last executing test programs: 25m50.289715542s ago: executing program 1 (id=418): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$read(0x2, r6, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) 25m48.406617483s ago: executing program 1 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 25m47.942308118s ago: executing program 1 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="6500000000000000050000000000000022000000000000000200000000000000cf"], 0x22, 0x0) 25m47.333746639s ago: executing program 1 (id=424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 25m46.372540313s ago: executing program 1 (id=426): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xf6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800849, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 25m44.125477535s ago: executing program 1 (id=430): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x4401, 0x8, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x722, 0x400, 0x2, 0x13, 0x100, 0x0, 0x9, 0x34d, 0x3, 0x3fd, 0x40, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x3fffd, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 25m28.491688288s ago: executing program 32 (id=430): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x4401, 0x8, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x722, 0x400, 0x2, 0x13, 0x100, 0x0, 0x9, 0x34d, 0x3, 0x3fd, 0x40, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x3fffd, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 24m46.728083818s ago: executing program 4 (id=516): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) 24m44.956616064s ago: executing program 4 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 24m44.595899682s ago: executing program 4 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 24m43.574040503s ago: executing program 4 (id=525): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x50) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000"], 0x110) 24m43.498277651s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) 24m39.039200782s ago: executing program 4 (id=534): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[], 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 24m37.807257715s ago: executing program 2 (id=538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 24m36.723897667s ago: executing program 2 (id=540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) 24m36.175861268s ago: executing program 2 (id=543): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b211e16e20a8ed34000000000803000000000000000000000000000900010073797a30000000000600024088a80000850003000100000004000480"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) syz_open_dev$admmidi(&(0x7f0000000380), 0x2, 0x1b5281) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x1, @remote, 0x1}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x29, 0x2, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 24m30.994117758s ago: executing program 2 (id=552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) 24m29.938971956s ago: executing program 2 (id=553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 24m28.846379705s ago: executing program 2 (id=556): epoll_create1(0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x8000, 0x9a}, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="1c80150b93e02caeba8368339f93a8511cc777cc8e8e0722c1596aac8538d5b809686745c369fb78b6ddcb844ce37c44391255499d5ffeb0bd900d1936e0436320231a4764f1e61e4e2d840edc0d05c0aac4c2ee9fa63aa5b358f41d54c0d60eaf16f4a013729e983e1f0d48b4be72cf59e846f56dc49780b8601319b0802817ffcf3df417ddb72dac55fc33", 0x8c}, {&(0x7f0000000700)="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", 0x4e0}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="1400000000000000290004003e00000001000000000000003fa1f63cbe0f1ac1b60767823b38c8cc386fa8bde0e10f1e44cbd0363c7a7dc3a38c3a8ebcaf95b8795facfcacafbeda1bb79e17017289fc01b3aea88252b73a35b6caa992f7a148db5eed9d415515dd1d494256cf88beb6aa07b198c25f0a9a408ae9dff44514c60bffbe6f00840db80e9bce131db88084c9db3e976e0b7aab80188e2cfa626c132ede"], 0x18}, 0x5) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x3, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x3, 0x10b, 0x100000, 0x3, 0x4, 0x20001, 0x20007, 0x0, [0x0, 0x400, 0x10, 0x2]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') 24m23.744452747s ago: executing program 33 (id=534): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[], 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 24m13.709856637s ago: executing program 34 (id=556): epoll_create1(0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x8000, 0x9a}, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="1c80150b93e02caeba8368339f93a8511cc777cc8e8e0722c1596aac8538d5b809686745c369fb78b6ddcb844ce37c44391255499d5ffeb0bd900d1936e0436320231a4764f1e61e4e2d840edc0d05c0aac4c2ee9fa63aa5b358f41d54c0d60eaf16f4a013729e983e1f0d48b4be72cf59e846f56dc49780b8601319b0802817ffcf3df417ddb72dac55fc33", 0x8c}, {&(0x7f0000000700)="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", 0x4e0}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="1400000000000000290004003e00000001000000000000003fa1f63cbe0f1ac1b60767823b38c8cc386fa8bde0e10f1e44cbd0363c7a7dc3a38c3a8ebcaf95b8795facfcacafbeda1bb79e17017289fc01b3aea88252b73a35b6caa992f7a148db5eed9d415515dd1d494256cf88beb6aa07b198c25f0a9a408ae9dff44514c60bffbe6f00840db80e9bce131db88084c9db3e976e0b7aab80188e2cfa626c132ede"], 0x18}, 0x5) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x3, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x3, 0x10b, 0x100000, 0x3, 0x4, 0x20001, 0x20007, 0x0, [0x0, 0x400, 0x10, 0x2]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') 23m12.513202898s ago: executing program 0 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 23m11.230586183s ago: executing program 0 (id=681): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b211e16e20a8ed34000000000803000000000000000000000000000900010073797a30000000000600024088a80000850003000100000004000480"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) syz_open_dev$admmidi(&(0x7f0000000380), 0x2, 0x1b5281) r4 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x1, @remote, 0x1}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$kcm(0x29, 0x2, 0x0) accept4(r8, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 23m8.073635934s ago: executing program 0 (id=685): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r2}) 23m7.969274846s ago: executing program 0 (id=686): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$binfmt_format(r0, &(0x7f0000000140)='1\x00', 0x2) 23m7.602002739s ago: executing program 0 (id=688): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) 23m6.714400655s ago: executing program 0 (id=689): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x9, 0xd, &(0x7f0000001200)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000b70202000000000085510000860100001839000001000000000000080000000095000000000000000fec6cd4e868ea82257873a6734dee866d0a1c4dc8e157ac470d02e96c9bfaa7e546a08aba81cd3b5fe77f1175054f66d6cf2c8c063bb6c64b529479d91a7f85bf9ce2d7f87696a0100d7f2ccdc76663e4c5ff34061e4c2d114f1709b380f012835601eb01b58e001ee946270856e4781179ec5a5d52334bdfd285a9b86219425a2a07ed3bce84865a7cc84604d3b0fd58f8f2c46f28e7e9baae258e98196f7a17393f6ad3b616cc95cf5743a1e235f9dd57f57d29876c723b558b0228442dbc13a8be89"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={0x0, 0x0, 0x4000, r3}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x121) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, 0x0, 0x800) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 22m51.635204233s ago: executing program 35 (id=689): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x9, 0xd, &(0x7f0000001200)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000b70202000000000085510000860100001839000001000000000000080000000095000000000000000fec6cd4e868ea82257873a6734dee866d0a1c4dc8e157ac470d02e96c9bfaa7e546a08aba81cd3b5fe77f1175054f66d6cf2c8c063bb6c64b529479d91a7f85bf9ce2d7f87696a0100d7f2ccdc76663e4c5ff34061e4c2d114f1709b380f012835601eb01b58e001ee946270856e4781179ec5a5d52334bdfd285a9b86219425a2a07ed3bce84865a7cc84604d3b0fd58f8f2c46f28e7e9baae258e98196f7a17393f6ad3b616cc95cf5743a1e235f9dd57f57d29876c723b558b0228442dbc13a8be89"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={0x0, 0x0, 0x4000, r3}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x121) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, 0x0, 0x800) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 3m32.00178086s ago: executing program 8 (id=2492): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 3m25.751396324s ago: executing program 8 (id=2502): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af25, &(0x7f0000000000)={0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00)-', @ANYRES32, @ANYBLOB="0c0003800400038004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 3m23.193966453s ago: executing program 8 (id=2509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m22.012975762s ago: executing program 8 (id=2510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3m20.50313368s ago: executing program 8 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3m20.253963688s ago: executing program 8 (id=2515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x3, 0x2, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m19.67500126s ago: executing program 7 (id=2518): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af25, &(0x7f0000000000)={0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00)-', @ANYRES32, @ANYBLOB="0c0003800400038004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 3m17.650170541s ago: executing program 7 (id=2520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0xc06, 0x140, 0x550, 0x600, 0x10006, 0x0, 0x1, 0x0, {0x57f8, 0x9}, {0x350, 0x20002}, {0x1}, {0x4, 0x0, 0x7fe}, 0x2, 0x1, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, 0x0) socket$netlink(0x10, 0x3, 0x0) getpgid(r0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r6, @ANYRES16, @ANYRES32, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3m16.45265759s ago: executing program 7 (id=2522): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x42002, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ppoll(&(0x7f0000000600)=[{r2, 0x12}, {r3}], 0x2, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000300)) shutdown(r1, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000640)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="0558d7f75ce60329e146bfccd5443fcf73c4b83efe1a80a9", 0x18}], 0x1, 0x0, 0x0, 0x4000011}, 0x8080) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m12.64112559s ago: executing program 7 (id=2529): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af25, &(0x7f0000000000)={0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00)-', @ANYRES32, @ANYBLOB="0c0003800400038004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 3m8.940152011s ago: executing program 7 (id=2533): r0 = syz_io_uring_setup(0x107, &(0x7f0000000500)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000180), 0x8) 3m7.488740455s ago: executing program 7 (id=2537): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) 3m4.306971377s ago: executing program 36 (id=2515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x3, 0x2, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18.472051546s ago: executing program 3 (id=2774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x0, 0x8000000000000000, 0xfffffffffffff279, 0x4, 0x69, {0x4, 0x8, 0x3, 0x80, 0x6, 0x63, 0x65, 0xfffff800, 0x3, 0x4000, 0x65, r2, r3, 0x3, 0x10001}}, {0x6, 0x1000, 0x3, 0x5d, '}[)'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.766099991s ago: executing program 3 (id=2778): socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 12.91313821s ago: executing program 5 (id=2782): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bridge_slave_1\x00', &(0x7f0000000500)=@ethtool_ts_info}) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x100, 0x4d, 0x6, 0x8000, 0x9, 0x9, 0x98e, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x8, 0xd, 0x2, 0x80, 0xffffffff, 0xe65e, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x65f8, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x90, 0x6, 0x0, 0x5, 0x4, 0x40000008, 0x3ff, 0x80, 0x0, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8], [0x8, 0x9, 0x8000012f, 0xf7, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x3, 0xfffffffe, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x7f, 0x27, 0xe, 0x312, 0x78, 0xea1, 0x3ff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x4, 0x1, 0x9, 0x3, 0x3, 0x0, 0xebf, 0x48c93693, 0x42, 0x3], [0x7, 0x407, 0x4, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x200086, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x8b4, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2080, 0x3, 0x1004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x24ac5e56, 0x5, 0x1c, 0x120000, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xd9, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x101, 0xa, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x227, 0x5, 0x8, 0x8, 0x30b1d693, 0xa1f, 0x89, 0xa673, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3443, 0xfff]}, 0x45c) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 11.508601664s ago: executing program 6 (id=2783): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=0x0) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10.677185589s ago: executing program 5 (id=2784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b5, 0x0, 0xffffffffffffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.950611618s ago: executing program 6 (id=2785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) userfaultfd(0x801) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 8.541886569s ago: executing program 6 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0xa5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8.522996781s ago: executing program 5 (id=2787): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.192399828s ago: executing program 3 (id=2788): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x207}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7.641646067s ago: executing program 6 (id=2789): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 7.371992132s ago: executing program 5 (id=2790): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b5, 0x0, 0xffffffffffffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.340227521s ago: executing program 6 (id=2791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000002c0)=0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b0000000000101040000000000000000070000055c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000012c00018000000100e000000200000200ac14143a180002800600034000010000e7ff0280050001002100000020001700000000000053300000000f00000005080015400000000400"/152], 0xb0}, 0x1, 0x0, 0x0, 0x2000c085}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xe8d, &(0x7f0000000380)={0x0, 0xa5d3, 0x10, 0x0, 0x348, 0x0, r7}, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2c9, &(0x7f0000000580)={0x0, 0x62ba, 0x1186, 0x1, 0x8e}, &(0x7f0000000480), &(0x7f0000000400)) r10 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0xd, r11, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, 0x0, 0x0) 7.193763423s ago: executing program 3 (id=2792): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=0x0) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.60061265s ago: executing program 5 (id=2793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f86, 0x3, 0x9, 0x1, 0x8, 0x8, 0x722, 0x5, 0xb, 0x8, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) 2.572191252s ago: executing program 3 (id=2794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) userfaultfd(0x801) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.010926211s ago: executing program 6 (id=2795): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b5, 0x0, 0xffffffffffffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.354064642s ago: executing program 3 (id=2796): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500"], 0x7c}}, 0x4814) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x21c) 0s ago: executing program 5 (id=2797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0xa5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): [T15815] binder: 15814:15815 ioctl 4018620d 0 returned -22 [ 1471.930193][T15815] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1471.930321][T15815] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1473.443018][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.523001][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.584453][ T6159] bond0 (unregistering): Released all slaves [ 1473.798017][T15524] veth0_macvtap: entered promiscuous mode [ 1473.957197][T15827] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 1474.352616][ T6159] hsr_slave_0: left promiscuous mode [ 1474.403191][ T6159] hsr_slave_1: left promiscuous mode [ 1474.405411][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.506721][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.393575][T15843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1475.543227][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 1475.602537][T11469] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1475.616797][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 1475.744081][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 1475.759524][T11469] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1475.761194][T11469] usb 8-1: config 64 has an invalid interface number: 110 but max is 1 [ 1475.761220][T11469] usb 8-1: config 64 has an invalid interface number: 71 but max is 1 [ 1475.761241][T11469] usb 8-1: config 64 has no interface number 0 [ 1475.761257][T11469] usb 8-1: config 64 has no interface number 1 [ 1475.761299][T11469] usb 8-1: config 64 interface 110 has no altsetting 0 [ 1475.829368][T11469] usb 8-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1475.829397][T11469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1475.829417][T11469] usb 8-1: Product: syz [ 1475.829431][T11469] usb 8-1: Manufacturer: syz [ 1475.829444][T11469] usb 8-1: SerialNumber: syz [ 1477.689468][T15524] veth1_macvtap: entered promiscuous mode [ 1477.721793][T15841] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2217'. [ 1477.777450][T11469] usb 8-1: USB disconnect, device number 39 [ 1478.036686][T15524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1478.076859][T15524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.287839][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.290804][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.290850][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.290885][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.586337][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.586358][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.620280][T15557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.682664][ T44] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 1483.720161][T13746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.720189][T13746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.837723][ T44] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1483.837756][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1483.837788][ T44] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1483.837829][ T44] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1483.837850][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.849454][ T44] usb 8-1: config 0 descriptor?? [ 1483.850504][T15874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1483.850751][T15874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1483.888729][ T44] metro_usb 8-1:0.0: Metrologic USB to Serial converter detected [ 1483.922682][ T44] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1484.394482][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2229'. [ 1484.665849][ T1562] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1484.956419][ T1562] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1484.958022][ T1562] usb 4-1: config 64 has an invalid interface number: 110 but max is 1 [ 1484.958048][ T1562] usb 4-1: config 64 has an invalid interface number: 71 but max is 1 [ 1484.958069][ T1562] usb 4-1: config 64 has no interface number 0 [ 1484.958086][ T1562] usb 4-1: config 64 has no interface number 1 [ 1484.958132][ T1562] usb 4-1: config 64 interface 110 has no altsetting 0 [ 1485.106471][ T1562] usb 4-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1485.106502][ T1562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1485.106522][ T1562] usb 4-1: Product: syz [ 1485.106536][ T1562] usb 4-1: Manufacturer: syz [ 1485.106550][ T1562] usb 4-1: SerialNumber: syz [ 1485.203303][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.203375][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.443116][T15897] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1485.536157][T15897] syz.5.2230 (15897): drop_caches: 2 [ 1485.536418][T15897] syz.5.2230 (15897): drop_caches: 2 [ 1485.760186][ T1562] usb 4-1: USB disconnect, device number 55 [ 1485.921126][T15732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1486.006191][T15732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1486.058350][T15732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1486.102332][T15910] binder: 15909:15910 ioctl 4018620d 0 returned -22 [ 1486.113123][T15732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1486.382616][T15914] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1486.387172][T15914] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1486.633764][ T1562] usb 8-1: USB disconnect, device number 40 [ 1486.808505][ T1562] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1486.809309][ T1562] metro_usb 8-1:0.0: device disconnected [ 1487.191396][T15557] veth0_vlan: entered promiscuous mode [ 1487.291008][T15557] veth1_vlan: entered promiscuous mode [ 1487.386147][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 1487.386215][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 1487.386351][T15930] netlink: 'syz.5.2235': attribute type 13 has an invalid length. [ 1487.386397][T15930] netlink: 'syz.5.2235': attribute type 12 has an invalid length. [ 1488.306894][T15557] veth0_macvtap: entered promiscuous mode [ 1488.328240][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.356846][T15557] veth1_macvtap: entered promiscuous mode [ 1488.527061][T15947] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2240'. [ 1488.620260][T15947] syz.7.2240 (15947): drop_caches: 2 [ 1488.646640][T15947] syz.7.2240 (15947): drop_caches: 2 [ 1489.816324][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.874383][T15557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.892627][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.892812][T13747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.953506][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.953720][T13747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.196185][T15732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.716133][T15732] veth0_vlan: entered promiscuous mode [ 1491.736626][T15732] veth1_vlan: entered promiscuous mode [ 1492.050448][ T1562] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1492.132502][ T5897] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1492.169429][T15967] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2242'. [ 1492.206360][ T1562] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1492.206395][ T1562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1492.206418][ T1562] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1492.206459][ T1562] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1492.206482][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.210012][ T1562] usb 6-1: config 0 descriptor?? [ 1492.210562][T15964] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1492.210675][T15964] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1492.212841][ T1562] metro_usb 6-1:0.0: Metrologic USB to Serial converter detected [ 1492.295928][ T5897] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1492.299361][ T5897] usb 8-1: config 64 has an invalid interface number: 110 but max is 1 [ 1492.299386][ T5897] usb 8-1: config 64 has an invalid interface number: 71 but max is 1 [ 1492.299404][ T5897] usb 8-1: config 64 has no interface number 0 [ 1492.299419][ T5897] usb 8-1: config 64 has no interface number 1 [ 1492.299462][ T5897] usb 8-1: config 64 interface 110 has no altsetting 0 [ 1492.305061][ T5897] usb 8-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1492.305089][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1492.305150][ T5897] usb 8-1: Product: syz [ 1492.305165][ T5897] usb 8-1: Manufacturer: syz [ 1492.305179][ T5897] usb 8-1: SerialNumber: syz [ 1492.368796][ T1562] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1492.661942][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1492.680186][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1492.681749][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1492.689252][T15732] veth0_macvtap: entered promiscuous mode [ 1492.720865][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1492.721818][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1492.783309][T15732] veth1_macvtap: entered promiscuous mode [ 1492.929499][ T5897] usb 8-1: USB disconnect, device number 41 [ 1493.294014][T15732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.417439][T15732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.469469][ T83] bridge_slave_1: left allmulticast mode [ 1493.469496][ T83] bridge_slave_1: left promiscuous mode [ 1493.469729][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.553443][ T83] bridge_slave_0: left allmulticast mode [ 1493.553464][ T83] bridge_slave_0: left promiscuous mode [ 1493.553618][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.847549][T15984] tmpfs: Bad value for 'mpol' [ 1494.210721][T15986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.762785][T13193] Bluetooth: hci3: command tx timeout [ 1494.927155][T15973] usb 6-1: USB disconnect, device number 2 [ 1494.985990][T15973] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1494.986802][T15973] metro_usb 6-1:0.0: device disconnected [ 1496.662866][T16003] netlink: 'syz.3.2252': attribute type 10 has an invalid length. [ 1496.842906][T13193] Bluetooth: hci3: command tx timeout [ 1497.467713][T16008] afs: Unknown parameter 'dy' [ 1498.467485][T16011] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1498.492732][T16011] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1498.775760][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.970187][T13193] Bluetooth: hci3: command tx timeout [ 1498.983523][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.385399][ T83] bond0 (unregistering): Released all slaves [ 1500.002995][ T3600] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.005217][ T3600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.034940][ T3600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.039824][ T3600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.232516][T15893] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 1500.292544][ T83] hsr_slave_0: left promiscuous mode [ 1500.332650][ T83] hsr_slave_1: left promiscuous mode [ 1500.334765][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.334791][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.364487][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.384234][T15893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1500.384266][T15893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1500.384355][T15893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.384398][T15893] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1500.384421][T15893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.389209][T15893] usb 4-1: config 0 descriptor?? [ 1500.390460][T16018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1500.390592][T16018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1500.398049][T15893] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected [ 1500.412200][T15893] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1500.558084][ T83] veth1_macvtap: left promiscuous mode [ 1500.558149][ T83] veth0_macvtap: left promiscuous mode [ 1500.558316][ T83] veth1_vlan: left promiscuous mode [ 1500.558448][ T83] veth0_vlan: left promiscuous mode [ 1501.002759][T13193] Bluetooth: hci3: command tx timeout [ 1502.540656][T16033] syz.5.2261 (16033): drop_caches: 2 [ 1502.551590][T16033] syz.5.2261 (16033): drop_caches: 2 [ 1503.029185][T16037] afs: Unknown parameter 'dy' [ 1503.494060][T15973] usb 4-1: USB disconnect, device number 56 [ 1503.943946][T15973] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1503.944759][T15973] metro_usb 4-1:0.0: device disconnected [ 1504.136003][T16042] netlink: 'syz.5.2265': attribute type 10 has an invalid length. [ 1504.217988][T16044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2263'. [ 1504.390842][T16044] syz.3.2263 (16044): drop_caches: 2 [ 1504.509078][T16044] syz.3.2263 (16044): drop_caches: 2 [ 1506.308952][T16052] tmpfs: Bad value for 'mpol' [ 1506.631587][T16054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1507.424498][ T83] team0 (unregistering): Port device team_slave_1 removed [ 1507.653282][ T83] team0 (unregistering): Port device team_slave_0 removed [ 1510.076834][T16042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.078363][T16042] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1510.603449][T15893] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1511.090331][T15893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1511.090365][T15893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1511.090388][T15893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1511.090430][T15893] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1511.090453][T15893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.131213][T15974] chnl_net:caif_netlink_parms(): no params data found [ 1511.153272][T13923] kernel write not supported for file /video36 (pid: 13923 comm: kworker/1:0) [ 1511.237848][T15893] usb 4-1: config 0 descriptor?? [ 1511.238887][T16063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1511.239013][T16063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1511.332562][T15893] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected [ 1511.395227][T15893] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1511.998052][T16077] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1512.004023][T16077] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1512.459050][T15707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.459071][T15707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.580688][T13923] usb 4-1: USB disconnect, device number 57 [ 1513.929968][T13923] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1513.930747][T13923] metro_usb 4-1:0.0: device disconnected [ 1514.392494][T13923] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1514.504960][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.504975][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.555543][T13923] usb 4-1: Using ep0 maxpacket: 32 [ 1514.586728][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.586867][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.587082][T15974] bridge_slave_0: entered allmulticast mode [ 1514.624682][T13923] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1514.624710][T13923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.624730][T13923] usb 4-1: Product: syz [ 1514.624745][T13923] usb 4-1: Manufacturer: syz [ 1514.624761][T13923] usb 4-1: SerialNumber: syz [ 1514.630938][T15974] bridge_slave_0: entered promiscuous mode [ 1514.724331][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.724452][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.724692][T15974] bridge_slave_1: entered allmulticast mode [ 1514.759804][T15974] bridge_slave_1: entered promiscuous mode [ 1514.772653][T13923] usb 4-1: config 0 descriptor?? [ 1514.829969][T13923] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1515.135723][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.203781][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.771558][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2276'. [ 1515.865036][T15974] team0: Port device team_slave_0 added [ 1515.907455][T15974] team0: Port device team_slave_1 added [ 1516.837020][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.837032][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.837046][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.893323][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.893340][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.893367][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.942774][T13923] gspca_stk1135: reg_w 0x200 err -110 [ 1516.943819][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1516.943832][T13923] gspca_stk1135: Sensor write failed [ 1516.943862][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1516.943872][T13923] gspca_stk1135: Sensor write failed [ 