last executing test programs: 56m15.607322797s ago: executing program 32 (id=215): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc090, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000180)={0x40, 0x6, 0x58, {0x58, 0x2, "74f880ed3af007e1d98a102ba95216e11840cf99f4740df849c29f4cfe7cc657f2ed0d0000000000005db9779929b9c5b9d804bc0a935fd68b0d72d93f54b48903000000f338f40b6163d153b150cf0d23fd93afee61"}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x6, 0xf, "77271e35", "98971ba0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x60, 0x9, 0x9, 0x8, 0x6, 0x8}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000000)={0x20, 0x0, 0x1a, "4d449bda8fe5b2c9d43e72a8e65611be4e93e15dc5bb7d0505d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 52m16.396554432s ago: executing program 33 (id=755): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x40000002, 0x0) 49m17.121855324s ago: executing program 34 (id=1069): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 48m47.894550775s ago: executing program 35 (id=1119): r0 = syz_clone(0x1c8091, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='task\x00') pidfd_send_signal(r1, 0xc, &(0x7f0000000140)={0x28, 0x5, 0x8}, 0x0) unshare(0x62000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) gettid() unshare(0x0) tkill(0x0, 0x16) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, 0x0) write$tun(r4, 0x0, 0xfce) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r6}) 48m10.536594314s ago: executing program 36 (id=1170): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101202) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 46m56.502665279s ago: executing program 37 (id=1291): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d39101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100"], 0x38}}, 0x0) 46m46.17979299s ago: executing program 38 (id=1310): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x0, &(0x7f0000000040)) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) 44m43.524111164s ago: executing program 39 (id=1465): connect$inet(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 44m26.968869527s ago: executing program 40 (id=1470): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6ee, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6302, 0x4) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000400)=0x2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) 44m1.249071479s ago: executing program 41 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) 43m15.61921193s ago: executing program 42 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$unix(0x1, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) memfd_create(0x0, 0x2) 40m22.541681738s ago: executing program 43 (id=1795): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x60002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 39m16.628560755s ago: executing program 44 (id=1901): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) r2 = fanotify_init(0x10, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timerfd_create(0x0, 0x0) fanotify_mark(r2, 0x1, 0x4800102a, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x5, 0x18}}, 0x28) sendfile(r0, r1, &(0x7f0000000280)=0x3, 0x33f1) 38m46.034755062s ago: executing program 45 (id=1925): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 35m53.346252732s ago: executing program 46 (id=2115): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1c2, &(0x7f0000000f00)="$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") syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x801) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040009}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "db64c2aabe67442fa1645cf6a026d78ae369ec9b6d955a9b8a61208773f231f6", "aa207dcced41c42bf28d800463eb7cee", {"4d8086f824dfaa342fd4c638310ca5c3", "ca288ef9836f712a614933570c5f4489"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08000280010000", 0x23) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 34m40.067919192s ago: executing program 47 (id=2216): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x3, 0x800000000000}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x100000001, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 33m36.894264854s ago: executing program 48 (id=2265): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 33m34.785282576s ago: executing program 49 (id=2269): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b682dc7f81b5d47b2ed330b83bb4f6c8f976539a8bf0d1f9b88d534c672d329", 0x4db}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getegid() fchown(r0, 0x0, r5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0) 28m21.201129046s ago: executing program 50 (id=2663): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x41a}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getegid() fchown(r0, 0x0, r5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0) 26m12.100147636s ago: executing program 51 (id=2833): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, 0x0, 0x40080) close(r0) 22m30.122068387s ago: executing program 52 (id=3132): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"b00ff52c38f99c95ba29cea880cad65d", 0x0, r3, {0x75}, {0x5, 0x1a6f265a}, 0xffffffff, [0x3ff, 0x1, 0x3, 0x0, 0x2, 0xe46, 0x6, 0x9, 0x0, 0x80000001, 0x4, 0x101, 0x100000001, 0x32b1, 0x6, 0x100000001]}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 16m49.405755809s ago: executing program 7 (id=3714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000002400150000000000ff030000"], 0xc4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000010000000620a000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000380)="07ed77cdbded9a2415df067c0113e9aff009822a7fd0f5a2946a6159ea61b047fe8da04169c2b95445d82023c45f9a031f40345ec87e4342df50beb9086743e7bddd9480124935cecc64ec044d5824227d6f2bd82cac7eeaeae1d97c79ca85b7c4fe4bb09b248d7a24ed8de6a30cf7d9b6e4cf1aa3b2c6212309769c84a259f23b020b47f333e818a1e0f7a8a64deaa47984f77fcf78f1b4b12cc9ad625ca29a8ff85187b924ea43277887e398ca7423c1f3b29479810c9a164eaa9ebde3e67d745371113860a7cfa990c40bfecbb97fb889cde659b6f14126cb6404a7c80a59b97816313dcdfd6e3101298500", 0xed, 0xffffffffffffffff) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)) signalfd4(r3, &(0x7f0000000080), 0x8, 0x0) 16m48.575439565s ago: executing program 7 (id=3718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = getpgrp(0x0) ptrace$setsig(0x4203, r3, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(0xffffffffffffffff, 0x8, r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000140)) 16m47.394428319s ago: executing program 7 (id=3720): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f00050000000300"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000001000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000004e00000010000000000000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) write$P9_RRENAMEAT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x28, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7f9a2b55966c93735ea0a25b04702000014000000b703000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018590000090000000000000000000000180000000e00000000000000070000004dadf8ff0400000018150000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x4d, &(0x7f0000000380)=""/77, 0x41000, 0x16, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r5, r5, r5, r5, r5], 0x0, 0x10, 0xff}, 0x94) 16m46.104758935s ago: executing program 7 (id=3721): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x8000, 0x4, {0x0, 0x1}, 0x5, 0x800}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6, 0x3}}, 0x10) 16m41.631279064s ago: executing program 7 (id=3725): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xa8) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 16m40.81016394s ago: executing program 7 (id=3729): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 16m24.152333862s ago: executing program 53 (id=3729): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 15m49.204319587s ago: executing program 2 (id=3811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)}, 0xb00}], 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) socket$pppl2tp(0x18, 0x1, 0x1) 15m48.108874149s ago: executing program 2 (id=3814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 15m45.578022749s ago: executing program 2 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 15m44.656117087s ago: executing program 2 (id=3822): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 15m31.49509999s ago: executing program 2 (id=3834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 15m28.745854004s ago: executing program 2 (id=3839): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x40000004, 0x7) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) 15m13.460523748s ago: executing program 54 (id=3839): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x40000004, 0x7) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) 12m12.306018143s ago: executing program 6 (id=4111): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12m8.886017191s ago: executing program 6 (id=4114): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80), 0x0, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) symlink(&(0x7f0000000100)='./file2\x00', &(0x7f00000001c0)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = gettid() tkill(r4, 0x12) 12m6.716056215s ago: executing program 6 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000002140), &(0x7f0000002180)=0x4) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 12m5.330958962s ago: executing program 6 (id=4119): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 12m3.770024693s ago: executing program 6 (id=4122): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000140)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x5, 0x1, 0xfffb, 0xe06, 0x7f, "3f3c5e0000ff77dcfffffffff903ffee00", 0xb1, 0x3}) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x3f, 0xd1, 0xfa, 0x10, 0x458, 0x707f, 0x4f37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2b, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0xaa, 0xc5, 0x37}}]}}]}}, 0x0) 12m0.241581473s ago: executing program 6 (id=4129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 11m45.068498715s ago: executing program 55 (id=4129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) 9m13.339136794s ago: executing program 8 (id=4397): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) sendto$inet6(r6, &(0x7f0000001380)="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", 0x573, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c) 9m10.02778897s ago: executing program 8 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x2) 9m7.472914491s ago: executing program 8 (id=4411): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 9m4.092471768s ago: executing program 8 (id=4419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000002140), &(0x7f0000002180)=0x4) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 9m2.657315767s ago: executing program 8 (id=4421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000002140), &(0x7f0000002180)=0x4) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 9m0.373875272s ago: executing program 8 (id=4426): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 8m44.157909985s ago: executing program 56 (id=4426): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 3m16.217544801s ago: executing program 9 (id=5004): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 3m5.495724484s ago: executing program 9 (id=5018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3m3.048911893s ago: executing program 9 (id=5025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 3m2.845863417s ago: executing program 9 (id=5027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x3618, &(0x7f0000000180)={0x0, 0x0, 0x10000}, &(0x7f0000000380), 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000380)=0x1, 0x4) 3m1.525563523s ago: executing program 9 (id=5028): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) clock_gettime(0x4, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 3m0.17082206s ago: executing program 9 (id=5032): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x646102, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0xfffffffffffffe06, r0, {0x0, 0x800}}, './file1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r1 = socket(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921d2c19c4, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ocfs2\x00', 0x200084, &(0x7f00000002c0)='\xd0x^\a\x8e\xc1\xed7\x9c]\xee\x8e\x8b=\xfer\fy?\xc2\xfaC\x16\x13\x80K\x0e\x1bNf\xdd\xb6\x10\xe7\xeat\x9d8\x15J\xfa\xfa\x0f\xe4Y\xad3\xa58r\xde\xed\x8am\xe8\xfa\xd6H\xe7V\f\xc5\xec\xd8\xfcxNc\xd2\xa94@\x9dz\xbb\xa8\x80C\x94\xecf\a\xe3\xef\x83\x95\xf7\x9b\xba\x16\xd3?\xff\xd5\xd0\xb5T.\xa4\xf9\xa9\xa4\xfb{3s\xe6\xc5m\xe7\xe3\xe7\x15x\x1c\xdbq\xaa\xab5\xe6:\xc8.kx\xc2\xee8\x10\xae\xc1|\xb0`\x92\x17J\x03\xf1jSq\x87\x04%46@p\x04\xc8\x14\xb47j\xe8\x8f\xa9@\xf3\xbf\x92F\x1fV\xfa\xbb\xb9\xe6\x838wF/k\xaa\xd7v\x89y\x9f\x84\t\xea\x17\x967?\x19\xd0') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x2, 0xc9, 0x0, 0x40}, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffff8}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 2m44.988504973s ago: executing program 57 (id=5032): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x646102, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0xfffffffffffffe06, r0, {0x0, 0x800}}, './file1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r1 = socket(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921d2c19c4, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ocfs2\x00', 0x200084, &(0x7f00000002c0)='\xd0x^\a\x8e\xc1\xed7\x9c]\xee\x8e\x8b=\xfer\fy?\xc2\xfaC\x16\x13\x80K\x0e\x1bNf\xdd\xb6\x10\xe7\xeat\x9d8\x15J\xfa\xfa\x0f\xe4Y\xad3\xa58r\xde\xed\x8am\xe8\xfa\xd6H\xe7V\f\xc5\xec\xd8\xfcxNc\xd2\xa94@\x9dz\xbb\xa8\x80C\x94\xecf\a\xe3\xef\x83\x95\xf7\x9b\xba\x16\xd3?\xff\xd5\xd0\xb5T.\xa4\xf9\xa9\xa4\xfb{3s\xe6\xc5m\xe7\xe3\xe7\x15x\x1c\xdbq\xaa\xab5\xe6:\xc8.kx\xc2\xee8\x10\xae\xc1|\xb0`\x92\x17J\x03\xf1jSq\x87\x04%46@p\x04\xc8\x14\xb47j\xe8\x8f\xa9@\xf3\xbf\x92F\x1fV\xfa\xbb\xb9\xe6\x838wF/k\xaa\xd7v\x89y\x9f\x84\t\xea\x17\x967?\x19\xd0') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x2, 0xc9, 0x0, 0x40}, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffff8}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 29.040709788s ago: executing program 3 (id=5254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020880) 27.133321125s ago: executing program 3 (id=5260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19.734014322s ago: executing program 4 (id=5268): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) 18.008401297s ago: executing program 4 (id=5271): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000e080045ba002800650102020690780a010102ac1414bb4e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd9078005754108f1a25b7d98d14addf91d0d9c57083565f393836a111fe7986e3697200f9a9e529b229640de090dd47eb4b54f31fcd6aef3b1051a868da99f3554428c97b5008a20487d585bbb72a89838bc13d855ca050e77620ec0ef63485b571dff772d7a75aa7c15504972601d87524efa423e585cedf9ed4c6899404ec5c7009fcdf1a"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) readv(r0, &(0x7f0000000480), 0x0) 17.916744719s ago: executing program 3 (id=5272): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) 17.780219211s ago: executing program 5 (id=5273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0908fdffffff000000000100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8020008, 0x6, 0x34325842, 0x4, 0x6bf, 0xffffffff, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}}) close_range(r8, 0xffffffffffffffff, 0x0) 16.190977173s ago: executing program 3 (id=5276): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b01020301090250"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_rr_get_interval(0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 16.036081577s ago: executing program 5 (id=5277): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair(0xf, 0x5, 0x7, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b961cc1dbf6db57ce940be783c3"], 0xe0}], 0x1}, 0x0) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, 0x0, 0x0) 13.877344189s ago: executing program 4 (id=5280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 13.714165112s ago: executing program 1 (id=5281): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0908fdffffff000000000100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8020008, 0x6, 0x34325842, 0x4, 0x6bf, 0xffffffff, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}}) close_range(r8, 0xffffffffffffffff, 0x0) 12.78045718s ago: executing program 4 (id=5282): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) 