last executing test programs: 7m38.698877367s ago: executing program 1 (id=1098): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3, 0xeaff}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) 7m35.375518848s ago: executing program 1 (id=1103): mkdir(0x0, 0x0) r0 = syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x80fd, 0x400, 0x3, 0x265}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}}) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 7m33.935691615s ago: executing program 1 (id=1106): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 7m32.796455957s ago: executing program 1 (id=1113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x200000000000000, 0x5}, 0xfc}, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x5, 0x7e37983a20c30831, 0x6) recvmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000002880)=""/4087, 0xff7}], 0x3, &(0x7f0000004880)=""/4096, 0x1000}, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r9, 0x84}], 0x1, 0x3ff) sendto$inet(r9, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(r9, 0xda90) 7m27.755494245s ago: executing program 1 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) getrlimit(0x9, &(0x7f0000000040)) pause() getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) munlockall() 7m24.34688845s ago: executing program 1 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="63eced9fba2402e4b9742ba860b0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7m7.774170234s ago: executing program 32 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="63eced9fba2402e4b9742ba860b0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6m21.917501629s ago: executing program 3 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x75b}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c7319", 0x19}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m21.397989546s ago: executing program 3 (id=1259): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) openat$audio1(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000001540)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 6m21.169503536s ago: executing program 3 (id=1261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r6, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x4048, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m20.126393551s ago: executing program 3 (id=1263): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0x11af9, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="020afc000200000028bd706f7c50a52fdf254bacc3564803f38c0e99ee194e93bc6f6598e70798b78543af4895ed8b1883379dbb41547a6e5370b064"], 0x10}}, 0x40408c0) 6m16.704213249s ago: executing program 3 (id=1271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x100000000b, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0), 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x44080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 6m16.310668081s ago: executing program 3 (id=1272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x95, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 6m0.795692273s ago: executing program 33 (id=1272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x95, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4m56.711184112s ago: executing program 0 (id=1448): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 4m52.84417219s ago: executing program 0 (id=1456): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 4m51.649875988s ago: executing program 0 (id=1463): syz_open_dev$rtc(0x0, 0x4000000000000, 0x3016c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m50.369362273s ago: executing program 0 (id=1468): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0xf8) 4m48.449781732s ago: executing program 0 (id=1471): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x8, 0x8000, 0x2841e8}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$inet(0x2, 0x6000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x7, 0x2000, @fd=r3, 0x1000, 0xe, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_io_uring_setup(0x5457, &(0x7f0000000280)={0x0, 0x93d7, 0x4, 0x1, 0xcc}, &(0x7f0000000100), 0x0) mmap(&(0x7f0000715000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0xbe333000) bpf$MAP_CREATE(0x100000000000018, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000826863ccf630fb82950b1d474800000000000434b973603f134fae91e7c30a4c1c7a1223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/24], 0x50) 4m46.506184131s ago: executing program 7 (id=1473): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0xffffffff}, 0x1, 0x2}) 4m44.214448468s ago: executing program 7 (id=1478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004d40), 0x108100, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) 4m43.750167869s ago: executing program 7 (id=1481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) userfaultfd(0x801) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000140)="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", 0x401}], 0x1) socket$inet6(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000001200)=0x2, 0x12) 4m43.149248043s ago: executing program 7 (id=1482): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000180)={'fscrypt:', @auto=[0x36, 0x33, 0x35, 0x38, 0x33, 0x37, 0x66, 0x34, 0x66, 0x30, 0x38, 0x34, 0x64, 0x62, 0x63, 0x61]}, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, 0x0, r5) keyctl$setperm(0x5, r5, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x39, 0x1a, r6, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) 4m41.952413661s ago: executing program 7 (id=1484): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utimes(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1f4, &(0x7f0000003cc0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m38.551891789s ago: executing program 7 (id=1489): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) getrlimit(0x9, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) munlockall() unshare(0x60000600) 4m37.824514228s ago: executing program 0 (id=1491): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, 0x0, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1100) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x16) syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x0) 4m23.000927105s ago: executing program 34 (id=1489): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) getrlimit(0x9, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) munlockall() unshare(0x60000600) 4m22.543753574s ago: executing program 35 (id=1491): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, 0x0, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1100) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x16) syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x0) 23.604838694s ago: executing program 4 (id=1914): add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 23.546881648s ago: executing program 2 (id=1915): fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r1, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 20.586960158s ago: executing program 2 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)=0x0) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, r1, &(0x7f0000000740)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) 20.013301465s ago: executing program 5 (id=1922): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="a6cc") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() eventfd2(0x8, 0x800) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) lsm_get_self_attr(0x1, 0x0, &(0x7f0000001bc0), 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) read(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) 18.621423211s ago: executing program 2 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0x40049, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 18.53232259s ago: executing program 4 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) ioprio_get$uid(0x3, 0x0) 16.348963007s ago: executing program 4 (id=1927): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) read$nci(r2, &(0x7f0000000340)=""/75, 0x4b) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010031bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000680)=ANY=[], 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x28030, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='zonefs\x00', 0x1) 14.412671054s ago: executing program 4 (id=1930): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$inet(0x2, 0x6000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x7cf2, 0x0, &(0x7f0000000100)=0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r3, r4) 13.3378068s ago: executing program 5 (id=1932): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0xffffd, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xba, 0x0, 0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xaa76, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7357c35c, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xea6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3, 0x5, 0x4, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x800, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.648244241s ago: executing program 5 (id=1934): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) socket(0x8000000010, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) 12.529640399s ago: executing program 2 (id=1936): add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.039597443s ago: executing program 6 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r7, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 10.80139743s ago: executing program 8 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) ioprio_get$uid(0x3, 0x0) 10.63408298s ago: executing program 9 (id=1940): socket$nl_generic(0x10, 0x3, 0x10) gettid() r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xa0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 9.283788605s ago: executing program 8 (id=1941): syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@private=0xa010102, 0x1}]}, @rr={0x7, 0x7, 0x8f, [@loopback]}, @rr={0x7, 0x7, 0xb6, [@rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x31, 0x0, 0x0, [0x13, 0x33ef]}]}}}}}}}, 0x0) 8.866013265s ago: executing program 6 (id=1942): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000380)='\x01\x00\x00\x00ce\xec\x11(\x9f\xad\x0f~4\x1d\xbcs\x02t\xa5>\xf8\xfcT8\xad\x8e\xa9\xd9\x9e\x9a-\xe9-\x17\xbd\xfe\xec8\xf6\xdc\xdfg\x18\a\xf8V\x8cVC1\xbe\xef`,\x8c\xaf\xda', &(0x7f0000000300)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\b\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8dH\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xe49\xf7o$e&1\x02\x00\x00\x00\xab\xfcKs\x06,\xd2\xc5^]\xd9\x13*\xb4\xe9\xab\x91\x15cXP\x85W\x84{Z\x0f\x88\b\x9dVsU\xe2$^\x88\xa8\xd1rT\xbci%/\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) userfaultfd(0x1) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') r7 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000500), 0x3) close(0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/496], 0x290) 8.513217217s ago: executing program 9 (id=1943): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 8.458754958s ago: executing program 5 (id=1944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000103"], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 8.423971898s ago: executing program 8 (id=1945): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.574557575s ago: executing program 6 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe2(0x0, 0x800) socket$kcm(0x23, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x101, 0x29, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8916, 0x0) getpid() accept$alg(r0, 0x0, 0x0) 7.516865721s ago: executing program 2 (id=1947): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0xffffd, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xba, 0x0, 0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xaa76, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7357c35c, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xea6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3, 0x5, 0x4, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x800, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.990147458s ago: executing program 9 (id=1948): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0), 0x8800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = socket(0x23, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) close_range(r4, r5, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x44, &(0x7f0000000140)=0x2004, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000014c0)=')', 0x1}], 0x1}, 0x0) 6.365508957s ago: executing program 5 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0xc00) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x1, 0x0) r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x4732, 0x10f9, 0x82, 0x0, 0x0) 6.267764627s ago: executing program 6 (id=1950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.11482499s ago: executing program 2 (id=1951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0xee01, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) 5.474480814s ago: executing program 8 (id=1952): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x800000, 0x10100}, &(0x7f00000002c0), &(0x7f00000000c0)) chdir(&(0x7f0000000000)='./file0\x00') pipe(&(0x7f0000000000)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x800000000000000) syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}, "0000000080450000"}}}}}, 0x0) 5.395159554s ago: executing program 4 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) ioprio_get$uid(0x3, 0x0) 5.315722201s ago: executing program 9 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r7, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.196232421s ago: executing program 5 (id=1955): msgget(0x3, 0x710) msgget(0x2, 0x624) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.000736308s ago: executing program 6 (id=1956): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xa0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 2.321807179s ago: executing program 9 (id=1957): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x19, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000007, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x370c}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x40}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0xc2e999eabd050ec2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.646226774s ago: executing program 8 (id=1958): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='\x01\x00\x00\x00ce\xec\x11(\x9f\xad\x0f~4\x1d\xbcs\x02t\xa5>\xf8\xfcT8\xad\x8e\xa9\xd9\x9e\x9a-\xe9-\x17\xbd\xfe\xec8\xf6\xdc\xdfg\x18\a\xf8V\x8cVC1\xbe\xef`,\x8c\xaf\xda', &(0x7f0000000300)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\b\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8dH\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xe49\xf7o$e&1\x02\x00\x00\x00\xab\xfcKs\x06,\xd2\xc5^]\xd9\x13*\xb4\xe9\xab\x91\x15cXP\x85W\x84{Z\x0f\x88\b\x9dVsU\xe2$^\x88\xa8\xd1rT\xbci%/\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) userfaultfd(0x1) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') r6 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000500), 0x3) close(0x3) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/496], 0x290) 1.446962953s ago: executing program 6 (id=1959): add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)=',#Z', 0x3) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1.348987816s ago: executing program 9 (id=1960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket(0x10, 0x2, 0x0) shutdown(r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x9) 1.348610717s ago: executing program 4 (id=1961): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x102}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0, 0xe}], 0x3}, 0x3}], 0x2, 0x82, 0x0) 0s ago: executing program 8 (id=1962): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) kernel console output (not intermixed with test programs): 1: USB disconnect, device number 2 [ 640.342061][T10189] fido_id[10189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 641.614998][ T51] Bluetooth: hci0: command tx timeout [ 641.946282][ T7659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.557992][ T7659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.176188][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 643.510336][T10218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.625577][ T7659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.705304][ T5967] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 643.852887][T10218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.896603][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 643.916263][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.936022][ T7659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.954616][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.980025][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.000096][ T5967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.018972][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.050517][ T5967] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.060768][ T5967] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.086326][ T5967] usb 5-1: Manufacturer: syz [ 644.123067][ T5967] usb 5-1: config 0 descriptor?? [ 644.188586][T10218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.460412][T10218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.644657][ T5967] rc_core: IR keymap rc-hauppauge not found [ 644.659157][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1329'. [ 