1516.943908][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1516.943917][T13923] gspca_stk1135: Sensor read failed [ 1516.943947][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1516.943957][T13923] gspca_stk1135: Sensor read failed [ 1516.943963][T13923] gspca_stk1135: Detected sensor type unknown (0x0) [ 1516.943998][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1516.944007][T13923] gspca_stk1135: Sensor read failed [ 1517.022523][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1517.022540][T13923] gspca_stk1135: Sensor read failed [ 1517.022571][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1517.022582][T13923] gspca_stk1135: Sensor write failed [ 1517.022613][T13923] gspca_stk1135: serial bus timeout: status=0x00 [ 1517.022623][T13923] gspca_stk1135: Sensor write failed [ 1517.022713][T13923] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1517.487810][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1517.487810][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1518.199496][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1518.202807][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1518.207405][T15974] hsr_slave_0: entered promiscuous mode [ 1518.208790][T15974] hsr_slave_1: entered promiscuous mode [ 1518.209767][T15974] debugfs: 'hsr0' already exists in 'hsr' [ 1518.209790][T15974] Cannot create hsr debugfs directory [ 1518.209983][T15707] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.213342][T15707] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.214763][T15707] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.215527][T15707] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.384770][T15893] usb 4-1: USB disconnect, device number 58 [ 1518.655102][T16136] overlayfs: missing 'lowerdir' [ 1520.590810][T16147] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2287'. [ 1520.712542][T13923] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 1520.865051][T13923] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1520.865086][T13923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1520.865109][T13923] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1520.865153][T13923] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1520.865177][T13923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.048427][T13923] usb 8-1: config 0 descriptor?? [ 1521.049630][T16143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1521.049947][T16143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1521.074821][T13923] metro_usb 8-1:0.0: Metrologic USB to Serial converter detected [ 1521.456704][T13923] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1523.565550][T15118] usb 8-1: USB disconnect, device number 42 [ 1523.587116][T15118] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1523.590420][T15118] metro_usb 8-1:0.0: device disconnected [ 1523.722820][T16182] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2293'. [ 1523.847007][T16182] syz.7.2293 (16182): drop_caches: 2 [ 1523.939966][T16182] syz.7.2293 (16182): drop_caches: 2 [ 1524.671142][T16183] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1524.671338][T16183] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1527.002566][ T8566] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1527.203215][ T8566] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1527.203244][ T8566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.203264][ T8566] usb 4-1: Product: syz [ 1527.203278][ T8566] usb 4-1: Manufacturer: syz [ 1527.203293][ T8566] usb 4-1: SerialNumber: syz [ 1527.237168][ T8566] usb 4-1: config 0 descriptor?? [ 1527.674057][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1527.674706][ T8566] mos7840 4-1:0.0: required endpoints missing [ 1527.740148][ T8566] usb 4-1: USB disconnect, device number 59 [ 1528.556080][T15974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1528.723605][T15974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1528.818085][T15974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1529.975974][T15974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1530.411802][T16250] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2308'. [ 1530.420710][T16250] syz.8.2308 (16250): drop_caches: 2 [ 1530.420983][T16250] syz.8.2308 (16250): drop_caches: 2 [ 1531.037911][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.084626][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.146911][T16263] binder: 16262:16263 ioctl 4018620d 0 returned -22 [ 1532.161594][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.161711][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.197612][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.197769][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.304400][T16265] overlayfs: missing 'workdir' [ 1533.354350][T16281] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2316'. [ 1533.354602][T16281] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2316'. [ 1533.357439][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2316'. [ 1533.427558][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2316'. [ 1533.581893][ T57] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.612859][ T57] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.613374][ T57] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.613797][ T57] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.562331][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.657841][T16291] tmpfs: Bad value for 'mpol' [ 1535.093861][T16303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1535.652513][T15893] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1535.944720][T15893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.944740][T15893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.944762][T15893] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1535.944775][T15893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.947878][T15893] usb 8-1: config 0 descriptor?? [ 1536.569645][T15893] usbhid 8-1:0.0: can't add hid device: -71 [ 1536.569770][T15893] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1536.606529][T15893] usb 8-1: USB disconnect, device number 43 [ 1537.281773][T15974] veth0_vlan: entered promiscuous mode [ 1537.397100][T15974] veth1_vlan: entered promiscuous mode [ 1537.523970][T15974] veth0_macvtap: entered promiscuous mode [ 1537.585078][T15974] veth1_macvtap: entered promiscuous mode [ 1537.709192][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.255278][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.269364][T15707] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.269837][T15707] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.270254][T15707] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.270517][T15707] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.506924][T16348] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2329'. [ 1539.515307][T16348] syz.5.2329 (16348): drop_caches: 2 [ 1539.519818][T16348] syz.5.2329 (16348): drop_caches: 2 [ 1539.692934][T16349] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1539.718219][T16349] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1540.166536][T15707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.166557][T15707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.381698][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.381713][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.744262][T16363] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.561' sets config #1 [ 1540.744559][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 1540.773499][T16363] veth1_macvtap: left promiscuous mode [ 1543.402097][T16360] afs: Unknown parameter 'dy' [ 1544.412653][T13923] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1544.575898][T13923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.575930][T13923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.575966][T13923] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1544.575989][T13923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.654593][T13923] usb 9-1: config 0 descriptor?? [ 1544.978022][T13923] usbhid 9-1:0.0: can't add hid device: -71 [ 1544.978143][T13923] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1545.012732][T13923] usb 9-1: USB disconnect, device number 2 [ 1545.916740][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.916811][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.521112][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1547.545062][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1547.550817][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1547.558102][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1547.560170][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1549.652531][ T5811] Bluetooth: hci4: command tx timeout [ 1550.892569][ T44] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1551.072474][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1551.075274][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.075310][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1551.075325][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1551.075336][ T44] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1551.075348][ T44] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1551.076291][ T44] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1551.076306][ T44] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1551.076316][ T44] usb 9-1: Manufacturer: syz [ 1551.079581][ T44] usb 9-1: config 0 descriptor?? [ 1551.329538][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2350'. [ 1551.744603][ T44] rc_core: IR keymap rc-hauppauge not found [ 1551.744618][ T44] Registered IR keymap rc-empty [ 1551.744736][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.764903][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.784911][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1551.809972][T12405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.812593][T13193] Bluetooth: hci4: command tx timeout [ 1551.869518][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input40 [ 1551.871540][T16398] chnl_net:caif_netlink_parms(): no params data found [ 1551.908802][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.934934][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.956556][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.972984][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1551.992761][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.012679][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.032600][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.053461][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.072733][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.092676][ T44] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1552.183315][ T44] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1552.183340][ T44] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1552.298940][ T44] usb 9-1: USB disconnect, device number 3 [ 1553.352557][T13193] Bluetooth: hci2: command 0x0406 tx timeout [ 1553.868796][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2353'. [ 1553.888617][ T5811] Bluetooth: hci4: command tx timeout [ 1554.075475][T12405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.976937][ T5811] Bluetooth: hci4: command tx timeout [ 1556.805868][T16472] afs: Unknown parameter 'dy' [ 1558.754644][T12405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.944464][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.944600][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.944834][T16398] bridge_slave_0: entered allmulticast mode [ 1558.947581][T16398] bridge_slave_0: entered promiscuous mode [ 1559.018264][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.018352][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.018520][T16398] bridge_slave_1: entered allmulticast mode [ 1559.020053][T16398] bridge_slave_1: entered promiscuous mode [ 1559.094531][T16483] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1559.097489][T16483] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1559.504771][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'. [ 1559.504841][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'. [ 1559.504983][T16489] netlink: 'syz.6.2363': attribute type 13 has an invalid length. [ 1559.505021][T16489] netlink: 'syz.6.2363': attribute type 12 has an invalid length. [ 1560.553108][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2366'. [ 1560.677889][T12405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.564439][T16398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.677096][T16398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.281373][T16398] team0: Port device team_slave_0 added [ 1564.388048][T16398] team0: Port device team_slave_1 added [ 1565.951881][T16398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.951892][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.951906][T16398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.165499][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2376'. [ 1566.165565][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2376'. [ 1566.165723][T16534] netlink: 'syz.8.2376': attribute type 13 has an invalid length. [ 1566.165770][T16534] netlink: 'syz.8.2376': attribute type 12 has an invalid length. [ 1566.927521][T16398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.927533][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.927548][T16398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.552575][ T5897] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1567.702517][ T5897] usb 9-1: Using ep0 maxpacket: 16 [ 1567.705184][ T5897] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.705247][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1567.705276][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1567.705298][ T5897] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1567.705326][ T5897] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.708647][ T5897] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1567.708676][ T5897] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1567.708695][ T5897] usb 9-1: Manufacturer: syz [ 1567.711887][ T5897] usb 9-1: config 0 descriptor?? [ 1567.716231][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2380'. [ 1567.904354][T16398] hsr_slave_0: entered promiscuous mode [ 1567.907239][T16398] hsr_slave_1: entered promiscuous mode [ 1567.924101][T16398] debugfs: 'hsr0' already exists in 'hsr' [ 1567.924119][T16398] Cannot create hsr debugfs directory [ 1567.953727][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2378'. [ 1568.192501][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1568.192521][ T5897] Registered IR keymap rc-empty [ 1568.192688][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.212548][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.233530][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1568.238101][T12405] bridge_slave_1: left allmulticast mode [ 1568.238127][T12405] bridge_slave_1: left promiscuous mode [ 1568.238386][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.272481][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input41 [ 1568.310161][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.326761][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.342646][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.362589][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.382551][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.402548][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.422534][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.442516][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.462597][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.482666][ T5897] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1568.601713][T12405] bridge_slave_0: left allmulticast mode [ 1568.601743][T12405] bridge_slave_0: left promiscuous mode [ 1568.601985][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.080372][ T5897] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1569.080398][ T5897] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1569.127854][ T5897] usb 9-1: USB disconnect, device number 4 [ 1572.751971][T16573] syz.8.2386 (16573): drop_caches: 2 [ 1572.863060][T16573] syz.8.2386 (16573): drop_caches: 2 [ 1573.960420][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2388'. [ 1573.960489][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'. [ 1573.960624][T16579] netlink: 'syz.6.2388': attribute type 13 has an invalid length. [ 1573.960662][T16579] netlink: 'syz.6.2388': attribute type 12 has an