10.920788787s ago: executing program 3 (id=5283): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r5, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) 9.599282573s ago: executing program 4 (id=5284): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x8c200) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075736574205a467de1b3483afc140f23314f84e729bc82c7c13533e680947548de57c49f5edeef70ae3800"/56], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) connect$nfc_raw(r4, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0xfffffffffffffe67) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200170000000000"], 0x18}}], 0x2, 0x4000000) 8.947465406s ago: executing program 1 (id=5285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = creat(0x0, 0x4b) close(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpgid(0x0) kcmp(r2, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 8.822013738s ago: executing program 3 (id=5286): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 8.694311381s ago: executing program 5 (id=5287): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) 7.483302134s ago: executing program 1 (id=5288): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x260d}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000001980)=""/229, 0xe5}], 0x9}, 0x4d9}, {{0x0, 0x0, 0x0}, 0x20c78}], 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x7, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x94, 0xe, "47d4daf30d60e76f1661e343"}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0xb, "010f8bf5ea79d5f3a5"}, {0x6, 0x5, "834c96"}, {0x9, 0xe, "fd9ee2c5024bc875d4e2a08a"}, {0x0, 0xb, "91aa36f27c90608902"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x3, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x100}, {@multicast1}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0xd, [0x101, 0x80000001, 0x7, 0x4]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@loopback, 0x5}, {@loopback, 0xf}, {@multicast2, 0x4}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x70, [@multicast1]}, @end]}}}}}) sendmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f00000005c0)=@ll={0x11, 0x1, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000001c0)="e95944e07d40a24596512108a44e1d23d383faa8eb7162", 0x17}, {&(0x7f0000000640)="cd4c7dbbf5b638d8049fcd606fa57748b4dfa4e3fb43488854b26490dcdc5d3e0351ed16c2667d8c4319c2818253cbea8cc0a1e1584d919e3e477974f6e47102ca8b707ca2c8bd0c3aa885935594253f65710bec0b383e92da82fa9f5a5fe872bfb2681736ab7e9ee5a658306edb1d92201540f90683a5713599fa16382af55403fca5f53de0a419c0b09e65236a0d8cb0b01bf19473d92e6220e83278ef634aaba008987d4945622b312b6af491c9ce971e37e2a24fac8eb465dbf4cbbff6527453cfeccbf04f3c27874706d4a333e9d4432347237df7ec4789c2a670f34166b4ee7dbdfbaacf02ab451b50fdfb29fe9008", 0xf2}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f00000002c0)="0a874f40e6d3807a827c86bc05c951b8165d7a55b9d6f7279aec5da19a5aac55b5787b2f427ba195b3c9fb9e40850c", 0x2f}, {&(0x7f0000000740)="4a430cad60b7e6a2a022be60e1a0e1e8e811df95448d5b25aeacb6ff636a2e2e7d44c041e46f0750c134ac29beb800f246ed8e364bc161b5f2f91af7193739b32af1bc86c8ecc84d99", 0x49}], 0x5, &(0x7f0000002e00)=[{0xc8, 0x10c, 0x0, "32e63991f48eed4d376c2fac8883cd0f50fc400b8e68854f6d91926490041ac25aa5d52668e4b75a9615d8e82ae455b63002d6f2eac47d0c6f94bba55c3e2a6daa0ee5bb50a594f326e90b12ebd34cd7fda0ffebe153d1c09bbe2ee5f1fa7facc59be8dd4e646a829eb2ddbc703460222660cfa6930411e7bfd8918da53a3c1ffdde23a1ab23d574fc0060564eee234277c306bf482af6651b70af86ca8d42eac964c993a1620e2d15b0f3daa5033e21fa4929d9b05ac1d6"}, {0x108, 0x117, 0x7f, "c632cd63549a1abcc5bdff29cda2990f6c13964b5e591dc4223129aa91b091a5764c50536dd4109fee20cc401cd93ef8c2b5869d5d8c4d89e101e4846652e2c08a57552bf55f4d10faad86dc23fe681f10c8bad4e03e45703449bbf55ac6e0152fe53d85a75cb2c0d05bc15493f0ba0f0fc10c478ea4eb475285bc1aeb7e87648f1537dba8c5f164a78283474f8dfed4a4ec9e19143867cab487b8ecaa690223f2f55219ec09a2415859b7553e7ec61199219c33a9f2f3f4ae113f00be30287b72b750a8e703ff8c532a01d695d42ef3caa25f11880f399c61bc03ffcaa119f92a4a1d3e2450a7df6f855a851704bf8b36b8e25a57"}], 0x1d0}, 0x40000) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) 7.348335886s ago: executing program 0 (id=5289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 7.229810409s ago: executing program 5 (id=5290): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 7.093991192s ago: executing program 0 (id=5291): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) 6.372394916s ago: executing program 1 (id=5292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 5.312036776s ago: executing program 1 (id=5293): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b01020301090250"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_rr_get_interval(0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 5.253861528s ago: executing program 0 (id=5294): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) 4.514161712s ago: executing program 0 (id=5295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket(0x2, 0x80805, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4097, 0x1001, 0x9) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 3.377261264s ago: executing program 0 (id=5296): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r5, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) 2.723800557s ago: executing program 5 (id=5297): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000001000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000004e00000010000000000000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) write$P9_RRENAMEAT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x28, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7f9a2b55966c93735ea0a25b04702000014", @ANYBLOB="0000000000000000b702000000000000850000008600000018590000090000000000000000000000180000000e00000000000000070000004dadf8ff0400000018150000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x4d, &(0x7f0000000380)=""/77, 0x41000, 0x16, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r5, r5, r5, r5, r5], 0x0, 0x10, 0xff}, 0x94) 217.969735ms ago: executing program 0 (id=5298): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 193.396166ms ago: executing program 5 (id=5299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = creat(0x0, 0x4b) close(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpgid(0x0) kcmp(r2, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 45.459889ms ago: executing program 1 (id=5300): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) 0s ago: executing program 4 (id=5301): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) kernel console output (not intermixed with test programs): T4333] usb 10-1: USB disconnect, device number 14 [ 3160.348479][ T4333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3160.392201][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3160.481506][T16027] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 3160.684035][T20926] usb 5-1: USB disconnect, device number 30 [ 3160.694051][T16027] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3160.722839][T16027] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3160.736632][T16027] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3160.754878][T17077] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 3160.756947][T16027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.922181][T16027] usb 2-1: config 0 descriptor?? [ 3160.954966][T16027] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3160.963493][T16027] dvb-usb: bulk message failed: -22 (3/0) [ 3163.187863][T16027] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3163.197146][T16027] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3163.204874][T16027] usb 2-1: media controller created [ 3163.211282][T16027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3163.227314][T16027] dvb-usb: bulk message failed: -22 (6/0) [ 3163.233158][T16027] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3163.243235][T16027] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input92 [ 3163.274805][T16027] dvb-usb: schedule remote query interval to 150 msecs. [ 3163.281831][T16027] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3163.484030][T16027] dvb-usb: bulk message failed: -22 (1/0) [ 3163.492546][T16027] dvb-usb: error while querying for an remote control event. [ 3163.870786][T17077] usb 6-1: device not accepting address 75, error -71 [ 3163.906321][T16027] usb 2-1: USB disconnect, device number 23 [ 3164.020189][T16027] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3164.761046][T20926] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3165.304674][T20926] usb 5-1: Using ep0 maxpacket: 32 [ 3165.312991][T20926] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 3165.335864][T20926] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3165.361519][T20926] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3165.377374][T20926] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3165.415516][T23702] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3165.424944][T20926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3165.473646][T23702] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3165.473646][T23702] program syz.5.4714 not setting count and/or reply_len properly [ 3165.924317][T20926] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3165.994599][T20926] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3166.003450][T20926] usb 5-1: Product: syz [ 3166.019466][T20926] usb 5-1: Manufacturer: syz [ 3166.024225][T20926] usb 5-1: SerialNumber: syz [ 3166.050248][T20926] usb 5-1: config 0 descriptor?? [ 3166.231099][T20926] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3168.748968][T20926] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3169.278959][T20926] usb 5-1: USB disconnect, device number 31 [ 3169.300206][T20926] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 3169.942512][T23729] input input93: cannot allocate more than FF_MAX_EFFECTS effects [ 3171.084546][T20847] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3171.315933][T20847] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3171.333330][T20847] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3171.401008][T20847] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3171.414486][T20847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.581743][T20847] usb 6-1: invalid MIDI out EP 0 [ 3172.000484][T20847] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 3172.094715][T20847] usb 6-1: USB disconnect, device number 77 [ 3172.103746][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3173.876940][T23758] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3173.884115][T23758] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3173.884115][T23758] program syz.4.4727 not setting count and/or reply_len properly [ 3174.228119][T23763] mkiss: ax0: crc mode is auto. [ 3174.264209][T23768] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4729'. [ 3177.259328][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4729'. [ 3177.343382][T23779] tmpfs: Unknown parameter 'grpquota' [ 3177.350639][T23779] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3177.350639][T23779] program syz.4.4732 not setting count and/or reply_len properly [ 3178.633945][T23787] overlayfs: failed to resolve './file1': -2 [ 3179.644683][T20926] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 3180.256427][T20926] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3180.278542][T20926] usb 10-1: config 0 has no interfaces? [ 3180.304632][T20926] usb 10-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 3180.315576][T20926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3180.326355][T20926] usb 10-1: Product: syz [ 3180.330822][T20926] usb 10-1: Manufacturer: syz [ 3180.336111][T20926] usb 10-1: SerialNumber: syz [ 3180.376630][T20926] usb 10-1: config 0 descriptor?? [ 3180.648886][T20926] usb 10-1: USB disconnect, device number 15 [ 3180.919810][T23805] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3180.919810][T23805] program syz.4.4740 not setting count and/or reply_len properly [ 3181.479032][T23809] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3181.503983][T23809] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3181.503983][T23809] program syz.1.4741 not setting count and/or reply_len properly [ 3184.226100][T23824] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3184.226100][T23824] program syz.4.4747 not setting count and/or reply_len properly [ 3184.366028][T16260] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 3184.557171][T16260] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3184.567548][T17077] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 3184.598892][T16260] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3184.613805][T16260] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3184.659651][T16260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3184.683635][T16260] usb 10-1: config 0 descriptor?? [ 3184.724049][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3184.784685][T17077] usb 6-1: Using ep0 maxpacket: 32 [ 3184.793669][T17077] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 3184.822968][T17077] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3184.834854][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3184.845898][T17077] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3184.857546][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3184.872950][T17077] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3184.887345][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3184.898426][T16260] usb 10-1: media controller created [ 3184.905773][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3184.914277][T17077] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3185.212430][T23838] rdma_rxe: rxe_register_device failed with error -23 [ 3185.220237][T23838] rdma_rxe: failed to add vxcan1 [ 3185.893172][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3185.899838][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3185.908050][T17077] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3185.948865][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input94 [ 3185.984242][T17077] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3185.994770][T17077] usb 6-1: Product: syz [ 3186.000004][T17077] usb 6-1: Manufacturer: syz [ 3186.004942][T17077] usb 6-1: SerialNumber: syz [ 3186.010062][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3186.022407][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3186.034560][T17077] usb 6-1: config 0 descriptor?? [ 3186.076941][T17077] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3186.087338][T17077] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3186.180122][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3186.217023][T16260] dvb-usb: error while querying for an remote control event. [ 3186.560851][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3186.748879][T16260] dvb-usb: error while querying for an remote control event. [ 3189.378098][T17077] usb 10-1: USB disconnect, device number 16 [ 3189.807057][T17077] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3189.830376][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4752'. [ 3190.874211][T17077] usb 6-1: USB disconnect, device number 78 [ 3190.901089][T17077] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 3190.969345][T23856] mkiss: ax0: crc mode is auto. [ 3191.894491][T17077] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 3192.086857][T17077] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3192.145553][T20926] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3192.195008][T17077] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3192.239690][T17077] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3192.303712][T17077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.805338][T17077] usb 6-1: config 0 descriptor?? [ 3192.821966][T20926] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3192.859510][T17077] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3192.877595][T20926] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3192.890041][T17077] dvb-usb: bulk message failed: -22 (3/0) [ 3192.924598][T20926] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3192.951085][T17077] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3193.096980][T20926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3193.234969][T17077] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3193.242176][T17077] usb 6-1: media controller created [ 3194.556120][T17077] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3194.576094][T20926] usb 2-1: invalid MIDI out EP 0 [ 