644.675643][ T5967] Registered IR keymap rc-empty [ 644.691856][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 644.714583][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 644.731029][T10244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1329'. [ 644.744267][ T5967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 644.783396][ T5967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 644.849871][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 644.916809][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.174409][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.204368][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.891126][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.924371][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.954371][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.958543][T10121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 646.022741][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.055738][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.065090][T10121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.078157][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.144346][ T5967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.188086][T10121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.669778][ T5967] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 63 [ 646.691425][ T5967] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 646.785662][ T5967] usb 5-1: USB disconnect, device number 46 [ 647.627676][ T7659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.687655][ T7659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.759160][ T7659] bond0 (unregistering): Released all slaves [ 647.894353][ T3454] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.527012][T10121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 648.623449][ T1105] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.646241][ T7659] IPVS: stopping backup sync thread 7922 ... [ 648.682222][ T3450] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.690889][T10277] kAFS: unparsable volume name [ 648.896372][ T3454] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.116398][T10287] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1342'. [ 649.154429][T10287] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1342'. [ 649.277035][ T7659] hsr_slave_0: left promiscuous mode [ 649.287164][ T7659] hsr_slave_1: left promiscuous mode [ 649.293438][ T7659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.330469][ T7659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.342817][ T7659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.364251][ T7659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.045148][T10297] loop5: detected capacity change from 0 to 2640 [ 651.057873][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.072571][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.080695][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.088794][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.096850][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.105175][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.113298][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.121239][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.129533][T10297] ldm_validate_partition_table(): Disk read failed. [ 651.136424][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.144804][T10297] Buffer I/O error on dev loop5, logical block 0, async page read [ 651.152970][T10297] Dev loop5: unable to read RDB block 0 [ 651.159913][T10297] loop5: unable to read partition table [ 651.171201][T10297] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 652.576354][ T7659] veth1_macvtap: left promiscuous mode [ 652.581894][ T7659] veth0_macvtap: left promiscuous mode [ 652.642111][ T7659] veth1_vlan: left promiscuous mode [ 652.686679][ T7659] veth0_vlan: left promiscuous mode [ 657.260670][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 658.211655][ T7659] team0 (unregistering): Port device team_slave_1 removed [ 658.319648][ T7659] team0 (unregistering): Port device team_slave_0 removed [ 658.380701][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 658.447167][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 658.840631][T10339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.735066][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.831747][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.865186][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.872651][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.966969][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.974318][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.498900][T10383] kAFS: unparsable volume name [ 661.517684][ T30] audit: type=1326 audit(2000000020.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.6.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f856cd9c629 code=0x0 [ 661.673350][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.772550][T10385] misc userio: Begin command sent, but we're already running [ 661.917934][T10391] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1368'. [ 662.583307][T10404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1369'. [ 662.745520][T10408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.606477][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1371'. [ 663.817383][ T5829] IPVS: starting estimator thread 0... [ 663.967056][T10413] IPVS: using max 24 ests per chain, 57600 per kthread [ 664.235847][T10418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1372'. [ 665.907607][T10121] veth0_vlan: entered promiscuous mode [ 665.952693][T10121] veth1_vlan: entered promiscuous mode [ 666.673252][T10121] veth0_macvtap: entered promiscuous mode [ 666.821235][T10121] veth1_macvtap: entered promiscuous mode [ 667.112984][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.168527][T10442] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 667.255858][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.563476][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.623537][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.524394][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.534025][ T3450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.945061][T10457] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1383'. [ 669.829801][ T7659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.884814][ T7659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.964463][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 670.066068][ T7659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.092213][ T7659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.183382][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 670.198248][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 670.217270][ T9] usb 3-1: config 0 has no interface number 0 [ 670.223454][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.266759][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 670.572903][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.581807][ T9] usb 3-1: Product: syz [ 670.594445][ T9] usb 3-1: Manufacturer: syz [ 670.602873][ T9] usb 3-1: SerialNumber: syz [ 670.768840][ T9] usb 3-1: config 0 descriptor?? [ 670.807581][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 671.001899][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 671.055738][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1388'. [ 671.065612][T10481] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 671.245637][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 672.201352][ T51] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 672.698963][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 672.714637][ T9] em28xx 3-1:0.132: board has no eeprom [ 672.715654][T10463] em28xx 3-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 672.784288][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 672.828870][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 672.855821][ T6028] em28xx 3-1:0.132: Registering V4L2 extension [ 672.895938][T10496] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 672.903460][T10496] UDF-fs: Scanning with blocksize 512 failed [ 672.933753][ T9] usb 3-1: USB disconnect, device number 38 [ 672.935712][T10497] kAFS: unparsable volume name [ 672.987771][T10496] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 673.008919][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 673.028378][T10496] UDF-fs: Scanning with blocksize 1024 failed [ 673.079178][T10496] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 673.087198][T10496] UDF-fs: Scanning with blocksize 2048 failed [ 673.103251][T10496] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 673.111328][T10496] UDF-fs: Scanning with blocksize 4096 failed [ 673.694998][ T1203] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 673.707457][T10510] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 673.909458][ T1203] usb 6-1: Using ep0 maxpacket: 16 [ 674.258449][ T1203] usb 6-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config [ 674.474336][ T1203] usb 6-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.518609][ T1203] usb 6-1: config 0 interface 0 has no altsetting 0 [ 674.997976][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1397'. [ 675.007378][ T6028] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 675.020521][ T1203] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 675.037485][ T6028] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 675.057464][ T1203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=12 [ 675.159687][ T6028] em28xx 3-1:0.132: No AC97 audio processor [ 675.165998][ T1203] usb 6-1: SerialNumber: syz [ 675.277426][ T1203] usb 6-1: config 0 descriptor?? [ 675.285637][ T6028] usb 3-1: Decoder not found [ 675.290258][ T6028] em28xx 3-1:0.132: failed to create media graph [ 675.324359][ T6028] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 675.746513][ T6028] em28xx 3-1:0.132: Remote control support is not available for this card. [ 675.776964][ T9] em28xx 3-1:0.132: Closing input extension [ 678.102939][ T9] em28xx 3-1:0.132: Freeing device [ 679.063182][ T1203] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 679.153694][ T1203] usb 6-1: USB disconnect, device number 30 [ 679.515138][T10552] binder: 10545:10552 ioctl 4018620d 0 returned -22 [ 679.681534][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'. [ 681.184623][T10567] kAFS: unparsable volume name [ 681.238080][T10569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 683.808841][ T1203] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 684.304364][ T1203] usb 3-1: Using ep0 maxpacket: 16 [ 684.361819][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 684.403636][ T1203] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 684.423000][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.463151][ T1203] usb 3-1: Product: syz [ 684.494277][ T1203] usb 3-1: Manufacturer: syz [ 684.498923][ T1203] usb 3-1: SerialNumber: syz [ 684.525850][ T1203] usb 3-1: config 0 descriptor?? [ 684.563008][ T1203] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 684.610249][ T1203] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 684.990124][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 685.215331][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.222275][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.704674][ T1203] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 686.128708][ T1203] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 686.170253][ T1203] em28xx 3-1:0.0: board has no eeprom [ 686.274475][ T1203] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 686.299752][ T1203] em28xx 3-1:0.0: dvb set to bulk mode. [ 686.318743][ T9] em28xx 3-1:0.0: Binding DVB extension [ 686.396673][ T1203] usb 3-1: USB disconnect, device number 39 [ 686.422197][ T1203] em28xx 3-1:0.0: Disconnecting em28xx [ 686.563254][ T9] em28xx 3-1:0.0: Registering input extension [ 686.599365][ T1203] em28xx 3-1:0.0: Closing input extension [ 686.776152][ T1203] em28xx 3-1:0.0: Freeing device [ 686.806603][T10637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 689.639267][T10648] kAFS: unparsable volume name [ 689.914158][ T5967] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 690.560923][ T5967] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 690.779287][ T5967] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 690.961588][ T5967] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.121896][ T5967] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 691.154807][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.100823][ T5967] usb 8-1: can't set config #27, error -71 [ 692.214697][ T5967] usb 8-1: USB disconnect, device number 2 [ 692.356746][T10667] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 692.364728][T10667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1434'. [ 692.725075][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 695.956616][T10710] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 696.444536][ T5967] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 696.444649][ T1203] IPVS: starting estimator thread 0... [ 696.924344][T10720] IPVS: using max 23 ests per chain, 55200 per kthread [ 697.024462][ T5808] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 697.050725][ T5967] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 697.114031][ T5967] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 697.183187][ T5967] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.428579][ T5967] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 697.444312][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 697.460923][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.478173][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.493740][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 697.507542][ T5808] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 698.068877][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.091433][ T5967] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.103769][ T5808] usb 3-1: Product: syz [ 698.118216][ T5808] usb 3-1: Manufacturer: syz [ 698.122853][ T5808] usb 3-1: SerialNumber: syz [ 698.218198][ T5808] usb 3-1: config 0 descriptor?? [ 698.856861][ T5967] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 699.693829][ T5967] usb 1-1: USB disconnect, device number 25 [ 699.765879][ T5922] usb 3-1: USB disconnect, device number 40 [ 700.017296][T10753] binder: BINDER_SET_CONTEXT_MGR already set [ 700.040846][T10753] binder: 10751:10753 ioctl 4018620d 200000004a80 returned -16 [ 701.147404][T10782] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 703.069136][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1466'. [ 703.381427][ T9261] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 704.045375][ T1203] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 704.198949][ T1203] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 704.239375][ T1203] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.289960][ T1203] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.365621][ T1203] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.369319][ T1203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.895710][ T1203] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 707.020626][ T1203] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 707.131961][ T1203] usb 7-1: USB disconnect, device number 3 [ 707.690526][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 715.631931][T10896] netlink: 'syz.5.1492': attribute type 10 has an invalid length. [ 715.729399][T10897] netlink: 'syz.5.1492': attribute type 10 has an invalid length. [ 718.004944][T10896] bond0: (slave dummy0): Releasing backup interface [ 718.079378][T10896] team0: Port device dummy0 added [ 718.146861][T10897] team0: Port device dummy0 removed [ 718.165888][T10897] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 718.483362][T10892] lo speed is unknown, defaulting to 1000 [ 724.851188][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1499'. [ 730.120859][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 731.690260][T11002] IPVS: sh: FWM 3 0x00000003 - no destination available [ 732.036822][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.045021][ T1203] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 732.052612][ T5829] IPVS: starting estimator thread 0... [ 732.074470][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.082922][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.092007][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.099985][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.154328][T11003] IPVS: using max 28 ests per chain, 67200 per kthread [ 732.248089][ T1203] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 732.274269][ T1203] usb 7-1: config 0 has no interface number 0 [ 732.294141][T11004] lo speed is unknown, defaulting to 1000 [ 732.304237][ T1203] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 732.345017][ T1203] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 732.395992][ T1203] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 732.407999][ T1203] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 732.419377][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 732.430729][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 732.444763][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 732.459170][ T1203] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 732.468929][ T1203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.477791][ T1203] usb 7-1: Product: syz [ 732.480647][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 732.482153][ T1203] usb 7-1: Manufacturer: syz [ 732.533940][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 732.604514][ T1203] usb 7-1: SerialNumber: syz [ 732.658032][ T1203] usb 7-1: config 0 descriptor?? [ 732.683277][ T1203] xpad 7-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 733.004400][ T1203] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.237/input/input16 [ 734.524464][ T51] Bluetooth: hci5: command tx timeout [ 734.564550][ T51] Bluetooth: hci7: command tx timeout [ 734.586404][T11008] lo speed is unknown, defaulting to 1000 [ 736.121833][ T6028] usb 7-1: USB disconnect, device number 4 [ 736.564652][ T51] Bluetooth: hci5: command tx timeout [ 736.644308][ T51] Bluetooth: hci7: command tx timeout [ 737.304845][T11004] chnl_net:caif_netlink_parms(): no params data found [ 738.644837][ T51] Bluetooth: hci5: command tx timeout [ 738.734294][ T51] Bluetooth: hci7: command tx timeout [ 739.123407][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 740.243833][T10938] syz_tun (unregistering): left allmulticast mode [ 741.202876][ T51] Bluetooth: hci5: command tx timeout [ 741.202918][ T9261] Bluetooth: hci7: command tx timeout [ 742.080205][ T1105] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.233150][T11008] chnl_net:caif_netlink_parms(): no params data found [ 743.069215][ T1105] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.405100][T11086] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1527'. [ 744.025858][ T1105] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.098933][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.158360][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.204471][T11004] bridge_slave_0: entered allmulticast mode [ 745.232680][T11004] bridge_slave_0: entered promiscuous mode [ 745.242505][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.252485][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.409240][T11004] bridge_slave_1: entered allmulticast mode [ 745.417423][T11004] bridge_slave_1: entered promiscuous mode [ 745.876407][ T1105] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.994894][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.002257][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.020693][T11008] bridge_slave_0: entered allmulticast mode [ 746.078138][T11008] bridge_slave_0: entered promiscuous mode [ 746.147873][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.184564][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.191925][T11008] bridge_slave_1: entered allmulticast mode [ 746.380757][T11008] bridge_slave_1: entered promiscuous mode [ 746.648771][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.655604][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.734375][T11004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.960393][T11004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.518463][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.683640][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 748.292680][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.399366][T11004] team0: Port device team_slave_0 added [ 748.456657][T11004] team0: Port device team_slave_1 added [ 748.784772][ T6028] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 748.946571][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 749.120718][ T6028] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 749.724989][ T6028] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 749.734070][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.755582][ T6028] usb 6-1: Product: syz [ 749.763973][ T6028] usb 6-1: Manufacturer: syz [ 749.772856][ T6028] usb 6-1: SerialNumber: syz [ 749.831279][ T6028] usb 6-1: config 0 descriptor?? [ 749.853369][ T6028] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 749.888148][ T6028] usb 6-1: setting power ON [ 749.898172][ T6028] dvb-usb: bulk message failed: -22 (2/0) [ 749.931548][ T6028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 749.944492][T11004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.944998][ T6028] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 749.972322][ T6028] usb 6-1: media controller created [ 749.975628][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.991652][ T6028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.046825][ T6028] usb 6-1: selecting invalid altsetting 6 [ 750.061509][T11004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.063017][ T6028] usb 6-1: digital interface selection failed (-22) [ 750.092235][T11139] dvb-usb: bulk message failed: -22 (3/0) [ 750.120749][T11139] dvb-usb: bulk message failed: -22 (4/0) [ 750.180980][T11139] cxusb: i2c read failed [ 750.455341][ T6028] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 750.466411][T11008] team0: Port device team_slave_0 added [ 750.636932][T11008] team0: Port device team_slave_1 added [ 750.650204][ T6028] usb 6-1: setting power OFF [ 750.663499][ T6028] dvb-usb: bulk message failed: -22 (2/0) [ 750.683478][ T6028] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 750.709202][ T1105] bridge_slave_1: left allmulticast mode [ 750.715228][ T1105] bridge_slave_1: left promiscuous mode [ 750.723015][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.732038][ T6028] (NULL device *): no alternate interface [ 750.812592][T11155] kAFS: unable to lookup cell '(,c¾Ì' [ 751.473743][ T1105] bridge_slave_0: left allmulticast mode [ 751.489846][ T1105] bridge_slave_0: left promiscuous mode [ 751.503637][ T6028] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 751.515510][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.525563][ T6028] usb 6-1: USB disconnect, device number 31 [ 752.565589][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.587497][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.608457][ T1105] bond0 (unregistering): Released all slaves [ 752.648352][T11004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.664306][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.717730][T11004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.754323][ T5829] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 752.999778][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 753.639470][ T5829] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 753.774970][ T5829] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 753.793657][ T5829] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 753.807161][ T5829] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 753.816544][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.852679][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.871233][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.900927][ T5829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 753.912328][T11170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.921471][ T5829] usb 6-1: invalid MIDI out EP 0 [ 753.936121][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.790560][T11004] hsr_slave_0: entered promiscuous mode [ 755.021454][T11004] hsr_slave_1: entered promiscuous mode [ 755.023063][ T5829] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 755.358690][ T5829] usb 6-1: USB disconnect, device number 32 [ 755.385852][T11004] debugfs: 'hsr0' already exists in 'hsr' [ 755.416376][T11004] Cannot create hsr debugfs directory [ 755.445626][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.452695][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.739169][T11185] IPVS: sh: FWM 3 0x00000003 - no destination available [ 756.124191][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.831279][ T5967] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 758.907652][T11008] hsr_slave_0: entered promiscuous mode [ 758.939634][T11008] hsr_slave_1: entered promiscuous mode [ 758.964754][ T9261] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 759.001843][T11008] debugfs: 'hsr0' already exists in 'hsr' [ 759.024353][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 759.031107][T11008] Cannot create hsr debugfs directory [ 759.033127][ T5967] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 761.902571][ T5967] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 762.589473][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.622176][ T5967] usb 5-1: config 0 descriptor?? [ 762.824335][ T5967] usb 5-1: can't set config #0, error -71 [ 762.939455][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 763.625131][ T5967] usb 5-1: USB disconnect, device number 47 [ 764.879761][ T1105] hsr_slave_0: left promiscuous mode [ 764.995893][T11241] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1565'. [ 765.015033][ T1105] hsr_slave_1: left promiscuous mode [ 765.038260][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.064466][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.113265][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.122808][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.311621][ T1105] veth1_macvtap: left promiscuous mode [ 765.322495][ T1105] veth0_macvtap: left promiscuous mode [ 765.644632][ T1105] veth1_vlan: left promiscuous mode [ 765.663871][ T1105] veth0_vlan: left promiscuous mode [ 767.178858][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1569'. [ 768.033971][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 768.087164][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 768.946767][T11259] input: syz0 as /devices/virtual/input/input18 [ 769.254379][ T5829] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 769.412135][ T1105] IPVS: stop unused estimator thread 0... [ 769.430493][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 769.524437][ T5829] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 769.576825][ T5829] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 769.615104][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.643660][ T5829] usb 6-1: Product: syz [ 769.674112][ T5829] usb 6-1: Manufacturer: syz [ 769.680562][ T5829] usb 6-1: SerialNumber: syz [ 769.743819][ T5829] usb 6-1: config 0 descriptor?? [ 769.777467][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 769.808195][ T5829] usb 6-1: setting power ON [ 769.830894][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 769.876592][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 769.898119][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 769.918580][ T5829] usb 6-1: media controller created [ 769.978918][T11260] dvb-usb: bulk message failed: -22 (3/0) [ 769.989565][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.003530][T11260] dvb-usb: bulk message failed: -22 (4/0) [ 770.024418][T11260] cxusb: i2c read failed [ 770.167310][ T6028] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 770.217805][ T5829] usb 6-1: selecting invalid altsetting 6 [ 770.223597][ T5829] usb 6-1: digital interface selection failed (-22) [ 770.244516][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 770.259768][ T5829] usb 6-1: setting power OFF [ 770.297617][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 770.303384][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 770.333204][ T5829] (NULL device *): no alternate interface [ 770.360283][ T6028] usb 7-1: Using ep0 maxpacket: 32 [ 770.410619][ T6028] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.442658][ T6028] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 770.470513][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 770.485908][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.503656][ T6028] usb 7-1: Product: syz [ 770.512868][T11004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 770.521560][ T6028] usb 7-1: Manufacturer: syz [ 770.561947][ T5829] usb 6-1: USB disconnect, device number 33 [ 770.572563][ T6028] usb 7-1: SerialNumber: syz [ 770.599349][T11004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 770.609604][ T6028] usb 7-1: config 0 descriptor?? [ 770.712439][T11004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 770.753399][T11004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 770.889340][T11008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 770.926018][T11008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 770.961208][ T5829] usb 7-1: USB disconnect, device number 5 [ 771.013410][T11008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 771.063602][T11008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 772.418413][T11004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.574914][ T791] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 773.016811][T11004] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.038616][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.124905][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.132103][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.207361][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.214626][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.524333][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 774.616589][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.690677][T11004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 774.699172][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.723804][T11004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.772070][ T791] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 774.786312][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.793543][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.821853][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.840112][ T791] usb 5-1: Product: syz [ 774.846888][ T791] usb 5-1: Manufacturer: syz [ 774.861724][ T791] usb 5-1: SerialNumber: syz [ 774.903065][ T791] usb 5-1: config 0 descriptor?? [ 774.939343][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.946510][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.990282][T11321] kAFS: unable to lookup cell 'ÿ' [ 775.006365][T11321] kAFS: unable to lookup cell '(,c¾Ì' [ 775.125481][ T5808] usb 5-1: USB disconnect, device number 48 [ 777.278202][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 777.883482][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.110473][T11004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.984615][T11357] wireguard0: entered promiscuous mode [ 778.990173][T11357] wireguard0: entered allmulticast mode [ 780.787406][T11381] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.587985][T11008] veth0_vlan: entered promiscuous mode [ 781.734881][T11008] veth1_vlan: entered promiscuous mode [ 783.310551][T11004] veth0_vlan: entered promiscuous mode [ 783.700830][T11004] veth1_vlan: entered promiscuous mode [ 783.807331][T11008] veth0_macvtap: entered promiscuous mode [ 783.881969][T11008] veth1_macvtap: entered promiscuous mode [ 783.939009][ T5967] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 784.128109][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 784.689248][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.707707][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.748425][ T5967] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 784.771095][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.783382][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.814309][ T5967] usb 5-1: Product: syz [ 784.821218][T11004] veth0_macvtap: entered promiscuous mode [ 784.847982][ T5967] usb 5-1: Manufacturer: syz [ 784.853732][ T125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.897156][ T5967] usb 5-1: SerialNumber: syz [ 784.909646][ T5967] usb 5-1: config 0 descriptor?? [ 784.947390][ T125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.973966][ T125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.089177][ T125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.135303][T11004] veth1_macvtap: entered promiscuous mode [ 785.304334][ T6028] usb 5-1: USB disconnect, device number 49 [ 785.424618][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 786.185190][T11004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.396510][T11004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.488575][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.453727][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.648492][ T7659] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.716260][T11434] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 787.906721][ T7659] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.971414][ T7659] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.067959][ T7659] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.116207][T11442] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 788.614664][ T7659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.622510][ T7659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.390599][ T125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.500146][ T125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.598621][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.807463][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.515044][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 793.545454][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 793.886920][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 793.912977][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 793.930208][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 794.420058][T11487] lo speed is unknown, defaulting to 1000 [ 794.479326][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 794.489805][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 794.501090][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 