last executing test programs: 12m6.517309042s ago: executing program 4 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x8, 0x8}}], 0x58}, 0x0) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000003c0)=0x2c) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r5 = syz_io_uring_setup(0x47d2, &(0x7f00000002c0)={0x0, 0x86f7, 0x4}, &(0x7f0000000040), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) 12m4.707475645s ago: executing program 4 (id=940): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000000c0)={0x0, 0x1, 0x3}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x47e}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) 12m3.116166212s ago: executing program 4 (id=944): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x10, &(0x7f0000000200)}) 12m1.108886395s ago: executing program 4 (id=946): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000000c0)={0x0, 0x1, 0x3}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x47e}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) 11m57.673360709s ago: executing program 4 (id=953): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) 11m55.985467837s ago: executing program 4 (id=956): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 11m40.132886062s ago: executing program 32 (id=956): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5m28.030665358s ago: executing program 2 (id=1982): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 5m26.759866631s ago: executing program 2 (id=1983): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000056, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r2, &(0x7f00000000c0), 0x10) 5m25.246829104s ago: executing program 2 (id=1987): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000000c0)={0x0, 0x1, 0x3}) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x47e}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc054) 5m24.188042199s ago: executing program 2 (id=1988): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "abcbeb64f66f99c4c839ec8229ece5306ad2c90ce551bd97999cb36887b17c54a98ca80c342b2e95fa2acc6589706fb45947e5768c35506e6dbeefe9deabb2a00d83a0f256f899b8de97828333"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m21.304153504s ago: executing program 2 (id=1996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m19.75641318s ago: executing program 2 (id=1999): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x7, 0x1009) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) 5m4.708293109s ago: executing program 33 (id=1999): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x7, 0x1009) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) 20.8552494s ago: executing program 5 (id=2743): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) 16.207875122s ago: executing program 0 (id=2751): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 15.891588108s ago: executing program 5 (id=2753): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x1, 0x3, 0xf0}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13.564191463s ago: executing program 3 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400000011"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 13.217365853s ago: executing program 5 (id=2760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) close_range(r0, 0xffffffffffffffff, 0x0) 12.066894678s ago: executing program 0 (id=2761): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) 12.005003466s ago: executing program 1 (id=2762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 11.646195763s ago: executing program 6 (id=2763): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3f7c6dacd1aa77a72b6ee", 0x2b}, {&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e9fb245e9d154ff05cb5e3eb3a2ba2653aa8c75de5988bc816fe3f97e3ac9", 0x60}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff700710000000030203070004ffffffffffffff01082bdb86d1ce6a20c200000000180000000000000029000000370000007300000000000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff01"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.400273043s ago: executing program 1 (id=2764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ff"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 10.926335876s ago: executing program 3 (id=2765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4}) 9.695381055s ago: executing program 3 (id=2766): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 9.421408379s ago: executing program 6 (id=2767): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3f7c6dacd1aa77a72b6ee", 0x2b}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e9fb245e9d154", 0x48}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.283354561s ago: executing program 1 (id=2768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}]}}]}, 0x48}}, 0x20008090) 9.184880441s ago: executing program 0 (id=2769): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_open_dev$audion(0x0, 0x9, 0x400) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={0x200000b, 0x4, 0x0, 0x0, 'syz1\x00'}) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffffffffffff9c, 0x0, 0x2ac080, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='rdma') syz_create_resource$binfmt(&(0x7f0000000080)='.\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r3}}, 0x18) 8.925482078s ago: executing program 0 (id=2770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f00000000c0), 0x10) 8.78664111s ago: executing program 5 (id=2771): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8.752260553s ago: executing program 6 (id=2772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x1, 0x3, 0xf0}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.924979735s ago: executing program 0 (id=2773): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xb201ffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000002c0)="c156550baee31b4966957a0430b48cb9676d131c220d21b85a86bfead734bd9c614dd8872fa56a9042c58b8bd182c20f3efd43a75986e007628005dbf79edf9f94e7a81d4bc4224486d5530475bced06e208d85b33c0ed0978b47308602e98bc7ebd25c30778aa2fcbc19150fb6c95adc4d909dd34d9f9fba649fb208684d58006f8f13cfdb32eaf06f487d5fbf858f154bab48591319331378d", 0x9a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0xed0, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0xa, &(0x7f0000000240)=[{0x4, 0x2, 0x84, 0xfffffff7}, {0x2, 0x1, 0x81, 0x450}, {0x2, 0x1, 0x4, 0x3}, {0xe, 0x5, 0xd1}, {0x100, 0x80, 0xe7, 0x10001}, {0x3, 0xc, 0x1, 0x4}, {0x3, 0x5, 0x8, 0x4}, {0x80, 0x9, 0x4, 0x8}, {0x7e, 0x58, 0x7, 0x5}, {0xce, 0x2, 0xfd, 0xfffff037}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) chdir(&(0x7f0000000080)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001880)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0], 0x6, 0x5, 0x2, 0x3}) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2f, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46]}, 0x2c) 7.808792091s ago: executing program 1 (id=2774): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) 6.682623711s ago: executing program 5 (id=2775): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x58000) 5.69516192s ago: executing program 6 (id=2776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x58000) 4.897623128s ago: executing program 3 (id=2777): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3f7c6dacd1aa77a72b6ee", 0x2b}, {&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e9fb245e9d154ff05cb5e3eb3a2ba2653aa8c75de5988bc816fe3f97e3ac9", 0x60}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.8620792s ago: executing program 5 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ff"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.804945215s ago: executing program 1 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0xa2, 0x4) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3.070700925s ago: executing program 6 (id=2780): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4}) 2.813378013s ago: executing program 3 (id=2781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.123208492s ago: executing program 1 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_open_dev$audion(0x0, 0x9, 0x400) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={0x200000b, 0x4, 0x0, 0x0, 'syz1\x00'}) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffffffffffff9c, 0x0, 0x2ac080, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='rdma') syz_create_resource$binfmt(&(0x7f0000000080)='.\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r3}}, 0x18) 1.998932457s ago: executing program 0 (id=2783): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_open_dev$audion(0x0, 0x9, 0x400) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={0x200000b, 0x4, 0x0, 0x0, 'syz1\x00'}) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r5}}, 0x18) 101.10178ms ago: executing program 6 (id=2784): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) openat$incfs(0xffffffffffffff9c, 0x0, 0x111000, 0x1a3) syz_clone3(&(0x7f0000000900)={0x260000, &(0x7f0000000440), 0x0, &(0x7f00000004c0), {0x38}, &(0x7f0000000680)=""/249, 0xf9, &(0x7f0000000840)=""/189, 0x0}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x6c800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10800, 0x0) statx(r4, &(0x7f0000000140)='./file0\x00', 0x2000, 0x200, &(0x7f0000000540)) io_uring_enter(0xffffffffffffffff, 0x133d, 0x0, 0x8, 0x0, 0x0) 0s ago: executing program 3 (id=2785): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) kernel console output (not intermixed with test programs): edia entity 'dvb-demux' registered. [ 631.983407][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 631.992548][ T4317] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 632.046125][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 632.065581][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 632.092717][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 632.117845][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 632.150759][T10232] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.159641][T10232] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.168467][T10232] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.177329][T10232] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.284845][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 632.761774][T10243] trusted_key: encrypted_key: insufficient parameters specified [ 632.885217][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'. [ 632.896528][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'. [ 633.265079][ T4317] usb 2-1: USB disconnect, device number 22 [ 635.777518][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 635.787725][T10256] IPVS: sed: FWM 3 0x00000003 - no destination available [ 635.794911][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 636.023623][T10265] SET target dimension over the limit! [ 636.067926][T10265] binfmt_misc: register: failed to install interpreter file ./file0 [ 638.144954][ T4270] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 638.224265][T10289] 9pnet_fd: Insufficient options for proto=fd [ 638.311606][ T4319] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 638.521709][ T4319] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.569339][ T4319] usb 6-1: config 0 has no interface number 0 [ 638.601984][T10298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1400'. [ 638.609121][ T4319] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 638.786241][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.860666][ T4319] usb 6-1: Product: syz [ 638.919113][ T4319] usb 6-1: Manufacturer: syz [ 638.957834][ T4319] usb 6-1: SerialNumber: syz [ 639.042030][ T4319] usb 6-1: config 0 descriptor?? [ 639.240538][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 639.261110][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 639.279597][ T4319] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 639.317303][ T4319] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 639.348526][ T4319] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 639.354995][T10306] fuse: Bad value for 'fd' [ 639.358487][ T4319] usb 6-1: media controller created [ 639.400328][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.354154][ T4317] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 640.354287][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 640.502200][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1395'. [ 640.560907][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 640.574925][ T4317] usb 4-1: not running at top speed; connect to a high speed hub [ 640.592291][ T4317] usb 4-1: config 255 has an invalid interface number: 180 but max is 0 [ 640.601099][ T4317] usb 4-1: config 255 has no interface number 0 [ 640.655491][ T4317] usb 4-1: config 255 interface 180 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 640.689515][ T4317] usb 4-1: config 255 interface 180 has no altsetting 0 [ 640.706905][ T4317] usb 4-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 640.717634][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.726558][ T4317] usb 4-1: Product: syz [ 640.731600][ T4317] usb 4-1: Manufacturer: syz [ 640.736323][ T4317] usb 4-1: SerialNumber: syz [ 640.737987][ T4319] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 640.855307][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.878185][ T14] usb 3-1: config 0 has no interface number 0 [ 640.964180][ T14] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 640.974497][ T4317] HFC-S_USB: probe of 4-1:255.180 failed with error -5 [ 640.983122][ T4317] usb 4-1: USB disconnect, device number 24 [ 641.115783][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.124267][ T14] usb 3-1: Product: syz [ 641.129047][ T14] usb 3-1: Manufacturer: syz [ 641.133841][ T14] usb 3-1: SerialNumber: syz [ 641.176437][ T4319] usb 6-1: USB disconnect, device number 4 [ 641.186070][ T14] usb 3-1: config 0 descriptor?? [ 641.979829][ T4585] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 641.988143][ T14] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 642.005190][ T14] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 642.016374][ T14] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 642.048871][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 642.058168][ T14] usb 3-1: media controller created [ 642.071903][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 642.089107][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.183637][ T4585] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 642.196828][ T4585] usb 2-1: config 0 has no interface number 0 [ 642.203928][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 642.212914][ T4585] usb 2-1: config 0 interface 101 has no altsetting 0 [ 642.219737][ T4585] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 642.241216][ T14] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 642.241757][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 642.296395][ T4585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.384202][ T4585] usb 2-1: config 0 descriptor?? [ 642.415950][ T4585] cp210x 2-1:0.101: cp210x converter detected [ 642.557545][T10334] loop3: detected capacity change from 0 to 1024 [ 642.581323][T10334] EXT4-fs: Ignoring removed orlov option [ 642.597198][T10334] EXT4-fs: Ignoring removed orlov option [ 642.651542][T10334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 642.807290][ T4585] cp210x 2-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 643.042198][ T4585] cp210x 2-1:0.101: failed to get vendor val 0x370c size 15: -71 [ 643.049988][ T4585] cp210x 2-1:0.101: GPIO initialisation failed: -71 [ 643.065030][ T4585] usb 2-1: cp210x converter now attached to ttyUSB0 [ 643.086745][ T4585] usb 2-1: USB disconnect, device number 23 [ 643.103106][ T4585] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 643.114605][ T4585] cp210x 2-1:0.101: device disconnected [ 643.321936][ T14] usb 3-1: USB disconnect, device number 27 [ 643.975356][T10352] binfmt_misc: register: failed to install interpreter file ./file0 [ 644.968651][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 645.749391][ T6530] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 646.076945][ T6530] usb 2-1: Using ep0 maxpacket: 16 [ 646.090357][ T6530] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.156835][ T6530] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 646.171315][ T6530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.237320][ T6530] usb 2-1: config 0 descriptor?? [ 646.288011][ T6530] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 646.391673][T10379] fuse: Bad value for 'fd' [ 646.515321][T10384] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 0, id = 0 [ 646.593058][ T6530] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 646.820924][T10388] binfmt_misc: register: failed to install interpreter file ./file0 [ 646.823034][ T6530] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.001545][ T6530] usb 6-1: config 0 has no interface number 0 [ 647.012449][ T6530] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 647.025910][ T6530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.034503][ T6530] usb 6-1: Product: syz [ 647.040946][ T6530] usb 6-1: Manufacturer: syz [ 647.045888][ T6530] usb 6-1: SerialNumber: syz [ 647.062905][ T6530] usb 6-1: config 0 descriptor?? [ 647.305432][ T6530] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 647.340303][ T6530] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.361719][ T6530] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 647.383697][ T6530] usb 6-1: media controller created [ 647.445738][ T6530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.310995][ T14] usb 2-1: USB disconnect, device number 24 [ 648.909257][ T6530] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 649.011291][ T6530] usb 6-1: USB disconnect, device number 5 [ 649.763387][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 649.951797][T10411] loop2: detected capacity change from 0 to 1024 [ 649.958958][T10411] EXT4-fs: Ignoring removed orlov option [ 649.964736][T10411] EXT4-fs: Ignoring removed orlov option [ 650.074861][T10411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 650.266570][T10420] fuse: Unknown parameter 'group_id00000000000000000000' [ 651.232921][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 652.291543][ T4319] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 653.091528][ T4319] usb 6-1: device descriptor read/64, error -71 [ 653.150919][T10446] fuse: Unknown parameter 'group_i00000000000000000000' [ 653.384215][ T4319] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 653.551602][ T4319] usb 6-1: device descriptor read/64, error -71 [ 653.679175][ T4319] usb usb6-port1: attempt power cycle [ 654.131531][ T4319] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 654.902354][ T4319] usb 6-1: device descriptor read/8, error -71 [ 656.552477][ T4314] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 657.342128][ T4585] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 657.443291][ T4314] usb 1-1: device descriptor read/all, error -71 [ 658.266431][ T4585] usb 3-1: config 0 has an invalid interface number: 134 but max is 0 [ 658.305658][ T4585] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.331649][ T4585] usb 3-1: config 0 has no interface number 0 [ 658.381568][ T4585] usb 3-1: config 0 interface 134 has no altsetting 0 [ 658.415245][ T4585] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 658.478862][ T4585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.516174][ T4585] usb 3-1: config 0 descriptor?? [ 658.524192][ T4585] smsusb:smsusb_probe: board id=8, interface number 134 [ 658.768499][T10482] loop2: detected capacity change from 0 to 128 [ 658.838919][T10502] SET target dimension over the limit! [ 658.881651][ T4314] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 658.892452][T10502] binfmt_misc: register: failed to install interpreter file ./file0 [ 659.214221][T10506] trusted_key: encrypted_key: insufficient parameters specified [ 661.621648][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 661.686687][ T4314] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 661.728019][ T4314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.769384][ T4314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.858746][ T6530] usb 3-1: USB disconnect, device number 28 [ 662.058916][ T4314] usb 1-1: string descriptor 0 read error: -71 [ 662.066567][ T4314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.142189][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.171137][ T4314] usb 1-1: can't set config #1, error -71 [ 662.183941][ T4314] usb 1-1: USB disconnect, device number 28 [ 662.628325][ T6530] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 663.105350][ T4319] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 663.303609][ T6530] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.332048][ T6530] usb 3-1: config 0 has no interface number 0 [ 663.371554][ T4319] usb 6-1: device descriptor read/64, error -71 [ 663.399178][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 663.462021][ T6530] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 663.471708][ T6530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.480088][ T6530] usb 3-1: Product: syz [ 663.488188][T10535] loop1: detected capacity change from 0 to 1024 [ 663.611406][ T6530] usb 3-1: Manufacturer: syz [ 663.616232][ T6530] usb 3-1: SerialNumber: syz [ 663.647184][T10535] EXT4-fs: Ignoring removed orlov option [ 663.654061][T10535] EXT4-fs: Ignoring removed orlov option [ 663.664965][ T6530] usb 3-1: config 0 descriptor?? [ 663.691519][ T4319] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 663.713006][T10535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 663.871836][ T4319] usb 6-1: device descriptor read/64, error -71 [ 663.878519][ T6530] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 664.050229][ T4319] usb usb6-port1: attempt power cycle [ 664.050899][ T6530] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 664.066815][ T6530] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 664.105279][ T6530] usb 3-1: media controller created [ 664.110281][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1466'. [ 664.152264][T10542] IPVS: sed: FWM 3 0x00000003 - no destination available [ 664.160491][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 664.178818][ T6530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.447952][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1459'. [ 664.517368][ T6530] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 664.521682][ T4319] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 664.582036][ T4319] usb 6-1: device descriptor read/8, error -71 [ 664.616363][ T6530] usb 3-1: USB disconnect, device number 29 [ 664.677279][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 664.871623][ T4319] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 665.061781][ T4319] usb 6-1: device descriptor read/8, error -71 [ 665.211729][ T4319] usb usb6-port1: unable to enumerate USB device [ 665.251833][ T4314] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 665.429068][T10556] IPVS: sed: FWM 3 0x00000003 - no destination available [ 665.437233][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 665.463950][ T4314] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 665.553066][ T4314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.579282][ T4314] usb 4-1: config 0 has no interface number 0 [ 665.791848][ T4282] Bluetooth: hci3: command 0x1003 tx timeout [ 665.799857][ T4270] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 665.826808][ T4314] usb 4-1: config 0 interface 134 has no altsetting 0 [ 665.867544][ T4314] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 665.881566][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.909843][ T4314] usb 4-1: config 0 descriptor?? [ 665.927696][ T4314] smsusb:smsusb_probe: board id=8, interface number 134 [ 666.201170][T10551] loop3: detected capacity change from 0 to 128 [ 667.236556][ T4314] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 667.526539][ T4314] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.560320][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1476'. [ 667.693861][ T4314] usb 3-1: config 0 has no interface number 0 [ 667.750458][ T4314] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 667.827029][T10568] IPVS: sed: FWM 3 0x00000003 - no destination available [ 667.834200][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 667.850706][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.865738][ T4314] usb 3-1: Product: syz [ 667.869977][ T4314] usb 3-1: Manufacturer: syz [ 667.878236][ T4314] usb 3-1: SerialNumber: syz [ 667.884435][ T4314] usb 3-1: config 0 descriptor?? [ 667.978488][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 668.101409][ T4314] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 668.118133][ T4314] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 668.132869][ T4314] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 668.141173][ T4314] usb 3-1: media controller created [ 668.174055][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.293742][T10582] loop1: detected capacity change from 0 to 1024 [ 668.325044][T10582] EXT4-fs: Ignoring removed orlov option [ 668.343624][T10582] EXT4-fs: Ignoring removed orlov option [ 668.412298][ T4314] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 668.413348][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 668.459462][ T22] usb 4-1: USB disconnect, device number 25 [ 668.462925][T10582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 668.501530][ T4319] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 668.661685][ T4319] usb 1-1: device descriptor read/64, error -71 [ 669.421580][ T4319] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 669.503730][ T4314] usb 3-1: USB disconnect, device number 30 [ 669.586319][ T4319] usb 1-1: device descriptor read/64, error -71 [ 669.714395][ T4319] usb usb1-port1: attempt power cycle [ 670.705836][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 670.981536][ T4319] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 671.035431][ T4319] usb 1-1: device descriptor read/8, error -71 [ 671.321617][ T4319] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 671.583672][ T4319] usb 1-1: device not accepting address 32, error -71 [ 671.591932][ T4319] usb usb1-port1: unable to enumerate USB device [ 671.611556][ T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 671.809060][ T14] usb 6-1: config 0 has an invalid interface number: 134 but max is 0 [ 671.867533][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.171489][ T14] usb 6-1: config 0 has no interface number 0 [ 672.177686][ T14] usb 6-1: config 0 interface 134 has no altsetting 0 [ 672.201560][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 672.210638][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.336998][ T14] usb 6-1: config 0 descriptor?? [ 672.348791][ T14] smsusb:smsusb_probe: board id=8, interface number 134 [ 673.052129][T10621] loop5: detected capacity change from 0 to 128 [ 674.549544][ T22] usb 6-1: USB disconnect, device number 14 [ 674.610806][T10630] SET target dimension over the limit! [ 674.795073][T10642] 9pnet_fd: Insufficient options for proto=fd [ 674.985960][T10649] 9pnet_fd: Insufficient options for proto=fd [ 677.453028][ T4585] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 677.990063][T10679] binfmt_misc: register: failed to install interpreter file ./file0 [ 678.209023][ T4585] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.265789][ T4585] usb 1-1: config 0 has no interfaces? [ 678.287694][ T4585] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 678.349161][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.374952][ T4585] usb 1-1: config 0 descriptor?? [ 678.758688][ T4585] usb 1-1: USB disconnect, device number 33 [ 679.451723][ T22] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 679.651664][ T4330] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 679.684885][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 679.701486][ T22] usb 4-1: not running at top speed; connect to a high speed hub [ 679.714245][ T22] usb 4-1: config 255 has an invalid interface number: 180 but max is 0 [ 679.723134][ T22] usb 4-1: config 255 has no interface number 0 [ 679.729953][ T22] usb 4-1: config 255 interface 180 has no altsetting 0 [ 679.744725][ T22] usb 4-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 679.755659][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.763805][ T22] usb 4-1: Product: syz [ 679.771683][ T22] usb 4-1: Manufacturer: syz [ 679.776376][ T22] usb 4-1: SerialNumber: syz [ 679.862559][ T4330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.873177][ T4330] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.882260][ T4330] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 679.891555][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.902249][ T4330] usb 3-1: config 0 descriptor?? [ 680.013506][ T22] HFC-S_USB: probe of 4-1:255.180 failed with error -5 [ 680.030009][ T22] usb 4-1: USB disconnect, device number 26 [ 680.123310][ T4319] usb 3-1: USB disconnect, device number 31 [ 681.033151][ T22] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 681.263789][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 681.309407][ T22] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 681.454278][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.465191][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.477222][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.487721][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.502696][ T22] usb 1-1: Product: syz [ 681.511688][ T22] usb 1-1: Manufacturer: syz [ 681.521745][ T22] usb 1-1: SerialNumber: syz [ 681.970769][ T22] usb 1-1: 0:2 : does not exist [ 683.951239][ T22] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 684.016515][ T22] usb 1-1: USB disconnect, device number 34 [ 684.115197][T10757] fuse: Unknown parameter 'use00000000000000000000' [ 684.263640][ T8602] udevd[8602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.551648][ T14] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 684.734794][T10764] binfmt_misc: register: failed to install interpreter file ./file0 [ 684.871855][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 684.889703][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.958143][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.064360][ T14] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 685.077642][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.111805][ T14] usb 6-1: config 0 descriptor?? [ 685.118286][ T14] hub 6-1:0.0: USB hub found [ 685.797271][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.811222][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.820435][ T14] hub 6-1:0.0: 6 ports detected [ 685.835053][ T14] hub 6-1:0.0: insufficient power available to use all downstream ports [ 686.191628][ T4270] Bluetooth: hci3: command 0x1003 tx timeout [ 686.191886][ T8491] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 686.417721][ T14] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 686.425901][ T14] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 686.439815][ T14] usbhid 6-1:0.0: can't add hid device: -71 [ 686.467729][ T14] usbhid: probe of 6-1:0.0 failed with error -71 [ 686.543445][ T14] usb 6-1: USB disconnect, device number 15 [ 687.899516][T10790] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 688.159740][T10799] fuse: Unknown parameter 'user_i00000000000000000000' [ 689.181996][ T4341] Bluetooth: hci3: Frame reassembly failed (-84) [ 689.344342][ T4330] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 689.827060][ T4314] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 690.147081][ T4330] usb 6-1: Using ep0 maxpacket: 16 [ 690.193268][ T4330] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.202422][ T4330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.219255][ T4330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.239534][ T4330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.249922][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.258628][ T4330] usb 6-1: Product: syz [ 690.263574][ T4330] usb 6-1: Manufacturer: syz [ 690.268184][ T4330] usb 6-1: SerialNumber: syz [ 690.371626][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 690.382955][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.442200][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.481891][ T4314] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 690.505454][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.617594][ T8491] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 690.626973][ T4314] usb 1-1: config 0 descriptor?? [ 690.657295][ T4314] hub 1-1:0.0: USB hub found [ 690.691871][ T4330] usb 6-1: 0:2 : does not exist [ 690.838577][ T4314] hub 1-1:0.0: 6 ports detected [ 690.844121][ T4314] hub 1-1:0.0: insufficient power available to use all downstream ports [ 691.067686][ T4314] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 691.074251][ T4314] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 691.086370][ T4314] usbhid 1-1:0.0: can't add hid device: -71 [ 691.092679][ T4314] usbhid: probe of 1-1:0.0 failed with error -71 [ 691.132345][ T4314] usb 1-1: USB disconnect, device number 35 [ 692.074755][ T4330] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 693.402462][ T4330] usb 6-1: USB disconnect, device number 16 [ 693.532640][T10839] fuse: Unknown parameter 'user_i00000000000000000000' [ 693.703868][ T8602] udevd[8602]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.067025][T10858] Cannot find add_set index 0 as target [ 695.850453][T10875] Cannot find add_set index 0 as target [ 696.321741][ T4585] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 696.531533][ T4585] usb 6-1: Using ep0 maxpacket: 16 [ 696.537973][ T4585] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 696.572496][ T4585] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.588513][ T4585] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.777937][ T4585] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.804270][T10884] fuse: Unknown parameter 'user_i00000000000000000000' [ 697.382464][ T4585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.390505][ T4585] usb 6-1: Product: syz [ 697.417135][ T4585] usb 6-1: Manufacturer: syz [ 697.475891][ T4585] usb 6-1: SerialNumber: syz [ 697.594825][ T8491] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 698.428713][ T4585] usb 6-1: 0:2 : does not exist [ 699.358646][ T4585] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 699.477428][ T4585] usb 6-1: USB disconnect, device number 17 [ 699.530674][ T8602] udevd[8602]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 699.559682][ T8602] udevd[8602]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 700.146816][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1578'. [ 700.325218][T10929] loop5: detected capacity change from 0 to 1024 [ 700.340468][T10929] EXT4-fs: Ignoring removed orlov option [ 700.346199][T10929] EXT4-fs: Ignoring removed orlov option [ 700.411077][T10933] fuse: Unknown parameter 'user_id00000000000000000000' [ 700.474986][T10929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 700.528385][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 700.605921][ T8491] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 700.775520][T10945] fuse: Unknown parameter 'user_id00000000000000000000' [ 703.181461][T10964] binfmt_misc: register: failed to install interpreter file ./file0 [ 704.301519][ T4330] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 704.511579][ T4330] usb 6-1: Using ep0 maxpacket: 16 [ 704.518834][ T4330] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 704.545635][ T4330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.575013][ T4330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.607124][ T4330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.651187][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.677073][ T4330] usb 6-1: Product: syz [ 704.737626][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 704.807931][ T4330] usb 6-1: Manufacturer: syz [ 704.859902][ T4330] usb 6-1: SerialNumber: syz [ 704.928504][T10986] loop1: detected capacity change from 0 to 1024 [ 704.935864][T10986] EXT4-fs: Ignoring removed orlov option [ 704.941600][T10986] EXT4-fs: Ignoring removed orlov option [ 705.081125][T10986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 705.331917][ T4586] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 705.711693][ T4586] usb 1-1: Using ep0 maxpacket: 32 [ 705.764485][ T4586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.849499][ T4586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.938258][ T4586] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.008183][ T4586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.032407][ T4330] usb 6-1: 0:2 : does not exist [ 706.063585][ T4586] usb 1-1: config 0 descriptor?? [ 706.084167][ T4586] hub 1-1:0.0: USB hub found [ 706.096627][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 706.287638][ T4586] hub 1-1:0.0: 6 ports detected [ 706.301904][ T4586] hub 1-1:0.0: insufficient power available to use all downstream ports [ 706.606933][ T4586] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 707.227335][ T4586] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 707.259266][ T4586] usbhid 1-1:0.0: can't add hid device: -71 [ 707.265483][ T4586] usbhid: probe of 1-1:0.0 failed with error -71 [ 707.324438][ T4586] usb 1-1: USB disconnect, device number 36 [ 707.450070][ T4330] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 707.485914][ T4330] usb 6-1: USB disconnect, device number 18 [ 708.817412][T11027] trusted_key: encrypted_key: insufficient parameters specified [ 708.825570][T11028] trusted_key: encrypted_key: insufficient parameters specified [ 708.889316][T11022] fuse: Bad value for 'rootmode' [ 709.021810][T11015] binfmt_misc: register: failed to install interpreter file ./file0 [ 709.298425][T11035] fuse: Bad value for 'rootmode' [ 709.306039][T11031] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1604'. [ 711.561298][T11060] Cannot find add_set index 0 as target [ 712.674452][T11071] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 712.920887][ T4586] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 713.131504][ T4586] usb 2-1: Using ep0 maxpacket: 32 [ 713.138502][ T4586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.170106][ T4586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.217575][ T4586] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 713.281696][ T4586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.306109][ T4586] usb 2-1: config 0 descriptor?? [ 713.364876][ T4586] hub 2-1:0.0: USB hub found [ 713.431568][ T14] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 713.780754][ T4586] hub 2-1:0.0: 6 ports detected [ 713.786676][ T4586] hub 2-1:0.0: insufficient power available to use all downstream ports [ 713.837442][ T14] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 713.863109][ T14] usb 1-1: config 0 has no interface number 0 [ 713.877729][ T14] usb 1-1: config 0 interface 101 has no altsetting 0 [ 713.894303][ T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 714.032714][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.060596][ T14] usb 1-1: config 0 descriptor?? [ 714.099688][ T14] cp210x 1-1:0.101: cp210x converter detected [ 714.138530][T11093] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.1619'. [ 714.432109][ T8491] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 714.509251][ T14] cp210x 1-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 714.566353][T11098] Cannot find add_set index 0 as target [ 714.646231][ T4586] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 714.661892][ T4586] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 714.723019][ T4586] usbhid 2-1:0.0: can't add hid device: -71 [ 714.745322][ T4586] usbhid: probe of 2-1:0.0 failed with error -71 [ 714.952321][ T14] cp210x 1-1:0.101: GPIO initialisation failed: -19 [ 715.000171][ T14] usb 1-1: cp210x converter now attached to ttyUSB0 [ 715.042493][ T4586] usb 2-1: USB disconnect, device number 25 [ 715.093230][T11097] binfmt_misc: register: failed to install interpreter file ./file0 [ 715.227095][ T22] usb 1-1: USB disconnect, device number 37 [ 715.248970][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 715.285589][ T22] cp210x 1-1:0.101: device disconnected [ 716.568230][T11126] trusted_key: encrypted_key: insufficient parameters specified [ 718.178157][T11114] Cannot find add_set index 0 as target [ 718.531928][ T14] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 718.611507][ T22] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 718.801617][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 718.816986][ T22] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 718.853916][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.856033][ T14] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 718.882238][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.933777][T11150] Cannot find add_set index 0 as target [ 718.944592][ T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.963603][ T4585] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 718.971573][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.994580][ T14] usb 1-1: config 0 has no interface number 0 [ 719.000375][ T22] usb 6-1: Product: syz [ 719.010525][ T22] usb 6-1: Manufacturer: syz [ 719.020809][ T22] usb 6-1: SerialNumber: syz [ 719.025319][ T14] usb 1-1: config 0 interface 101 has no altsetting 0 [ 719.045570][ T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.064794][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.079621][T11149] binfmt_misc: register: failed to install interpreter file ./file0 [ 719.104235][ T14] usb 1-1: config 0 descriptor?? [ 719.191933][ T14] cp210x 1-1:0.101: cp210x converter detected [ 719.305189][ T4585] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.335729][ T4585] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 719.383703][ T4585] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.454606][ T4585] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 719.496661][ T4585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.651116][ T14] cp210x 1-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 719.671385][ T4585] usb 3-1: config 0 descriptor?? [ 719.787724][ T4585] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 719.879255][ T22] usb 6-1: 0:2 : does not exist [ 720.009988][ T14] cp210x 1-1:0.101: GPIO initialisation failed: -19 [ 720.022330][ T4585] hdpvr: probe of 3-1:0.0 failed with error -12 [ 720.030575][ T14] usb 1-1: cp210x converter now attached to ttyUSB0 [ 720.077880][ T14] usb 3-1: USB disconnect, device number 32 [ 720.671519][ T4585] usb 1-1: USB disconnect, device number 38 [ 720.703619][ T22] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 720.752032][ T4585] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 720.771011][ T22] usb 6-1: USB disconnect, device number 19 [ 720.801990][ T4585] cp210x 1-1:0.101: device disconnected [ 721.012937][ T8602] udevd[8602]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.257691][T11169] trusted_key: encrypted_key: insufficient parameters specified [ 722.745298][ T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 722.949810][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 722.957984][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.989582][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.017656][ T22] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 723.042937][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.261040][ T22] usb 6-1: config 0 descriptor?? [ 724.686709][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 724.698660][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 724.737427][ T22] usb 6-1: USB disconnect, device number 20 [ 725.592942][T11208] trusted_key: encrypted_key: insufficient parameters specified [ 726.629896][T11213] Cannot find add_set index 0 as target [ 727.110859][ T4585] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 727.250790][T11219] trusted_key: encrypted_key: insufficient parameters specified [ 727.962621][ T14] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 728.064575][ T4585] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.161944][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 728.213447][ T14] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 728.244239][ T4585] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 728.322409][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.521745][ T4585] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.538648][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.562125][ T4585] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 728.575294][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.585449][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.595258][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 728.614214][ T4585] usb 1-1: config 0 descriptor?? [ 728.619169][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.627355][ T14] usb 4-1: Product: syz [ 728.634030][ T4585] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 728.640373][ T14] usb 4-1: Manufacturer: syz [ 728.645062][ T4585] hdpvr: probe of 1-1:0.0 failed with error -12 [ 728.651314][ T14] usb 4-1: SerialNumber: syz [ 728.772949][T11231] loop5: detected capacity change from 0 to 1024 [ 728.780394][T11231] EXT4-fs: Ignoring removed orlov option [ 728.786181][T11231] EXT4-fs: Ignoring removed orlov option [ 728.841537][ T4585] usb 1-1: USB disconnect, device number 39 [ 728.928913][T11231] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 729.081376][ T14] usb 4-1: 0:2 : does not exist [ 729.916981][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 731.330271][ T14] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 731.485822][ T14] usb 4-1: USB disconnect, device number 27 [ 731.586656][T11269] fuse: Unknown parameter 'user_i00000000000000000000' [ 731.742362][ T8602] udevd[8602]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.784284][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 731.969476][T11286] loop0: detected capacity change from 0 to 1024 [ 731.976690][T11286] EXT4-fs: Ignoring removed orlov option [ 731.982481][T11286] EXT4-fs: Ignoring removed orlov option [ 732.025066][T11286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 732.233484][T11297] binfmt_misc: register: failed to install interpreter file ./file0 [ 732.621376][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 732.752521][ T14] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 732.956620][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 733.012787][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.054327][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.715732][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 733.743953][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.777506][ T14] usb 4-1: config 0 descriptor?? [ 733.799219][ T14] hub 4-1:0.0: USB hub found [ 733.981546][ T22] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 733.992319][ T14] hub 4-1:0.0: 6 ports detected [ 734.002982][ T14] hub 4-1:0.0: insufficient power available to use all downstream ports [ 734.093456][T11321] fuse: Unknown parameter '0x0000000000000003' [ 734.191582][ T8491] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 734.207449][ T22] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 734.321997][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.430252][ T22] usb 3-1: config 0 descriptor?? [ 734.705789][ T22] cp210x 3-1:0.0: cp210x converter detected [ 735.072855][ T14] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 735.082777][ T14] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 735.151605][ T14] usbhid 4-1:0.0: can't add hid device: -32 [ 735.177730][ T14] usbhid: probe of 4-1:0.0 failed with error -32 [ 735.244296][ T22] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 735.485125][ T22] usb 3-1: cp210x converter now attached to ttyUSB0 [ 735.712240][ T14] usb 4-1: USB disconnect, device number 28 [ 735.728826][ T22] usb 3-1: USB disconnect, device number 33 [ 735.759123][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.811961][ T22] cp210x 3-1:0.0: device disconnected [ 735.979291][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 736.164584][T11342] loop3: detected capacity change from 0 to 1024 [ 736.171871][T11342] EXT4-fs: Ignoring removed orlov option [ 736.177532][T11342] EXT4-fs: Ignoring removed orlov option [ 736.269908][T11342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 737.474829][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 737.622320][T11362] fuse: Unknown parameter '0x0000000000000003' [ 738.971648][ T4586] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 739.192879][ T4586] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.513101][ T4586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 739.615565][ T4586] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 739.626582][ T4586] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.666407][ T4586] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 739.697363][ T4586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.724138][ T4586] usb 6-1: config 0 descriptor?? [ 739.755402][ T4586] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 739.770948][ T4586] hdpvr: probe of 6-1:0.0 failed with error -12 [ 739.958465][ T22] usb 6-1: USB disconnect, device number 21 [ 741.125037][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1704'. [ 741.972804][T11404] loop5: detected capacity change from 0 to 1024 [ 741.979895][T11404] EXT4-fs: Ignoring removed orlov option [ 741.985636][T11404] EXT4-fs: Ignoring removed orlov option [ 742.286046][T11404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 742.440982][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 742.648956][T11417] fuse: Unknown parameter '0x0000000000000003' [ 745.791707][ T4314] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 746.066795][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.281584][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 746.423740][ T4314] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 746.662929][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.778380][T11454] Cannot find add_set index 0 as target [ 747.117941][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.121458][ T4314] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 747.124284][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.140121][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.156501][ T4314] usb 3-1: config 0 descriptor?? [ 747.168722][ T4314] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 747.241606][ T4314] hdpvr: probe of 3-1:0.0 failed with error -12 [ 747.372857][ T4314] usb 3-1: USB disconnect, device number 34 [ 747.407078][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1719'. [ 747.587531][T11460] loop5: detected capacity change from 0 to 1024 [ 747.594484][T11460] EXT4-fs: Ignoring removed orlov option [ 747.600108][T11460] EXT4-fs: Ignoring removed orlov option [ 747.678200][T11460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 747.880218][T11466] fuse: Unknown parameter 'grou00000000000000000000' [ 747.946580][T11468] fuse: Unknown parameter '0x0000000000000003' [ 748.265271][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 748.568843][ T4270] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 752.075620][T11515] fuse: Unknown parameter 'fd0x0000000000000003' [ 752.873139][T11527] loop3: detected capacity change from 0 to 1024 [ 752.882574][T11527] EXT4-fs: Ignoring removed orlov option [ 752.888272][T11527] EXT4-fs: Ignoring removed orlov option [ 753.674309][T11527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 753.952017][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 756.061925][ T14] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 756.281762][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 756.299424][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.404715][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.615310][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 756.896560][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.113983][ T14] usb 3-1: config 0 descriptor?? [ 758.184227][ T14] usb 3-1: can't set config #0, error -71 [ 758.211643][ T14] usb 3-1: USB disconnect, device number 35 [ 761.177349][T11587] loop2: detected capacity change from 0 to 1024 [ 761.184520][T11587] EXT4-fs: Ignoring removed orlov option [ 761.190172][T11587] EXT4-fs: Ignoring removed orlov option [ 762.320093][T11587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 762.329854][T11589] fuse: Unknown parameter 'group_i00000000000000000000' [ 762.581244][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 763.183854][T11604] fuse: Unknown parameter 'fd0x0000000000000003' [ 764.021739][T11618] Cannot find add_set index 0 as target [ 765.338532][T11636] loop0: detected capacity change from 0 to 1024 [ 765.355936][T11636] EXT4-fs: Ignoring removed orlov option [ 765.385713][T11636] EXT4-fs: Ignoring removed orlov option [ 765.481332][T11636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 766.061029][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 771.353616][T11678] Cannot find add_set index 0 as target [ 772.659269][T11692] loop1: detected capacity change from 0 to 1024 [ 772.669801][T11692] EXT4-fs: Ignoring removed orlov option [ 772.676144][T11692] EXT4-fs: Ignoring removed orlov option [ 773.518244][T11692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 773.685854][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 773.712762][T11701] fuse: Unknown parameter 'group_i00000000000000000000' [ 775.226546][ T4270] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 778.192281][T11745] fuse: Unknown parameter 'group_id00000000000000000000' [ 780.493571][T11769] trusted_key: encrypted_key: insufficient parameters specified [ 781.144413][ T6530] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 781.363420][ T6530] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.400235][T11774] fuse: Bad value for 'fd' [ 781.419269][T11774] loop2: detected capacity change from 0 to 1024 [ 782.527606][T11774] EXT4-fs: Ignoring removed orlov option [ 782.533365][T11774] EXT4-fs: Ignoring removed orlov option [ 782.575981][ T6530] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 782.607300][ T6530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.650566][ T6530] usb 6-1: config 0 descriptor?? [ 782.663219][ T6530] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 782.672334][T11774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 782.845123][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 783.191995][T11781] Cannot find add_set index 0 as target [ 783.205013][ T14] usb 6-1: USB disconnect, device number 22 [ 783.287511][T11780] binfmt_misc: register: failed to install interpreter file ./file0 [ 784.623545][T11798] fuse: Unknown parameter 'group_id00000000000000000000' [ 785.884564][T11815] 9pnet_fd: Insufficient options for proto=fd [ 785.957162][T11816] 9pnet_fd: Insufficient options for proto=fd [ 786.924879][T11828] trusted_key: encrypted_key: key user:syz not found [ 787.197297][T11831] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 787.521617][T11833] fuse: Bad value for 'fd' [ 787.541570][T11833] loop5: detected capacity change from 0 to 1024 [ 787.548866][T11833] EXT4-fs: Ignoring removed orlov option [ 787.722429][T11833] EXT4-fs: Ignoring removed orlov option [ 788.553822][T11833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 788.561028][T11838] fuse: Unknown parameter 'group_id00000000000000000000' [ 788.779736][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 789.293977][ T4319] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 789.661661][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 789.739187][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.825145][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.936974][ T4319] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 790.094864][T11863] Cannot find add_set index 0 as target [ 790.254805][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.500452][ T4319] usb 1-1: config 0 descriptor?? [ 790.538174][ T4319] hub 1-1:0.0: USB hub found [ 790.755857][ T4319] hub 1-1:0.0: 6 ports detected [ 790.761668][ T4319] hub 1-1:0.0: insufficient power available to use all downstream ports [ 791.011153][ T4319] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 791.017534][ T4319] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 791.685160][ T4319] usbhid 1-1:0.0: can't add hid device: -71 [ 791.691120][ T4319] usbhid: probe of 1-1:0.0 failed with error -71 [ 791.767963][ T4319] usb 1-1: USB disconnect, device number 40 [ 793.405608][T11885] loop2: detected capacity change from 0 to 1024 [ 793.412843][T11885] EXT4-fs: Ignoring removed orlov option [ 793.418500][T11885] EXT4-fs: Ignoring removed orlov option [ 794.611917][T11885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 794.640980][T11890] fuse: Bad value for 'user_id' [ 794.661587][ T4319] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 794.875956][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 794.895271][ T4319] usb 1-1: not running at top speed; connect to a high speed hub [ 795.056835][ T4319] usb 1-1: config 10 has an invalid interface number: 173 but max is 1 [ 795.944058][ T4319] usb 1-1: config 10 has an invalid interface number: 3 but max is 1 [ 796.034267][ T4319] usb 1-1: config 10 has no interface number 0 [ 796.119908][ T4319] usb 1-1: config 10 has no interface number 1 [ 796.198694][ T4319] usb 1-1: config 10 interface 3 has no altsetting 0 [ 796.229500][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 796.400267][ T4319] usb 1-1: string descriptor 0 read error: -71 [ 796.896352][ T4319] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 797.007702][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.670521][T11918] trusted_key: encrypted_key: insufficient parameters specified [ 798.078698][ T4319] usb 1-1: can't set config #10, error -71 [ 798.115405][ T4319] usb 1-1: USB disconnect, device number 41 [ 800.246401][T11956] loop1: detected capacity change from 0 to 1024 [ 800.253623][T11956] EXT4-fs: Ignoring removed orlov option [ 800.259867][T11956] EXT4-fs: Ignoring removed orlov option [ 801.756617][T11956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 802.048551][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 802.255598][T11970] trusted_key: encrypted_key: insufficient parameters specified [ 802.961484][ T4319] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 803.889861][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 803.897108][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.781247][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.791730][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 804.802219][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.820208][ T4319] usb 3-1: config 0 descriptor?? [ 805.033474][ T4319] usb 3-1: can't set config #0, error -71 [ 805.169544][T11991] IPVS: sed: FWM 3 0x00000003 - no destination available [ 805.185272][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 805.311165][ T4319] usb 3-1: USB disconnect, device number 36 [ 806.852486][T12012] Bluetooth: MGMT ver 1.22 [ 807.432631][T12021] trusted_key: encrypted_key: key user:syz not found [ 808.514598][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.527913][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.770700][T12031] Cannot find add_set index 0 as target [ 810.386847][ T4270] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 811.005660][T12062] binfmt_misc: register: failed to install interpreter file ./file0 [ 817.471407][ T14] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 817.791563][ T4578] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 817.992260][ T4578] usb 6-1: Using ep0 maxpacket: 32 [ 818.000213][ T4578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.058526][ T4578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.078993][ T4578] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 818.098918][ T4578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.109246][ T4578] usb 6-1: config 0 descriptor?? [ 818.145423][ T4578] hub 6-1:0.0: USB hub found [ 818.332653][ T4578] hub 6-1:0.0: 6 ports detected [ 818.340727][ T4578] hub 6-1:0.0: insufficient power available to use all downstream ports [ 818.580078][ T8491] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 818.751728][ T4586] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 819.344026][ T8491] Bluetooth: hci3: command 0x1003 tx timeout [ 819.351901][ T4270] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 819.370889][ T4578] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 819.377365][ T4578] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 819.389080][ T4586] usb 1-1: unable to get BOS descriptor or descriptor too short [ 819.406218][ T4586] usb 1-1: not running at top speed; connect to a high speed hub [ 819.416568][ T4586] usb 1-1: config 10 has an invalid interface number: 173 but max is 0 [ 819.425098][ T4578] usbhid 6-1:0.0: can't add hid device: -71 [ 819.431110][ T4578] usbhid: probe of 6-1:0.0 failed with error -71 [ 819.437606][ T4586] usb 1-1: config 10 has no interface number 0 [ 819.447349][ T4586] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 819.466864][ T4586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.476469][ T4586] usb 1-1: Product: syz [ 819.485309][ T4586] usb 1-1: Manufacturer: syz [ 819.489987][ T4586] usb 1-1: SerialNumber: syz [ 819.495693][ T4578] usb 6-1: USB disconnect, device number 23 [ 819.730342][ T4586] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 819.761130][ T2305] pvrusb2: Invalid write control endpoint [ 819.774941][ T4586] usb 1-1: USB disconnect, device number 42 [ 820.084196][ T2305] pvrusb2: Invalid write control endpoint [ 820.090224][ T2305] pvrusb2: Invalid write control endpoint [ 820.169469][ T2305] pvrusb2: Invalid write control endpoint [ 820.307806][ T2305] pvrusb2: Invalid write control endpoint [ 820.321553][ T2305] pvrusb2: Invalid write control endpoint [ 820.552527][ T2305] pvrusb2: Invalid write control endpoint [ 820.671917][ T2305] pvrusb2: Invalid write control endpoint [ 820.677957][ T2305] pvrusb2: Invalid write control endpoint [ 820.684064][ T2305] pvrusb2: Invalid write control endpoint [ 820.690063][ T2305] pvrusb2: Invalid write control endpoint [ 821.475230][ T2305] pvrusb2: Invalid write control endpoint [ 821.483022][ T2305] pvrusb2: Invalid write control endpoint [ 821.490789][ T2305] pvrusb2: Invalid write control endpoint [ 821.500475][ T2305] pvrusb2: Invalid write control endpoint [ 821.518381][ T2305] pvrusb2: Invalid write control endpoint [ 821.535600][ T2305] pvrusb2: Invalid write control endpoint [ 821.837078][ T2305] pvrusb2: Invalid write control endpoint [ 822.029202][ T2305] pvrusb2: Invalid write control endpoint [ 822.048094][ T2305] pvrusb2: Invalid write control endpoint [ 822.061426][ T2305] pvrusb2: Invalid write control endpoint [ 822.181733][T12184] loop3: detected capacity change from 0 to 1024 [ 822.188912][T12184] EXT4-fs: Ignoring removed orlov option [ 822.194644][T12184] EXT4-fs: Ignoring removed orlov option [ 823.049869][ T2305] pvrusb2: Invalid write control endpoint [ 823.062235][T12184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 823.109789][ T2305] pvrusb2: Invalid write control endpoint [ 823.155857][ T2305] pvrusb2: Invalid write control endpoint [ 823.342263][ T2305] pvrusb2: Invalid write control endpoint [ 823.348006][ T2305] pvrusb2: Invalid write control endpoint [ 823.375286][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 823.443646][T12192] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 824.550317][ T2305] pvrusb2: Invalid write control endpoint [ 824.584814][ T2305] pvrusb2: Invalid write control endpoint [ 824.590577][ T2305] pvrusb2: Invalid write control endpoint [ 824.617010][ T2305] pvrusb2: Invalid write control endpoint [ 824.734344][ T2305] pvrusb2: Invalid write control endpoint [ 825.242880][ T2305] pvrusb2: Invalid write control endpoint [ 825.560254][ T2305] pvrusb2: Invalid write control