3194.586387][T17077] dvb-usb: bulk message failed: -22 (6/0) [ 3194.602038][T17077] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3194.626907][T17077] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input95 [ 3194.643852][T20926] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 3194.656013][T17077] dvb-usb: schedule remote query interval to 150 msecs. [ 3194.664354][T17077] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3194.869835][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3194.875925][T17077] dvb-usb: error while querying for an remote control event. [ 3194.896013][T23885] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3194.949858][T23884] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3194.949858][T23884] program syz.0.4761 not setting count and/or reply_len properly [ 3195.072095][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3195.304571][T17077] dvb-usb: error while querying for an remote control event. [ 3195.413253][T15508] udevd[15508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3195.474569][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3195.485162][T17077] dvb-usb: error while querying for an remote control event. [ 3195.631893][T17077] usb 6-1: USB disconnect, device number 79 [ 3195.698398][T17077] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3196.940107][T23891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3197.635653][T23891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3197.643090][T23891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3197.680137][T23891] device bridge_slave_0 left promiscuous mode [ 3197.704749][T23891] bridge0: port 1(bridge_slave_0) entered disabled state [ 3198.324030][T23891] device bridge_slave_1 left promiscuous mode [ 3198.368722][T23891] bridge0: port 2(bridge_slave_1) entered disabled state [ 3198.401619][T23891] bond0: (slave bond_slave_0): Releasing backup interface [ 3199.466579][T23891] bond0: (slave bond_slave_1): Releasing backup interface [ 3199.753673][T23891] team0: Port device team_slave_0 removed [ 3199.832758][T23891] team0: Port device team_slave_1 removed [ 3199.857068][T23891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3199.868939][T23891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3199.888225][T23891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3199.906094][T23891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3200.238569][T20926] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 3200.720575][T20926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3200.736719][T20926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3201.094596][T20926] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3201.108172][T20926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3201.132965][T20926] usb 6-1: config 0 descriptor?? [ 3201.150128][T20926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3201.156949][T20926] dvb-usb: bulk message failed: -22 (3/0) [ 3201.204253][T20926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3201.224972][T20926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3201.232216][T20926] usb 6-1: media controller created [ 3201.261787][T20926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3201.436000][T20926] dvb-usb: bulk message failed: -22 (6/0) [ 3201.644881][T20926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3201.737990][T23922] rdma_rxe: already configured on vxcan1 [ 3203.016539][T20926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input97 [ 3203.447295][T20926] dvb-usb: schedule remote query interval to 150 msecs. [ 3203.459299][T20926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3203.501430][T20926] usb 6-1: USB disconnect, device number 80 [ 3203.571653][T20926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3203.834765][T23928] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4772'. [ 3204.929943][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.936506][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.107924][ T4376] usb 2-1: USB disconnect, device number 24 [ 3207.654625][T20926] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 3207.916769][T20926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3207.917370][T23962] overlayfs: failed to resolve './file0': -2 [ 3207.943336][T20926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3207.970225][T20926] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3207.994521][T20926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3208.023485][T20926] usb 5-1: config 0 descriptor?? [ 3208.042254][T20926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3208.056024][T20926] dvb-usb: bulk message failed: -22 (3/0) [ 3208.081646][T20926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3208.109817][T20926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3208.139643][T20926] usb 5-1: media controller created [ 3208.161485][T20926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3208.244510][ T4333] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 3208.361006][T20926] dvb-usb: bulk message failed: -22 (6/0) [ 3208.367018][T20926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3208.424828][T20926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input98 [ 3208.529478][T23969] rdma_rxe: rxe_register_device failed with error -23 [ 3208.537255][T23969] rdma_rxe: failed to add vxcan1 [ 3208.605039][ T4333] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3208.963131][ T4333] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3209.029858][ T4333] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3209.148119][T20926] dvb-usb: schedule remote query interval to 150 msecs. [ 3209.155293][T20926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3209.232617][ T4333] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.255536][ T4333] usb 10-1: config 0 descriptor?? [ 3209.268514][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3209.281138][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 3209.308831][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3209.314545][T20926] dvb-usb: bulk message failed: -22 (1/0) [ 3209.328367][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3209.337560][ T4333] usb 10-1: media controller created [ 3209.352904][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3209.375497][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 3209.375679][T20926] dvb-usb: error while querying for an remote control event. [ 3209.381445][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3209.421918][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input99 [ 3209.447868][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 3209.456747][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3209.614625][T11784] dvb-usb: bulk message failed: -22 (1/0) [ 3209.620697][T11784] dvb-usb: error while querying for an remote control event. [ 3209.734589][T20926] dvb-usb: bulk message failed: -22 (1/0) [ 3209.740452][T20926] dvb-usb: error while querying for an remote control event. [ 3209.784511][T11784] dvb-usb: bulk message failed: -22 (1/0) [ 3209.790514][T11784] dvb-usb: error while querying for an remote control event. [ 3209.927678][T20926] dvb-usb: bulk message failed: -22 (1/0) [ 3209.949451][T20926] dvb-usb: error while querying for an remote control event. [ 3210.939193][ T4376] dvb-usb: bulk message failed: -22 (1/0) [ 3210.987784][ T4376] dvb-usb: error while querying for an remote control event. [ 3211.474561][T11784] usb 5-1: USB disconnect, device number 32 [ 3211.591460][ T4376] dvb-usb: bulk message failed: -22 (1/0) [ 3211.597877][ T4376] dvb-usb: error while querying for an remote control event. [ 3211.859659][T11784] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3212.294322][ T4376] dvb-usb: bulk message failed: -22 (1/0) [ 3212.322748][ T4376] dvb-usb: error while querying for an remote control event. [ 3212.381227][ T4376] usb 10-1: USB disconnect, device number 17 [ 3213.509046][ T4376] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3220.531447][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4800'. [ 3220.581612][T24038] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3220.616843][T24038] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3220.616843][T24038] program syz.9.4801 not setting count and/or reply_len properly [ 3220.873122][T24047] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3221.251996][T24047] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3221.251996][T24047] program syz.5.4803 not setting count and/or reply_len properly [ 3223.264662][T17077] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 3223.608476][T17077] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3223.649853][T17077] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3223.713232][T17077] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3223.796315][T17077] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3223.874662][ T4333] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 3224.053819][T17077] usb 10-1: config 0 descriptor?? [ 3224.081240][T17077] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3224.110838][T17077] dvb-usb: bulk message failed: -22 (3/0) [ 3224.142621][T17077] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3224.162799][T17077] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3224.181807][T17077] usb 10-1: media controller created [ 3224.189512][T17077] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3224.226876][T17077] dvb-usb: bulk message failed: -22 (6/0) [ 3224.262393][ T4333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3224.269855][T17077] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3224.279866][ T4333] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3224.279949][ T4333] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3224.279975][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3224.281727][ T4333] usb 2-1: config 0 descriptor?? [ 3224.331285][T24073] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3224.361946][T24073] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3224.361946][T24073] program syz.0.4812 not setting count and/or reply_len properly [ 3224.410458][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3224.422609][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 3224.476396][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3224.489325][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3224.496955][ T4333] usb 2-1: media controller created [ 3224.515518][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3224.567675][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 3224.579104][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3224.648466][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input100 [ 3224.726616][T17077] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input101 [ 3224.930578][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 3224.939868][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3225.095265][T17077] dvb-usb: schedule remote query interval to 150 msecs. [ 3225.102589][T17077] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3225.104476][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3225.602582][T24074] rdma_rxe: rxe_register_device failed with error -23 [ 3225.609635][T24074] rdma_rxe: failed to add vxcan1 [ 3225.638350][T24079] rdma_rxe: rxe_register_device failed with error -23 [ 3225.645362][T24079] rdma_rxe: failed to add vxcan1 [ 3226.056169][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3226.062084][T16260] dvb-usb: error while querying for an remote control event. [ 3226.186129][ T4333] dvb-usb: error while querying for an remote control event. [ 3226.225377][T23000] dvb-usb: bulk message failed: -22 (1/0) [ 3226.231645][T23000] dvb-usb: error while querying for an remote control event. [ 3226.385192][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3226.391094][ T4333] dvb-usb: error while querying for an remote control event. [ 3226.439741][T23000] dvb-usb: bulk message failed: -22 (1/0) [ 3226.450394][T23000] dvb-usb: error while querying for an remote control event. [ 3226.604733][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3226.630215][ T4333] dvb-usb: error while querying for an remote control event. [ 3226.854704][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3226.855003][T23000] dvb-usb: bulk message failed: -22 (1/0) [ 3226.868628][ T4333] dvb-usb: error while querying for an remote control event. [ 3227.128137][ T4333] usb 2-1: USB disconnect, device number 25 [ 3227.259908][ T4333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3227.274654][T23000] dvb-usb: error while querying for an remote control event. [ 3227.315580][T16260] usb 10-1: USB disconnect, device number 18 [ 3227.356994][T16260] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3229.752591][T24110] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3230.640788][T24118] loop0: detected capacity change from 0 to 512 [ 3230.667750][T24118] EXT4-fs: Ignoring removed mblk_io_submit option [ 3231.494485][T24118] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 3231.542274][T24121] fuse: Bad value for 'fd' [ 3231.974870][T24118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 3231.982891][T24118] System zones: 1-12 [ 3232.058383][T24118] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.4821: corrupted in-inode xattr [ 3232.071185][T24118] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4821: couldn't read orphan inode 15 (err -117) [ 3232.087369][T24118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3232.203497][T22733] EXT4-fs (loop0): unmounting filesystem. [ 3232.464729][ T4333] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 3232.665865][T16260] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 3232.701285][T24139] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3232.701285][T24139] program syz.1.4827 not setting count and/or reply_len properly [ 3232.734148][ T4333] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3232.748730][ T4333] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3232.759400][ T4333] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3232.769027][ T4333] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3232.794794][ T4333] usb 10-1: config 0 descriptor?? [ 3232.818021][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3232.825404][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 3232.852465][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3232.864516][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3232.873787][ T4333] usb 10-1: media controller created [ 3232.888119][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3232.919860][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 3232.926087][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3232.944479][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input103 [ 3232.973188][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 3232.973887][T16260] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3232.980425][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3233.161178][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3233.167896][ T4333] dvb-usb: error while querying for an remote control event. [ 3233.253628][T16260] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3233.268680][T16260] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3233.286314][T16260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.305189][T16260] usb 6-1: config 0 descriptor?? [ 3233.316476][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3233.323158][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3233.408931][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3233.415425][ T4333] dvb-usb: error while querying for an remote control event. [ 3233.585997][T24141] rdma_rxe: rxe_register_device failed with error -23 [ 3233.593591][T24141] rdma_rxe: failed to add vxcan1 [ 3233.877583][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3233.934877][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3234.327853][T16260] usb 6-1: media controller created [ 3234.334949][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3234.340864][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3234.358579][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3234.366201][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3234.406657][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 3234.421033][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3234.428303][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3234.522119][ T4333] dvb-usb: error while querying for an remote control event. [ 