invalid length. [ 1575.046897][T15973] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1575.238868][T15973] usb 6-1: Using ep0 maxpacket: 16 [ 1575.248405][T15973] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.248571][T15973] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.248585][T15973] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1575.248606][T15973] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1575.248618][T15973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.254302][T15973] usb 6-1: config 0 descriptor?? [ 1575.471795][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.482889][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.928160][T15973] hid (null): bogus close delimiter [ 1575.945272][T15973] hid (null): unknown global tag 0xe [ 1575.982230][T15973] hid (null): unknown global tag 0xd [ 1575.982256][T15973] hid (null): unknown global tag 0xd [ 1575.982275][T15973] hid (null): bogus close delimiter [ 1576.239314][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2391'. [ 1576.294200][T16589] netlink: 988 bytes leftover after parsing attributes in process `syz.8.2391'. [ 1576.587221][T12405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.622954][T12405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.663218][T12405] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1576.714348][T12405] bond0 (unregistering): Released all slaves [ 1577.018701][T16591] digital: digital_start_poll: Unknown protocol [ 1577.097905][T12405] tipc: Left network mode [ 1577.259339][T16595] netlink: 'syz.8.2394': attribute type 39 has an invalid length. [ 1577.503467][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1577.682721][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1577.688961][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.689015][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1577.689043][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1577.689065][ T44] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1577.689090][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.691403][ T44] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1577.691420][ T44] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1577.691430][ T44] usb 7-1: Manufacturer: syz [ 1577.964836][ T44] usb 7-1: config 0 descriptor?? [ 1578.050432][T15893] usb 6-1: USB disconnect, device number 3 [ 1578.194646][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2395'. [ 1578.487864][ T44] rc_core: IR keymap rc-hauppauge not found [ 1578.487884][ T44] Registered IR keymap rc-empty [ 1578.488033][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1578.502594][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1578.524210][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1578.526850][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input42 [ 1578.542456][T15893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1578.565476][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1579.737273][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1579.752679][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1579.772596][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1579.792531][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.158891][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.172585][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.192565][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.212611][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.232675][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1580.257500][ T44] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1580.257526][ T44] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1580.287598][ T44] usb 7-1: USB disconnect, device number 2 [ 1580.623318][T15893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.623351][T15893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.623392][T15893] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1580.623416][T15893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.632284][T15893] usb 6-1: config 0 descriptor?? [ 1581.428158][T15893] usbhid 6-1:0.0: can't add hid device: -71 [ 1581.428286][T15893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1581.464876][T15893] usb 6-1: USB disconnect, device number 4 [ 1581.672861][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 1581.672928][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2401'. [ 1581.673061][T16630] netlink: 'syz.7.2401': attribute type 13 has an invalid length. [ 1581.673097][T16630] netlink: 'syz.7.2401': attribute type 12 has an invalid length. [ 1583.662440][T15893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1583.828365][T15893] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1583.828397][T15893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.828418][T15893] usb 6-1: Product: syz [ 1583.828431][T15893] usb 6-1: Manufacturer: syz [ 1583.828450][T15893] usb 6-1: SerialNumber: syz [ 1583.867629][T15893] usb 6-1: config 0 descriptor?? [ 1583.946216][T12405] hsr_slave_0: left promiscuous mode [ 1583.982697][T12405] hsr_slave_1: left promiscuous mode [ 1583.983652][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.983677][T12405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.044317][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.044346][T12405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.129228][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1584.189541][T12405] veth1_vlan: left promiscuous mode [ 1584.189702][T12405] veth0_vlan: left promiscuous mode [ 1584.232501][ T5897] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1584.383396][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 1584.386057][ T5897] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.386128][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1584.386166][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1584.386188][ T5897] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1584.386211][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1584.387695][ T5897] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1584.387721][ T5897] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1584.387742][ T5897] usb 8-1: Manufacturer: syz [ 1584.476944][ T5897] usb 8-1: config 0 descriptor?? [ 1584.508031][T15893] mos7840 6-1:0.0: required endpoints missing [ 1584.520145][T15893] usb 6-1: USB disconnect, device number 5 [ 1584.699703][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2409'. [ 1584.912550][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1584.912570][ T5897] Registered IR keymap rc-empty [ 1584.912724][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1584.942624][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.021688][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1585.025476][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input43 [ 1585.046611][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.071562][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.085897][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.102710][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.122720][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.142650][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.182860][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.202721][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.222642][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.242774][ T5897] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1585.289830][ T5897] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1585.290064][ T5897] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1585.383656][ T5897] usb 8-1: USB disconnect, device number 44 [ 1587.127335][T15893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1587.285842][T15893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1587.287214][T15893] usb 6-1: config 64 has an invalid interface number: 110 but max is 1 [ 1587.287240][T15893] usb 6-1: config 64 has an invalid interface number: 71 but max is 1 [ 1587.287258][T15893] usb 6-1: config 64 has no interface number 0 [ 1587.287273][T15893] usb 6-1: config 64 has no interface number 1 [ 1587.287318][T15893] usb 6-1: config 64 interface 110 has no altsetting 0 [ 1587.290528][T15893] usb 6-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1587.290555][T15893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1587.290575][T15893] usb 6-1: Product: syz [ 1587.290585][T15893] usb 6-1: Manufacturer: syz [ 1587.290592][T15893] usb 6-1: SerialNumber: syz [ 1592.878578][T16703] EXT4-fs: Conflicting test_dummy_encryption options [ 1594.272486][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1594.422487][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 1594.428807][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.428852][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1594.428868][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1594.428879][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1594.428890][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.430482][ T5897] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1594.430509][ T5897] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1594.430527][ T5897] usb 7-1: Manufacturer: syz [ 1594.436086][ T5897] usb 7-1: config 0 descriptor?? [ 1594.835603][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2425'. [ 1594.933016][T12405] team0 (unregistering): Port device team_slave_1 removed [ 1594.964163][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1594.964182][ T5897] Registered IR keymap rc-empty [ 1594.964340][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1594.982658][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.004025][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1595.008791][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 1595.029689][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.054996][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.072511][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.092580][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.112628][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.132911][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.153027][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.172545][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.192590][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.314136][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1595.340155][ T5897] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1595.340171][ T5897] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1595.376168][ T5897] usb 7-1: USB disconnect, device number 3 [ 1595.438350][T12405] team0 (unregistering): Port device team_slave_0 removed [ 1597.262427][ T37] audit: type=1326 audit(2000001465.189:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.6.2428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cf522f749 code=0x0 [ 1597.306861][ T37] audit: type=1326 audit(2000001465.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.6.2428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f0cf5262005 code=0x0 [ 1599.894293][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1599.936401][T15893] usb 6-1: USB disconnect, device number 6 [ 1602.933103][T16738] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2431'. [ 1602.997009][T16738] syz.6.2431 (16738): drop_caches: 2 [ 1603.346861][T16738] syz.6.2431 (16738): drop_caches: 2 [ 1604.412147][ T37] audit: type=1326 audit(2000001472.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16744 comm="syz.6.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf522f749 code=0x7ffc0000 [ 1604.425588][ T37] audit: type=1326 audit(2000001472.349:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16744 comm="syz.6.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0cf522f749 code=0x7ffc0000 [ 1604.425638][ T37] audit: type=1326 audit(2000001472.369:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16744 comm="syz.6.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cf522f749 code=0x0 [ 1604.515814][ T37] audit: type=1326 audit(2000001472.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16744 comm="syz.6.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f0cf522f749 code=0x0 [ 1606.965899][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1606.978795][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1606.982104][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1606.985767][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1606.986493][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1607.172461][ T5897] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1607.202439][T15893] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1607.318356][T16775] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2438'. [ 1607.331058][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 1607.341302][ T5897] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.341334][ T5897] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.341357][ T5897] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1607.341391][ T5897] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1607.341414][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.346245][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.346311][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.353677][ T5897] usb 8-1: config 0 descriptor?? [ 1607.362433][T15893] usb 6-1: Using ep0 maxpacket: 16 [ 1607.364379][T15893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.364437][T15893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.364464][T15893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1607.364484][T15893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1607.364506][T15893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.366315][T15893] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1607.366340][T15893] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1607.366359][T15893] usb 6-1: Manufacturer: syz [ 1607.496113][T15893] usb 6-1: config 0 descriptor?? [ 1607.605295][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.606197][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.616755][T15118] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1607.761904][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'. [ 1607.864362][T15118] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1607.869367][T15118] usb 7-1: config 64 has an invalid interface number: 110 but max is 1 [ 1607.869393][T15118] usb 7-1: config 64 has an invalid interface number: 71 but max is 1 [ 1607.869413][T15118] usb 7-1: config 64 has no interface number 0 [ 1607.869433][T15118] usb 7-1: config 64 has no interface number 1 [ 1607.869529][T15118] usb 7-1: config 64 interface 110 has no altsetting 0 [ 1607.920108][T15118] usb 7-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1607.920198][T15118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1607.920220][T15118] usb 7-1: Product: syz [ 1607.920235][T15118] usb 7-1: Manufacturer: syz [ 1607.920250][T15118] usb 7-1: SerialNumber: syz [ 1608.012756][T15893] rc_core: IR keymap rc-hauppauge not found [ 1608.012777][T15893] Registered IR keymap rc-empty [ 1608.012917][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.032509][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.064350][T15893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1608.067532][T15893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 1608.102605][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.123118][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.124987][ T5897] hid (null): unknown global tag 0xe [ 1608.140514][ T5897] hid (null): unknown global tag 0xd [ 1608.140561][ T5897] hid (null): unknown global tag 0xd [ 1608.140806][ T5897] hid (null): bogus close delimiter [ 1608.142606][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.162509][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.182556][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.202861][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.222494][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.242508][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.272554][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.293716][T15893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1608.364029][T16785] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2439'. [ 1608.647167][T16785] syz.8.2439 (16785): drop_caches: 2 [ 1608.736994][T16785] syz.8.2439 (16785): drop_caches: 2 [ 1609.082552][ T5811] Bluetooth: hci1: command tx timeout [ 1609.388077][ T5897] usb 8-1: USB disconnect, device number 45 [ 1609.489254][T15893] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1609.489280][T15893] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1609.504858][T15118] usb 7-1: USB disconnect, device number 4 [ 1609.522481][T15893] usb 6-1: USB disconnect, device number 7 [ 1610.786510][T16770] chnl_net:caif_netlink_parms(): no params data found [ 1611.791750][ T5811] Bluetooth: hci1: command tx timeout [ 1613.827890][ T5811] Bluetooth: hci1: command tx timeout [ 1614.671832][T16821] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2449'. [ 1614.692875][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.693004][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.693238][T16770] bridge_slave_0: entered allmulticast mode [ 1614.710372][T16770] bridge_slave_0: entered promiscuous mode [ 1614.736521][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.743150][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.743454][T16770] bridge_slave_1: entered allmulticast mode [ 1614.746021][T16770] bridge_slave_1: entered promiscuous mode [ 1615.550208][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2452'. [ 1615.550280][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2452'. [ 1616.110880][ T5811] Bluetooth: hci1: command tx timeout [ 1616.213176][ T5897] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1616.820477][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1616.841614][ T5897] usb 6-1: config 64 has an invalid interface number: 110 but max is 1 [ 1616.841646][ T5897] usb 6-1: config 64 has an invalid interface number: 71 but max is 1 [ 1616.841667][ T5897] usb 6-1: config 64 has no interface number 0 [ 1616.841689][ T5897] usb 6-1: config 64 has no interface number 1 [ 1616.841741][ T5897] usb 6-1: config 64 interface 110 has no altsetting 0 [ 1616.901583][ T5897] usb 6-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 1616.901614][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=65 [ 1616.901635][ T5897] usb 6-1: Product: syz [ 1616.901649][ T5897] usb 6-1: Manufacturer: syz [ 1616.901664][ T5897] usb 6-1: SerialNumber: syz [ 1617.599981][ T5897] usb 6-1: USB disconnect, device number 8 [ 1617.689261][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.830818][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.748340][T13193] Bluetooth: hci3: command 0x0406 tx timeout [ 1622.087850][T16770] team0: Port device team_slave_0 added [ 1622.111169][T16770] team0: Port device team_slave_1 added [ 1622.114122][T16870] EXT4-fs: Conflicting test_dummy_encryption options [ 1625.816973][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2463'. [ 1625.817665][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2463'. [ 1625.865590][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.865610][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.865637][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.893476][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.893492][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.893519][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.998217][T12678] bridge_slave_1: left allmulticast mode [ 1625.998244][T12678] bridge_slave_1: left promiscuous mode [ 1625.998561][T12678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.289121][T12678] bridge_slave_0: left allmulticast mode [ 1626.289146][T12678] bridge_slave_0: left promiscuous mode [ 1626.289323][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.460973][ T5887] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1628.612498][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 1628.614921][ T5887] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.614952][ T5887] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.614975][ T5887] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1628.615017][ T5887] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1628.615039][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.637853][ T5887] usb 9-1: config 0 descriptor?? [ 1628.865362][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.868957][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.900763][ T5887] hid (null): unknown global tag 0xe [ 1629.925712][ T5887] hid (null): unknown global tag 0xd [ 1629.925762][ T5887] hid (null): unknown global tag 0xd [ 1629.925797][ T5887] hid (null): bogus close delimiter [ 1630.094797][ T5887] usb 9-1: USB disconnect, device number 5 [ 1630.188947][T12678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.342962][T12678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.456204][T12678] bond0 (unregistering): Released all slaves [ 1630.504194][T16907] tipc: Started in network mode [ 1630.504215][T16907] tipc: Node identity 4, cluster identity 4711 [ 1630.504229][T16907] tipc: Node number set to 4 [ 1630.850492][T16770] hsr_slave_0: entered promiscuous mode [ 1630.853316][T16770] hsr_slave_1: entered promiscuous mode [ 1632.511326][T12678] hsr_slave_0: left promiscuous mode [ 1632.639648][T12678] hsr_slave_1: left promiscuous mode [ 1632.640629][T12678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.863236][T12678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.957187][T16946] tty tty33: ldisc open failed (-12), clearing slot 32 [ 1637.222436][T15893] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1637.382687][T15893] usb 8-1: Using ep0 maxpacket: 32 [ 1637.386977][T15893] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1637.387005][T15893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.387023][T15893] usb 8-1: Product: syz [ 1637.387037][T15893] usb 8-1: Manufacturer: syz [ 1637.387051][T15893] usb 8-1: SerialNumber: syz [ 1637.486742][T15893] usb 8-1: config 0 descriptor?? [ 1637.492771][T15893] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1638.375196][T12678] team0 (unregistering): Port device team_slave_1 removed [ 1638.945315][T12678] team0 (unregistering): Port device team_slave_0 removed [ 1639.750247][T15893] gspca_stk1135: reg_w 0x200 err -110 [ 1639.751294][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751306][T15893] gspca_stk1135: Sensor write failed [ 1639.751337][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751347][T15893] gspca_stk1135: Sensor write failed [ 1639.751378][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751388][T15893] gspca_stk1135: Sensor read failed [ 1639.751419][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751429][T15893] gspca_stk1135: Sensor read failed [ 1639.751437][T15893] gspca_stk1135: Detected sensor type unknown (0x0) [ 1639.751472][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751481][T15893] gspca_stk1135: Sensor read failed [ 1639.751512][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751522][T15893] gspca_stk1135: Sensor read failed [ 1639.751551][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751560][T15893] gspca_stk1135: Sensor write failed [ 1639.751591][T15893] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.751600][T15893] gspca_stk1135: Sensor write failed [ 1639.751692][T15893] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 1641.495220][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1641.495341][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1641.725274][T15973] usb 8-1: USB disconnect, device number 46 [ 1643.522601][T15973] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1644.082452][T15973] usb 8-1: Using ep0 maxpacket: 16 [ 1644.240054][T15973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.240115][T15973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.240144][T15973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1644.240167][T15973] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1644.240190][T15973] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1644.244094][T15973] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1644.244121][T15973] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1644.244141][T15973] usb 8-1: Manufacturer: syz [ 1644.249869][T15973] usb 8-1: config 0 descriptor?? [ 1644.541572][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2499'. [ 1644.742442][T15973] rc_core: IR keymap rc-hauppauge not found [ 1644.742464][T15973] Registered IR keymap rc-empty [ 1644.742627][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.763818][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.784805][T15973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1644.788804][T15973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input47 [ 1644.867343][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.882689][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.902607][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.922564][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.942508][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.962617][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1644.982567][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1645.004792][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1645.022515][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1645.042644][T15973] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1645.078440][T15973] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1645.078519][T15973] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1645.140920][T15973] usb 8-1: USB disconnect, device number 47 [ 1645.268355][ T5887] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1645.432434][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 1645.434740][ T5887] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.434771][ T5887] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.434795][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1645.434828][ T5887] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1645.434852][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.496642][ T5887] usb 7-1: config 0 descriptor?? [ 1645.808469][T17005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.812600][T17005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.775638][ T5887] hid (null): bogus close delimiter [ 1646.794854][ T5887] hid (null): unknown global tag 0xe [ 1646.802053][ T5887] hid (null): unknown global tag 0xd [ 1646.802078][ T5887] hid (null): unknown global tag 0xd [ 1646.802097][ T5887] hid (null): bogus close delimiter [ 1647.849900][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2510'. [ 1647.849924][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2510'. [ 1648.757242][T15893] usb 7-1: USB disconnect, device number 5 [ 1648.963993][T17047] EXT4-fs: Conflicting test_dummy_encryption options [ 1649.363542][T17057] : renamed from bridge_slave_0 (while UP) [ 1649.588471][T17060] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1649.588565][T17060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1649.606949][T17060] vhci_hcd vhci_hcd.0: Device attached [ 1649.936933][ T1562] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1650.311945][T17061] vhci_hcd: connection reset by peer [ 1650.453477][T12678] vhci_hcd: stop threads [ 1650.454764][T12678] vhci_hcd: release socket [ 1650.676941][T12678] vhci_hcd: disconnect device [ 1652.837289][T16770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1653.021231][T16770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1653.059941][T16770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1653.128587][T16770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1653.222426][T15893] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1653.405650][T15893] usb 8-1: Using ep0 maxpacket: 16 [ 1653.807382][T15893] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.807415][T15893] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.807437][T15893] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1653.807473][T15893] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1653.807495][T15893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.872484][T15893] usb 8-1: config 0 descriptor?? [ 1653.965203][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.067537][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.120733][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.141077][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.184017][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.184239][T13747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.509461][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.510364][ T9935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.154981][ T1562] vhci_hcd: vhci_device speed not set [ 1655.560255][T15893] hid (null): unknown global tag 0xe [ 1655.590705][T15893] hid (null): unknown global tag 0xd [ 1655.592907][T15893] hid (null): unknown global tag 0xd [ 1655.592949][T15893] hid (null): bogus close delimiter [ 1655.778821][T15118] usb 8-1: USB disconnect, device number 48 [ 1656.505526][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.865209][T16770] veth0_vlan: entered promiscuous mode [ 1658.874242][T16770] veth1_vlan: entered promiscuous mode [ 1659.854961][T16770] veth0_macvtap: entered promiscuous mode [ 1659.860076][T16770] veth1_macvtap: entered promiscuous mode [ 1659.878282][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.428288][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.536969][ T1266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.537202][ T1266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.537441][ T1266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.585793][ T1266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.943914][T11469] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1661.116582][T11469] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1661.116612][T11469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.339266][ T9935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.339285][ T9935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.396563][T11469] usb 6-1: config 0 descriptor?? [ 1661.401317][T11469] cp210x 6-1:0.0: cp210x converter detected [ 1661.965650][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.965664][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.972510][T11469] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1662.376198][T11469] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1662.376217][T11469] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1662.380075][T11469] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1662.400902][T11469] usb 6-1: USB disconnect, device number 9 [ 1662.451119][T11469] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1662.454504][T11469] cp210x 6-1:0.0: device disconnected [ 1662.567474][ T5897] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1662.676976][T17166] syz.3.2337 (17166): drop_caches: 2 [ 1662.680213][T17166] syz.3.2337 (17166): drop_caches: 2 [ 1663.552485][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 1663.559107][ T5897] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.559139][ T5897] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.559162][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1663.559198][ T5897] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1663.559221][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.576863][ T5897] usb 7-1: config 0 descriptor?? [ 1663.798394][T17163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.799015][T17163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.083636][ T5897] hid (null): bogus close delimiter [ 1665.089303][ T5897] hid (null): unknown global tag 0xe [ 1665.128469][ T5897] hid (null): unknown global tag 0xd [ 1665.128518][ T5897] hid (null): unknown global tag 0xd [ 1665.128554][ T5897] hid (null): bogus close delimiter [ 1665.922218][T17193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1665.945681][T17193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1665.947762][T17193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1665.949597][T17193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1665.950520][T17193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1666.826537][T17195] comedi comedi3: comedi_config --init_data is deprecated [ 1666.860352][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1666.876245][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1666.877556][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1666.879175][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1666.880290][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1667.045448][ T5897] usb 7-1: USB disconnect, device number 6 [ 1667.116182][T17199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.309710][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2549'. [ 