endpoint [ 825.996807][ T2305] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 826.299136][ T2305] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 826.331476][ T2305] pvrusb2: Invalid write control endpoint [ 826.371792][ T2305] pvrusb2: Invalid write control endpoint [ 826.389950][T12198] IPVS: sed: FWM 3 0x00000003 - no destination available [ 826.397173][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 826.444874][ T2305] pvrusb2: Invalid write control endpoint [ 826.584264][ T2305] pvrusb2: Invalid write control endpoint [ 828.088055][ T2305] pvrusb2: Invalid write control endpoint [ 828.127327][ T2305] pvrusb2: Invalid write control endpoint [ 828.139444][ T2305] pvrusb2: Invalid write control endpoint [ 828.152834][ T2305] pvrusb2: Invalid write control endpoint [ 828.158959][ T2305] pvrusb2: Invalid write control endpoint [ 828.292879][T12233] IPVS: sed: FWM 3 0x00000003 - no destination available [ 828.300516][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 828.556571][ T2305] pvrusb2: Invalid write control endpoint [ 828.562530][ T2305] pvrusb2: Invalid write control endpoint [ 828.568521][ T2305] pvrusb2: Invalid write control endpoint [ 828.574701][ T2305] pvrusb2: Invalid write control endpoint [ 828.588877][ T2305] pvrusb2: Invalid write control endpoint [ 828.621750][ T2305] pvrusb2: Invalid write control endpoint [ 828.639571][ T2305] pvrusb2: Invalid write control endpoint [ 828.650556][ T2305] pvrusb2: Invalid write control endpoint [ 828.656456][ T2305] pvrusb2: Invalid write control endpoint [ 828.711551][ T2305] pvrusb2: Invalid write control endpoint [ 828.717284][ T2305] pvrusb2: Invalid write control endpoint [ 828.883816][ T2305] pvrusb2: Invalid write control endpoint [ 828.893823][ T2305] pvrusb2: Attached sub-driver cs53l32a [ 830.377576][ T4270] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 830.453516][ T2305] pvrusb2: Invalid write control endpoint [ 830.601779][ T2305] pvrusb2: Invalid write control endpoint [ 830.607523][ T2305] pvrusb2: Invalid write control endpoint [ 830.621511][ T2305] pvrusb2: Invalid write control endpoint [ 830.627690][ T2305] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 830.646066][ T2305] pvrusb2: Device being rendered inoperable [ 831.352369][ T2305] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 831.365616][ T2305] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 832.842264][T12279] binder_alloc: 12275: binder_alloc_buf, no vma [ 834.339646][T12287] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 835.196305][T12291] 9pnet_fd: Insufficient options for proto=fd [ 835.236309][T12291] 9pnet_fd: Insufficient options for proto=fd [ 835.671566][ T4314] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 835.881711][ T4314] usb 6-1: Using ep0 maxpacket: 32 [ 835.882349][T12303] binder_alloc: 12299: binder_alloc_buf, no vma [ 835.910768][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.051673][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.073541][ T4314] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 836.088243][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.123613][ T4314] usb 6-1: config 0 descriptor?? [ 836.169163][ T4314] hub 6-1:0.0: USB hub found [ 836.372342][ T4314] hub 6-1:0.0: 6 ports detected [ 836.382275][ T4314] hub 6-1:0.0: insufficient power available to use all downstream ports [ 836.852528][T12310] trusted_key: encrypted_key: insufficient parameters specified [ 838.339804][ T8491] Bluetooth: hci3: command 0x1003 tx timeout [ 838.347467][ T4270] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 838.355910][ T4314] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 838.509384][ T4314] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 838.581554][ T4314] usbhid 6-1:0.0: can't add hid device: -32 [ 838.598162][ T4314] usbhid: probe of 6-1:0.0 failed with error -32 [ 838.662855][ T4314] usb 6-1: USB disconnect, device number 24 [ 839.193737][T12327] trusted_key: encrypted_key: insufficient parameters specified [ 841.146697][T12348] 9pnet_fd: Insufficient options for proto=fd [ 841.161520][T12348] 9pnet_fd: Insufficient options for proto=fd [ 843.298170][T12370] binder_alloc: 12366: binder_alloc_buf, no vma [ 846.149528][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 846.163694][T12404] IPVS: sed: FWM 3 0x00000003 - no destination available [ 846.198886][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 847.324429][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 847.371249][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 847.664727][ T4585] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 848.261417][ T4585] usb 6-1: Using ep0 maxpacket: 32 [ 848.268056][ T4585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.310720][ T4585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.364943][ T4585] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 848.390856][ T4585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.442538][ T4585] usb 6-1: config 0 descriptor?? [ 848.467294][ T4585] hub 6-1:0.0: USB hub found [ 848.662568][ T4585] hub 6-1:0.0: 6 ports detected [ 848.668194][ T4585] hub 6-1:0.0: insufficient power available to use all downstream ports [ 848.691431][ T4586] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 848.881721][ T4586] usb 3-1: Using ep0 maxpacket: 32 [ 848.932447][T12433] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 849.448376][ T4270] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 849.455266][T12429] Bluetooth: hci3: command 0x1003 tx timeout [ 849.565327][ T4586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.619504][ T4586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.642773][ T4586] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 849.664083][ T4586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.701524][ T4586] usb 3-1: config 0 descriptor?? [ 849.716083][ T4586] hub 3-1:0.0: USB hub found [ 849.723873][ T4585] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 849.732681][ T4585] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 849.752129][ T4585] usbhid 6-1:0.0: can't add hid device: -32 [ 849.761626][ T4585] usbhid: probe of 6-1:0.0 failed with error -32 [ 849.915528][ T4586] hub 3-1:0.0: 6 ports detected [ 849.931048][ T4586] hub 3-1:0.0: insufficient power available to use all downstream ports [ 850.404652][T12445] trusted_key: encrypted_key: insufficient parameters specified [ 850.432217][ T8491] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 850.870222][ T4586] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 850.879899][ T4586] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 850.895656][ T4586] usbhid 3-1:0.0: can't add hid device: -71 [ 850.903993][ T4586] usbhid: probe of 3-1:0.0 failed with error -71 [ 850.967788][ T4586] usb 3-1: USB disconnect, device number 37 [ 851.058636][ T4314] usb 6-1: USB disconnect, device number 25 [ 852.160982][T12464] fuse: Invalid rootmode [ 852.375641][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 854.931683][ T4314] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 855.041488][ T4330] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 855.128236][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.141746][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.155775][ T4314] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 855.165953][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.216323][ T4314] usb 1-1: config 0 descriptor?? [ 855.241673][ T4330] usb 2-1: Using ep0 maxpacket: 32 [ 855.257017][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.304148][ T4314] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 855.322967][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.371697][ T4330] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 855.381665][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.402922][ T4330] usb 2-1: config 0 descriptor?? [ 855.420809][ T4330] hub 2-1:0.0: USB hub found [ 855.618047][ T4330] hub 2-1:0.0: 6 ports detected [ 855.630202][ T4330] hub 2-1:0.0: insufficient power available to use all downstream ports [ 856.317106][T12503] trusted_key: encrypted_key: insufficient parameters specified [ 856.754884][ T8491] Bluetooth: hci3: command 0x1003 tx timeout [ 856.761227][ T4270] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 856.844040][ T4330] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 856.850472][ T4330] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 856.992369][ T4330] usbhid 2-1:0.0: can't add hid device: -71 [ 856.998368][ T4330] usbhid: probe of 2-1:0.0 failed with error -71 [ 857.072966][ T4330] usb 2-1: USB disconnect, device number 26 [ 858.239073][ T4586] usb 1-1: USB disconnect, device number 43 [ 858.513767][T12520] fuse: Bad value for 'rootmode' [ 858.751776][T12522] trusted_key: encrypted_key: insufficient parameters specified [ 859.697995][ T8491] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 860.049365][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 860.073045][T12535] IPVS: sed: FWM 3 0x00000003 - no destination available [ 860.080684][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 863.569165][T12562] fuse: Bad value for 'rootmode' [ 865.708703][T12585] trusted_key: encrypted_key: insufficient parameters specified [ 866.724608][T12594] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 867.426568][ T8491] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 868.235641][T12607] trusted_key: encrypted_key: insufficient parameters specified [ 869.027429][T12609] fuse: Bad value for 'rootmode' [ 869.263175][T12615] fuse: Bad value for 'group_id' [ 869.319334][T12615] loop1: detected capacity change from 0 to 1024 [ 869.328613][T12615] EXT4-fs: Ignoring removed orlov option [ 869.334333][T12615] EXT4-fs: Ignoring removed orlov option [ 869.964994][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.971515][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.174776][T12615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 870.350268][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 872.429671][T12632] 9pnet_fd: Insufficient options for proto=fd [ 872.539339][T12632] 9pnet_fd: Insufficient options for proto=fd [ 873.368653][T12643] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 873.730616][ T8491] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 877.818018][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.861785][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.990470][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.999883][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.007551][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 878.014789][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 880.146232][ T8491] Bluetooth: hci3: command 0x0409 tx timeout [ 880.468394][T12674] chnl_net:caif_netlink_parms(): no params data found [ 880.938484][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.994785][T12718] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 881.519768][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.192745][ T8491] Bluetooth: hci3: command 0x041b tx timeout [ 882.806429][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.871170][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.190638][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.216945][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.104257][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.161453][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.169658][T12674] device bridge_slave_0 entered promiscuous mode [ 884.179641][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.234711][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.262449][T12674] device bridge_slave_1 entered promiscuous mode [ 884.271776][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 884.410746][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.478144][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.527609][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.588560][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.778023][T12674] team0: Port device team_slave_0 added [ 884.910543][T12674] team0: Port device team_slave_1 added [ 885.028494][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.070782][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.096708][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.577607][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.924805][T12765] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 886.351428][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 886.500960][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.509672][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.535614][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.601513][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.968490][ T4270] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 888.186668][T12674] device hsr_slave_0 entered promiscuous mode [ 888.203992][T12674] device hsr_slave_1 entered promiscuous mode [ 888.228288][T12674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.239793][T12674] Cannot create hsr debugfs directory [ 888.628211][T12802] 9pnet_fd: Insufficient options for proto=fd [ 888.649013][T12802] 9pnet_fd: Insufficient options for proto=fd [ 889.045319][T12812] fuse: Unknown parameter 'use00000000000000000000' [ 889.193186][ T48] IPVS: stopping backup sync thread 10384 ... [ 889.217017][T12674] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 889.284967][T12674] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 890.956676][T12674] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 890.975105][T12674] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 891.238312][T12674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.255832][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.266575][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 891.301408][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 891.410099][ T48] device hsr_slave_0 left promiscuous mode [ 891.453360][ T48] device hsr_slave_1 left promiscuous mode [ 891.568868][ T48] device veth1_macvtap left promiscuous mode [ 891.593398][ T48] device veth0_macvtap left promiscuous mode [ 891.617548][ T48] device veth1_vlan left promiscuous mode [ 891.636830][ T48] device veth0_vlan left promiscuous mode [ 892.966831][ T4270] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 893.747230][T12877] 9pnet_fd: Insufficient options for proto=fd [ 893.786570][T12877] 9pnet_fd: Insufficient options for proto=fd [ 895.919500][T12903] trusted_key: encrypted_key: insufficient parameters specified [ 896.435494][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2083'. [ 896.595793][T12900] IPVS: sed: FWM 3 0x00000003 - no destination available [ 896.602933][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 898.033481][ T48] bond0 (unregistering): Released all slaves [ 898.281531][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 898.290187][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 898.326991][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.334134][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.403901][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 898.458048][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.492965][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.500128][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.824503][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 899.006631][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 899.061904][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.103602][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 899.281728][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 899.342648][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.351373][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 899.365835][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 899.375108][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.384205][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.763816][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.961657][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.058974][T12674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 