3234.587838][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3234.686816][T24144] rdma_rxe: already configured on vxcan1 [ 3234.889977][T16260] dvb-usb: error while querying for an remote control event. [ 3235.262554][T19025] dvb-usb: bulk message failed: -22 (1/0) [ 3235.284281][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3235.287384][T19025] dvb-usb: error while querying for an remote control event. [ 3235.321402][T16260] dvb-usb: error while querying for an remote control event. [ 3235.443454][T16260] usb 10-1: USB disconnect, device number 19 [ 3235.594585][T15919] dvb-usb: bulk message failed: -22 (1/0) [ 3235.695839][T15919] dvb-usb: error while querying for an remote control event. [ 3237.068753][T16260] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3237.131668][T15919] dvb-usb: bulk message failed: -22 (1/0) [ 3237.144670][T15919] dvb-usb: error while querying for an remote control event. [ 3237.188024][T23000] usb 6-1: USB disconnect, device number 81 [ 3237.256331][T23000] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3237.292657][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4831'. [ 3238.572891][T24168] fuse: Bad value for 'fd' [ 3239.649158][T24173] loop1: detected capacity change from 0 to 512 [ 3239.675899][T24173] EXT4-fs: Ignoring removed mblk_io_submit option [ 3240.412745][T24173] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 3240.452225][T24173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 3240.460311][T24173] System zones: 1-12 [ 3240.481191][T24173] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.4837: corrupted in-inode xattr [ 3240.495148][T24173] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4837: couldn't read orphan inode 15 (err -117) [ 3240.507448][T24173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3240.618076][T20510] EXT4-fs (loop1): unmounting filesystem. [ 3241.370163][T24182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3241.383814][T24182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3241.392016][T24182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3244.713622][T24198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3244.727622][T24198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3244.736783][T24198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3245.699398][T24201] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3245.699398][T24201] program syz.5.4843 not setting count and/or reply_len properly [ 3247.455385][T24212] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3248.965907][T24226] fuse: Bad value for 'fd' [ 3249.702432][T24231] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3249.702432][T24231] program syz.9.4851 not setting count and/or reply_len properly [ 3250.388601][T24238] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3250.513452][T24238] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3250.513452][T24238] program syz.0.4852 not setting count and/or reply_len properly [ 3251.127113][T24248] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4854'. [ 3251.721250][T24242] input input110: cannot allocate more than FF_MAX_EFFECTS effects [ 3251.723428][T24255] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3252.013064][T24255] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3252.013064][T24255] program syz.1.4855 not setting count and/or reply_len properly [ 3252.249483][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 3252.344483][ T9169] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 3252.365651][T24252] netlink: 'syz.4.4854': attribute type 21 has an invalid length. [ 3252.404574][T24252] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4854'. [ 3253.432596][T24252] netlink: 'syz.4.4854': attribute type 4 has an invalid length. [ 3253.444631][T24252] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4854'. [ 3253.504791][ T9169] usb 10-1: Using ep0 maxpacket: 16 [ 3253.516554][ T9169] usb 10-1: config 0 has an invalid interface number: 222 but max is 0 [ 3253.559722][ T9169] usb 10-1: config 0 has no interface number 0 [ 3253.590298][ T9169] usb 10-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 3253.629143][ T9169] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.657577][ T9169] usb 10-1: Product: syz [ 3253.670069][ T9169] usb 10-1: Manufacturer: syz [ 3253.683210][ T9169] usb 10-1: SerialNumber: syz [ 3253.708733][ T9169] usb 10-1: config 0 descriptor?? [ 3253.930077][ T9169] usb 10-1: USB disconnect, device number 20 [ 3254.065666][T24260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3254.094951][T24260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3254.119032][T24260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3255.393161][T24276] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3255.393161][T24276] program syz.4.4863 not setting count and/or reply_len properly [ 3255.807541][T24278] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4862'. [ 3256.118890][T24283] binder: BINDER_SET_CONTEXT_MGR already set [ 3256.125269][T24283] binder: 24279:24283 ioctl 4018620d 200000000040 returned -16 [ 3257.051268][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4862'. [ 3257.243026][T24278] netlink: 'syz.9.4862': attribute type 21 has an invalid length. [ 3257.295664][T24278] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4862'. [ 3257.370582][T24278] netlink: 'syz.9.4862': attribute type 4 has an invalid length. [ 3257.401423][T24278] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4862'. [ 3257.464065][T24296] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4867'. [ 3257.670295][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4867'. [ 3257.897767][T24296] netlink: 'syz.1.4867': attribute type 21 has an invalid length. [ 3257.940210][T24296] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4867'. [ 3257.958961][T11784] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 3258.202406][T11784] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3258.499628][T24296] netlink: 'syz.1.4867': attribute type 4 has an invalid length. [ 3258.508129][T11784] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3258.517786][T11784] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3258.527462][T24296] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4867'. [ 3258.536769][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.565210][T11784] usb 6-1: config 0 descriptor?? [ 3258.572585][T11784] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3258.584931][T11784] dvb-usb: bulk message failed: -22 (3/0) [ 3258.612932][T11784] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3258.659545][T11784] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3258.724236][T11784] usb 6-1: media controller created [ 3258.747344][T11784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3258.948272][T11784] dvb-usb: bulk message failed: -22 (6/0) [ 3259.042780][T24310] rdma_rxe: already configured on vxcan1 [ 3259.707448][T11784] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3259.730857][T11784] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input112 [ 3259.780999][T11784] dvb-usb: schedule remote query interval to 150 msecs. [ 3259.789618][T11784] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3259.944479][T11784] dvb-usb: bulk message failed: -22 (1/0) [ 3259.971120][T11784] dvb-usb: error while querying for an remote control event. [ 3260.144722][T11784] dvb-usb: bulk message failed: -22 (1/0) [ 3260.177604][T11784] dvb-usb: error while querying for an remote control event. [ 3260.354526][T11784] dvb-usb: bulk message failed: -22 (1/0) [ 3260.360378][T11784] dvb-usb: error while querying for an remote control event. [ 3260.808634][T23000] usb 6-1: USB disconnect, device number 82 [ 3260.959213][T23000] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3261.924523][T23000] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3262.554488][T23000] usb 6-1: Using ep0 maxpacket: 16 [ 3262.562594][T23000] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 3262.689077][T23000] usb 6-1: config 0 has no interface number 0 [ 3262.709547][T23000] usb 6-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 3262.746675][T23000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.779712][T23000] usb 6-1: Product: syz [ 3262.784130][T23000] usb 6-1: Manufacturer: syz [ 3262.799459][T23000] usb 6-1: SerialNumber: syz [ 3262.829387][T23000] usb 6-1: config 0 descriptor?? [ 3262.838105][T24329] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4874'. [ 3262.941819][T24331] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3263.002580][T24331] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3263.002580][T24331] program syz.9.4876 not setting count and/or reply_len properly [ 3263.432691][T23000] usb 6-1: USB disconnect, device number 83 [ 3263.593441][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4874'. [ 3264.463263][T24329] netlink: 'syz.4.4874': attribute type 21 has an invalid length. [ 3264.484501][T24329] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4874'. [ 3264.523859][T24329] netlink: 'syz.4.4874': attribute type 4 has an invalid length. [ 3264.539175][T24329] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4874'. [ 3264.735073][T16260] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 3264.927130][T16260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3264.951220][T16260] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3264.979916][T16260] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3265.025183][T16260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3265.062231][T16260] usb 2-1: config 0 descriptor?? [ 3265.085616][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3265.103428][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3265.141128][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3265.675067][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3265.682219][T16260] usb 2-1: media controller created [ 3265.699160][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3265.824937][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3266.445501][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.456976][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.511176][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3266.639677][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input114 [ 3266.671150][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3266.678396][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3266.834629][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3266.840495][T16260] dvb-usb: error while querying for an remote control event. [ 3267.068158][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3267.107254][T16260] dvb-usb: error while querying for an remote control event. [ 3267.664816][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3267.744239][T16260] dvb-usb: error while querying for an remote control event. [ 3267.752295][T16260] usb 2-1: USB disconnect, device number 26 [ 3267.816429][T16260] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3269.328641][T24376] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3269.664610][T24370] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3269.664610][T24370] program syz.5.4886 not setting count and/or reply_len properly [ 3271.874848][T16260] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3271.954520][T17077] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3272.141863][T16260] usb 6-1: Using ep0 maxpacket: 16 [ 3272.152848][T16260] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 3272.382496][T17077] usb 5-1: Using ep0 maxpacket: 32 [ 3272.510767][T16260] usb 6-1: config 0 has no interface number 0 [ 3272.519171][T17077] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 3272.530423][T17077] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3272.544644][T16260] usb 6-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 3272.560587][T17077] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3272.571931][T16260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.583739][T17077] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3272.598616][T16260] usb 6-1: Product: syz [ 3272.610056][T16260] usb 6-1: Manufacturer: syz [ 3272.616490][T16260] usb 6-1: SerialNumber: syz [ 3272.623091][T17077] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3272.647867][T16260] usb 6-1: config 0 descriptor?? [ 3272.673825][T17077] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3272.741276][T17077] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3272.750074][T17077] usb 5-1: Product: syz [ 3272.763554][T17077] usb 5-1: Manufacturer: syz [ 3272.769037][T17077] usb 5-1: SerialNumber: syz [ 3272.801982][T17077] usb 5-1: config 0 descriptor?? [ 3272.817384][T17077] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3272.830096][T17077] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3273.395859][T16260] usb 6-1: USB disconnect, device number 84 [ 3275.029810][ T4376] usb 5-1: USB disconnect, device number 33 [ 3275.103600][ T4376] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 3276.694790][T24422] binder: BINDER_SET_CONTEXT_MGR already set [ 3276.700964][T24422] binder: 24418:24422 ioctl 4018620d 200000000040 returned -16 [ 3277.188201][T24427] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4899'. [ 3282.558347][T24460] input input115: cannot allocate more than FF_MAX_EFFECTS effects [ 3285.436005][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3286.664853][ T4376] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 3287.207314][ T4376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3287.251648][ T4376] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3287.279614][ T4376] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3287.826076][ T4376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3287.895257][ T4376] usb 5-1: config 0 descriptor?? [ 3287.985655][ T4376] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3287.992293][ T4376] dvb-usb: bulk message failed: -22 (3/0) [ 3288.068949][T24494] overlayfs: missing 'lowerdir' [ 3288.078648][ T4376] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3288.128899][ T4376] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3288.406685][T24496] rdma_rxe: rxe_register_device failed with error -23 [ 3288.414978][T24496] rdma_rxe: failed to add vxcan1 [ 3289.097281][ T4376] usb 5-1: media controller created [ 3289.124457][ T4376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3289.320578][ T4376] dvb-usb: bulk message failed: -22 (6/0) [ 3289.334186][ T4376] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3289.786540][ T4376] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input117 [ 3289.893891][ T4376] dvb-usb: schedule remote query interval to 150 msecs. [ 3289.966918][ T4376] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3290.276324][ T4376] usb 5-1: USB disconnect, device number 34 [ 3291.665727][ T4376] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3292.024576][T15393] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 3292.226884][T15393] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3292.256915][T15393] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3292.294695][T15393] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3292.303833][T15393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.386637][T15393] usb 6-1: config 0 descriptor?? [ 3292.497910][T24521] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3292.550325][T24521] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3292.550325][T24521] program syz.1.4925 not setting count and/or reply_len properly [ 3292.958169][T15393] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3293.280076][T24525] rdma_rxe: already configured on vxcan1 [ 3295.676045][T15393] dvb-usb: bulk message failed: -22 (3/0) [ 3295.713093][T15393] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3296.380171][T15393] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3296.387542][T15393] usb 6-1: media controller created [ 3296.421168][T15393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3296.456103][T24523] binder_alloc: 24522: binder_alloc_buf, no vma [ 3296.510855][T15393] dvb-usb: bulk message failed: -22 (6/0) [ 3296.562362][T15393] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3296.579075][T24535] overlayfs: missing 'lowerdir' [ 3296.628282][T15393] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input118 [ 3297.187391][T15393] dvb-usb: schedule remote query interval to 150 msecs. [ 3297.197826][T15393] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3297.304789][T15393] usb 6-1: USB disconnect, device number 85 [ 3297.510456][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4932'. [ 