794.510100][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 794.517931][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 795.676485][T11493] lo speed is unknown, defaulting to 1000 [ 795.857574][T11501] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 796.405585][ T51] Bluetooth: hci0: command tx timeout [ 796.435908][ T6028] IPVS: starting estimator thread 0... [ 796.619271][T11512] IPVS: sh: FWM 3 0x00000003 - no destination available [ 796.650905][ T51] Bluetooth: hci2: command tx timeout [ 796.906050][T11513] IPVS: using max 21 ests per chain, 50400 per kthread [ 797.327060][T11517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 797.859203][ T1105] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.488340][ T51] Bluetooth: hci0: command tx timeout [ 798.734358][ T51] Bluetooth: hci2: command tx timeout [ 798.757690][ T1105] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.511086][ T1105] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.564920][ T51] Bluetooth: hci0: command tx timeout [ 800.805037][ T51] Bluetooth: hci2: command tx timeout [ 801.715996][ T1105] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.021969][T11565] binder: 11563:11565 ioctl c0306201 2000000003c0 returned -14 [ 802.111912][T11487] chnl_net:caif_netlink_parms(): no params data found [ 802.644894][ T51] Bluetooth: hci0: command tx timeout [ 802.649527][T11575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 802.888685][ T51] Bluetooth: hci2: command tx timeout [ 803.883164][T11493] chnl_net:caif_netlink_parms(): no params data found [ 805.352577][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.404624][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.435226][T11487] bridge_slave_0: entered allmulticast mode [ 805.453244][T11487] bridge_slave_0: entered promiscuous mode [ 805.549378][ T1105] bridge_slave_1: left allmulticast mode [ 805.549442][ T1105] bridge_slave_1: left promiscuous mode [ 805.549616][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.553468][ T1105] bridge_slave_0: left allmulticast mode [ 805.553491][ T1105] bridge_slave_0: left promiscuous mode [ 805.553659][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.695054][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.812737][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.857890][ T1105] bond0 (unregistering): Released all slaves [ 806.930862][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.432398][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.461531][T11487] bridge_slave_1: entered allmulticast mode [ 807.500178][T11487] bridge_slave_1: entered promiscuous mode [ 807.607299][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.664407][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.700296][T11493] bridge_slave_0: entered allmulticast mode [ 807.752503][T11493] bridge_slave_0: entered promiscuous mode [ 807.813547][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.842105][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.922517][T11493] bridge_slave_1: entered allmulticast mode [ 807.954054][T11493] bridge_slave_1: entered promiscuous mode [ 808.099340][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.105988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.821134][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.709322][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.801668][T11493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.744688][T11637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 810.851727][T11493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.916060][T11649] binder: 11648:11649 ioctl c0306201 0 returned -14 [ 811.898516][T11493] team0: Port device team_slave_0 added [ 811.919030][ T5922] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 811.928574][T11651] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 812.037932][T11487] team0: Port device team_slave_0 added [ 812.117894][T11487] team0: Port device team_slave_1 added [ 812.124983][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 812.140162][ T5922] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 812.177217][ T5922] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 812.198998][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.206442][T11493] team0: Port device team_slave_1 added [ 812.230318][ T5922] usb 7-1: Product: syz [ 812.277613][ T5922] usb 7-1: Manufacturer: syz [ 812.312819][ T5922] usb 7-1: SerialNumber: syz [ 812.545809][ T5922] usb 7-1: config 0 descriptor?? [ 812.790986][ T5808] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 812.810327][ T5922] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 812.821097][ T5922] usb 7-1: setting power ON [ 812.826054][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 812.838349][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.848912][ T5922] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 812.857467][ T5922] usb 7-1: media controller created [ 813.363760][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.474431][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.477033][T11678] dvb-usb: bulk message failed: -22 (3/0) [ 813.492387][T11678] dvb-usb: bulk message failed: -22 (4/0) [ 813.498640][T11678] cxusb: i2c read failed [ 813.869057][ T1105] hsr_slave_0: left promiscuous mode [ 813.887771][ T5808] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 813.900522][ T5922] usb 7-1: selecting invalid altsetting 6 [ 813.921044][ T5922] usb 7-1: digital interface selection failed (-22) [ 813.927769][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.032434][ T1105] hsr_slave_1: left promiscuous mode [ 814.044614][ T5922] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 814.070772][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.095360][ T5808] usb 6-1: config 0 descriptor?? [ 814.104787][ T5922] usb 7-1: setting power OFF [ 814.109424][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 814.134523][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.148670][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 814.169573][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.183546][ T5922] (NULL device *): no alternate interface [ 814.199329][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.298079][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 814.557230][ T1105] veth1_macvtap: left promiscuous mode [ 814.562881][ T1105] veth0_macvtap: left promiscuous mode [ 814.584571][ T5922] usb 7-1: USB disconnect, device number 6 [ 814.596102][ T1105] veth1_vlan: left promiscuous mode [ 814.601537][ T1105] veth0_vlan: left promiscuous mode [ 815.635506][ T5808] usbhid 6-1:0.0: can't add hid device: -71 [ 815.655982][ T5808] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 815.702707][ T5808] usb 6-1: USB disconnect, device number 34 [ 816.596794][T11693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.056860][T11703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.080761][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 818.148476][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 818.656803][T11493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.664020][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.684307][ T5922] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 818.703327][T11493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.718688][T11708] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 818.724576][T11710] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 818.906384][T11493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.924313][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 818.933845][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.945758][ T5922] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 818.991830][T11493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.005685][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.013952][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.043820][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.069163][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.075871][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.089065][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.233454][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.533636][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.572127][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.642202][T11726] kAFS: unable to lookup cell '(,c¾Ì' [ 820.297388][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.349460][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 820.454304][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.673605][ T5922] usb 5-1: GET_CAPABILITIES returned 0 [ 821.680011][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 821.794401][T11493] hsr_slave_0: entered promiscuous mode [ 821.867637][T11493] hsr_slave_1: entered promiscuous mode [ 821.874072][T11493] debugfs: 'hsr0' already exists in 'hsr' [ 821.915687][T11493] Cannot create hsr debugfs directory [ 821.985202][T11487] hsr_slave_0: entered promiscuous mode [ 822.001224][T11744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.007395][T11487] hsr_slave_1: entered promiscuous mode [ 822.044217][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 822.053787][T11487] debugfs: 'hsr0' already exists in 'hsr' [ 822.099980][T11487] Cannot create hsr debugfs directory [ 822.199890][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.223301][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.295616][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 822.303190][ T5829] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 822.323774][ T5829] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 822.347615][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.375547][ T5829] usb 7-1: Product: syz [ 822.381782][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.393580][ T5829] usb 7-1: Manufacturer: syz [ 822.423957][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.471160][ T5829] usb 7-1: SerialNumber: syz [ 822.839026][ T5829] usb 7-1: config 0 descriptor?? [ 823.234648][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 823.262601][T11756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.273184][T11756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.323641][ T5829] usb 7-1: setting power ON [ 823.532057][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 823.885315][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.919251][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 823.966321][ T5829] usb 7-1: media controller created [ 824.086896][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.666867][ T5829] usb 7-1: selecting invalid altsetting 6 [ 824.672650][ T5829] usb 7-1: digital interface selection failed (-22) [ 824.725128][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 824.749557][ T5829] usb 7-1: setting power OFF [ 824.766137][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 824.771920][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 824.814218][ T5829] (NULL device *): no alternate interface [ 824.938446][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 825.013317][ T5829] usb 7-1: USB disconnect, device number 7 [ 825.208324][ T1105] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.243234][T11766] binder: 11765:11766 ioctl c0306201 2000000003c0 returned -14 [ 825.341473][ T1105] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.655814][ T1105] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.866766][ T1105] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.935525][T11778] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 827.294376][T11717] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 827.530921][ T6028] usb 5-1: USB disconnect, device number 50 [ 827.624729][ T5829] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 827.711603][ T1105] bridge_slave_1: left allmulticast mode [ 827.719216][ T1105] bridge_slave_1: left promiscuous mode [ 827.725120][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.443687][ T5829] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 828.483830][ T5829] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.534254][ T5829] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.560672][ T1105] bridge_slave_0: left allmulticast mode [ 829.287659][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 829.294332][ T1105] bridge_slave_0: left promiscuous mode [ 829.296813][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.336452][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.342324][ T5829] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.356654][ T5829] usb 3-1: invalid MIDI out EP 0 [ 829.760066][ T5829] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 830.080238][T11812] IPVS: sh: FWM 3 0x00000003 - no destination available [ 830.334310][ T5829] IPVS: starting estimator thread 0... [ 830.403946][T11815] input: syz0 as /devices/virtual/input/input23 [ 830.424569][T11813] IPVS: using max 26 ests per chain, 62400 per kthread [ 830.639232][T10736] usb 3-1: USB disconnect, device number 41 [ 830.982194][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.286885][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.361615][ T1105] bond0 (unregistering): Released all slaves [ 831.442164][T11826] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 831.505387][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 834.184943][ T1105] hsr_slave_0: left promiscuous mode [ 834.387520][ T1105] hsr_slave_1: left promiscuous mode [ 834.480902][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.532171][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.608825][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.846533][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.719540][ T1105] veth1_macvtap: left promiscuous mode [ 835.778790][T11871] input: syz0 as /devices/virtual/input/input25 [ 835.787061][ T1105] veth0_macvtap: left promiscuous mode [ 835.792822][ T1105] veth1_vlan: left promiscuous mode [ 835.835363][ T1105] veth0_vlan: left promiscuous mode [ 836.324360][ T5967] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 836.511372][ T5967] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 836.521900][ T5967] usb 5-1: config 4 has no interface number 0 [ 836.533612][ T5967] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 836.553189][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.563177][ T5967] usb 5-1: Product: syz [ 836.567894][ T5967] usb 5-1: Manufacturer: syz [ 836.572933][ T5967] usb 5-1: SerialNumber: syz [ 836.599633][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 836.635847][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 836.636162][ T5967] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input26 [ 836.880749][ T5173] bcm5974 5-1:4.28: could not read from device [ 836.914657][T11877] bcm5974 5-1:4.28: could not read from device [ 836.926058][ T5173] bcm5974 5-1:4.28: could not read from device [ 836.947829][ T5173] bcm5974 5-1:4.28: could not read from device [ 836.970408][T11856] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 836.973860][T11879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 837.007842][ T5173] bcm5974 5-1:4.28: could not read from device [ 837.008603][ T5967] usb 5-1: USB disconnect, device number 51 [ 837.173430][T11033] udevd[11033]: Error opening device "/dev/input/event4": No such file or directory [ 837.189833][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 837.199523][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 837.214557][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 837.274572][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 839.221130][ T1203] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 839.404524][ T1203] usb 7-1: Using ep0 maxpacket: 32 [ 839.460408][ T1203] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.551677][ T1203] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 840.332034][ T1203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.345938][ T1203] usb 7-1: Product: syz [ 840.350139][ T1203] usb 7-1: Manufacturer: syz [ 840.407452][T11487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 840.415886][ T1203] usb 7-1: SerialNumber: syz [ 840.461790][T11487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 840.469628][ T1203] usb 7-1: config 0 descriptor?? [ 840.532872][T11487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 840.620897][T11487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 841.434285][ T5967] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 841.609155][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 841.623523][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.648926][ T5967] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 841.673824][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.692725][ T5967] usb 5-1: Product: syz [ 841.728899][ T5967] usb 5-1: Manufacturer: syz [ 841.739890][ T5967] usb 5-1: SerialNumber: syz [ 841.760972][ T5967] usb 5-1: config 0 descriptor?? [ 841.813047][T11493] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 841.824469][T10736] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 841.904809][T11493] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 841.940181][T11493] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 841.994277][T10736] usb 3-1: Using ep0 maxpacket: 16 [ 842.015213][T11493] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 842.025153][T10736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.050572][T10736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.087572][T10736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 