900.415563][T12955] trusted_key: encrypted_key: insufficient parameters specified [ 901.000905][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 901.012035][T12953] IPVS: sed: FWM 3 0x00000003 - no destination available [ 901.019509][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 903.217931][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.239432][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.340507][T12999] netlink: 460 bytes leftover after parsing attributes in process `syz.1.2104'. [ 903.379912][T12674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.446366][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 906.555620][T13029] IPVS: sed: FWM 3 0x00000003 - no destination available [ 906.642022][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 907.239721][ T4270] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 907.659693][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.044841][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.358752][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.377466][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.453731][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.482311][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.508704][T12674] device veth0_vlan entered promiscuous mode [ 908.552811][T12674] device veth1_vlan entered promiscuous mode [ 908.573792][T13062] netlink: 460 bytes leftover after parsing attributes in process `syz.0.2116'. [ 908.671768][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 908.696824][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.749216][T12674] device veth0_macvtap entered promiscuous mode [ 908.785414][T12674] device veth1_macvtap entered promiscuous mode [ 908.833360][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.864707][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.887972][T12674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.918759][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.960151][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.017640][T12674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.099421][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 909.121600][ T22] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 909.136986][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 909.226522][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.446704][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.501035][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.552137][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.664423][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 909.709877][ T22] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 909.750421][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 909.811837][ T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.857728][T12674] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.888666][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.905258][T12674] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.931362][ T22] usb 6-1: Product: syz [ 909.935725][ T22] usb 6-1: Manufacturer: syz [ 909.940332][ T22] usb 6-1: SerialNumber: syz [ 909.951029][T12674] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.990240][T13069] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 910.000529][T12674] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.220032][ T22] usb 6-1: 0:2 : does not exist [ 911.588165][ T22] usb 6-1: USB disconnect, device number 26 [ 911.734479][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.764445][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.840421][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 912.463255][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.581027][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.641366][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.703154][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 913.726046][T13117] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 913.768898][ T4270] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 914.186387][T13129] netlink: 460 bytes leftover after parsing attributes in process `syz.1.2128'. [ 914.590712][T13135] loop1: detected capacity change from 0 to 1024 [ 914.601180][T13135] EXT4-fs: Ignoring removed orlov option [ 914.606930][T13135] EXT4-fs: Ignoring removed orlov option [ 915.033619][T13135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 915.398344][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 916.957600][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 917.036243][T13150] IPVS: sed: FWM 3 0x00000003 - no destination available [ 917.129729][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 919.021570][ T4585] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 919.218522][ T4585] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.249033][ T4585] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.283519][ T4585] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 919.336833][ T4585] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.379826][ T4585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.414412][ T4585] usb 2-1: Product: syz [ 919.418648][ T4585] usb 2-1: Manufacturer: syz [ 919.443536][ T4585] usb 2-1: SerialNumber: syz [ 919.497306][T13169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 922.229331][T13198] netlink: 460 bytes leftover after parsing attributes in process `syz.6.2139'. [ 922.277816][ T4585] usb 2-1: 0:2 : does not exist [ 922.359329][ T4585] usb 2-1: USB disconnect, device number 27 [ 922.402586][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 922.578492][T13211] Cannot find add_set index 0 as target [ 923.191387][ T4585] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 923.387818][ T4585] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.408846][ T4585] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.433825][ T4585] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 923.463568][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2144'. [ 923.483761][ T4585] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 923.511597][ T4585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.529855][ T4585] usb 2-1: Product: syz [ 923.544751][ T4585] usb 2-1: Manufacturer: syz [ 923.549412][ T4585] usb 2-1: SerialNumber: syz [ 923.594324][T13206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 923.823206][T13226] 9pnet_fd: Insufficient options for proto=fd [ 923.906438][T13228] 9pnet_fd: Insufficient options for proto=fd [ 924.292347][ T4585] usb 2-1: 0:2 : does not exist [ 924.412941][ T4585] usb 2-1: USB disconnect, device number 28 [ 924.592342][T13239] fuse: Unknown parameter 'user_id00000000000000000000' [ 924.642371][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.867926][T13253] netlink: 460 bytes leftover after parsing attributes in process `syz.3.2154'. [ 925.071703][ T6530] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 925.284192][ T6530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.321154][ T6530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.355464][ T6530] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 925.397886][ T6530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.431448][ T4578] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 925.452629][ T6530] usb 7-1: config 0 descriptor?? [ 925.544738][T13247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2152'. [ 925.623801][ T4578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.660522][ T4578] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.707605][ T4578] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 925.770353][ T4578] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.797715][ T4578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.821775][ T4578] usb 2-1: Product: syz [ 925.836447][ T4578] usb 2-1: Manufacturer: syz [ 925.864111][ T4578] usb 2-1: SerialNumber: syz [ 925.884346][T13261] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 926.094997][ T6530] usbhid 7-1:0.0: can't add hid device: -71 [ 926.103419][ T6530] usbhid: probe of 7-1:0.0 failed with error -71 [ 926.153687][T13271] trusted_key: encrypted_key: insufficient parameters specified [ 926.815387][ T6530] usb 7-1: USB disconnect, device number 2 [ 927.221483][ T4578] usb 2-1: 0:2 : does not exist [ 927.277524][ T4578] usb 2-1: USB disconnect, device number 29 [ 927.911737][ T4270] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 928.403063][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.566177][T13293] fuse: Unknown parameter 'user_id00000000000000000000' [ 929.542701][T13300] netlink: 460 bytes leftover after parsing attributes in process `syz.5.2165'. [ 930.954102][T13331] trusted_key: encrypted_key: insufficient parameters specified [ 931.394684][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.401021][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.430127][T13337] fuse: Bad value for 'fd' [ 935.086217][ T4270] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 938.196868][T13391] fuse: Bad value for 'fd' [ 938.901479][ T22] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 939.092092][T13402] fuse: Bad value for 'group_id' [ 939.296307][T13404] trusted_key: encrypted_key: insufficient parameters specified [ 940.032343][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.070447][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.123758][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 940.216086][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 940.273718][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.312626][ T22] usb 4-1: Product: syz [ 940.321548][ T22] usb 4-1: Manufacturer: syz [ 940.326239][ T22] usb 4-1: SerialNumber: syz [ 940.333614][T13385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 940.467845][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'. [ 941.912037][ T22] usb 4-1: 0:2 : does not exist [ 941.953232][ T22] usb 4-1: USB disconnect, device number 30 [ 942.484135][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.614487][T13446] fuse: Bad value for 'fd' [ 944.252509][T13470] trusted_key: encrypted_key: insufficient parameters specified [ 946.399644][T13475] trusted_key: encrypted_key: insufficient parameters specified [ 947.053183][T13496] 9pnet_fd: Insufficient options for proto=fd [ 947.102950][T13494] fuse: Unknown parameter '0x0000000000000003' [ 947.167966][T13498] 9pnet_fd: Insufficient options for proto=fd [ 951.577658][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 951.588112][T13535] IPVS: sed: FWM 3 0x00000003 - no destination available [ 951.597000][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 952.141451][ T4330] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 952.171605][ T4585] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 952.345598][ T4330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.361382][ T4585] usb 6-1: Using ep0 maxpacket: 32 [ 952.368483][ T4585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.379553][ T4585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.389372][ T4585] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 952.398553][ T4585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.408873][ T4585] usb 6-1: config 0 descriptor?? [ 952.419214][ T4585] hub 6-1:0.0: USB hub found [ 952.476050][ T4330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.546016][ T4330] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 952.617462][ T4585] hub 6-1:0.0: 6 ports detected [ 952.623479][ T4585] hub 6-1:0.0: insufficient power available to use all downstream ports [ 952.639143][ T4330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.741474][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.749631][ T4330] usb 2-1: Product: syz [ 952.788312][ T4330] usb 2-1: Manufacturer: syz [ 952.801052][ T4330] usb 2-1: SerialNumber: syz [ 952.844945][T13541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 953.716688][ T4585] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 953.871675][ T8491] Bluetooth: hci4: command 0x1003 tx timeout [ 953.879550][ T4270] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 953.901378][ T4585] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 954.007996][ T4585] usbhid 6-1:0.0: can't add hid device: -71 [ 954.041443][ T4585] usbhid: probe of 6-1:0.0 failed with error -71 [ 954.111005][ T4330] usb 2-1: 0:2 : does not exist [ 954.162200][T13566] fuse: Unknown parameter '0x0000000000000003' [ 954.291826][ T4330] usb 2-1: USB disconnect, device number 30 [ 954.492184][ T4585] usb 6-1: USB disconnect, device number 27 [ 954.579657][T12830] udevd[12830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.331491][T13585] trusted_key: encrypted_key: insufficient parameters specified [ 956.190651][T13592] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 959.521663][T13636] fuse: Unknown parameter '0x0000000000000003' [ 959.550311][T13639] 9pnet_fd: Insufficient options for proto=fd [ 959.654848][T13642] 9pnet_fd: Insufficient options for proto=fd [ 960.409852][T13650] fuse: Bad value for 'fd' [ 961.381484][ T4319] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 961.861256][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.873998][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.884784][ T4319] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 961.894675][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.618746][ T4319] usb 4-1: config 0 descriptor?? [ 963.590543][ T4319] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71 [ 963.612460][ T4319] usb 4-1: USB disconnect, device number 31 [ 963.638727][T13695] fuse: Unknown parameter '0x0000000000000003' [ 963.741418][ T4585] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 964.065363][ T4585] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.270596][ T4585] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.611957][ T4585] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 964.644049][ T4585] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.661356][ T4585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.670431][ T4585] usb 7-1: Product: syz [ 964.676889][ T4585] usb 7-1: Manufacturer: syz [ 964.681748][ T4585] usb 7-1: SerialNumber: syz [ 964.780897][T13684] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 967.747232][ T4585] usb 7-1: 0:2 : does not exist [ 967.821536][ T4585] usb 7-1: USB disconnect, device number 3 [ 968.119593][T13745] fuse: Unknown parameter '0x0000000000000003' [ 968.133070][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.404993][T13767] fuse: Unknown parameter 'group_i00000000000000000000' [ 971.426997][T13767] loop0: detected capacity change from 0 to 1024 [ 971.434212][T13767] EXT4-fs: Ignoring removed orlov option [ 971.439870][T13767] EXT4-fs: Ignoring removed orlov option [ 972.213708][T13767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 972.397462][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 973.057785][T13793] fuse: Unknown parameter '0x0000000000000003' [ 975.387735][T13817] 9pnet_fd: Insufficient options for proto=fd [ 975.468153][T13819] 9pnet_fd: Insufficient options for proto=fd [ 975.511539][ T4585] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 975.723062][ T4585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.744341][ T4585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.789405][ T4585] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 975.829554][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.899320][ T4585] usb 1-1: config 0 descriptor?? [ 976.447102][T13843] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 977.096898][ T4585] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 977.111562][ T4585] usb 1-1: USB disconnect, device number 44 [ 977.271441][ T22] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 977.305295][T13848] fuse: Unknown parameter 'fd0x0000000000000003' [ 977.519358][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.740590][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.956623][ T22] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 978.214052][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.308110][ T22] usb 2-1: config 0 descriptor?? [ 979.256287][ T22] hid-led: probe of 0003:27B8:01ED.0007 failed with error -71 [ 979.290978][ T22] usb 2-1: USB disconnect, device number 31 [ 979.591138][T13880] 9pnet_fd: Insufficient options for proto=fd [ 979.696108][T13880] 9pnet_fd: Insufficient options for proto=fd [ 979.915283][ T4270] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 980.106419][T13896] trusted_key: encrypted_key: insufficient parameters specified [ 981.900550][T13906] fuse: Unknown parameter 'fd0x0000000000000003' [ 982.501407][ T22] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 982.711598][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 982.725859][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.751517][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.791441][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 982.801140][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.828936][ T22] usb 1-1: config 0 descriptor?? [ 982.861873][ T22] hub 1-1:0.0: USB hub found [ 983.059867][ T22] hub 1-1:0.0: 6 ports detected [ 983.075511][ T22] hub 1-1:0.0: insufficient power available to use all downstream ports [ 983.346499][T13947] 9pnet_fd: Insufficient options for proto=fd [ 983.445263][T13949] 9pnet_fd: Insufficient options for proto=fd [ 985.052719][ T4270] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 985.064283][ T22] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 985.070646][ T22] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 985.087018][ T22] usbhid 1-1:0.0: can't add hid device: -32 [ 985.093045][ T22] usbhid: probe of 1-1:0.0 failed with error -32 [ 985.122033][ T22] usb 1-1: USB disconnect, device number 45 [ 985.156997][ T4270] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 985.447117][T13970] fuse: Unknown parameter 'fd0x0000000000000003' [ 988.871744][T13994] 9pnet_fd: Insufficient options for proto=fd [ 988.994613][T13999] 9pnet_fd: Insufficient options for proto=fd [ 990.221321][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 990.272730][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 991.538339][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.591215][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.630245][ T22] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 991.669593][ T22] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.880125][T14045] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 991.900439][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.915659][ T22] usb 7-1: Product: syz [ 991.919930][ T22] usb 7-1: Manufacturer: syz [ 992.346234][ T22] usb 7-1: SerialNumber: syz [ 992.404036][ T22] usb 7-1: can't set config #1, error -71 [ 992.432453][ T22] usb 7-1: USB disconnect, device number 4 [ 992.891700][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.898051][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.991640][T14063] trusted_key: encrypted_key: insufficient parameters specified [ 993.656417][T14068] fuse: Unknown parameter 'group_id00000000000000000000' [ 993.677006][T14068] loop0: detected capacity change from 0 to 1024 [ 993.684158][T14068] EXT4-fs: Ignoring removed orlov option [ 993.689811][T14068] EXT4-fs: Ignoring removed orlov option [ 994.710259][T14074] 9pnet_fd: Insufficient options for proto=fd [ 994.717721][T14068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 994.861855][T14080] 9pnet_fd: Insufficient options for proto=fd [ 994.934153][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 999.519988][T14118] trusted_key: encrypted_key: insufficient parameters specified [ 1001.611384][ T4586] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1001.803120][ T4586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.814344][ T4586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.824653][ T4586] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1001.837174][ T4586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.866727][ T4586] usb 4-1: config 0 descriptor?? [ 1002.538317][ T4586] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x1 [ 1002.766132][ T4586] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71 [ 1002.815699][ T4586] usb 4-1: USB disconnect, device number 32 [ 1003.688589][T14143] fuse: Unknown parameter 'group_id00000000000000000000' [ 1003.750236][T14143] loop0: detected capacity change from 0 to 1024 [ 1003.759591][T14143] EXT4-fs: Ignoring removed orlov option [ 1003.765347][T14143] EXT4-fs: Ignoring removed orlov option [ 1004.292109][T14143] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1004.456997][ T4270] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1004.459570][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 1007.941528][ T4330] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1008.192406][ T4330] usb 2-1: Using ep0 maxpacket: 32 [ 1008.206176][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.217581][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.227840][ T4330] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1008.272118][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.319694][ T4330] usb 2-1: config 0 descriptor?? [ 1008.334494][ T4330] hub 2-1:0.0: USB hub found [ 1008.538118][ T4330] hub 2-1:0.0: 6 ports detected [ 1008.545689][ T4330] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1009.311448][ T4270] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1009.319818][ T8491] Bluetooth: hci4: command 0x1003 tx timeout [ 1009.662342][ T4330] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1009.668721][ T4330] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1009.680275][ T4330] usbhid 2-1:0.0: can't add hid device: -32 [ 1009.686516][ T4330] usbhid: probe of 2-1:0.0 failed with error -32 [ 1009.752037][ T4330] usb 2-1: USB disconnect, device number 32 [ 1011.501482][ T4585] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1011.743593][ T4585] usb 2-1: Using ep0 maxpacket: 32 [ 1011.769342][ T4585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.962168][ T4585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.973471][ T4585] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1011.973832][ T8491] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1011.991403][ T4585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.015167][ T4585] usb 2-1: config 0 descriptor?? [ 1012.033508][ T4585] hub 2-1:0.0: USB hub found [ 1012.233277][ T4585] hub 2-1:0.0: 6 ports detected [ 1012.251464][ T4585] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1012.452512][T14235] fuse: Unknown parameter 'group_id00000000000000000000' [ 1012.724503][T14235] loop5: detected capacity change from 0 to 1024 [ 1012.743684][T14235] EXT4-fs: Ignoring removed orlov option [ 1012.749499][T14235] EXT4-fs: Ignoring removed orlov option [ 1013.232408][ T8491] Bluetooth: hci4: command 0x1003 tx timeout [ 1013.232447][ T4270] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1013.315171][ T4585] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1013.397496][ T4585] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1013.554770][T14235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1013.773521][ T4585] usbhid 2-1:0.0: can't add hid device: -32 [ 1013.789836][ T4585] usbhid: probe of 2-1:0.0 failed with error -32 [ 1013.861501][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 1014.146907][T14247] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1015.651664][ T4586] usb 2-1: USB disconnect, device number 33 [ 1016.070093][T14264] trusted_key: encrypted_key: insufficient parameters specified [ 1016.118314][T14265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2376'. [ 1018.700961][T14283] fuse: Unknown parameter 'group_i00000000000000000000' [ 1018.780786][T14285] fuse: Bad value for 'user_id' [ 1018.817857][T14285] loop0: detected capacity change from 0 to 1024 [ 1018.825063][T14285] EXT4-fs: Ignoring removed orlov option [ 1018.830722][T14285] EXT4-fs: Ignoring removed orlov option [ 1019.113484][T14285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1019.604153][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 1019.831643][T14295] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1021.650088][T14323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2390'. [ 1021.701451][ T4586] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1021.800331][T14331] fuse: Bad value for 'user_id' [ 1021.851442][T14331] loop5: detected capacity change from 0 to 1024 [ 1021.860080][T14331] EXT4-fs: Ignoring removed orlov option [ 1021.865879][T14331] EXT4-fs: Ignoring removed orlov option [ 1021.953252][T14332] fuse: Bad value for 'fd' [ 1022.007759][ T4586] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.018059][ T4586] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.122846][ T4586] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1022.184532][T14331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1022.681001][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 1022.701652][ T4586] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.710755][ T4586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.719306][ T4586] usb 4-1: Product: syz [ 1022.723526][ T4586] usb 4-1: Manufacturer: syz [ 1022.728157][ T4586] usb 4-1: SerialNumber: syz [ 1022.735168][T14318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1025.434113][ T4586] usb 4-1: 0:2 : does not exist [ 1025.453336][ T4586] usb 4-1: USB disconnect, device number 33 [ 1025.632530][T14368] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2407'. [ 1025.684173][T14372] fuse: Unknown parameter 'group_id00000000000000000000' [ 1025.701768][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.163118][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'. [ 1027.374488][T14393] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1027.390138][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1028.979644][T14416] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2420'. [ 1029.075935][T14418] fuse: Unknown parameter 'group_id00000000000000000000' [ 1030.695185][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2427'. [ 1030.917920][T14430] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1030.935112][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1032.793702][T14457] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1032.858497][T14459] fuse: Bad value for 'user_id' [ 1034.729742][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2439'. [ 1035.114661][T14474] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1035.121806][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1036.296569][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1036.652082][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1038.837449][T14531] trusted_key: encrypted_key: insufficient parameters specified [ 1042.654519][T14553] fuse: Bad value for 'user_id' [ 1046.007446][T14590] trusted_key: encrypted_key: insufficient parameters specified [ 1051.283646][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2476'. [ 1051.390907][T14632] trusted_key: encrypted_key: insufficient parameters specified [ 1052.103185][T14631] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1052.110343][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1052.154923][T14637] fuse: Bad value for 'user_id' [ 1054.274801][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.281177][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.565329][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1056.285561][T14692] fuse: Bad value for 'fd' [ 1060.192087][T14736] fuse: Bad value for 'fd' [ 1060.484626][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2503'. [ 1063.840807][T14761] fuse: Bad value for 'fd' [ 1065.162193][T14771] fuse: Bad value for 'fd' [ 1066.591386][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.757453][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2529'. [ 1072.817243][T14832] fuse: Bad value for 'fd' [ 1079.110507][T14887] fuse: Bad value for 'fd' [ 1079.292388][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2543'. [ 1079.441379][ T4319] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1080.380270][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.415180][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.420856][T14904] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1080.466459][ T4319] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1081.100546][ T4319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1081.751295][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.796566][ T4319] usb 4-1: Product: syz [ 1081.800842][ T4319] usb 4-1: Manufacturer: syz [ 1081.821096][ T4319] usb 4-1: SerialNumber: syz [ 1081.857994][T14888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1082.149120][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2550'. [ 1082.209373][T14919] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1082.229137][ T4319] usb 4-1: 0:2 : does not exist [ 1082.260518][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1082.288495][ T4319] usb 4-1: USB disconnect, device number 34 [ 1082.587243][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.401202][T14939] fuse: Bad value for 'fd' [ 1084.625575][T14945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1085.472112][T14951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2560'. [ 1085.659973][T14960] fuse: Invalid rootmode [ 1085.678700][T14960] loop3: detected capacity change from 0 to 1024 [ 1085.685920][T14960] EXT4-fs: Ignoring removed orlov option [ 1085.691612][T14960] EXT4-fs: Ignoring removed orlov option [ 1087.621140][T14960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1087.804112][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 1088.771403][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2567'. [ 1088.847146][T14977] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1089.146557][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1090.409530][T14994] fuse: Invalid rootmode [ 1091.367164][T15000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2573'. [ 1092.564073][T15010] fuse: Invalid rootmode [ 1092.582716][T15010] loop1: detected capacity change from 0 to 1024 [ 1092.589853][T15010] EXT4-fs: Ignoring removed orlov option [ 1092.595547][T15010] EXT4-fs: Ignoring removed orlov option [ 1093.787842][T15010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1094.007039][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1096.434281][T15039] fuse: Invalid rootmode [ 1097.039400][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1097.349249][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2588'. [ 1097.474792][T15055] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1097.537423][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1099.423490][T15078] fuse: Invalid rootmode [ 1100.085784][T15078] loop0: detected capacity change from 0 to 1024 [ 1100.093002][T15078] EXT4-fs: Ignoring removed orlov option [ 1100.098657][T15078] EXT4-fs: Ignoring removed orlov option [ 1101.198897][T15078] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 1101.618767][T15088] fuse: Invalid rootmode [ 1103.343972][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2600'. [ 1103.353861][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 1103.364277][T15100] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1103.371803][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1105.527836][T15118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1105.593334][T15118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1105.742984][T15127] fuse: Bad value for 'rootmode' [ 1105.761767][T15127] loop5: detected capacity change from 0 to 1024 [ 1105.768990][T15127] EXT4-fs: Ignoring removed orlov option [ 1105.774675][T15127] EXT4-fs: Ignoring removed orlov option [ 1107.660586][T15127] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1107.927707][ T8490] EXT4-fs (loop5): unmounting filesystem. [ 1108.622583][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 