3297.628048][T24547] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3297.649997][T24547] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3297.649997][T24547] program syz.5.4933 not setting count and/or reply_len properly [ 3298.065383][T15393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3301.919735][T24578] overlayfs: missing 'lowerdir' [ 3303.488892][T24592] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3303.571154][T24592] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3303.571154][T24592] program syz.4.4946 not setting count and/or reply_len properly [ 3306.275174][T24594] binder_alloc: 24593: binder_alloc_buf, no vma [ 3306.511824][T24613] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3306.528893][T24613] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3306.528893][T24613] program syz.0.4953 not setting count and/or reply_len properly [ 3307.033890][T24617] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3307.059867][T24617] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3307.059867][T24617] program syz.4.4954 not setting count and/or reply_len properly [ 3308.161891][T24624] overlayfs: missing 'lowerdir' [ 3308.864156][T24628] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3309.736846][T24638] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3310.853038][T24646] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3310.901335][T24646] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3310.901335][T24646] program syz.9.4964 not setting count and/or reply_len properly [ 3311.363353][T24638] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3311.363353][T24638] program syz.0.4961 not setting count and/or reply_len properly [ 3312.826407][T24666] binder: BINDER_SET_CONTEXT_MGR already set [ 3312.832580][T24666] binder: 24661:24666 ioctl 4018620d 200000000040 returned -16 [ 3313.207440][T24664] overlayfs: missing 'lowerdir' [ 3313.594200][T24669] binder_alloc: 24667: binder_alloc_buf, no vma [ 3317.064599][ T4333] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 3317.616710][ T4333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3317.814561][ T4333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3317.874971][T24703] binder_alloc: 24701: binder_alloc_buf, no vma [ 3318.177518][ T4333] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3318.186725][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.213564][ T4333] usb 5-1: config 0 descriptor?? [ 3318.246665][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3318.300875][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 3318.936874][T24710] rdma_rxe: rxe_register_device failed with error -23 [ 3318.944408][T24710] rdma_rxe: failed to add vxcan1 [ 3319.874771][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3319.946504][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3319.990308][ T4333] usb 5-1: media controller created [ 3320.030189][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3320.195214][T24714] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3320.242677][T24714] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3320.242677][T24714] program syz.0.4982 not setting count and/or reply_len properly [ 3320.648047][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 3320.653892][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3320.695961][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input120 [ 3321.356724][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 3321.363762][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3321.408809][ T4333] usb 5-1: USB disconnect, device number 35 [ 3322.038262][ T4333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3322.042497][T24724] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3322.090083][T24724] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3322.090083][T24724] program syz.4.4985 not setting count and/or reply_len properly [ 3322.828496][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'. [ 3324.790167][T24748] binder: BINDER_SET_CONTEXT_MGR already set [ 3324.796341][T24748] binder: 24744:24748 ioctl 4018620d 200000000040 returned -16 [ 3326.457542][T24758] binder: BINDER_SET_CONTEXT_MGR already set [ 3326.463699][T24758] binder: 24753:24758 ioctl 4018620d 200000000040 returned -16 [ 3326.826938][T24757] loop1: detected capacity change from 0 to 1024 [ 3327.127508][T24440] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3327.796769][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.803078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.140202][T24767] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3328.685021][T24763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3328.801028][T24765] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3328.801028][T24765] program syz.5.4997 not setting count and/or reply_len properly [ 3329.888225][ T4376] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 3330.106262][ T4376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3330.126827][ T4376] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3330.153164][ T4376] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3330.192442][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3330.252977][ T4376] usb 2-1: config 0 descriptor?? [ 3330.304271][ T4376] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3330.318306][ T4376] dvb-usb: bulk message failed: -22 (3/0) [ 3330.347000][ T4376] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3330.358674][ T4376] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3330.395846][ T4376] usb 2-1: media controller created [ 3330.438616][ T4376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3330.438702][T20926] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 3330.451602][ T4376] dvb-usb: bulk message failed: -22 (6/0) [ 3330.473927][ T4376] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3330.516763][ T4376] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input121 [ 3330.558683][ T4376] dvb-usb: schedule remote query interval to 150 msecs. [ 3330.566212][ T4376] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3330.724811][T23731] dvb-usb: bulk message failed: -22 (1/0) [ 3330.744721][T23731] dvb-usb: error while querying for an remote control event. [ 3330.894675][T20926] usb 6-1: Using ep0 maxpacket: 32 [ 3330.904485][T23731] dvb-usb: bulk message failed: -22 (1/0) [ 3330.908349][T20926] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 3330.910288][T23731] dvb-usb: error while querying for an remote control event. [ 3331.004750][T20926] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3331.054500][T20926] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3331.072592][T20926] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3331.144517][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3331.204444][T20926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3331.225926][ T4333] dvb-usb: error while querying for an remote control event. [ 3331.544722][T24784] rdma_rxe: rxe_register_device failed with error -23 [ 3331.551581][T24784] rdma_rxe: failed to add vxcan1 [ 3331.642019][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3331.652809][T20926] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3331.661409][ T4333] dvb-usb: error while querying for an remote control event. [ 3331.666667][T20926] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3331.679489][T20926] usb 6-1: Product: syz [ 3331.683989][T20926] usb 6-1: Manufacturer: syz [ 3331.689121][T20926] usb 6-1: SerialNumber: syz [ 3331.705298][T20926] usb 6-1: config 0 descriptor?? [ 3331.716123][T20926] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3331.736893][T20926] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3331.840357][T24783] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3331.847597][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3331.860161][ T4333] dvb-usb: error while querying for an remote control event. [ 3332.084601][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3332.091192][ T4333] dvb-usb: error while querying for an remote control event. [ 3332.306169][T24797] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 3333.363687][T20847] dvb-usb: bulk message failed: -22 (1/0) [ 3333.369947][T23731] usb 6-1: USB disconnect, device number 86 [ 3333.369958][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 3333.382163][T20847] dvb-usb: error while querying for an remote control event. [ 3333.434170][T20926] usb 2-1: USB disconnect, device number 27 [ 3333.674702][T24799] overlayfs: failed to resolve './file0': -2 [ 3333.864880][T23731] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 3334.176226][T12014] dvb-usb: bulk message failed: -22 (1/0) [ 3334.182480][T12014] dvb-usb: error while querying for an remote control event. [ 3335.934642][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3335.948912][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3335.957412][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3336.414829][T20926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3336.941364][T24817] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3336.992714][T24817] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3336.992714][T24817] program syz.5.5010 not setting count and/or reply_len properly [ 3337.164447][T20926] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 3337.189276][T24825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3337.203650][T24825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3337.211822][T24825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3338.336491][T20926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3338.347040][T20926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3338.361549][T20926] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3338.371299][T20926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3338.388331][T20926] usb 2-1: config 0 descriptor?? [ 3338.414123][T24828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5013'. [ 3338.435192][T20926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3338.454597][T20926] dvb-usb: bulk message failed: -22 (3/0) [ 3338.472826][T20926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3338.502362][T20926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3338.518622][T20926] usb 2-1: media controller created [ 3338.528271][T20926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3338.550435][T20926] dvb-usb: bulk message failed: -22 (6/0) [ 3338.581197][T20926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3338.624098][T20926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input122 [ 3338.737899][T20926] dvb-usb: schedule remote query interval to 150 msecs. [ 3338.745509][T20926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3338.932401][T24833] rdma_rxe: rxe_register_device failed with error -23 [ 3338.940107][T24833] rdma_rxe: failed to add vxcan1 [ 3339.714503][T20926] dvb-usb: bulk message failed: -22 (1/0) [ 3339.876751][T20926] dvb-usb: error while querying for an remote control event. [ 3340.057938][T24835] binder: BINDER_SET_CONTEXT_MGR already set [ 3340.064370][T24835] binder: 24829:24835 ioctl 4018620d 200000000040 returned -16 [ 3340.776497][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3340.782311][T17077] dvb-usb: error while querying for an remote control event. [ 3340.851140][T15393] usb 2-1: USB disconnect, device number 28 [ 3340.980521][T15393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3341.641380][T24834] binder_alloc: 24832: binder_alloc_buf, no vma [ 3342.974232][T24853] loop5: detected capacity change from 0 to 1024 [ 3344.204522][T20926] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3344.272547][T24869] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3344.290631][T24869] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3344.290631][T24869] program syz.5.5024 not setting count and/or reply_len properly [ 3344.355229][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5025'. [ 3344.404462][T20926] usb 5-1: Using ep0 maxpacket: 8 [ 3344.415405][T20926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3344.490031][T20926] usb 5-1: config 0 has no interfaces? [ 3344.516586][T20926] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3346.065269][T20926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.106182][T20926] usb 5-1: Product: syz [ 3346.131544][T20926] usb 5-1: Manufacturer: syz [ 3346.166925][T20926] usb 5-1: SerialNumber: syz [ 3346.243655][T20926] usb 5-1: config 0 descriptor?? [ 3346.880562][T20926] usb 5-1: can't set config #0, error -71 [ 3346.911032][T20926] usb 5-1: USB disconnect, device number 36 [ 3349.970363][T24909] loop0: detected capacity change from 0 to 1024 [ 3352.242307][T24922] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3352.302317][T24922] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3352.302317][T24922] program syz.5.5039 not setting count and/or reply_len properly [ 3353.225089][T24926] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3353.262822][T24926] sg_write: data in/out 91/126 bytes for SCSI command 0x7-- guessing data in; [ 3353.262822][T24926] program syz.5.5040 not setting count and/or reply_len properly [ 3353.877177][T24929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3353.890581][T24929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3353.899542][T24929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3354.998836][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3355.014702][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3355.023775][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3355.031840][T24936] infiniband syz2: set active [ 3355.807492][T20926] vxcan1 speed is unknown, defaulting to 1000 [ 3364.320422][ T4397] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3364.377474][T24992] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3364.437593][T24992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3364.536516][ T4397] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3364.551233][T24995] loop4: detected capacity change from 0 to 1024 [ 3364.786551][ T4397] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3365.670090][T25000] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3365.670090][T25000] program syz.0.5060 not setting count and/or reply_len properly [ 3368.238967][T25009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3368.284558][T25009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3368.326918][T25009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3368.354535][T25009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3368.524583][T25009] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3368.531932][T25009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3368.717078][ T4397] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3369.094677][ T4333] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 3369.289177][ T4333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3369.309144][T25004] vxcan1 speed is unknown, defaulting to 1000 [ 3369.316046][ T4333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3369.337776][ T4333] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3369.375346][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.438729][ T4333] usb 5-1: config 0 descriptor?? [ 3369.501305][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3369.530991][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 3369.600223][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3369.611663][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3369.622244][ T4333] usb 5-1: media controller created [ 3369.637623][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3369.704389][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 3369.712693][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3369.738108][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input124 [ 3369.760782][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 3369.768794][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3369.924718][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3369.930578][ T4333] dvb-usb: error while querying for an remote control event. [ 3370.315508][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3370.321841][ T4333] dvb-usb: error while querying for an remote control event. [ 3370.526304][T25026] rdma_rxe: rxe_register_device failed with error -23 [ 3370.535048][T25026] rdma_rxe: failed to add vxcan1 [ 3370.597152][T25009] Bluetooth: hci0: command 0x0409 tx timeout [ 3371.757696][T23731] dvb-usb: bulk message failed: -22 (1/0) [ 3371.763744][T23731] dvb-usb: error while querying for an