842.120116][T10736] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 842.153437][T10736] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.186231][T10736] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 842.211405][T10736] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 842.231005][T10736] usb 3-1: Manufacturer: syz [ 842.268368][T10736] usb 3-1: config 0 descriptor?? [ 842.281873][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.366318][ T5967] usb 7-1: USB disconnect, device number 8 [ 842.416659][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.508966][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.516290][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.618812][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.626200][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.724450][T10736] rc_core: IR keymap rc-hauppauge not found [ 842.724476][T10736] Registered IR keymap rc-empty [ 842.724621][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.744310][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.775661][T10736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 842.858468][T10736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 842.907134][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.004761][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.007638][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.063420][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.104649][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.154977][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.204730][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.240783][T11493] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.268132][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.316646][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.351298][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.358513][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.370665][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.428001][T10736] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.459681][T10736] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 843.490078][T10736] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 843.560163][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.567317][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.581876][T10736] usb 3-1: USB disconnect, device number 42 [ 844.188869][T10736] usb 5-1: USB disconnect, device number 52 [ 844.423391][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.682505][T11973] kAFS: unparsable volume name [ 846.511790][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.974290][ T791] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 848.197282][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.270979][ T791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.328953][ T791] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 848.344393][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 848.374557][ T791] usb 3-1: SerialNumber: syz [ 848.771758][T11487] veth0_vlan: entered promiscuous mode [ 849.094880][T11487] veth1_vlan: entered promiscuous mode [ 849.384812][T11487] veth0_macvtap: entered promiscuous mode [ 849.450810][T11487] veth1_macvtap: entered promiscuous mode [ 849.536311][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.600055][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.601684][ T791] usb 3-1: skipping empty audio interface (v1) [ 849.698384][ T3454] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.734310][ T3454] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.848769][ T3454] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.888124][ T3454] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.950308][ T791] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 850.031773][ T791] usb 3-1: USB disconnect, device number 43 [ 850.161252][T10970] udevd[10970]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.521286][T11493] veth0_vlan: entered promiscuous mode [ 850.553357][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.586762][T11493] veth1_vlan: entered promiscuous mode [ 850.602690][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.801572][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.914933][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.166679][T11493] veth0_macvtap: entered promiscuous mode [ 851.261970][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 851.955135][T11493] veth1_macvtap: entered promiscuous mode [ 852.484863][T12043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 852.547321][T12043] block device autoloading is deprecated and will be removed. [ 854.162951][T12064] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 854.177792][T12064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 854.187702][T12064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 854.198992][T12064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 854.207899][T12064] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 854.217308][T12064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 854.226724][T12064] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 854.244392][T12064] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 854.252383][T12064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 854.263378][T12064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 854.725502][T12055] lo speed is unknown, defaulting to 1000 [ 854.738706][T12062] lo speed is unknown, defaulting to 1000 [ 856.429144][ T9261] Bluetooth: hci5: command tx timeout [ 856.435862][ T9261] Bluetooth: hci7: command tx timeout [ 856.875844][T12081] kAFS: unparsable volume name [ 858.542205][T12064] Bluetooth: hci7: command tx timeout [ 858.547748][T12064] Bluetooth: hci5: command tx timeout [ 860.407787][T12055] chnl_net:caif_netlink_parms(): no params data found [ 860.567546][T12064] Bluetooth: hci7: command tx timeout [ 860.567554][ T9261] Bluetooth: hci5: command tx timeout [ 861.264648][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 862.443154][T12062] chnl_net:caif_netlink_parms(): no params data found [ 862.465578][T12112] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1739'. [ 862.646741][T12064] Bluetooth: hci5: command tx timeout [ 862.652186][T12064] Bluetooth: hci7: command tx timeout [ 864.933063][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.970089][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.987372][T12055] bridge_slave_0: entered allmulticast mode [ 864.995976][T12055] bridge_slave_0: entered promiscuous mode [ 865.025769][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.032950][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.043159][T12055] bridge_slave_1: entered allmulticast mode [ 865.155323][T12055] bridge_slave_1: entered promiscuous mode [ 865.857920][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.566938][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.434696][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.442067][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.494695][T12062] bridge_slave_0: entered allmulticast mode [ 867.524824][T12062] bridge_slave_0: entered promiscuous mode [ 867.638372][T12055] team0: Port device team_slave_0 added [ 867.671434][T12055] team0: Port device team_slave_1 added [ 867.694028][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.742129][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.772718][T12062] bridge_slave_1: entered allmulticast mode [ 867.836317][T12062] bridge_slave_1: entered promiscuous mode [ 868.610967][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.383444][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.414465][ T5997] bridge_slave_1: left allmulticast mode [ 869.420162][ T5997] bridge_slave_1: left promiscuous mode [ 869.465048][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.534877][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.564315][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.577192][ T5997] bridge_slave_0: left allmulticast mode [ 869.582870][ T5997] bridge_slave_0: left promiscuous mode [ 869.592775][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.945433][T12166] binder: 12164:12166 ioctl c0306201 2000000003c0 returned -14 [ 870.321738][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 871.928061][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 872.711996][T12179] kAFS: unparsable volume name [ 872.799480][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.890247][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.920790][ T5997] bond0 (unregistering): Released all slaves [ 872.948625][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.582806][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.655558][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.818650][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.834348][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.961595][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.998815][T12062] team0: Port device team_slave_0 added [ 874.056254][T12062] team0: Port device team_slave_1 added [ 874.112056][ T5997] hsr_slave_0: left promiscuous mode [ 874.222474][ T5997] hsr_slave_1: left promiscuous mode [ 874.299931][T12186] IPVS: sh: FWM 3 0x00000003 - no destination available [ 874.606582][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.965066][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.426352][ T5997] veth1_macvtap: left promiscuous mode [ 875.432476][ T5997] veth0_macvtap: left promiscuous mode [ 875.468288][ T5997] veth1_vlan: left promiscuous mode [ 875.473752][ T5997] veth0_vlan: left promiscuous mode [ 876.701294][T12209] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 879.893737][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 880.973964][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 883.600710][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.641916][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.714261][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.825449][T12055] hsr_slave_0: entered promiscuous mode [ 883.885585][T12055] hsr_slave_1: entered promiscuous mode [ 883.904232][ T5829] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 883.925175][T12055] debugfs: 'hsr0' already exists in 'hsr' [ 883.941955][T12055] Cannot create hsr debugfs directory [ 883.948296][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.971244][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.013027][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.109753][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.164907][ T5829] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 884.173974][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.239138][ T5829] usb 3-1: config 0 descriptor?? [ 884.411179][T12062] hsr_slave_0: entered promiscuous mode [ 884.436237][T12062] hsr_slave_1: entered promiscuous mode [ 884.475853][T12062] debugfs: 'hsr0' already exists in 'hsr' [ 884.554164][T12062] Cannot create hsr debugfs directory [ 884.736794][ T5829] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 884.784305][ T5829] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 884.827754][ T5829] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 884.871001][ T5829] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 884.914162][ T5829] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 884.967888][ T5829] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 885.029125][ T5829] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 885.072478][ C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 885.144261][ T5829] usb 3-1: USB disconnect, device number 44 [ 885.480587][T12256] fido_id[12256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 886.248090][ T5997] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.877113][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1764'. [ 887.217294][T12280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 888.809044][ T5997] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.781576][ T5997] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.894441][ T6028] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 891.252748][ T6028] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 891.368548][ T5997] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.651210][ T6028] usb 6-1: config 4 has no interface number 0 [ 891.683575][ T6028] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 891.694274][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.716709][ T6028] usb 6-1: Product: syz [ 891.734173][ T6028] usb 6-1: Manufacturer: syz [ 891.738817][ T6028] usb 6-1: SerialNumber: syz [ 891.779765][ T6028] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input28 [ 892.322230][ T3454] nci: nci_ntf_packet: unknown ntf opcode 0x503 [ 892.623354][ T5997] bridge_slave_1: left allmulticast mode [ 892.650389][ T5997] bridge_slave_1: left promiscuous mode [ 892.670236][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.717562][ T5997] bridge_slave_0: left allmulticast mode [ 892.732243][ T5997] bridge_slave_0: left promiscuous mode [ 892.748094][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.796420][ T5173] bcm5974 6-1:4.28: could not read from device [ 894.899010][ T5173] bcm5974 6-1:4.28: could not read from device [ 894.981988][ T6028] usb 6-1: USB disconnect, device number 35 [ 894.999675][ T5173] bcm5974 6-1:4.28: could not read from device [ 895.094294][T12295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.306766][T11033] udevd[11033]: Error opening device "/dev/input/event4": No such file or directory [ 895.359648][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 895.685467][T12324] kAFS: unable to lookup cell '(,c¾Ì' [ 896.404673][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 896.412816][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 896.420804][T11033] udevd[11033]: Unable to EVIOCGABS device "/dev/input/event4" [ 896.428871][T11033] udevd[11033]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 896.474599][ T5189] udevd[5189]: worker [11033] terminated by signal 6 (Aborted) [ 896.496632][ T5189] udevd[5189]: worker [11033] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input28/event4' [ 896.694916][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.741361][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.768714][ T5997] bond0 (unregistering): Released all slaves [ 897.435930][T12055] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 897.505852][T12055] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 897.874274][T12055] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 897.888382][T12055] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 899.288200][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 902.170250][T12375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.784503][ T5997] hsr_slave_0: left promiscuous mode [ 902.828833][ T5997] hsr_slave_1: left promiscuous mode [ 902.863165][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.894294][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.055413][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.062855][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.797164][ T5997] veth1_macvtap: left promiscuous mode [ 903.816875][ T5997] veth0_macvtap: left promiscuous mode [ 903.844361][ T5997] veth1_vlan: left promiscuous mode [ 903.886433][ T5997] veth0_vlan: left promiscuous mode [ 904.484296][ T5922] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 904.504756][ T5808] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 904.696790][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.707881][ T5808] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 904.731958][ T5808] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.759433][ T5922] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 904.784224][ T5808] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.797677][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.832543][ T5808] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.854459][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.878108][ T5922] usb 5-1: config 0 descriptor?? [ 905.141267][ T5808] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.201883][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 905.946203][ T5808] usb 7-1: invalid MIDI out EP 0 [ 906.804810][ T5922] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 906.837927][ T5922] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 906.849433][ T5922] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 906.858344][ T5922] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 906.867142][ T5922] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 906.890309][ T5922] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 906.929806][ T5922] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 906.954730][ C1] hid-thrustmaster 0003:044F:B65D.0009: Unknown packet type 0x0, unable to proceed further with wheel init [ 907.035809][ T5808] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 907.090476][ T5808] usb 7-1: USB disconnect, device number 9 [ 907.969211][ T5915] usb 5-1: USB disconnect, device number 53 [ 908.000560][T12423] fido_id[12423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 908.034837][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 908.085825][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 908.494413][ T5915] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 908.667483][ T5915] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 