17152] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2021.674093][T17152] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 2021.679814][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.685196][T17152] ? kmsan_get_metadata+0x105/0x1b0 [ 2021.690568][T17152] ia32_sys_call+0x2d07/0x42c0 [ 2021.695534][T17152] __do_fast_syscall_32+0xb0/0x110 [ 2021.700900][T17152] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 2021.706793][T17152] do_fast_syscall_32+0x38/0x80 [ 2021.711834][T17152] do_SYSENTER_32+0x1f/0x30 [ 2021.716521][T17152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2021.723037][T17152] RIP: 0023:0xf70de539 [ 2021.727220][T17152] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2021.746967][T17152] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2021.755515][T17152] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2021.763608][T17152] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 2021.771691][T17152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2021.779760][T17152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2021.787827][T17152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2021.795938][T17152] [ 2021.799443][T17152] Kernel Offset: disabled [ 2021.803879][T17152] Rebooting in 86400 seconds..