remote control event. [ 3371.952695][T15393] dvb-usb: bulk message failed: -22 (1/0) [ 3371.961492][T15393] dvb-usb: error while querying for an remote control event. [ 3372.154573][T19025] dvb-usb: bulk message failed: -22 (1/0) [ 3372.160932][T19025] dvb-usb: error while querying for an remote control event. [ 3372.396394][T19025] dvb-usb: bulk message failed: -22 (1/0) [ 3372.412794][T19025] dvb-usb: error while querying for an remote control event. [ 3372.614691][T19025] dvb-usb: bulk message failed: -22 (1/0) [ 3372.621257][T19025] dvb-usb: error while querying for an remote control event. [ 3373.061102][T25009] Bluetooth: hci0: command 0x041b tx timeout [ 3373.237173][T15919] usb 5-1: USB disconnect, device number 37 [ 3373.925302][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 3373.931262][ T4333] dvb-usb: error while querying for an remote control event. [ 3374.073828][T15919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3374.135801][T25039] overlayfs: missing 'lowerdir' [ 3374.161906][T25041] loop5: detected capacity change from 0 to 1024 [ 3374.257961][T25042] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3375.180918][T25009] Bluetooth: hci0: command 0x040f tx timeout [ 3375.862096][T25054] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3376.153809][T25054] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3376.153809][T25054] program syz.5.5073 not setting count and/or reply_len properly [ 3376.503346][T25004] chnl_net:caif_netlink_parms(): no params data found [ 3377.021874][T25070] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5076'. [ 3377.064694][T15393] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 3377.656500][T25009] Bluetooth: hci0: command 0x0419 tx timeout [ 3377.804541][T15393] usb 2-1: Using ep0 maxpacket: 8 [ 3377.814491][T15393] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3377.824823][T15393] usb 2-1: config 0 has no interfaces? [ 3377.832762][T15393] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3377.842011][T15393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.851554][T15393] usb 2-1: Product: syz [ 3377.856684][T15393] usb 2-1: Manufacturer: syz [ 3377.861330][T15393] usb 2-1: SerialNumber: syz [ 3377.868943][T15393] usb 2-1: config 0 descriptor?? [ 3378.025621][T25004] bridge0: port 1(bridge_slave_0) entered blocking state [ 3378.034648][T25004] bridge0: port 1(bridge_slave_0) entered disabled state [ 3378.043009][T25004] device bridge_slave_0 entered promiscuous mode [ 3378.052273][T25004] bridge0: port 2(bridge_slave_1) entered blocking state [ 3378.394301][T25004] bridge0: port 2(bridge_slave_1) entered disabled state [ 3378.447736][T25004] device bridge_slave_1 entered promiscuous mode [ 3379.164217][T25083] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5079'. [ 3380.241845][T25004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3380.357241][T25091] overlayfs: missing 'lowerdir' [ 3380.414101][T12014] usb 2-1: USB disconnect, device number 29 [ 3380.416438][T25004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3382.858702][T25004] team0: Port device team_slave_0 added [ 3382.915636][T25004] team0: Port device team_slave_1 added [ 3382.995202][T16260] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 3383.336794][T16260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3383.494804][T25109] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3383.497384][T25108] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3383.497384][T25108] program syz.0.5087 not setting count and/or reply_len properly [ 3383.560425][T16260] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3383.591868][T16260] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3383.625524][T16260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.665605][T16260] usb 5-1: config 0 descriptor?? [ 3383.699928][ T4397] device hsr_slave_0 left promiscuous mode [ 3383.718428][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3383.726528][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3383.746454][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3383.768622][ T4397] device hsr_slave_1 left promiscuous mode [ 3383.776087][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3383.783471][T16260] usb 5-1: media controller created [ 3383.792101][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3383.805173][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3383.816855][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3383.828968][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3383.841383][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input125 [ 3383.853126][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3383.862451][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3383.871984][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3383.882699][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3383.890499][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3384.024666][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3384.030504][T16260] dvb-usb: error while querying for an remote control event. [ 3384.091790][ T4397] device veth1_macvtap left promiscuous mode [ 3384.108353][ T4397] device veth0_macvtap left promiscuous mode [ 3384.118996][ T4397] device veth1_vlan left promiscuous mode [ 3384.128369][ T4397] device veth0_vlan left promiscuous mode [ 3384.328428][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3384.334283][T16260] dvb-usb: error while querying for an remote control event. [ 3384.372898][T25120] siw: device registration error -23 [ 3384.381675][T25120] smc: removing ib device syz2 [ 3385.681834][T25124] rdma_rxe: rxe_register_device failed with error -23 [ 3385.688830][T25124] rdma_rxe: failed to add vxcan1 [ 3386.661003][T15919] dvb-usb: bulk message failed: -22 (1/0) [ 3386.685699][T15919] dvb-usb: error while querying for an remote control event. [ 3387.613493][T13426] dvb-usb: bulk message failed: -22 (1/0) [ 3387.619557][T13426] dvb-usb: error while querying for an remote control event. [ 3387.701722][T12014] usb 5-1: USB disconnect, device number 38 [ 3387.770004][T12014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3387.792731][T25130] overlayfs: missing 'lowerdir' [ 3389.237515][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.243950][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.534557][T16260] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 3389.766383][T16260] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3389.776834][T16260] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3389.786352][T16260] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3389.796778][T16260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3389.814266][T16260] usb 6-1: config 0 descriptor?? [ 3389.843723][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3389.859320][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3389.894987][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3389.911474][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3389.923836][T16260] usb 6-1: media controller created [ 3389.936570][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3389.956710][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 3389.989555][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3389.998246][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3390.029956][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input126 [ 3390.061029][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3390.164960][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3390.191306][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 3390.356258][T25147] rdma_rxe: rxe_register_device failed with error -23 [ 3390.364033][T25147] rdma_rxe: failed to add vxcan1 [ 3391.089619][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3391.139194][T16260] dvb-usb: error while querying for an remote control event. [ 3391.222895][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3391.372814][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3391.385264][T16260] dvb-usb: error while querying for an remote control event. [ 3391.459008][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3392.141720][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3392.156685][T16260] dvb-usb: error while querying for an remote control event. [ 3392.378747][T12014] usb 6-1: USB disconnect, device number 87 [ 3392.482310][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3392.498245][T16260] dvb-usb: error while querying for an remote control event. [ 3393.435028][T12014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3396.030962][T25174] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3396.030962][T25174] program syz.0.5101 not setting count and/or reply_len properly [ 3396.793711][T25180] siw: device registration error -23 [ 3396.837479][ T4397] bond0 (unregistering): Released all slaves [ 3397.038321][T25004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3397.059095][T25004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3397.574375][T25004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3397.596804][T25004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3397.603812][T25004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3397.639754][T25004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3397.707202][T25142] lo speed is unknown, defaulting to 1000 [ 3397.713057][T25142] lo speed is unknown, defaulting to 1000 [ 3397.720422][T25142] lo speed is unknown, defaulting to 1000 [ 3397.731091][T25142] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3397.743793][T25142] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 3397.767794][T25142] lo speed is unknown, defaulting to 1000 [ 3397.818343][T25142] lo speed is unknown, defaulting to 1000 [ 3397.826107][T25142] lo speed is unknown, defaulting to 1000 [ 3397.832985][T25142] lo speed is unknown, defaulting to 1000 [ 3397.839924][T25142] lo speed is unknown, defaulting to 1000 [ 3397.966656][T25142] lo speed is unknown, defaulting to 1000 [ 3397.982962][T25004] device hsr_slave_0 entered promiscuous mode [ 3398.021692][T25004] device hsr_slave_1 entered promiscuous mode [ 3398.878520][T25191] binder: BINDER_SET_CONTEXT_MGR already set [ 3398.884762][T25191] binder: 25188:25191 ioctl 4018620d 200000000040 returned -16 [ 3399.334531][T15919] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 3399.586745][T15919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3399.603063][T15919] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3400.135987][T15919] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3400.174441][T15919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3400.285630][T15919] usb 6-1: config 0 descriptor?? [ 3400.485530][T15919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3400.492932][T15919] dvb-usb: bulk message failed: -22 (3/0) [ 3400.556117][T15919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3402.544775][T15919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3402.603728][T15919] usb 6-1: media controller created [ 3402.622809][T15919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3403.155095][T15919] dvb-usb: bulk message failed: -22 (6/0) [ 3403.161073][T15919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3403.266704][T15919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input128 [ 3403.291403][T15919] dvb-usb: schedule remote query interval to 150 msecs. [ 3403.302329][T15919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3403.327693][T15919] usb 6-1: USB disconnect, device number 88 [ 3403.491755][T15919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3409.106598][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3409.143086][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3409.730887][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3411.176224][T25248] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3411.226414][T25004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3411.267337][T25004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3411.328273][T25004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3411.869699][T25004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3412.463116][T25254] binder_alloc: 25253: binder_alloc_buf, no vma [ 3412.961845][T25273] binder_alloc: 25269: binder_alloc_buf, no vma [ 3413.654078][T25004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3413.715403][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3413.744769][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3413.768838][T25004] 8021q: adding VLAN 0 to HW filter on device team0 [ 3413.800771][T25276] loop0: detected capacity change from 0 to 1024 [ 3413.807486][T20982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3413.850588][T20982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3413.872916][T20982] bridge0: port 1(bridge_slave_0) entered blocking state [ 3413.880231][T20982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3413.889881][T24440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3414.047892][T20982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3414.739588][T25286] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3414.767348][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3414.777651][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3414.795535][T25286] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3414.795535][T25286] program syz.5.5132 not setting count and/or reply_len properly [ 3414.864586][T16260] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 3414.881503][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 3414.888727][T11502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3415.071974][T25287] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5133'. [ 3415.096670][T16260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3415.167705][T25292] siw: device registration error -23 [ 3416.056465][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3416.081372][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3416.099748][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3416.100284][T16260] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3416.162457][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3416.268538][T16260] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3416.283388][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3416.292794][T16260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3416.328423][T16260] usb 5-1: config 0 descriptor?? [ 3416.345751][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3416.352711][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3416.364157][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3416.364198][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5133'. [ 3416.378913][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3416.395239][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3416.409230][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3416.417905][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3416.425770][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3416.433650][T16260] usb 5-1: media controller created [ 3416.439974][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3416.453745][T25004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3416.472312][T25004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3416.484671][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3416.495233][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3416.523086][T25290] netlink: 'syz.1.5133': attribute type 21 has an invalid length. [ 3416.533048][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input130 [ 3416.709315][T25290] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5133'. [ 3416.729951][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3416.799811][T25299] rdma_rxe: rxe_register_device failed with error -23 [ 3416.807719][T25299] rdma_rxe: failed to add vxcan1 [ 3417.646807][T25290] netlink: 'syz.1.5133': attribute type 4 has an invalid length. [ 3417.657915][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3417.664266][T25290] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5133'. [ 3417.676581][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3417.710356][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3417.814507][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3417.874459][T16260] dvb-usb: error while querying for an remote control event. [ 3418.074632][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3418.083705][T16260] dvb-usb: error while querying for an remote control event. [ 3419.027793][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3419.049487][T16260] dvb-usb: error while querying for an remote control event. [ 3419.067836][T15393] usb 5-1: USB disconnect, device number 39 [ 3419.705295][T15393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3422.629239][T25325] binder_alloc: 25323: binder_alloc_buf, no vma [ 3423.096998][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3423.141034][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3424.757508][T25340] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3424.940303][T25340] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3424.940303][T25340] program syz.0.5147 not setting count and/or reply_len properly [ 3428.765274][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3428.795802][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3428.806092][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3428.838191][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3428.845833][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3428.868980][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3429.014510][T25358] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3429.053456][T25357] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3429.079400][T25358] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3429.079400][T25358] program syz.0.5151 not setting count and/or reply_len properly [ 3429.090052][T25351] lo speed is unknown, defaulting to 1000 [ 3430.272770][T25368] sg_write: data in/out 91/98 bytes for SCSI command 0x7-- guessing data in; [ 3430.272770][T25368] program syz.1.5153 not setting count and/or reply_len properly [ 3430.914506][T25009] Bluetooth: hci3: command 0x0409 tx timeout [ 3431.434560][T17077] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 3431.648985][T17077] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3431.674129][T17077] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3431.779580][T17077] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3431.877869][T17077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3432.011012][T17077] usb 6-1: config 0 descriptor?? [ 3432.090650][T25351] chnl_net:caif_netlink_parms(): no params data found [ 3432.158814][T17077] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3432.170341][T17077] dvb-usb: bulk message failed: -22 (3/0) [ 3432.184717][T17077] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3432.213233][T17077] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3432.224595][T17077] usb 6-1: media controller created [ 3432.350683][T17077] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3432.361747][T17077] dvb-usb: bulk message failed: -22 (6/0) [ 3432.375590][T17077] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3432.413700][T17077] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input131 [ 3432.506739][T25385] rdma_rxe: rxe_register_device failed with error -23 [ 3432.514476][T25385] rdma_rxe: failed to add vxcan1 [ 3432.996162][T25009] Bluetooth: hci3: command 0x041b tx timeout [ 3433.356795][T17077] dvb-usb: schedule remote query interval to 150 msecs. [ 3433.428578][T17077] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3433.584426][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3433.609036][T17077] dvb-usb: error while querying for an remote control event. [ 3433.945036][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3433.955481][T17077] dvb-usb: error while querying for an remote control event. [ 3434.174857][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3434.203696][T17077] dvb-usb: error while querying for an remote control event. [ 3434.392518][T19025] usb 6-1: USB disconnect, device number 89 [ 3434.880829][T25351] bridge0: port 1(bridge_slave_0) entered blocking state [ 3434.899114][T19025] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3434.932797][T25351] bridge0: port 1(bridge_slave_0) entered disabled state [ 3435.082445][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 3435.128836][T25351] device bridge_slave_0 entered promiscuous mode [ 3436.313140][T25351] bridge0: port 2(bridge_slave_1) entered blocking state [ 3436.348160][T25351] bridge0: port 2(bridge_slave_1) entered disabled state [ 3436.629379][T25351] device bridge_slave_1 entered promiscuous mode [ 3437.213476][T25009] Bluetooth: hci3: command 0x0419 tx timeout [ 3437.224491][T25351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3437.276456][T25351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3437.926560][T25351] team0: Port device team_slave_0 added [ 3438.005110][T25351] team0: Port device team_slave_1 added [ 3438.429322][T25419] binder_alloc: 25417: binder_alloc_buf, no vma [ 3438.964129][T25425] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5168'. [ 3440.335934][T25351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3440.414760][T25351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3443.571187][T25351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3443.843487][T25432] binder_alloc: 25430: binder_alloc_buf, no vma [ 3443.954948][T13426] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 3444.037806][T25351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3444.053079][T25351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3444.950817][T25351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3444.973897][T13426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3445.008714][T13426] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3445.100677][T25448] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3445.149052][T25448] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3445.149052][T25448] program syz.1.5173 not setting count and/or reply_len properly [ 3445.547921][T13426] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3445.562775][T13426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3445.690795][T13426] usb 5-1: config 0 descriptor?? [ 3445.720482][T13426] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3446.624747][T13426] dvb-usb: bulk message failed: -22 (3/0) [ 3446.646438][T13426] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3446.766767][T13426] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3446.774804][T13426] usb 5-1: media controller created [ 3446.781146][T13426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3446.923529][T25456] rdma_rxe: rxe_register_device failed with error -23 [ 3446.931253][T25456] rdma_rxe: failed to add vxcan1 [ 3447.733130][T13426] dvb-usb: bulk message failed: -22 (6/0) [ 3447.745259][T13426] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3447.755201][T13426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input132 [ 3448.078193][T13426] dvb-usb: schedule remote query interval to 150 msecs. [ 3448.125182][T13426] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3448.257525][T25457] binder_alloc: 25453: binder_alloc_buf, no vma [ 3448.289370][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3448.447381][T17077] dvb-usb: error while querying for an remote control event. [ 3448.517565][T25351] device hsr_slave_0 entered promiscuous mode [ 3448.536775][T25351] device hsr_slave_1 entered promiscuous mode [ 3448.651893][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3448.662376][T12014] usb 5-1: USB disconnect, device number 40 [ 3448.746545][T25351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3448.754389][T25351] Cannot create hsr debugfs directory [ 3448.794570][T17077] dvb-usb: error while querying for an remote control event. [ 3449.321321][T12014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3449.514631][T25468] binder_alloc: 25465: binder_alloc_buf, no vma [ 3450.348279][T11502] device hsr_slave_0 left promiscuous mode [ 3450.364019][T11502] device hsr_slave_1 left promiscuous mode [ 3450.434542][T11502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3450.558681][T13426] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 3450.701132][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.707576][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.759658][T11502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3450.781806][T11502] device bridge_slave_1 left promiscuous mode [ 3450.789459][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 3450.874344][T11502] device bridge_slave_0 left promiscuous mode [ 3450.900685][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 3450.919445][T13426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3451.561849][T13426] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3451.614721][T13426] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3451.632383][T25485] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3451.663230][T13426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3451.774126][T13426] usb 5-1: config 0 descriptor?? [ 3451.853152][T13426] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3451.933197][T13426] dvb-usb: bulk message failed: -22 (3/0) [ 3452.305047][T13426] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3452.338752][T13426] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3452.352309][T13426] usb 5-1: media controller created [ 3452.456384][T25487] rdma_rxe: rxe_register_device failed with error -23 [ 3452.463331][T25487] rdma_rxe: failed to add vxcan1 [ 3453.262955][T13426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3453.340272][T13426] dvb-usb: bulk message failed: -22 (6/0) [ 3453.353792][T13426] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3453.431430][T13426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input133 [ 3453.522957][T13426] dvb-usb: schedule remote query interval to 150 msecs. [ 3453.541742][T13426] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3453.620470][T25493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5184'. [ 3454.244135][T19745] dvb-usb: bulk message failed: -22 (1/0) [ 3454.259775][T19745] dvb-usb: error while querying for an remote control event. [ 3454.344801][T12014] usb 5-1: USB disconnect, device number 41 [ 3454.403596][T12014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3456.105523][T11502] team0 (unregistering): Port device team_slave_1 removed [ 3456.496488][T11502] team0 (unregistering): Port device team_slave_0 removed [ 3456.845845][T11502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3456.961100][T11502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3457.102775][T25508] binder_alloc: 25506: binder_alloc_buf, no vma [ 3457.991514][T25511] binder_alloc: 25509: binder_alloc_buf, no vma [ 3458.466128][T11502] bond0 (unregistering): Released all slaves [ 3458.977941][T25498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3459.037486][T25498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3459.050626][T25498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3461.157096][T25351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3461.174089][T25351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3461.225678][T25523] binder_alloc: 25518: binder_alloc_buf, no vma [ 3461.612077][T25351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3461.695995][T25351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3462.138486][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5195'. [ 3463.349526][T25549] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3463.453684][T25351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3463.518351][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3463.541435][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3463.566645][T25351] 8021q: adding VLAN 0 to HW filter on device team0 [ 3463.614176][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3463.639681][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3463.671888][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 3463.679068][T11502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3463.746948][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3463.764678][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3463.787228][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3463.811011][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 3463.818281][T11502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3463.853432][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3463.895018][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3464.185253][T25554] binder_alloc: 25552: binder_alloc_buf, no vma [ 3464.465146][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3464.531464][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3464.606986][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3464.778611][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3465.601815][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3465.612934][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3465.634928][T25351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3465.683233][T25351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3465.757035][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3467.295534][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3467.328467][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3468.141389][T25583] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3468.510486][T25584] input input134: cannot allocate more than FF_MAX_EFFECTS effects [ 3469.234706][T16260] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 3469.247002][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3469.279299][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3469.321018][T25351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3469.436102][T16260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3469.470234][T16260] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3469.498163][T16260] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3469.513597][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3469.526671][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3469.542821][T16260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3469.572917][T16260] usb 2-1: config 0 descriptor?? [ 3469.592126][T16260] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3469.635138][T16260] dvb-usb: bulk message failed: -22 (3/0) [ 3469.653106][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3469.681980][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3469.709956][T16260] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3469.733732][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3469.744442][T16260] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3469.756308][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3469.763677][T16260] usb 2-1: media controller created [ 3469.770734][T16260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3469.772730][T25351] device veth0_vlan entered promiscuous mode [ 3469.924756][T16260] dvb-usb: bulk message failed: -22 (6/0) [ 3469.931896][T16260] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3469.986649][T25599] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5208'. [ 3470.001858][T25598] rdma_rxe: rxe_register_device failed with error -23 [ 3470.008868][T25598] rdma_rxe: failed to add vxcan1 [ 3470.027722][T16260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input135 [ 3470.041994][T25351] device veth1_vlan entered promiscuous mode [ 3470.072698][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3470.088047][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3470.113719][T16260] dvb-usb: schedule remote query interval to 150 msecs. [ 3470.140820][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3470.159269][T16260] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3470.177714][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3470.197213][T25351] device veth0_macvtap entered promiscuous mode [ 3470.245711][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5208'. [ 3470.263636][T25351] device veth1_macvtap entered promiscuous mode [ 3470.314528][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3470.321579][T17077] dvb-usb: error while querying for an remote control event. [ 3470.341877][T25351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3470.388046][T25351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3470.421689][T25351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3470.454624][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3470.483098][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3470.519469][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3470.529971][T19745] dvb-usb: bulk message failed: -22 (1/0) [ 3470.548106][T19745] dvb-usb: error while querying for an remote control event. [ 