1667.451683][T17208] netlink: 1076 bytes leftover after parsing attributes in process `syz.5.2549'. [ 1668.005866][T17216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1668.601597][T17193] Bluetooth: hci4: command tx timeout [ 1668.803715][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.803883][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.922724][T17193] Bluetooth: hci5: command tx timeout [ 1670.613418][T17193] Bluetooth: hci4: command tx timeout [ 1670.789698][T12678] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1670.789720][T12678] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.892438][ T1562] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1671.005221][T17193] Bluetooth: hci5: command tx timeout [ 1671.047999][ T1562] usb 6-1: Using ep0 maxpacket: 16 [ 1671.058200][ T1562] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.058262][ T1562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1671.058290][ T1562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1671.058312][ T1562] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1671.058334][ T1562] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1671.059557][ T1562] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1671.059583][ T1562] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1671.059604][ T1562] usb 6-1: Manufacturer: syz [ 1671.211816][ T1562] usb 6-1: config 0 descriptor?? [ 1671.256144][T12678] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.256259][T12678] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.443719][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2553'. [ 1671.712498][ T1562] rc_core: IR keymap rc-hauppauge not found [ 1671.712518][ T1562] Registered IR keymap rc-empty [ 1671.712665][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1671.732521][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1671.754484][ T1562] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1671.757964][ T1562] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 1671.767944][T12678] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.767977][T12678] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.961691][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1671.974758][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.030640][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.095239][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.112703][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.202060][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.268851][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.316967][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.402108][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.575567][ T1562] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1672.706377][T17193] Bluetooth: hci4: command tx timeout [ 1672.785563][ T1562] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1672.785588][ T1562] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1672.800452][ T1562] usb 6-1: USB disconnect, device number 10 [ 1673.099089][T17193] Bluetooth: hci5: command tx timeout [ 1673.487680][T12678] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.487714][T12678] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.732414][ T1562] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1673.893800][ T1562] usb 6-1: Using ep0 maxpacket: 16 [ 1673.909725][ T1562] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.909759][ T1562] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.909781][ T1562] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1673.909816][ T1562] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1673.909839][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.071069][ T1562] usb 6-1: config 0 descriptor?? [ 1674.343468][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.344014][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.500639][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1675.183966][T17193] Bluetooth: hci4: command tx timeout [ 1675.183998][T17193] Bluetooth: hci5: command tx timeout [ 1675.233050][T17192] chnl_net:caif_netlink_parms(): no params data found [ 1675.601119][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1675.653435][ T1562] hid (null): bogus close delimiter [ 1675.657184][ T1562] hid (null): unknown global tag 0xe [ 1675.659306][ T1562] hid (null): unknown global tag 0xd [ 1675.659327][ T1562] hid (null): unknown global tag 0xd [ 1675.659346][ T1562] hid (null): bogus close delimiter [ 1675.700142][T17261] netlink: 'syz.3.2561': attribute type 72 has an invalid length. [ 1675.700163][T17261] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1676.463742][T17196] chnl_net:caif_netlink_parms(): no params data found [ 1677.098458][T15118] usb 6-1: USB disconnect, device number 11 [ 1677.745267][T15118] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1678.191374][T15118] usb 6-1: Using ep0 maxpacket: 16 [ 1680.831760][T15118] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1680.831796][T15118] usb 6-1: can't read configurations, error -71 [ 1680.870273][T12678] bridge_slave_1: left allmulticast mode [ 1680.870292][T12678] bridge_slave_1: left promiscuous mode [ 1680.870457][T12678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.917237][T17285] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2567'. [ 1680.926593][T17285] syz.3.2567 (17285): drop_caches: 2 [ 1680.926876][T17285] syz.3.2567 (17285): drop_caches: 2 [ 1680.984752][T12678] bridge_slave_0: left allmulticast mode [ 1680.984781][T12678] bridge_slave_0: left promiscuous mode [ 1680.985045][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.202358][ T44] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1686.205464][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2577'. [ 1686.412917][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1687.024248][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.024313][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1687.024340][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1687.024369][ T44] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1687.024393][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1687.028877][ T44] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1687.028915][ T44] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1687.028936][ T44] usb 7-1: Manufacturer: syz [ 1687.035706][ T44] usb 7-1: config 0 descriptor?? [ 1687.306723][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2576'. [ 1687.629697][ T44] rc_core: IR keymap rc-hauppauge not found [ 1687.629712][ T44] Registered IR keymap rc-empty [ 1687.629808][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1687.642460][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1687.664175][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1687.667803][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49 [ 1687.744440][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.196551][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.213356][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.232479][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.252511][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.272494][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.292532][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.312517][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.332547][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.380173][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1688.394546][ T44] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1688.394572][ T44] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1688.400365][ T44] usb 7-1: USB disconnect, device number 7 [ 1690.723539][T12678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.803340][T12678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.433624][T12678] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1691.571497][T12678] bond0 (unregistering): Released all slaves [ 1691.937730][T17192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.937876][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.938743][T17192] bridge_slave_0: entered allmulticast mode [ 1691.941579][T17192] bridge_slave_0: entered promiscuous mode [ 1692.177451][T17192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.177622][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.177851][T17192] bridge_slave_1: entered allmulticast mode [ 1692.180622][T17192] bridge_slave_1: entered promiscuous mode [ 1692.738392][T12678] tipc: Left network mode [ 1692.836528][T17362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2589'. [ 1693.613157][T12678] rxrpc: Call ffff8880283c71c0 still in use (1,Complete,1489,0)! [ 1693.902454][ T1562] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1693.914774][T17192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.062546][ T1562] usb 4-1: Using ep0 maxpacket: 16 [ 1694.064126][ T1562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.064159][ T1562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1694.064175][ T1562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1694.064186][ T1562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1694.064199][ T1562] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.065097][ T1562] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1694.065112][ T1562] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1694.065123][ T1562] usb 4-1: Manufacturer: syz [ 1694.076244][ T1562] usb 4-1: config 0 descriptor?? [ 1694.202219][T17192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.417744][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 1697.556676][ T1562] rc_core: IR keymap rc-hauppauge not found [ 1697.556699][ T1562] Registered IR keymap rc-empty [ 1697.556856][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.572497][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.620155][ T1562] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1697.640270][ T1562] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1697.830930][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.963399][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.982505][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.002498][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.022482][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.042481][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.062635][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.082513][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.102492][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.122462][ T1562] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1698.149055][ T1562] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1698.149081][ T1562] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1698.189854][ T1562] usb 4-1: USB disconnect, device number 60 [ 1698.464358][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.464566][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.464818][T17196] bridge_slave_0: entered allmulticast mode [ 1698.467590][T17196] bridge_slave_0: entered promiscuous mode [ 1698.870405][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.870555][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.870795][T17196] bridge_slave_1: entered allmulticast mode [ 1698.897331][T17389] tmpfs: Bad value for 'mpol' [ 1698.955716][T17196] bridge_slave_1: entered promiscuous mode [ 1698.983858][T17192] team0: Port device team_slave_0 added [ 1699.586990][T17393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.214076][T17192] team0: Port device team_slave_1 added [ 1701.188526][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 1702.193807][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.414902][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.415517][T17192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.415527][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.415542][T17192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.417881][T17192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.417892][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.417906][T17192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.894845][T17196] team0: Port device team_slave_0 added [ 1703.120195][T17196] team0: Port device team_slave_1 added [ 1704.599544][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2607'. [ 1705.051618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.152791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.680683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.739119][T17192] hsr_slave_0: entered promiscuous mode [ 1705.740546][T17192] hsr_slave_1: entered promiscuous mode [ 1705.741486][T17192] debugfs: 'hsr0' already exists in 'hsr' [ 1705.741510][T17192] Cannot create hsr debugfs directory [ 1705.817659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.419423][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.419435][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.419449][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.471354][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.471365][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.471380][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.357649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.521200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.687937][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'. [ 1708.049801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.127224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.640399][T17196] hsr_slave_0: entered promiscuous mode [ 1708.641919][T17196] hsr_slave_1: entered promiscuous mode [ 1708.643084][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 1708.643110][T17196] Cannot create hsr debugfs directory [ 1708.872504][ T44] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 1709.433566][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1709.433599][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1709.433623][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1709.433667][ T44] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1709.433690][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.506024][ T44] usb 4-1: config 0 descriptor?? [ 1709.509168][T17475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1709.509356][T17475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1709.534537][ T44] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected [ 1709.561652][ T44] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1711.160068][T17502] syz.5.2623 (17502): drop_caches: 2 [ 1711.177006][T17502] syz.5.2623 (17502): drop_caches: 2 [ 1712.208786][ T44] usb 4-1: USB disconnect, device number 61 [ 1712.222916][ T44] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1712.223783][ T44] metro_usb 4-1:0.0: device disconnected [ 1718.686618][T17156] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1719.589766][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1719.589839][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1719.590003][T17521] netlink: 'syz.3.2628': attribute type 12 has an invalid length. [ 1720.619698][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2630'. [ 1726.243716][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.254138][T17193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1726.270113][T17193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1726.290019][T17193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1726.302177][T17193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1726.309733][T17193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1727.010030][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2637'. [ 1727.010099][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'. [ 1727.010233][T17573] netlink: 'syz.5.2637': attribute type 12 has an invalid length. [ 1727.523102][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1727.555768][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1727.562106][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1727.580258][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1727.581980][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1727.705888][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1727.975113][T17584] tmpfs: Bad value for 'mpol' [ 1728.239949][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1728.294691][ T44] usb 4-1: no configurations [ 1728.294710][ T44] usb 4-1: can't read configurations, error -22 [ 1728.406792][T17588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1728.606392][ T5811] Bluetooth: hci0: command tx timeout [ 1728.810162][ T44] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1729.122505][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1729.123485][ T44] usb 4-1: no configurations [ 1729.123503][ T44] usb 4-1: can't read configurations, error -22 [ 1729.125532][ T44] usb usb4-port1: attempt power cycle [ 1729.446032][T17594] afs: Unknown parameter 'dy' [ 1730.204655][ T5811] Bluetooth: hci6: command tx timeout [ 1730.263293][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.263367][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.682415][ T5811] Bluetooth: hci0: command tx timeout [ 1732.738447][ T5811] Bluetooth: hci6: command tx timeout [ 1732.738485][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1732.777381][T17607] Bluetooth: hci0: command tx timeout [ 1735.244316][T17193] Bluetooth: hci0: command tx timeout [ 1735.244355][T17193] Bluetooth: hci6: command tx timeout [ 1735.682485][T17628] : renamed from bridge_slave_0 (while UP) [ 1735.803585][T17630] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1735.803613][T17630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1735.803684][T17630] vhci_hcd vhci_hcd.0: Device attached [ 1736.835332][T17632] vhci_hcd: connection closed [ 1736.981324][ T57] vhci_hcd: stop threads [ 1736.981377][ T57] vhci_hcd: release socket [ 1736.986249][ T57] vhci_hcd: disconnect device [ 1737.005757][ T1562] vhci_hcd: vhci_device speed not set [ 1737.128057][T17576] chnl_net:caif_netlink_parms(): no params data found [ 1737.326288][T17607] Bluetooth: hci6: command tx timeout [ 1737.623958][ T5887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1737.811611][T17643] afs: Unknown parameter 'dy' [ 1738.472345][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1738.511003][ T5887] usb 6-1: no configurations [ 1738.511024][ T5887] usb 6-1: can't read configurations, error -22 [ 1738.567329][T17561] chnl_net:caif_netlink_parms(): no params data found [ 1738.642606][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1739.203835][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1739.208396][ T5887] usb 6-1: no configurations [ 1739.208417][ T5887] usb 6-1: can't read configurations, error -22 [ 1739.222690][ T5887] usb usb6-port1: attempt power cycle [ 1739.421331][T17658] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2656'. [ 1739.602566][ T5887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1739.624079][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1739.625277][ T5887] usb 6-1: no configurations [ 1739.625289][ T5887] usb 6-1: can't read configurations, error -22 [ 1739.729337][T17658] syz.6.2656 (17658): drop_caches: 2 [ 1739.774391][T17658] syz.6.2656 (17658): drop_caches: 2 [ 1740.132627][ T5887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1740.329249][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1740.329970][ T5887] usb 6-1: no configurations [ 1740.329980][ T5887] usb 6-1: can't read configurations, error -22 [ 1740.332538][ T5887] usb usb6-port1: unable to enumerate USB device [ 1741.792748][T17576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.792869][T17576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.793106][T17576] bridge_slave_0: entered allmulticast mode [ 1741.835657][T17576] bridge_slave_0: entered promiscuous mode [ 1741.870062][T17576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.870206][T17576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.870404][T17576] bridge_slave_1: entered allmulticast mode [ 1741.900829][T17576] bridge_slave_1: entered promiscuous mode [ 1743.066167][T17561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.066247][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.066445][T17561] bridge_slave_0: entered allmulticast mode [ 1743.145847][T17687] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1743.148783][T17687] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1743.469189][T17561] bridge_slave_0: entered promiscuous mode [ 1743.916179][T17576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.916627][T17561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.916805][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.917028][T17561] bridge_slave_1: entered allmulticast mode [ 1743.990832][T17561] bridge_slave_1: entered promiscuous mode [ 1744.006008][T17576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.425264][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.429393][T17576] team0: Port device team_slave_0 added [ 1747.476747][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.479163][T17576] team0: Port device team_slave_1 added [ 1748.052433][ T1562] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1748.702431][ T1562] usb 7-1: Using ep0 maxpacket: 16 [ 1748.703665][ T1562] usb 7-1: no configurations [ 1748.703691][ T1562] usb 7-1: can't read configurations, error -22 [ 1748.952424][ T1562] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1749.353492][ T1562] usb 7-1: Using ep0 maxpacket: 16 [ 1749.686276][ T1562] usb 7-1: no configurations [ 1749.686296][ T1562] usb 7-1: can't read configurations, error -22 [ 1749.687307][ T1562] usb usb7-port1: attempt power cycle [ 1749.764427][T17576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.764443][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.764469][T17576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.776964][T17561] team0: Port device team_slave_0 added [ 1749.778331][T17576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.778343][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.778370][T17576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.810769][T17561] team0: Port device team_slave_1 added [ 1750.022677][ T1562] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1750.033297][T17716] fuse: root generation should be zero [ 1750.044807][ T1562] usb 7-1: Using ep0 maxpacket: 16 [ 1750.045776][ T1562] usb 7-1: no configurations [ 1750.045793][ T1562] usb 7-1: can't read configurations, error -22 [ 1750.172618][ T1562] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1750.245339][ T1562] usb 7-1: Using ep0 maxpacket: 16 [ 1750.247753][ T1562] usb 7-1: no configurations [ 1750.247764][ T1562] usb 7-1: can't read configurations, error -22 [ 1750.247986][ T1562] usb usb7-port1: unable to enumerate USB device [ 1750.415995][T17576] hsr_slave_0: entered promiscuous mode [ 1750.422829][T17576] hsr_slave_1: entered promiscuous mode [ 1750.427248][T17576] debugfs: 'hsr0' already exists in 'hsr' [ 1750.427278][T17576] Cannot create hsr debugfs directory [ 1750.432667][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.432684][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.432710][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.449727][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1750.449745][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.449771][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.602804][T15118] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1751.773683][T15118] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1751.773714][T15118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.837962][T15118] usb 7-1: config 0 descriptor?? [ 1751.997125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.349530][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2673'. [ 1752.351171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.462311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1753.035836][T15118] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1753.352464][ T8566] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1753.496705][T17561] hsr_slave_0: entered promiscuous mode [ 1753.509564][T17561] hsr_slave_1: entered promiscuous mode [ 1753.512441][ T8566] usb 6-1: Using ep0 maxpacket: 16 [ 1753.514725][ T8566] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.514749][ T8566] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1753.514785][ T8566] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1753.514861][ T8566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.524944][T17561] debugfs: 'hsr0' already exists in 'hsr' [ 1753.524974][T17561] Cannot create hsr debugfs directory [ 1753.564828][T15118] gspca_sunplus: reg_w_riv err -110 [ 1753.564979][T15118] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1753.618965][ T8566] usb 6-1: config 0 descriptor?? [ 1753.933776][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1754.896120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1754.897950][T15893] usb 6-1: USB disconnect, device number 18 [ 1754.986166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.208099][ T1562] usb 7-1: USB disconnect, device number 13 [ 1756.526246][T17750] tmpfs: Bad value for 'mpol' [ 1757.970096][T17757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.166817][T17764] tipc: Started in network mode [ 1758.166839][T17764] tipc: Node identity 4, cluster identity 4711 [ 1758.166850][T17764] tipc: Node number set to 4 [ 1765.129705][T17804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.276291][T17576] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1771.649869][T17576] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1772.067253][T17576] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1772.496712][T17576] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1772.759531][T17847] afs: Unknown parameter 'dy' [ 1774.833892][T17860] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2705'. [ 1775.809751][T17860] syz.5.2705 (17860): drop_caches: 2 [ 1775.860293][T17860] syz.5.2705 (17860): drop_caches: 2 [ 1776.218141][T17561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1778.372430][T17561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1778.617740][T17561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1778.708410][T17561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1778.743583][T17871] syz.5.2708 (17871): drop_caches: 2 [ 1778.745129][T17871] syz.5.2708 (17871): drop_caches: 2 [ 1779.030516][T17576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.131143][T17576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.193080][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.194934][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.225288][T17561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.254122][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.254376][T16333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.325752][T17561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.367658][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.367865][T16333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.449009][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.450630][T16333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.320336][T17907] afs: Unknown parameter 'dy' [ 1788.581099][T17913] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1788.581165][T17913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1788.586033][T17913] vhci_hcd vhci_hcd.0: Device attached [ 1789.579700][T17914] vhci_hcd: connection closed [ 1789.642563][T17232] vhci_hcd: stop threads [ 1789.642586][T17232] vhci_hcd: release socket [ 1789.646916][ T8566] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1789.647068][T17232] vhci_hcd: disconnect device [ 1791.657461][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.657536][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.845655][T17193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1791.891351][T17193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1791.899882][T17193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1791.901152][T17193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1791.901922][T17193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1792.119387][T17930] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2718'. [ 1792.262091][T17930] syz.6.2718 (17930): drop_caches: 2 [ 1792.283486][T17930] syz.6.2718 (17930): drop_caches: 2 [ 1795.102582][ T8566] vhci_hcd: vhci_device speed not set [ 1795.706523][T17607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1795.747194][T17607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1795.748823][T17607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1795.751310][T17607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1795.751943][T17607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1796.623269][T17193] Bluetooth: hci4: command tx timeout [ 1796.741800][T17955] afs: Unknown parameter 'dy' [ 1797.990290][T17193] Bluetooth: hci0: command tx timeout [ 1798.709816][T17193] Bluetooth: hci4: command tx timeout [ 1799.811038][T17922] chnl_net:caif_netlink_parms(): no params data found [ 1800.771680][T17193] Bluetooth: hci4: command tx timeout [ 1800.771724][T17193] Bluetooth: hci0: command tx timeout [ 1801.019462][T17948] chnl_net:caif_netlink_parms(): no params data found [ 1801.102830][T17978] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2729'. [ 1801.102893][T17978] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2729'. [ 1802.698147][T17996] afs: Unknown parameter 'dy' [ 1803.279685][T17997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1803.483791][T17607] Bluetooth: hci0: command tx timeout [ 1803.483802][T17193] Bluetooth: hci4: command tx timeout [ 1806.205380][T17607] Bluetooth: hci0: command tx timeout [ 1807.149681][T18020] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2740'. [ 1807.150998][T18020] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2740'. [ 1807.300877][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.301108][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.301353][T17922] bridge_slave_0: entered allmulticast mode [ 1807.305439][T17922] bridge_slave_0: entered promiscuous mode [ 1807.403313][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.403388][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.403526][T17922] bridge_slave_1: entered allmulticast mode [ 1807.406805][T17922] bridge_slave_1: entered promiscuous mode [ 1807.744883][T17948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.745079][T17948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.745322][T17948] bridge_slave_0: entered allmulticast mode [ 1807.748435][T17948] bridge_slave_0: entered promiscuous mode [ 1807.979983][T17948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.980119][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.980323][T17948] bridge_slave_1: entered allmulticast mode [ 1808.020314][T17948] bridge_slave_1: entered promiscuous mode [ 1808.030123][T17922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.145721][T17922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.449047][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.471810][T17922] team0: Port device team_slave_0 added [ 1809.519365][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.521447][T17922] team0: Port device team_slave_1 added [ 1811.123151][T17948] team0: Port device team_slave_0 added [ 1811.184458][T18052] tipc: Started in network mode [ 1811.184481][T18052] tipc: Node identity 4, cluster identity 4711 [ 1811.184494][T18052] tipc: Node number set to 4 [ 1811.212932][T17922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.212948][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.213440][T17922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.278895][T17948] team0: Port device team_slave_1 added [ 1811.298106][T17922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.298123][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.298150][T17922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.611772][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.611786][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.611800][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.670729][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.670743][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.670758][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.923915][T17922] hsr_slave_0: entered promiscuous mode [ 1811.925713][T17922] hsr_slave_1: entered promiscuous mode [ 1811.926474][T17922] debugfs: 'hsr0' already exists in 'hsr' [ 1811.926499][T17922] Cannot create hsr debugfs directory [ 1812.469121][T18062] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2750'. [ 1812.469311][T18062] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2750'. [ 1813.478168][T17948] hsr_slave_0: entered promiscuous mode [ 1813.479794][T17948] hsr_slave_1: entered promiscuous mode [ 1813.480680][T17948] debugfs: 'hsr0' already exists in 'hsr' [ 1813.480704][T17948] Cannot create hsr debugfs