908.702895][ T5915] usb 7-1: config 4 has no interface number 0 [ 908.765939][ T5915] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 908.809249][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.869652][ T5915] usb 7-1: Product: syz [ 908.873879][ T5915] usb 7-1: Manufacturer: syz [ 908.895823][ T5915] usb 7-1: SerialNumber: syz [ 908.961073][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input30 [ 909.112261][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.216186][T12062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 909.291973][T12062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 909.384459][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.413804][T12062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 909.697285][T12062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 911.373227][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.380452][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.520161][ T5173] bcm5974 7-1:4.28: could not read from device [ 911.973831][T12464] infiniband syz1: set active [ 911.979085][T12464] infiniband syz1: added syz_tun [ 912.057932][T12464] RDS/IB: syz1: added [ 912.062596][T12464] smc: adding ib device syz1 with port count 1 [ 912.069061][T12464] smc: ib device syz1 port 1 has no pnetid [ 912.100230][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.107465][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.215123][ T5173] bcm5974 7-1:4.28: could not read from device [ 913.164823][ T5915] usb 7-1: USB disconnect, device number 10 [ 913.921221][T11181] udevd[11181]: Error opening device "/dev/input/event4": No such file or directory [ 914.054285][T11181] udevd[11181]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.134451][T11181] udevd[11181]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.142155][T11181] udevd[11181]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.236100][T11181] udevd[11181]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.847478][ T9261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.864661][ T9261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.875022][ T9261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.900473][ T9261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.911999][ T9261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 915.022000][ T9261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 915.032337][ T9261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 915.040484][ T9261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 915.115690][ T9261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 915.125611][ T9261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 915.778952][T12471] loop5: detected capacity change from 0 to 2640 [ 915.786998][T12471] buffer_io_error: 336 callbacks suppressed [ 915.787019][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.801164][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.809180][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.817197][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.825099][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.834569][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.842474][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.850604][T12471] Buffer I/O error on dev loop5, logical block 0, async page read [ 915.858663][T12471] ldm_validate_partition_table(): Disk read failed. [ 915.865433][T12471] loop5: unable to read partition table [ 915.866273][T12472] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 915.871416][T12471] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 915.879847][T12472] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 916.001855][T12481] lo speed is unknown, defaulting to 1000 [ 916.297011][T12484] lo speed is unknown, defaulting to 1000 [ 916.829649][T12496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1812'. [ 916.978883][ T9261] Bluetooth: hci0: command tx timeout [ 917.208866][ T9261] Bluetooth: hci2: command tx timeout [ 917.551727][ T5189] ldm_validate_partition_table(): Disk read failed. [ 917.608703][ T5189] Dev loop5: unable to read RDB block 0 [ 917.638442][ T5189] loop5: unable to read partition table [ 919.044364][ T9261] Bluetooth: hci0: command tx timeout [ 919.284691][ T9261] Bluetooth: hci2: command tx timeout [ 920.206565][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 920.500117][ T1203] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 921.124502][ T9261] Bluetooth: hci0: command tx timeout [ 921.374571][ T9261] Bluetooth: hci2: command tx timeout [ 921.565162][ T1203] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 921.605817][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.736341][ T1203] usb 3-1: config 0 descriptor?? [ 922.987461][ T1203] usb 3-1: Cannot set autoneg [ 922.992437][ T1203] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 923.236638][T12547] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 923.274597][ T9261] Bluetooth: hci0: command tx timeout [ 923.444422][ T9261] Bluetooth: hci2: command tx timeout [ 925.045617][ T1203] usb 3-1: USB disconnect, device number 45 [ 927.238902][T12481] chnl_net:caif_netlink_parms(): no params data found [ 927.898506][T12574] IPVS: sh: FWM 3 0x00000003 - no destination available [ 928.416101][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1836'. [ 928.497869][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.524238][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.554391][T12481] bridge_slave_0: entered allmulticast mode [ 928.562609][T12481] bridge_slave_0: entered promiscuous mode [ 928.577204][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1836'. [ 928.725087][T12484] chnl_net:caif_netlink_parms(): no params data found [ 928.773697][ T36] bridge_slave_1: left allmulticast mode [ 928.802584][ T36] bridge_slave_1: left promiscuous mode [ 928.816330][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.883766][ T36] bridge_slave_0: left allmulticast mode [ 929.011653][ T36] bridge_slave_0: left promiscuous mode [ 929.017429][ T791] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 929.040317][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.206523][ T791] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 929.242429][ T791] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 929.255624][ T791] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 929.274454][ T791] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 929.362311][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.409330][ T791] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.433854][ T791] usb 6-1: invalid MIDI out EP 0 [ 930.562600][ T791] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 930.614871][ T791] usb 6-1: USB disconnect, device number 36 [ 930.850509][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.945510][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.970366][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.979379][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.431481][T12601] Bluetooth: (null): Non-link packet received in non-active state [ 931.473850][ T1105] Bluetooth: (null): Invalid header checksum [ 932.016802][ T36] bond0 (unregistering): Released all slaves [ 932.047579][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.058719][T12595] tmpfs: Bad value for 'mpol' [ 932.323417][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.348997][T12481] bridge_slave_1: entered allmulticast mode [ 932.357294][ T1203] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 932.372651][T12481] bridge_slave_1: entered promiscuous mode [ 932.511965][T12603] binder: BINDER_SET_CONTEXT_MGR already set [ 932.518403][ T1203] usb 6-1: Using ep0 maxpacket: 16 [ 932.523721][T12603] binder: 12602:12603 ioctl 4018620d 200000000040 returned -16 [ 932.536363][ T1203] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 932.551111][ T1203] usb 6-1: config 0 has no interface number 0 [ 932.566238][T12604] binder: 12602:12604 ioctl c0306201 2000000003c0 returned -14 [ 932.573323][ T1203] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.604466][ T1203] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 932.647685][ T1203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.716921][ T1203] usb 6-1: config 0 descriptor?? [ 932.852168][ T30] audit: type=1326 audit(2000000291.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.6.1843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f856cd9c629 code=0x0 [ 932.912272][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.158297][ T1203] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input2 [ 933.193187][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.568167][ T1203] usb 6-1: USB disconnect, device number 37 [ 933.736301][T12481] team0: Port device team_slave_0 added [ 933.865245][ T36] hsr_slave_0: left promiscuous mode [ 933.874473][ T36] hsr_slave_1: left promiscuous mode [ 933.903749][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.931756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.280257][T12624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.993771][ T36] team0 (unregistering): Port device team_slave_1 removed [ 936.145188][ T1203] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 936.156487][ T36] team0 (unregistering): Port device team_slave_0 removed [ 936.314535][ T1203] usb 6-1: Using ep0 maxpacket: 32 [ 936.327508][ T1203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.359863][ T1203] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 936.377454][ T1203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.399735][ T1203] usb 6-1: Product: syz [ 936.409890][ T1203] usb 6-1: Manufacturer: syz [ 936.420016][ T1203] usb 6-1: SerialNumber: syz [ 936.448244][ T1203] usb 6-1: config 0 descriptor?? [ 936.522520][T12481] team0: Port device team_slave_1 added [ 936.531594][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.539587][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.552534][T12484] bridge_slave_0: entered allmulticast mode [ 936.579982][T12484] bridge_slave_0: entered promiscuous mode [ 936.596221][T12628] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 936.713463][ T1203] usb 6-1: USB disconnect, device number 38 [ 936.748624][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.772107][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.788139][T12484] bridge_slave_1: entered allmulticast mode [ 936.835817][T12484] bridge_slave_1: entered promiscuous mode [ 936.899438][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.907149][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.939318][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.011566][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.020599][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.051036][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.071496][T12643] binder: 12642:12643 ioctl c0306201 2000000003c0 returned -14 [ 937.087231][T12484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.135710][T12484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.422733][T12484] team0: Port device team_slave_0 added [ 937.480798][T12484] team0: Port device team_slave_1 added [ 937.986028][T12481] hsr_slave_0: entered promiscuous mode [ 937.994004][T12481] hsr_slave_1: entered promiscuous mode [ 938.014808][T12481] debugfs: 'hsr0' already exists in 'hsr' [ 938.030409][T12481] Cannot create hsr debugfs directory [ 938.513355][T12484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.675738][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.708486][ T30] audit: type=1326 audit(2000000297.559:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 939.479782][ T30] audit: type=1326 audit(2000000297.559:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 939.556478][T12671] kAFS: unable to lookup cell '(,c¾Ì' [ 939.871971][T12484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.882782][ T30] audit: type=1326 audit(2000000297.559:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.019447][T12484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.088143][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.114641][ T30] audit: type=1326 audit(2000000297.559:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.221033][ T30] audit: type=1326 audit(2000000297.559:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.244561][T12484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.277431][ T30] audit: type=1326 audit(2000000297.559:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ee575cece code=0x7ffc0000 [ 940.446971][ T30] audit: type=1326 audit(2000000297.559:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.474390][ T791] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 940.575276][ T30] audit: type=1326 audit(2000000297.559:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.656526][ T791] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 940.685295][ T30] audit: type=1326 audit(2000000298.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.775340][ T791] usb 5-1: config 4 has no interface number 0 [ 940.804541][ T791] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 940.814380][ T30] audit: type=1326 audit(2000000298.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12663 comm="syz.5.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee579c629 code=0x7ffc0000 [ 940.845051][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.914156][ T791] usb 5-1: Product: syz [ 940.918459][ T791] usb 5-1: Manufacturer: syz [ 940.923168][ T791] usb 5-1: SerialNumber: syz [ 941.070110][ T791] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input31 [ 941.507374][T12484] hsr_slave_0: entered promiscuous mode [ 941.565972][T12484] hsr_slave_1: entered promiscuous mode [ 941.593959][T12484] debugfs: 'hsr0' already exists in 'hsr' [ 941.620535][T12484] Cannot create hsr debugfs directory [ 943.284447][ T5173] bcm5974 5-1:4.28: could not read from device [ 943.354293][ T5173] bcm5974 5-1:4.28: could not read from device [ 943.373924][ T791] usb 5-1: USB disconnect, device number 54 [ 943.409648][ T5173] bcm5974 5-1:4.28: could not read from device [ 943.938234][ T36] bridge_slave_1: left allmulticast mode [ 943.950426][ T36] bridge_slave_1: left promiscuous mode [ 943.966658][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.017099][ T791] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 944.203161][ T36] bridge_slave_0: left allmulticast mode [ 944.209325][ T36] bridge_slave_0: left promiscuous mode [ 944.215406][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.310397][T12705] ntfs3(nullb0): Primary boot signature is not NTFS. [ 944.319923][T12705] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 944.434332][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 944.930448][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.992546][ T791] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 945.016870][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.056766][ T791] usb 5-1: Product: syz [ 945.071833][ T791] usb 5-1: Manufacturer: syz [ 945.082019][ T791] usb 5-1: SerialNumber: syz [ 945.168017][ T791] usb 5-1: config 0 descriptor?? [ 946.609355][ T5915] usb 5-1: USB disconnect, device number 55 [ 946.618682][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 946.666853][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.692466][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.112941][ T36] bond0 (unregistering): Released all slaves [ 947.738774][T12481] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 947.843387][T12481] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.080303][T12738] kAFS: unable to lookup cell '(,c¾Ì' [ 949.779551][T12481] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.895894][T12481] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 950.583147][ T36] hsr_slave_0: left promiscuous mode [ 950.617589][ T36] hsr_slave_1: left promiscuous mode [ 950.626042][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.645045][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.797937][ T36] team0 (unregistering): Port device team_slave_1 removed [ 951.850463][ T5808] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 952.034680][ T36] team0 (unregistering): Port device team_slave_0 removed [ 952.194240][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 952.226487][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.272081][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.293973][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.351439][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 952.378007][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.419718][ T5808] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.430010][ T5808] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.640856][ T5808] usb 3-1: Manufacturer: syz [ 952.656233][ T5808] usb 3-1: config 0 descriptor?? [ 953.224187][ T5808] rc_core: IR keymap rc-hauppauge not found [ 953.343262][ T5808] Registered IR keymap rc-empty [ 953.394301][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.424599][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.460790][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 953.526897][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 954.143288][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.234920][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.362797][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.624266][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.752420][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1884'. [ 