1108.657552][T15146] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1108.664713][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1111.756197][T15168] fuse: Bad value for 'rootmode' [ 1113.749977][T15186] fuse: Bad value for 'rootmode' [ 1113.770823][T15186] loop1: detected capacity change from 0 to 1024 [ 1113.778039][T15186] EXT4-fs: Ignoring removed orlov option [ 1113.783743][T15186] EXT4-fs: Ignoring removed orlov option [ 1114.575876][T15186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1114.843253][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1115.137838][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1115.175268][T15199] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1115.182442][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1116.325214][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.331573][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.426052][T15215] fuse: Bad value for 'rootmode' [ 1118.179999][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1119.725095][T15250] fuse: Bad value for 'rootmode' [ 1119.746593][T15250] loop6: detected capacity change from 0 to 1024 [ 1119.756516][T15250] EXT4-fs: Ignoring removed orlov option [ 1119.762289][T15250] EXT4-fs: Ignoring removed orlov option [ 1120.778042][T15250] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1121.729046][T15264] fuse: Bad value for 'rootmode' [ 1121.873355][T12674] EXT4-fs (loop6): unmounting filesystem. [ 1125.263997][T15309] fuse: Unknown parameter 'use00000000000000000000' [ 1125.314714][T15309] loop3: detected capacity change from 0 to 1024 [ 1125.324258][T15309] EXT4-fs: Ignoring removed orlov option [ 1125.330139][T15309] EXT4-fs: Ignoring removed orlov option [ 1126.348210][T15309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1126.392696][T15315] fuse: Unknown parameter 'use00000000000000000000' [ 1126.590303][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 1129.868815][T15359] fuse: Unknown parameter 'use00000000000000000000' [ 1129.889693][T15359] loop1: detected capacity change from 0 to 1024 [ 1129.896889][T15359] EXT4-fs: Ignoring removed orlov option [ 1129.902571][T15359] EXT4-fs: Ignoring removed orlov option [ 1130.842027][T15359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1131.853956][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1132.069498][T15379] fuse: Unknown parameter 'use00000000000000000000' [ 1134.836512][T15402] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1135.086588][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2680'. [ 1135.097293][T15409] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1135.104593][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1135.908112][T15430] fuse: Unknown parameter 'use00000000000000000000' [ 1136.940603][T15440] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1137.697900][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2692'. [ 1137.708287][T15449] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1137.715564][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1139.889969][T15472] fuse: Unknown parameter 'user_i00000000000000000000' [ 1140.316786][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2701'. [ 1141.388120][T15485] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2703'. [ 1141.700291][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2705'. [ 1141.710629][T15490] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1141.717937][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1141.733705][T15492] loop6: detected capacity change from 0 to 256 [ 1142.324869][T15492] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1142.993875][T15499] fuse: Bad value for 'fd' [ 1144.318573][T15501] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1144.419238][T15510] fuse: Unknown parameter 'user_i00000000000000000000' [ 1145.695611][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1146.860984][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1147.069922][T15543] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1147.094450][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1153.261292][ T6530] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1153.463086][ T6530] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.481936][ T6530] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.508912][ T6530] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1153.552339][ T6530] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.581305][ T6530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.628019][ T6530] usb 6-1: Product: syz [ 1153.658238][ T6530] usb 6-1: Manufacturer: syz [ 1153.679336][ T6530] usb 6-1: SerialNumber: syz [ 1153.760223][T15584] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1154.823631][ T6530] usb 6-1: 0:2 : does not exist [ 1154.891475][ T6530] usb 6-1: USB disconnect, device number 28 [ 1155.287059][T12819] udevd[12819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.692068][T15610] loop0: detected capacity change from 0 to 256 [ 1155.728572][T15610] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1165.073723][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 1171.557697][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1173.613491][T15765] binder: 15761:15765 ioctl 4018620d 0 returned -22 [ 1177.155895][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.162242][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.977243][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2778'. [ 1178.014866][T15794] Cannot find add_set index 0 as target [ 1180.548957][T15802] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1181.136972][T15817] ================================================================== [ 1181.145070][T15817] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 1181.152307][T15817] Read of size 8 at addr ffff888147f35a18 by task syz.0.2783/15817 [ 1181.160204][T15817] [ 1181.162545][T15817] CPU: 0 PID: 15817 Comm: syz.0.2783 Not tainted syzkaller #0 [ 1181.170008][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1181.180057][T15817] Call Trace: [ 1181.183337][T15817] [ 1181.186260][T15817] dump_stack_lvl+0x188/0x24e [ 1181.190950][T15817] ? read_lock_is_recursive+0x10/0x10 [ 1181.196323][T15817] ? show_regs_print_info+0x12/0x12 [ 1181.201526][T15817] ? load_image+0x400/0x400 [ 1181.206040][T15817] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1181.211493][T15817] ? __virt_addr_valid+0x188/0x540 [ 1181.216600][T15817] ? __virt_addr_valid+0x465/0x540 [ 1181.221712][T15817] ? dvb_device_open+0xc6/0x370 [ 1181.226557][T15817] print_report+0xa8/0x210 [ 1181.230967][T15817] kasan_report+0x10b/0x140 [ 1181.235467][T15817] ? dvb_device_open+0xc6/0x370 [ 1181.240318][T15817] dvb_device_open+0xc6/0x370 [ 1181.244983][T15817] ? do_raw_spin_unlock+0x11d/0x230 [ 1181.250170][T15817] chrdev_open+0x5c5/0x6a0 [ 1181.254578][T15817] ? cd_forget+0x160/0x160 [ 1181.258982][T15817] ? fsnotify_perm+0x39b/0x550 [ 1181.263752][T15817] ? cd_forget+0x160/0x160 [ 1181.268155][T15817] do_dentry_open+0x7e9/0x10d0 [ 1181.272911][T15817] path_openat+0x2635/0x2ee0 [ 1181.277502][T15817] ? verify_lock_unused+0x140/0x140 [ 1181.282702][T15817] ? do_syscall_64+0x4c/0xa0 [ 1181.287288][T15817] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.293351][T15817] ? do_filp_open+0x430/0x430 [ 1181.298024][T15817] do_filp_open+0x1f1/0x430 [ 1181.302515][T15817] ? vfs_tmpfile+0x480/0x480 [ 1181.307097][T15817] ? _raw_spin_unlock+0x24/0x40 [ 1181.311939][T15817] ? alloc_fd+0x58f/0x630 [ 1181.316262][T15817] do_sys_openat2+0x150/0x4b0 [ 1181.320936][T15817] ? do_sys_open+0xe0/0xe0 [ 1181.325342][T15817] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1181.331316][T15817] ? lock_chain_count+0x20/0x20 [ 1181.336155][T15817] __x64_sys_openat+0x135/0x160 [ 1181.340996][T15817] do_syscall_64+0x4c/0xa0 [ 1181.345400][T15817] ? clear_bhb_loop+0x60/0xb0 [ 1181.350062][T15817] ? clear_bhb_loop+0x60/0xb0 [ 1181.354728][T15817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.360607][T15817] RIP: 0033:0x7f3196d5cfce [ 1181.365018][T15817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1181.384624][T15817] RSP: 002b:00007f3197b6fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1181.393061][T15817] RAX: ffffffffffffffda RBX: 00007f3197b706c0 RCX: 00007f3196d5cfce [ 1181.401019][T15817] RDX: 0000000000040002 RSI: 00007f3197b6fc00 RDI: ffffffffffffff9c [ 1181.408977][T15817] RBP: 00007f3197b6fc00 R08: 0000000000000000 R09: 0000000000000000 [ 1181.416934][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1181.424889][T15817] R13: 00007f3197016038 R14: 00007f3197015fa0 R15: 00007ffd5da9b328 [ 1181.432860][T15817] [ 1181.435865][T15817] [ 1181.438179][T15817] Allocated by task 1: [ 1181.442227][T15817] kasan_set_track+0x4b/0x70 [ 1181.446808][T15817] __kasan_kmalloc+0x8e/0xa0 [ 1181.451384][T15817] dvb_register_device+0x311/0x2150 [ 1181.456571][T15817] dvb_register_frontend+0x645/0x920 [ 1181.461839][T15817] vidtv_bridge_probe+0x9a1/0xf70 [ 1181.466845][T15817] platform_probe+0x137/0x1c0 [ 1181.471513][T15817] really_probe+0x2aa/0xc70 [ 1181.476001][T15817] __driver_probe_device+0x18c/0x330 [ 1181.481269][T15817] driver_probe_device+0x4f/0x420 [ 1181.486276][T15817] __driver_attach+0x44a/0x6e0 [ 1181.491024][T15817] bus_for_each_dev+0x182/0x1f0 [ 1181.495859][T15817] bus_add_driver+0x30a/0x5a0 [ 1181.500519][T15817] driver_register+0x32d/0x430 [ 1181.505268][T15817] vidtv_bridge_init+0x39/0x67 [ 1181.510014][T15817] do_one_initcall+0x26a/0x840 [ 1181.514764][T15817] do_initcall_level+0x137/0x1e4 [ 1181.519715][T15817] do_initcalls+0x4b/0x8a [ 1181.524032][T15817] kernel_init_freeable+0x415/0x5be [ 1181.529217][T15817] kernel_init+0x19/0x1b0 [ 1181.533528][T15817] ret_from_fork+0x1f/0x30 [ 1181.537933][T15817] [ 1181.540240][T15817] Freed by task 15802: [ 1181.544286][T15817] kasan_set_track+0x4b/0x70 [ 1181.548865][T15817] kasan_save_free_info+0x2d/0x50 [ 1181.553874][T15817] ____kasan_slab_free+0x126/0x1e0 [ 1181.558974][T15817] slab_free_freelist_hook+0x131/0x1a0 [ 1181.564415][T15817] __kmem_cache_free+0xb6/0x1f0 [ 1181.569247][T15817] dvb_device_open+0x2e7/0x370 [ 1181.573996][T15817] chrdev_open+0x5c5/0x6a0 [ 1181.578397][T15817] do_dentry_open+0x7e9/0x10d0 [ 1181.583146][T15817] path_openat+0x2635/0x2ee0 [ 1181.587720][T15817] do_filp_open+0x1f1/0x430 [ 1181.592208][T15817] do_sys_openat2+0x150/0x4b0 [ 1181.596872][T15817] __x64_sys_openat+0x135/0x160 [ 1181.601713][T15817] do_syscall_64+0x4c/0xa0 [ 1181.606115][T15817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.611997][T15817] [ 1181.614305][T15817] The buggy address belongs to the object at ffff888147f35a00 [ 1181.614305][T15817] which belongs to the cache kmalloc-256 of size 256 [ 1181.628338][T15817] The buggy address is located 24 bytes inside of [ 1181.628338][T15817] 256-byte region [ffff888147f35a00, ffff888147f35b00) [ 1181.641506][T15817] [ 1181.643810][T15817] The buggy address belongs to the physical page: [ 1181.650214][T15817] page:ffffea00051fcd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147f34 [ 1181.660434][T15817] head:ffffea00051fcd00 order:1 compound_mapcount:0 compound_pincount:0 [ 1181.668739][T15817] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1181.676801][T15817] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 1181.685363][T15817] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1181.693922][T15817] page dumped because: kasan: bad access detected [ 1181.700320][T15817] page_owner tracks the page as allocated [ 1181.706013][T15817] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8987546432, free_ts 0 [ 1181.725614][T15817] post_alloc_hook+0x173/0x1a0 [ 1181.730368][T15817] get_page_from_freelist+0x1a1e/0x1ab0 [ 1181.735902][T15817] __alloc_pages+0x1ec/0x4f0 [ 1181.740478][T15817] alloc_page_interleave+0x24/0x1e0 [ 1181.745662][T15817] alloc_slab_page+0x5d/0x160 [ 1181.750324][T15817] new_slab+0x87/0x2c0 [ 1181.754377][T15817] ___slab_alloc+0xbc6/0x1240 [ 1181.759035][T15817] __kmem_cache_alloc_node+0x1a0/0x260 [ 1181.764476][T15817] kmalloc_trace+0x26/0xe0 [ 1181.768877][T15817] bus_add_driver+0xda/0x5a0 [ 1181.773453][T15817] driver_register+0x32d/0x430 [ 1181.778201][T15817] usb_register_driver+0x202/0x3d0 [ 1181.783295][T15817] do_one_initcall+0x26a/0x840 [ 1181.788045][T15817] do_initcall_level+0x137/0x1e4 [ 1181.792971][T15817] do_initcalls+0x4b/0x8a [ 1181.797288][T15817] kernel_init_freeable+0x415/0x5be [ 1181.802473][T15817] page_owner free stack trace missing [ 1181.807820][T15817] [ 1181.810124][T15817] Memory state around the buggy address: [ 1181.815734][T15817] ffff888147f35900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1181.823773][T15817] ffff888147f35980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1181.831814][T15817] >ffff888147f35a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1181.839850][T15817] ^ [ 1181.844682][T15817] ffff888147f35a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1181.852724][T15817] ffff888147f35b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1181.860764][T15817] ================================================================== [ 1181.868891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.471340][T15817] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1182.478567][T15817] CPU: 1 PID: 15817 Comm: syz.0.2783 Not tainted syzkaller #0 [ 1182.486021][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1182.496062][T15817] Call Trace: [ 1182.499324][T15817] [ 1182.502241][T15817] dump_stack_lvl+0x188/0x24e [ 1182.506914][T15817] ? memcpy+0x3c/0x60 [ 1182.510890][T15817] ? show_regs_print_info+0x12/0x12 [ 1182.516079][T15817] ? load_image+0x400/0x400 [ 1182.520571][T15817] panic+0x2e5/0x730 [ 1182.524448][T15817] ? bpf_jit_dump+0xd0/0xd0 [ 1182.528933][T15817] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1182.534893][T15817] ? _raw_spin_unlock+0x40/0x40 [ 1182.539735][T15817] check_panic_on_warn+0x80/0xa0 [ 1182.544679][T15817] ? dvb_device_open+0xc6/0x370 [ 1182.549525][T15817] end_report+0x66/0x110 [ 1182.553763][T15817] kasan_report+0x118/0x140 [ 1182.558273][T15817] ? dvb_device_open+0xc6/0x370 [ 1182.563118][T15817] dvb_device_open+0xc6/0x370 [ 1182.567792][T15817] ? do_raw_spin_unlock+0x11d/0x230 [ 1182.572978][T15817] chrdev_open+0x5c5/0x6a0 [ 1182.577382][T15817] ? cd_forget+0x160/0x160 [ 1182.581788][T15817] ? fsnotify_perm+0x39b/0x550 [ 1182.586547][T15817] ? cd_forget+0x160/0x160 [ 1182.590947][T15817] do_dentry_open+0x7e9/0x10d0 [ 1182.595700][T15817] path_openat+0x2635/0x2ee0 [ 1182.600279][T15817] ? verify_lock_unused+0x140/0x140 [ 1182.605466][T15817] ? do_syscall_64+0x4c/0xa0 [ 1182.610042][T15817] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.616098][T15817] ? do_filp_open+0x430/0x430 [ 1182.620774][T15817] do_filp_open+0x1f1/0x430 [ 1182.625266][T15817] ? vfs_tmpfile+0x480/0x480 [ 1182.629851][T15817] ? _raw_spin_unlock+0x24/0x40 [ 1182.634685][T15817] ? alloc_fd+0x58f/0x630 [ 1182.639008][T15817] do_sys_openat2+0x150/0x4b0 [ 1182.643673][T15817] ? do_sys_open+0xe0/0xe0 [ 1182.648078][T15817] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1182.654045][T15817] ? lock_chain_count+0x20/0x20 [ 1182.658885][T15817] __x64_sys_openat+0x135/0x160 [ 1182.663723][T15817] do_syscall_64+0x4c/0xa0 [ 1182.668126][T15817] ? clear_bhb_loop+0x60/0xb0 [ 1182.672790][T15817] ? clear_bhb_loop+0x60/0xb0 [ 1182.677450][T15817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.683327][T15817] RIP: 0033:0x7f3196d5cfce [ 1182.687727][T15817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1182.707317][T15817] RSP: 002b:00007f3197b6fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1182.715717][T15817] RAX: ffffffffffffffda RBX: 00007f3197b706c0 RCX: 00007f3196d5cfce [ 1182.723676][T15817] RDX: 0000000000040002 RSI: 00007f3197b6fc00 RDI: ffffffffffffff9c [ 1182.731632][T15817] RBP: 00007f3197b6fc00 R08: 0000000000000000 R09: 0000000000000000 [ 1182.739588][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1182.747548][T15817] R13: 00007f3197016038 R14: 00007f3197015fa0 R15: 00007ffd5da9b328 [ 1182.755512][T15817] [ 1182.758851][T15817] Kernel Offset: disabled [ 1182.763159][T15817] Rebooting in 86400 seconds..