directory [ 1813.482859][T18073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2753'. [ 1814.587385][T15118] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1814.732442][T15118] usb 4-1: device descriptor read/64, error -71 [ 1815.002582][T15118] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1818.799887][T18083] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2756'. [ 1820.682393][T15118] usb 4-1: device descriptor read/64, error -71 [ 1820.948879][T15118] usb usb4-port1: attempt power cycle [ 1825.202446][T15118] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1825.342572][T15118] usb 6-1: device descriptor read/64, error -71 [ 1825.592420][T15118] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1825.723429][T15118] usb 6-1: device descriptor read/64, error -71 [ 1825.834495][T15118] usb usb6-port1: attempt power cycle [ 1826.182589][T15118] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1826.244945][T15118] usb 6-1: device descriptor read/8, error -71 [ 1826.642403][T15522] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1826.822442][T15522] usb 4-1: device descriptor read/64, error -71 [ 1826.822557][T15118] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1826.847569][T15118] usb 6-1: device descriptor read/8, error -71 [ 1826.952886][T15118] usb usb6-port1: unable to enumerate USB device [ 1827.072521][T15522] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1827.202947][T15522] usb 4-1: device descriptor read/64, error -71 [ 1827.485164][T18121] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2766'. [ 1828.053029][T15522] usb usb4-port1: attempt power cycle [ 1828.633764][T15522] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 1828.751544][T15522] usb 4-1: device descriptor read/8, error -71 [ 1829.024317][T15522] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1829.052058][T15522] usb 4-1: device descriptor read/8, error -71 [ 1829.185608][T15522] usb usb4-port1: unable to enumerate USB device [ 1831.559475][T18156] binder: 18154:18156 ioctl 4018620d 0 returned -22 [ 1832.075570][T18160] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2776'. [ 1832.633925][ T8566] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1832.973620][ T8566] usb 7-1: Using ep0 maxpacket: 16 [ 1832.987951][ T8566] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.988002][ T8566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1832.988023][ T8566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1832.988038][ T8566] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1832.988058][ T8566] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1833.005798][ T8566] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1833.005829][ T8566] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1833.005848][ T8566] usb 7-1: Manufacturer: syz [ 1833.083705][ T8566] usb 7-1: config 0 descriptor?? [ 1833.488391][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2777'. [ 1834.022463][ T8566] rc_core: IR keymap rc-hauppauge not found [ 1834.022484][ T8566] Registered IR keymap rc-empty [ 1834.022654][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1834.042509][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1834.064222][ T8566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1834.067691][ T8566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 1834.199451][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1834.212559][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1834.234358][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.146850][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.162463][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.182450][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.202535][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.222489][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.242631][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.263809][ T8566] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1836.299540][ T8566] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1836.299567][ T8566] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1837.806438][ T44] usb 7-1: USB disconnect, device number 14 [ 1840.669589][T18198] binder: 18197:18198 ioctl 4018620d 0 returned -22 [ 1841.259994][T17922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1841.298844][T17922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1841.349127][T17922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1841.432480][T17922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1841.624641][T17948] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1841.669274][T17948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1841.715427][T17948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1841.762423][T17948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1842.113218][T17922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.179509][T17922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.214559][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.216039][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.602770][T17948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.612056][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.757396][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1846.767423][T17948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1847.121547][T18245] binder: 18241:18245 ioctl 4018620d 0 returned -22 [ 1850.525116][ T38] INFO: task kworker/u8:17:12678 blocked for more than 146 seconds. [ 1850.525140][ T38] Not tainted syzkaller #0 [ 1850.525151][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1850.525160][ T38] task:kworker/u8:17 state:D stack:20520 pid:12678 tgid:12678 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1850.525211][ T38] Workqueue: netns cleanup_net [ 1850.525235][ T38] Call Trace: [ 1850.525242][ T38] [ 1850.525256][ T38] __schedule+0x16f3/0x4c20 [ 1850.525312][ T38] ? __pfx___schedule+0x10/0x10 [ 1850.525355][ T38] ? schedule+0x91/0x360 [ 1850.525383][ T38] schedule+0x165/0x360 [ 1850.525409][ T38] rxrpc_destroy_all_calls+0x564/0x660 [ 1850.525438][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1850.525462][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1850.525488][ T38] ? rxrpc_net+0x23/0x240 [ 1850.525514][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1850.525534][ T38] ops_undo_list+0x49a/0x990 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1850.525562][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1850.525580][ T38] ? rt_spin_unlock+0x150/0x200 [ 1850.525607][ T38] ? rt_spin_unlock+0x161/0x200 [ 1850.525632][ T38] cleanup_net+0x4de/0x820 [ 1850.525656][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1850.525679][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1850.525704][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1850.525725][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1850.525749][ T38] process_scheduled_works+0xae1/0x17b0 [ 1850.525809][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1850.525852][ T38] worker_thread+0x8a0/0xda0 [ 1850.525878][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1850.525913][ T38] ? __kthread_parkme+0x7b/0x200 [ 1850.525953][ T38] kthread+0x711/0x8a0 [ 1850.525983][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1850.526004][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.526026][ T38] ? rt_spin_unlock+0x150/0x200 [ 1850.526053][ T38] ? rt_spin_unlock+0x161/0x200 [ 1850.526073][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.526099][ T38] ret_from_fork+0x4bc/0x870 [ 1850.526125][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1850.527293][ T38] ? __switch_to_asm+0x39/0x70 [ 1850.527316][ T38] ? __switch_to_asm+0x33/0x70 [ 1850.527334][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.527361][ T38] ret_from_fork_asm+0x1a/0x30 [ 1850.527399][ T38] [ 1850.527483][ T38] [ 1850.527483][ T38] Showing all locks held in the system: [ 1850.527497][ T38] 1 lock held by khungtaskd/38: [ 1850.527509][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1850.527568][ T38] 2 locks held by kworker/u8:6/1266: [ 1850.527592][ T38] 5 locks held by kworker/u8:8/3468: [ 1850.527605][ T38] 2 locks held by getty/5560: [ 1850.527616][ T38] #0: ffff88823bf320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1850.527662][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1850.527713][ T38] 3 locks held by kworker/0:4/5887: [ 1850.527724][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1850.527777][ T38] #1: ffffc900050efba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1850.527823][ T38] #2: ffff88805dd01260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x224/0x3e0 [ 1850.527875][ T38] 3 locks held by kworker/u8:17/12678: [ 1850.527886][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1850.527932][ T38] #1: ffffc90003de7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1850.527977][ T38] #2: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1850.528021][ T38] 2 locks held by kworker/1:2H/15194: [ 1850.528033][ T38] 1 lock held by syz-executor/15524: [ 1850.528045][ T38] 8 locks held by kworker/u8:7/15707: [ 1850.528063][ T38] 1 lock held by syz-executor/17922: [ 1850.528076][ T38] 3 locks held by kworker/0:7/18179: [ 1850.528088][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1850.528133][ T38] #1: ffffc90005717ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1850.528179][ T38] #2: ffff888039b35260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x224/0x3e0 [ 1850.528229][ T38] 3 locks held by syz-executor/18238: [ 1850.528240][ T38] 1 lock held by syz-executor/18246: [ 1850.528252][ T38] 2 locks held by syz.6.2795/18249: [ 1850.528263][ T38] 1 lock held by syz.6.2795/18250: [ 1850.528274][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1850.528319][ T38] [ 1850.528324][ T38] ============================================= [ 1850.528324][ T38] [ 1850.528339][ T38] NMI backtrace for cpu 0 [ 1850.528354][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1850.528374][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1850.528385][ T38] Call Trace: [ 1850.528393][ T38] [ 1850.528401][ T38] dump_stack_lvl+0x189/0x250 [ 1850.528430][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1850.528455][ T38] ? __pfx__printk+0x10/0x10 [ 1850.528490][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1850.528515][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1850.528539][ T38] ? __pfx__printk+0x10/0x10 [ 1850.528565][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1850.528588][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1850.528613][ T38] watchdog+0xf60/0xfa0 [ 1850.528643][ T38] ? watchdog+0x1e2/0xfa0 [ 1850.528673][ T38] kthread+0x711/0x8a0 [ 1850.528700][ T38] ? __pfx_watchdog+0x10/0x10 [ 1850.528724][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.528746][ T38] ? rt_spin_unlock+0x150/0x200 [ 1850.528777][ T38] ? rt_spin_unlock+0x161/0x200 [ 1850.528796][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.528822][ T38] ret_from_fork+0x4bc/0x870 [ 1850.528846][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1850.528874][ T38] ? __switch_to_asm+0x39/0x70 [ 1850.528891][ T38] ? __switch_to_asm+0x33/0x70 [ 1850.528908][ T38] ? __pfx_kthread+0x10/0x10 [ 1850.528933][ T38] ret_from_fork_asm+0x1a/0x30 [ 1850.528965][ T38] [ 1850.528973][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1850.528998][ C1] NMI backtrace for cpu 1 [ 1850.529018][ C1] CPU: 1 UID: 0 PID: 18249 Comm: syz.6.2795 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1850.529037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1850.529047][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x55/0x80 [ 1850.529069][ C1] Code: 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 14 16 00 00 00 74 2c 8b 91 f0 15 00 00 83 fa 02 75 21 48 8b 91 f8 15 00 00 48 8b 32 <48> 8d 7e 01 8b 89 f4 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 1850.529083][ C1] RSP: 0000:ffffc900058bf200 EFLAGS: 00000246 [ 1850.529098][ C1] RAX: ffffffff81fb0a59 RBX: ffffea0000fdd100 RCX: ffff888025020000 [ 1850.529111][ C1] RDX: ffffc90014ec4000 RSI: 000000000007ffff RDI: 0000000000000000 [ 1850.529123][ C1] RBP: ffffc900058bf320 R08: 0000000000000000 R09: 0000000000000000 [ 1850.529134][ C1] R10: dffffc0000000000 R11: ffffffff81fb0a30 R12: ffff8880b89335f8 [ 1850.529146][ C1] R13: dffffc0000000000 R14: 0000000000000010 R15: ffffea0000fdd100 [ 1850.529158][ C1] FS: 00007f0cf34756c0(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 1850.529172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1850.529184][ C1] CR2: 0000200000e0a030 CR3: 0000000052ef4000 CR4: 00000000003526f0 [ 1850.529199][ C1] Call Trace: [ 1850.529206][ C1] [ 1850.529212][ C1] lru_add+0x29/0xd40 [ 1850.529233][ C1] ? folio_lruvec_relock_irqsave+0x36b/0x510 [ 1850.529252][ C1] folio_batch_move_lru+0x1b0/0x330 [ 1850.529274][ C1] ? __pfx_lru_add+0x10/0x10 [ 1850.529295][ C1] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 1850.529315][ C1] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 1850.529332][ C1] ? folio_add_new_anon_rmap+0x705/0x10c0 [ 1850.529354][ C1] ? page_table_check_clear+0x187/0x700 [ 1850.529373][ C1] ? __pfx_lru_add+0x10/0x10 [ 1850.529402][ C1] __folio_batch_add_and_move+0x447/0xa90 [ 1850.529423][ C1] ? __pfx_lru_add+0x10/0x10 [ 1850.529445][ C1] do_wp_page+0x1b2c/0x4930 [ 1850.529465][ C1] ? do_wp_page+0x1556/0x4930 [ 1850.529489][ C1] ? preempt_count_add+0x91/0x1a0 [ 1850.529506][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1850.529523][ C1] ? rt_spin_lock+0x2ae/0x3e0 [ 1850.529541][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1850.529561][ C1] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1850.529581][ C1] handle_mm_fault+0x97c/0x3400 [ 1850.529600][ C1] ? mt_find+0x15c/0x5e0 [ 1850.529625][ C1] ? __pfx_mt_find+0x10/0x10 [ 1850.529650][ C1] ? handle_mm_fault+0xdb/0x3400 [ 1850.529673][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1850.529705][ C1] ? lock_mm_and_find_vma+0x9c/0x300 [ 1850.529729][ C1] do_user_addr_fault+0x764/0x1380 [ 1850.529754][ C1] exc_page_fault+0x82/0x100 [ 1850.529782][ C1] asm_exc_page_fault+0x26/0x30 [ 1850.529797][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1850.529818][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 42 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1850.529837][ C1] RSP: 0000:ffffc900058bf8b8 EFLAGS: 00050202 [ 1850.529850][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000e0a030 [ 1850.529861][ C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1850.529871][ C1] RBP: ffffc900058bfa30 R08: 0000000000000000 R09: 0000000000000000 [ 1850.529883][ C1] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 0000200000e0a000 [ 1850.529895][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: dffffc0000000000 [ 1850.529914][ C1] ____sys_recvmsg+0x298/0x470 [ 1850.529938][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1850.529964][ C1] ? import_iovec+0x74/0xa0 [ 1850.529983][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1850.530009][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1850.530042][ C1] ? __might_fault+0xb0/0x130 [ 1850.530064][ C1] do_recvmmsg+0x30d/0x770 [ 1850.530086][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1850.530110][ C1] ? __pfx_do_futex+0x10/0x10 [ 1850.530136][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1850.530156][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1850.530177][ C1] ? do_syscall_64+0xbe/0xfa0 [ 1850.530199][ C1] do_syscall_64+0xfa/0xfa0 [ 1850.530218][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1850.530238][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.530253][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1850.530270][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.530285][ C1] RIP: 0033:0x7f0cf522f749 [ 1850.530305][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1850.530319][ C1] RSP: 002b:00007f0cf3475038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1850.530335][ C1] RAX: ffffffffffffffda RBX: 00007f0cf5486090 RCX: 00007f0cf522f749 [ 1850.530347][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 1850.530358][ C1] RBP: 00007f0cf52b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1850.530369][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1850.530379][ C1] R13: 00007f0cf5486128 R14: 00007f0cf5486090 R15: 00007ffc5149b438 [ 1850.530399][ C1] [ 1851.447323][T18253] syz.3.2796 (18253): drop_caches: 2 [ 1853.091283][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.091353][ T1319] ieee802154 phy1 wpan1: encryption failed: -22