955.341883][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.374994][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.464400][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.624758][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.644270][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.665534][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.789131][ T5808] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 956.088772][ T5808] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 956.351529][ T5808] usb 3-1: USB disconnect, device number 46 [ 957.036649][T12484] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 957.141595][T12484] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 957.655874][T12484] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 957.800129][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.845294][T12484] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 958.062026][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.157072][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.164300][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.204216][ T5808] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 958.233866][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.241140][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.260090][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'. [ 958.415293][ T5808] usb 7-1: Using ep0 maxpacket: 32 [ 958.462090][ T5808] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 958.498846][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.504360][T12484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.584754][ T5808] usb 7-1: config 0 descriptor?? [ 958.607563][ T5808] gspca_main: sq930x-2.14.0 probing 041e:403c [ 958.616447][T12825] IPVS: sh: FWM 3 0x00000003 - no destination available [ 958.776624][T12484] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.837909][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.845143][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.892991][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.900336][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.556120][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 959.556148][ T30] audit: type=1326 audit(2000000318.389:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.2.1897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9030f9c629 code=0x0 [ 960.001443][ T5808] gspca_sq930x: ucbus_write failed -71 [ 960.048066][ T5808] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 960.140363][ T5808] usb 7-1: USB disconnect, device number 11 [ 960.575835][ T5808] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 960.754287][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 960.839323][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.922745][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.998261][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.046265][ T5808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 961.093127][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.098059][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.171482][ T5808] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 961.191820][T12484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.237973][ T5808] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 961.291972][ T5808] usb 5-1: Manufacturer: syz [ 961.371786][ T5808] usb 5-1: config 0 descriptor?? [ 962.854244][ T5808] rc_core: IR keymap rc-hauppauge not found [ 962.904204][ T5808] Registered IR keymap rc-empty [ 962.909417][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 962.994263][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.048071][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 963.142500][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 963.264523][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.334568][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.397125][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.492942][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.584304][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.638829][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.690508][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.749461][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.805822][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.854346][ T5808] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.942268][ T5808] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 963.953160][ T5808] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.034282][ T791] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 964.062700][ T5808] usb 5-1: USB disconnect, device number 56 [ 964.188758][T12481] veth0_vlan: entered promiscuous mode [ 964.205434][ T791] usb 3-1: device descriptor read/64, error -71 [ 964.357833][T12481] veth1_vlan: entered promiscuous mode [ 964.398703][T12484] veth0_vlan: entered promiscuous mode [ 964.444492][ T791] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 964.861374][T12484] veth1_vlan: entered promiscuous mode [ 964.930856][T12481] veth0_macvtap: entered promiscuous mode [ 965.006547][T12481] veth1_macvtap: entered promiscuous mode [ 965.034277][ T791] usb 3-1: device descriptor read/64, error -71 [ 965.060780][T12484] veth0_macvtap: entered promiscuous mode [ 965.133646][T12484] veth1_macvtap: entered promiscuous mode [ 965.174777][ T791] usb usb3-port1: attempt power cycle [ 965.228397][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.330182][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.379835][T12484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.422986][ T3430] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.476519][T12484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.494211][ T3430] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.502993][ T3430] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.536296][ T791] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 965.566071][ T791] usb 3-1: device descriptor read/8, error -71 [ 965.999920][ T3430] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.146139][ T791] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 966.168243][ T125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.178128][ T125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.392084][ T791] usb 3-1: device descriptor read/8, error -71 [ 966.425754][ T125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.220079][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.236378][ T791] usb usb3-port1: unable to enumerate USB device [ 968.219672][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.230339][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.020395][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.084167][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.173345][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.230137][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.447880][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.484274][ T1203] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 969.499715][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.813448][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 969.826215][ T1203] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.837030][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 969.854211][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 969.864153][ T1203] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 969.874012][ T1203] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.980299][ T1203] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 970.018061][ T1203] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 970.554247][ T1203] usb 5-1: Manufacturer: syz [ 970.655521][ T1203] usb 5-1: config 0 descriptor?? [ 971.389058][T12954] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1917'. [ 971.984132][ T1203] rc_core: IR keymap rc-hauppauge not found [ 972.067627][T12960] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1918'. [ 972.077663][ T1203] Registered IR keymap rc-empty [ 972.086598][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 972.574927][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 972.964714][ T1203] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 973.183253][ T1203] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 973.214377][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 973.244207][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 973.874310][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 973.904773][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 973.964216][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.044885][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.094219][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.134491][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.194235][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.255503][ T1203] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 974.419262][ T1203] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 974.432281][ T1203] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 974.474550][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 974.976496][ T1203] usb 5-1: USB disconnect, device number 57 [ 975.496315][ T9] usb 6-1: device descriptor read/64, error -71 [ 976.176350][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 976.345470][ T9] usb 6-1: device descriptor read/64, error -71 [ 976.464950][ T9] usb usb6-port1: attempt power cycle [ 978.084184][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 978.727913][ T9] usb 6-1: device descriptor read/8, error -71 [ 981.402872][ T5808] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 981.565893][T13020] wireguard0: entered promiscuous mode [ 981.574298][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 981.595900][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.629150][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.670126][T13020] wireguard0: entered allmulticast mode [ 981.679312][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 981.721193][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 981.741845][T13028] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1938'. [ 981.767602][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.810640][ T5808] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 981.869977][ T5808] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 981.993472][ T5808] usb 3-1: Manufacturer: syz [ 982.795593][ T5808] usb 3-1: config 0 descriptor?? [ 983.944154][ T5808] rc_core: IR keymap rc-hauppauge not found [ 983.956480][ T5808] Registered IR keymap rc-empty [ 984.024435][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.071685][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.087367][T13051] kAFS: unable to lookup cell '(,c¾Ì' [ 984.145359][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 984.202565][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 984.329192][T13054] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1943'. [ 984.717093][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.754227][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.785630][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.849203][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.959654][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.004281][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.506216][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.685677][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.953388][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.006081][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.961322][ T5808] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 986.985275][ T5808] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 987.035541][ T5808] usb 3-1: USB disconnect, device number 51 [ 989.342862][T13083] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1954'. [ 989.584475][ T791] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 990.034434][ T791] usb 9-1: Using ep0 maxpacket: 32 [ 990.107805][ T791] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.704165][ T791] usb 9-1: string descriptor 0 read error: -71 [ 990.710505][ T791] usb 9-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 990.787848][ T791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.910916][ T791] usb 9-1: config 0 descriptor?? [ 990.945201][ T791] usb 9-1: can't set config #0, error -71 [ 990.984928][ T791] usb 9-1: USB disconnect, device number 2 [ 991.283771][T13098] kAFS: unable to lookup cell '(,c¾Ì' [ 991.504233][ T1203] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 992.409965][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.416565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.457108][ T1203] usb 7-1: Using ep0 maxpacket: 16 [ 992.504191][ T1203] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.521883][ T1203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.579571][ T1203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.635786][ C0] [ 992.638145][ C0] ================================ [ 992.643270][ C0] WARNING: inconsistent lock state [ 992.648538][ C0] syzkaller #0 Not tainted [ 992.652944][ C0] -------------------------------- [ 992.658046][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 992.665058][ C0] kworker/u8:9/3430 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 992.671574][ C0] ffff88807b61aa20 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x1a2/0x860 [ 992.681008][ C0] {SOFTIRQ-ON-W} state was registered at: [ 992.686820][ C0] lock_acquire+0x1cf/0x380 [ 992.691451][ C0] lock_sock_nested+0x41/0xf0 [ 992.696369][ C0] tcp_sock_set_nodelay+0x1c/0x120 [ 992.701683][ C0] rds_tcp_listen_init+0x157/0x4e0 [ 992.706905][ C0] rds_tcp_init_net+0x16d/0x310 [ 992.711909][ C0] ops_init+0x1e2/0x5f0 [ 992.716167][ C0] register_pernet_operations+0x3cb/0x740 [ 992.722108][ C0] register_pernet_device+0x29/0x80 [ 992.727504][ C0] rds_tcp_init+0x85/0x110 [ 992.732010][ C0] do_one_initcall+0x11d/0x760 [ 992.736866][ C0] kernel_init_freeable+0x6e5/0x7a0 [ 992.742253][ C0] kernel_init+0x1f/0x1e0 [ 992.746688][ C0] ret_from_fork+0x754/0xd80 [ 992.751503][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.756355][ C0] irq event stamp: 3308442 [ 992.760841][ C0] hardirqs last enabled at (3308442): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 992.771521][ C0] hardirqs last disabled at (3308441): [] _raw_spin_lock_irqsave+0x52/0x60 [ 992.781701][ C0] softirqs last enabled at (3308372): [] __dev_queue_xmit+0x7dc/0x4750 [ 992.791645][ C0] softirqs last disabled at (3308373): [] do_softirq+0xac/0xe0 [ 992.800931][ C0] [ 992.800931][ C0] other info that might help us debug this: [ 992.808989][ C0] Possible unsafe locking scenario: [ 992.808989][ C0] [ 992.816433][ C0] CPU0 [ 992.819792][ C0] ---- [ 992.823070][ C0] lock(k-sk_lock-AF_INET6); [ 992.827832][ C0] [ 992.831270][ C0] lock(k-sk_lock-AF_INET6); [ 992.836206][ C0] [ 992.836206][ C0] *** DEADLOCK *** [ 992.836206][ C0] [ 992.844456][ C0] 10 locks held by kworker/u8:9/3430: [ 992.849822][ C0] #0: ffff88802d8ee948 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 992.861016][ C0] #1: ffffc9000fa07d08 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 992.873248][ C0] #2: ffff88807eca0fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 992.883456][ C0] #3: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x136/0x760 [ 992.893034][ C0] #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x2dc/0x26e0 [ 992.902049][ C0] #5: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 992.911157][ C0] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x32a/0x1580 [ 992.920816][ C0] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x29/0x2f0 [ 992.929827][ C0] #8: ffff88807b61a9a0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x285b/0x42c0 [ 992.939589][ C0] #9: ffff88807b61abc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x90/0x790 [ 992.949549][ C0] [ 992.949549][ C0] stack backtrace: [ 992.955444][ C0] CPU: 0 UID: 0 PID: 3430 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 992.955480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 992.955501][ C0] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 992.955544][ C0] Call Trace: [ 992.955555][ C0] [ 992.955566][ C0] dump_stack_lvl+0x100/0x190 [ 992.955610][ C0] print_usage_bug.part.0+0x257/0x340 [ 992.955657][ C0] mark_lock+0x74a/0xa20 [ 992.955698][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.955734][ C0] ? mark_held_locks+0x40/0x70 [ 992.955782][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 992.955811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.955846][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 992.955877][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.955912][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 992.955941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.955981][ C0] __lock_acquire+0x103a/0x2630 [ 992.956024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.956059][ C0] ? kasan_save_stack+0x3f/0x50 [ 992.956089][ C0] ? kasan_save_stack+0x30/0x50 [ 992.956119][ C0] ? kasan_save_track+0x14/0x30 [ 992.956148][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 992.956178][ C0] ? __kmalloc_noprof+0x301/0x850 [ 992.956207][ C0] ? rds_message_alloc+0x48/0x220 [ 992.956237][ C0] ? rds_send_probe.constprop.0+0xa3/0xc90 [ 992.956275][ C0] ? rds_recv_incoming+0xc92/0x1150 [ 992.956309][ C0] ? rds_tcp_data_recv+0x278/0xce0 [ 992.956337][ C0] ? __tcp_read_sock+0x204/0x8d0 [ 992.956381][ C0] lock_acquire+0x1cf/0x380 [ 992.956423][ C0] ? inet6_getname+0x1a2/0x860 [ 992.956460][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 992.956506][ C0] ? net_rx_action+0xa40/0xf20 [ 992.956549][ C0] ? handle_softirqs+0x1eb/0x9e0 [ 992.956580][ C0] ? do_softirq+0xac/0xe0 [ 992.956610][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 992.956645][ C0] lock_sock_nested+0x41/0xf0 [ 992.956674][ C0] ? inet6_getname+0x1a2/0x860 [ 992.956706][ C0] inet6_getname+0x1a2/0x860 [ 992.956740][ C0] rds_tcp_get_peer_sport+0x7c/0x110 [ 992.956769][ C0] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 992.956798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.956840][ C0] ? find_held_lock+0x2b/0x80 [ 992.956873][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.956908][ C0] ? rds_addr_cmp+0x10d/0x150 [ 992.956947][ C0] rds_tcp_conn_slots_available+0x279/0x390 [ 992.956978][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 992.957010][ C0] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 992.957044][ C0] ? ip6_output+0x2a1/0xa60 [ 992.957086][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 992.957120][ C0] ? worker_thread+0x550/0xe40 [ 992.957145][ C0] ? time_cpufreq_notifier+0x320/0x490 [ 992.957192][ C0] rds_recv_incoming+0xd6c/0x1150 [ 992.957228][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957264][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 992.957298][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957333][ C0] ? skb_copy_bits+0x5c8/0x8d0 [ 992.957366][ C0] rds_tcp_data_recv+0x278/0xce0 [ 992.957405][ C0] __tcp_read_sock+0x204/0x8d0 [ 992.957452][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 992.957483][ C0] ? __pfx___tcp_read_sock+0x10/0x10 [ 992.957527][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957566][ C0] rds_tcp_read_sock+0x12e/0x280 [ 992.957595][ C0] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 992.957623][ C0] ? lock_acquire+0x1cf/0x380 [ 992.957665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957736][ C0] ? __sk_mem_schedule+0xd0/0x100 [ 992.957771][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 992.957798][ C0] rds_tcp_data_ready+0x1c9/0x790 [ 992.957826][ C0] ? tcp_data_ecn_check+0x1c0/0x750 [ 992.957867][ C0] tcp_data_ready+0x114/0x5a0 [ 992.957910][ C0] tcp_data_queue+0x1aca/0x4fd0 [ 992.957956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.957990][ C0] ? tcp_urg+0x10f/0xb80 [ 992.958023][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 992.958064][ C0] ? tcp_ecn_create_request+0x800/0x8d0 [ 992.958099][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 992.958130][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958164][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958200][ C0] ? ktime_get+0x1a7/0x300 [ 992.958240][ C0] tcp_rcv_established+0xb64/0x3980 [ 992.958287][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 992.958329][ C0] ? __entry_text_end+0x1020b5/0x1020b9 [ 992.958363][ C0] ? lock_acquire+0x1cf/0x380 [ 992.958404][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958446][ C0] tcp_v6_do_rcv+0x118b/0x1dd0 [ 992.958487][ C0] tcp_v6_rcv+0x2b03/0x42c0 [ 992.958535][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 992.958576][ C0] ? raw6_local_deliver+0x3f3/0xa80 [ 992.958610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958648][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958683][ C0] ? raw6_local_deliver+0x3fd/0xa80 [ 992.958717][ C0] ? nf_hook.constprop.0+0x2d9/0x750 [ 992.958759][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.958796][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 992.958833][ C0] ip6_protocol_deliver_rcu+0x188/0x1500 [ 992.958887][ C0] ip6_input_finish+0x1e4/0x4a0 [ 992.958932][ C0] ip6_input+0x105/0x2f0 [ 992.958974][ C0] ipv6_rcv+0x261/0x610 [ 992.959016][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 992.959057][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 992.959104][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 992.959152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959196][ C0] ? lock_acquire+0x1cf/0x380 [ 992.959238][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959274][ C0] ? process_backlog+0x32a/0x1580 [ 992.959319][ C0] ? process_backlog+0x32a/0x1580 [ 992.959363][ C0] __netif_receive_skb+0x1f/0x120 [ 992.959408][ C0] process_backlog+0x37a/0x1580 [ 992.959464][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 992.959512][ C0] net_rx_action+0xa40/0xf20 [ 992.959564][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 992.959608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959643][ C0] ? mark_lock+0x9f0/0xa20 [ 992.959683][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959719][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959754][ C0] ? sched_clock+0x38/0x60 [ 992.959793][ C0] ? sched_clock_cpu+0x6c/0x570 [ 992.959842][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.959877][ C0] ? mark_held_locks+0x40/0x70 [ 992.959921][ C0] handle_softirqs+0x1eb/0x9e0 [ 992.959955][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 992.959987][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960023][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 992.960067][ C0] do_softirq+0xac/0xe0 [ 992.960097][ C0] [ 992.960106][ C0] [ 992.960116][ C0] __local_bh_enable_ip+0xf8/0x120 [ 992.960148][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 992.960190][ C0] __dev_queue_xmit+0x7f1/0x4750 [ 992.960240][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 992.960289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960324][ C0] ? __lock_acquire+0x4a5/0x2630 [ 992.960366][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 992.960407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960449][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960562][ C0] ip6_finish_output2+0xfd4/0x1ce0 [ 992.960609][ C0] __ip6_finish_output+0x357/0x1080 [ 992.960652][ C0] ip6_output+0x2aa/0xa60 [ 992.960693][ C0] ? __pfx_ip6_output+0x10/0x10 [ 992.960735][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 992.960777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960816][ C0] ip6_xmit+0x1002/0x26e0 [ 992.960854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.960889][ C0] ? __lock_acquire+0x4a5/0x2630 [ 992.960939][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 992.960977][ C0] ? __lock_acquire+0x4a5/0x2630 [ 992.961019][ C0] ? ip6_dst_check+0x343/0x950 [ 992.961054][ C0] ? __pfx_dst_output+0x10/0x10 [ 992.961096][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961133][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961175][ C0] inet6_csk_xmit+0x387/0x760 [ 992.961205][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 992.961233][ C0] __tcp_transmit_skb+0x1dd1/0x4b50 [ 992.961290][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 992.961341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961382][ C0] ? ktime_get+0x200/0x300 [ 992.961417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961455][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 992.961487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961525][ C0] tcp_write_xmit+0x12a2/0x8980 [ 992.961564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961602][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 992.961632][ C0] __tcp_sock_set_cork.part.0+0x105/0x140 [ 992.961671][ C0] tcp_sock_set_cork+0x9b/0xc0 [ 992.961707][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 992.961740][ C0] rds_send_xmit+0x17cb/0x2950 [ 992.961792][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 992.961829][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.961869][ C0] rds_send_worker+0x94/0x320 [ 992.961909][ C0] process_one_work+0x9d7/0x1920 [ 992.961965][ C0] ? __pfx_process_one_work+0x10/0x10 [ 992.962012][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.962053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.962091][ C0] worker_thread+0x5da/0xe40 [ 992.962124][ C0] ? kthread+0x13a/0x450 [ 992.962165][ C0] ? __pfx_worker_thread+0x10/0x10 [ 992.962190][ C0] kthread+0x370/0x450 [ 992.962233][ C0] ? __pfx_kthread+0x10/0x10 [ 992.962277][ C0] ret_from_fork+0x754/0xd80 [ 992.962323][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 992.962370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.962404][ C0] ? __switch_to+0x7b4/0x1120 [ 992.962439][ C0] ? __pfx_kthread+0x10/0x10 [ 992.962484][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.962525][ C0] [ 993.930498][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 993.939269][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3430, name: kworker/u8:9 [ 993.948604][ C0] preempt_count: 303, expected: 0 [ 993.953750][ C0] RCU nest depth: 5, expected: 0 [ 993.958699][ C0] INFO: lockdep is turned off. [ 993.963504][ C0] Preemption disabled at: [ 993.963517][ C0] [] __dev_queue_xmit+0x27c/0x4750 [ 993.974588][ C0] CPU: 0 UID: 0 PID: 3430 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 993.974630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.974653][ C0] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 993.974703][ C0] Call Trace: [ 993.974716][ C0] [ 993.974730][ C0] dump_stack_lvl+0x100/0x190 [ 993.974778][ C0] __might_resched.cold+0x1ec/0x232 [ 993.974824][ C0] ? __pfx___might_resched+0x10/0x10 [ 993.974854][ C0] ? net_rx_action+0xa40/0xf20 [ 993.974898][ C0] ? do_softirq+0xac/0xe0 [ 993.974929][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 993.974964][ C0] lock_sock_nested+0x52/0xf0 [ 993.974993][ C0] ? inet6_getname+0x1a2/0x860 [ 993.975026][ C0] inet6_getname+0x1a2/0x860 [ 993.975062][ C0] rds_tcp_get_peer_sport+0x7c/0x110 [ 993.975093][ C0] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 993.975121][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.975164][ C0] ? find_held_lock+0x2b/0x80 [ 993.975199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.975234][ C0] ? rds_addr_cmp+0x10d/0x150 [ 993.975273][ C0] rds_tcp_conn_slots_available+0x279/0x390 [ 993.975323][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 993.975355][ C0] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 993.975389][ C0] ? ip6_output+0x2a1/0xa60 [ 993.975431][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 993.975465][ C0] ? worker_thread+0x550/0xe40 [ 993.975493][ C0] ? time_cpufreq_notifier+0x320/0x490 [ 993.975541][ C0] rds_recv_incoming+0xd6c/0x1150 [ 993.975578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.975613][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 993.975650][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.975685][ C0] ? skb_copy_bits+0x5c8/0x8d0 [ 993.975718][ C0] rds_tcp_data_recv+0x278/0xce0 [ 993.975757][ C0] __tcp_read_sock+0x204/0x8d0 [ 993.975802][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 993.975833][ C0] ? __pfx___tcp_read_sock+0x10/0x10 [ 993.975877][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.975915][ C0] rds_tcp_read_sock+0x12e/0x280 [ 993.975944][ C0] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 993.975972][ C0] ? lock_acquire+0x1cf/0x380 [ 993.976014][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976051][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976086][ C0] ? __sk_mem_schedule+0xd0/0x100 [ 993.976121][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 993.976147][ C0] rds_tcp_data_ready+0x1c9/0x790 [ 993.976176][ C0] ? tcp_data_ecn_check+0x1c0/0x750 [ 993.976213][ C0] tcp_data_ready+0x114/0x5a0 [ 993.976255][ C0] tcp_data_queue+0x1aca/0x4fd0 [ 993.976301][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976336][ C0] ? tcp_urg+0x10f/0xb80 [ 993.976369][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 993.976410][ C0] ? tcp_ecn_create_request+0x800/0x8d0 [ 993.976445][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 993.976481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976551][ C0] ? ktime_get+0x1a7/0x300 [ 993.976590][ C0] tcp_rcv_established+0xb64/0x3980 [ 993.976638][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 993.976679][ C0] ? __entry_text_end+0x1020b5/0x1020b9 [ 993.976713][ C0] ? lock_acquire+0x1cf/0x380 [ 993.976755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976794][ C0] tcp_v6_do_rcv+0x118b/0x1dd0 [ 993.976835][ C0] tcp_v6_rcv+0x2b03/0x42c0 [ 993.976882][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 993.976918][ C0] ? raw6_local_deliver+0x3f3/0xa80 [ 993.976952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.976991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.977025][ C0] ? raw6_local_deliver+0x3fd/0xa80 [ 993.977059][ C0] ? nf_hook.constprop.0+0x2d9/0x750 [ 993.977102][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.977138][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 993.977176][ C0] ip6_protocol_deliver_rcu+0x188/0x1500 [ 993.977230][ C0] ip6_input_finish+0x1e4/0x4a0 [ 993.977274][ C0] ip6_input+0x105/0x2f0 [ 993.977316][ C0] ipv6_rcv+0x261/0x610 [ 993.977357][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 993.977398][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 993.977446][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 993.977497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.977532][ C0] ? lock_acquire+0x1cf/0x380 [ 993.977574][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.977610][ C0] ? process_backlog+0x32a/0x1580 [ 993.977655][ C0] ? process_backlog+0x32a/0x1580 [ 993.977698][ C0] __netif_receive_skb+0x1f/0x120 [ 993.977744][ C0] process_backlog+0x37a/0x1580 [ 993.977793][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 993.977841][ C0] net_rx_action+0xa40/0xf20 [ 993.977892][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 993.977936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.977971][ C0] ? mark_lock+0x9f0/0xa20 [ 993.978012][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978082][ C0] ? sched_clock+0x38/0x60 [ 993.978121][ C0] ? sched_clock_cpu+0x6c/0x570 [ 993.978174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978209][ C0] ? mark_held_locks+0x40/0x70 [ 993.978252][ C0] handle_softirqs+0x1eb/0x9e0 [ 993.978288][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 993.978319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978356][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 993.978399][ C0] do_softirq+0xac/0xe0 [ 993.978430][ C0] [ 993.978439][ C0] [ 993.978449][ C0] __local_bh_enable_ip+0xf8/0x120 [ 993.978525][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 993.978567][ C0] __dev_queue_xmit+0x7f1/0x4750 [ 993.978618][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 993.978666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978701][ C0] ? __lock_acquire+0x4a5/0x2630 [ 993.978744][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 993.978786][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978823][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978860][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978897][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.978937][ C0] ip6_finish_output2+0xfd4/0x1ce0 [ 993.978983][ C0] __ip6_finish_output+0x357/0x1080 [ 993.979026][ C0] ip6_output+0x2aa/0xa60 [ 993.979066][ C0] ? __pfx_ip6_output+0x10/0x10 [ 993.979108][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 993.979150][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979189][ C0] ip6_xmit+0x1002/0x26e0 [ 993.979227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979262][ C0] ? __lock_acquire+0x4a5/0x2630 [ 993.979311][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 993.979349][ C0] ? __lock_acquire+0x4a5/0x2630 [ 993.979391][ C0] ? ip6_dst_check+0x343/0x950 [ 993.979425][ C0] ? __pfx_dst_output+0x10/0x10 [ 993.979473][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979510][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979551][ C0] inet6_csk_xmit+0x387/0x760 [ 993.979581][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 993.979611][ C0] __tcp_transmit_skb+0x1dd1/0x4b50 [ 993.979668][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 993.979719][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979761][ C0] ? ktime_get+0x200/0x300 [ 993.979795][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979830][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 993.979863][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979901][ C0] tcp_write_xmit+0x12a2/0x8980 [ 993.979940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.979978][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 993.980008][ C0] __tcp_sock_set_cork.part.0+0x105/0x140 [ 993.980048][ C0] tcp_sock_set_cork+0x9b/0xc0 [ 993.980083][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 993.980117][ C0] rds_send_xmit+0x17cb/0x2950 [ 993.980165][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 993.980203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.980242][ C0] rds_send_worker+0x94/0x320 [ 993.980282][ C0] process_one_work+0x9d7/0x1920 [ 993.980337][ C0] ? __pfx_process_one_work+0x10/0x10 [ 993.980384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.980425][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.980463][ C0] worker_thread+0x5da/0xe40 [ 993.980500][ C0] ? kthread+0x13a/0x450 [ 993.980542][ C0] ? __pfx_worker_thread+0x10/0x10 [ 993.980567][ C0] kthread+0x370/0x450 [ 993.980609][ C0] ? __pfx_kthread+0x10/0x10 [ 993.980654][ C0] ret_from_fork+0x754/0xd80 [ 993.980700][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 993.980746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.980780][ C0] ? __switch_to+0x7b4/0x1120 [ 993.980812][ C0] ? __pfx_kthread+0x10/0x10 [ 993.980856][ C0] ret_from_fork_asm+0x1a/0x30 [ 993.980897][ C0]