3470.586187][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3470.629580][T25351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3470.684034][T25351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3470.695968][T25351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3470.703645][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3470.729045][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3470.754511][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3470.760317][T17077] dvb-usb: error while querying for an remote control event. [ 3470.807679][T25351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.822954][T25351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.857409][T25351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.866445][T25351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.989945][T19745] dvb-usb: bulk message failed: -22 (1/0) [ 3471.003334][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3471.029482][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3471.041771][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3471.049749][T19745] dvb-usb: error while querying for an remote control event. [ 3471.061047][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3471.072235][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3471.195910][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3471.274426][T17077] dvb-usb: bulk message failed: -22 (1/0) [ 3471.280448][T17077] dvb-usb: error while querying for an remote control event. [ 3471.685194][T16260] dvb-usb: bulk message failed: -22 (1/0) [ 3471.691123][T16260] dvb-usb: error while querying for an remote control event. [ 3471.869836][T19745] dvb-usb: bulk message failed: -22 (1/0) [ 3471.889636][T19745] dvb-usb: error while querying for an remote control event. [ 3473.681938][T19745] usb 2-1: USB disconnect, device number 30 [ 3473.777444][T19745] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3473.984522][T12014] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 3474.076476][T25616] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5210'. [ 3474.475307][T12014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3474.488195][T12014] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3474.497317][T12014] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3474.507119][T12014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3474.774213][T12014] usb 5-1: config 0 descriptor?? [ 3474.789837][T12014] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3474.811314][T12014] dvb-usb: bulk message failed: -22 (3/0) [ 3474.839244][T25621] binder_alloc: 25617: binder_alloc_buf, no vma [ 3475.223785][T25610] rdma_rxe: rxe_register_device failed with error -23 [ 3475.230928][T25610] rdma_rxe: failed to add vxcan1 [ 3475.327345][T12014] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3475.394469][T12014] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3475.409230][T12014] usb 5-1: media controller created [ 3476.045234][T12014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3476.108127][T25616] netlink: 'syz.1.5210': attribute type 21 has an invalid length. [ 3476.121595][T12014] dvb-usb: bulk message failed: -22 (6/0) [ 3476.132566][T25616] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5210'. [ 3476.142089][T12014] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3476.152552][T12014] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input136 [ 3476.178735][T25616] netlink: 'syz.1.5210': attribute type 4 has an invalid length. [ 3476.202832][T12014] dvb-usb: schedule remote query interval to 150 msecs. [ 3476.218275][T25616] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5210'. [ 3476.227705][T12014] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3476.408743][T12014] usb 5-1: USB disconnect, device number 42 [ 3476.474366][T20926] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 3477.284435][T20926] usb 4-1: Using ep0 maxpacket: 32 [ 3477.293346][T20926] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 3477.297882][T12014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3477.349889][T20926] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3477.382721][T20926] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3477.409228][T20926] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3477.438248][T20926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3477.605987][T20926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3479.454372][T20926] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3479.541221][T20926] usb 4-1: Product: syz [ 3479.636625][T20926] usb 4-1: Manufacturer: syz [ 3480.128572][T20926] usb 4-1: SerialNumber: syz [ 3480.183139][T20926] usb 4-1: config 0 descriptor?? [ 3480.233711][T20926] usb 4-1: can't set config #0, error -71 [ 3480.423887][T20926] usb 4-1: USB disconnect, device number 20 [ 3481.654172][T25660] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5223'. [ 3481.916730][T25666] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3481.916730][T25666] program syz.4.5225 not setting count and/or reply_len properly [ 3482.330446][T25660] netlink: 'syz.3.5223': attribute type 21 has an invalid length. [ 3482.400260][T25660] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5223'. [ 3482.412367][T25660] netlink: 'syz.3.5223': attribute type 4 has an invalid length. [ 3482.472090][T25660] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5223'. [ 3482.508827][T25667] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5224'. [ 3482.700879][T25672] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 3482.732991][T25667] netlink: 'syz.0.5224': attribute type 21 has an invalid length. [ 3482.783812][T25667] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5224'. [ 3482.797165][T25667] netlink: 'syz.0.5224': attribute type 4 has an invalid length. [ 3482.807724][T25667] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5224'. [ 3484.914377][T25688] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3484.914377][T25688] program syz.4.5230 not setting count and/or reply_len properly [ 3485.735814][T25693] binder_alloc: 25690: binder_alloc_buf, no vma [ 3486.424594][T19745] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 3486.734705][T19745] usb 6-1: Using ep0 maxpacket: 32 [ 3486.751677][T19745] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 3488.759273][T19745] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3488.991102][T19745] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3489.570604][T19745] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3490.249948][T19745] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3490.326794][T19745] usb 6-1: string descriptor 0 read error: -71 [ 3490.413677][T25713] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3490.468353][T25713] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 3490.468353][T25713] program syz.5.5237 not setting count and/or reply_len properly [ 3490.692831][T19745] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3490.976521][T19745] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3491.023511][T19745] usb 6-1: config 0 descriptor?? [ 3491.069529][T19745] usb 6-1: can't set config #0, error -71 [ 3491.102199][T19745] usb 6-1: USB disconnect, device number 90 [ 3491.117600][T25716] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3491.264117][T25716] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3491.264117][T25716] program syz.0.5238 not setting count and/or reply_len properly [ 3491.622130][T25727] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3491.622130][T25727] program syz.4.5242 not setting count and/or reply_len properly [ 3493.264398][ T127] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3493.474563][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 3493.494457][T20926] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3493.587374][ T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3493.598178][ T127] usb 2-1: config 0 has no interfaces? [ 3493.615081][ T127] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3493.625328][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.634151][ T127] usb 2-1: Product: syz [ 3493.639650][ T127] usb 2-1: Manufacturer: syz [ 3493.645233][ T127] usb 2-1: SerialNumber: syz [ 3493.678564][ T127] usb 2-1: config 0 descriptor?? [ 3493.774391][T20926] usb 5-1: Using ep0 maxpacket: 32 [ 3493.792029][T20926] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 3493.970421][T25748] binder: BINDER_SET_CONTEXT_MGR already set [ 3493.976705][T25748] binder: 25745:25748 ioctl 4018620d 200000000040 returned -16 [ 3494.849095][T20926] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3494.902709][T20926] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3494.985180][T20926] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3495.030354][T20926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3495.047665][T20926] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3495.068670][T20926] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3495.211567][T20926] usb 5-1: Product: syz [ 3495.216926][T20926] usb 5-1: Manufacturer: syz [ 3495.221582][T20926] usb 5-1: SerialNumber: syz [ 3495.244165][T20926] usb 5-1: config 0 descriptor?? [ 3497.223328][T20926] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3497.240295][T20926] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3497.382186][T20926] usb 5-1: USB disconnect, device number 43 [ 3497.390306][T20926] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 3497.421627][T19745] usb 2-1: USB disconnect, device number 31 [ 3498.600149][T25768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5252'. [ 3500.211586][T25781] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3500.211586][T25781] program syz.1.5256 not setting count and/or reply_len properly [ 3501.800089][T25785] mkiss: ax0: crc mode is auto. [ 3501.897783][T25791] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5260'. [ 3502.197520][T19025] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3502.671536][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5260'. [ 3502.754835][T19025] usb 2-1: Using ep0 maxpacket: 32 [ 3502.770643][T19025] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 3502.797411][T19025] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3502.821968][T25791] netlink: 'syz.3.5260': attribute type 21 has an invalid length. [ 3502.831845][T19025] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3502.871212][T19025] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3502.893863][T25791] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5260'. [ 3502.904948][T25791] netlink: 'syz.3.5260': attribute type 4 has an invalid length. [ 3502.912947][T25791] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5260'. [ 3502.938726][T19025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3503.013834][T19025] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3503.032075][T19025] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3503.066001][T19025] usb 2-1: Product: syz [ 3503.085090][T19025] usb 2-1: Manufacturer: syz [ 3503.111326][T19025] usb 2-1: SerialNumber: syz [ 3503.169695][T19025] usb 2-1: config 0 descriptor?? [ 3503.203511][T19025] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3503.279977][T19025] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3503.624418][ T127] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 3505.984610][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 3506.000081][ T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3506.025169][ T127] usb 6-1: config 0 has no interfaces? [ 3506.047389][ T127] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3506.057140][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3506.066289][ T127] usb 6-1: Product: syz [ 3506.072136][ T127] usb 6-1: Manufacturer: syz [ 3506.078161][ T127] usb 6-1: SerialNumber: syz [ 3506.108459][ T127] usb 6-1: config 0 descriptor?? [ 3506.383372][ T127] usb 6-1: USB disconnect, device number 91 [ 3506.627304][T17077] usb 2-1: USB disconnect, device number 32 [ 3506.670962][T17077] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 3508.237586][T25825] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3508.408901][T25822] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3508.408901][T25822] program syz.4.5268 not setting count and/or reply_len properly [ 3509.646436][T25835] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3509.646436][T25835] program syz.3.5272 not setting count and/or reply_len properly [ 3509.745638][T19745] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 3510.355328][T25843] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5273'. [ 3511.070256][T19745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3511.117658][T19745] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3511.137037][T19745] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3511.407302][T19745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3511.452762][T25846] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5275'. [ 3511.743499][T19745] usb 5-1: config 0 descriptor?? [ 3511.758907][T19745] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3511.766090][T19745] dvb-usb: bulk message failed: -22 (3/0) [ 3511.776712][T19745] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3511.786619][T19745] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3511.804428][T19745] usb 5-1: media controller created [ 3511.810928][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'. [ 3511.841925][T19745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3511.859392][T25846] netlink: 'syz.0.5275': attribute type 21 has an invalid length. [ 3511.867652][T25846] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5275'. [ 3511.880159][T19745] dvb-usb: bulk message failed: -22 (6/0) [ 3511.883551][T25846] netlink: 'syz.0.5275': attribute type 4 has an invalid length. [ 3511.886106][T19745] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3511.904434][T19745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input137 [ 3511.917868][T25846] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5275'. [ 3511.927574][T19745] dvb-usb: schedule remote query interval to 150 msecs. [ 3511.936430][T19745] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3512.054742][ T4376] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 3512.094396][T19745] dvb-usb: bulk message failed: -22 (1/0) [ 3512.100822][T19745] dvb-usb: error while querying for an remote control event. [ 3512.118035][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.124511][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.198703][T11784] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3512.239904][T25832] rdma_rxe: rxe_register_device failed with error -23 [ 3512.246957][T25832] rdma_rxe: failed to add vxcan1 [ 3512.263178][ T127] usb 5-1: USB disconnect, device number 44 [ 3512.305964][ T4376] usb 6-1: Using ep0 maxpacket: 32 [ 3512.316187][ T127] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3512.316465][ T4376] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 3512.365637][ T4376] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3512.414623][T11784] usb 4-1: Using ep0 maxpacket: 8 [ 3512.424437][ T4376] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3512.490919][T11784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3512.598630][T11784] usb 4-1: config 0 has no interfaces? [ 3512.607252][ T4376] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3512.624713][ T4376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3512.635256][T11784] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3512.701945][T25859] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5279'. [ 3513.413998][T11784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.425417][T11784] usb 4-1: Product: syz [ 3513.425571][ T4376] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3513.440376][T11784] usb 4-1: Manufacturer: syz [ 3513.445568][T11784] usb 4-1: SerialNumber: syz [ 3513.450491][ T4376] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3513.459825][ T4376] usb 6-1: Product: syz [ 3513.465636][T11784] usb 4-1: config 0 descriptor?? [ 3513.480581][ T4376] usb 6-1: Manufacturer: syz [ 3513.488423][ T4376] usb 6-1: SerialNumber: syz [ 3513.584700][ T4376] usb 6-1: config 0 descriptor?? [ 3513.594139][ T4376] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3513.609090][ T4376] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3516.264077][T12014] usb 4-1: USB disconnect, device number 21 [ 3517.212413][T25874] tmpfs: Unknown parameter 'grpquota/#/msr' [ 3517.221892][T25874] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3517.221892][T25874] program syz.4.5282 not setting count and/or reply_len properly [ 3518.377267][ T127] usb 6-1: USB disconnect, device number 92 [ 3518.444963][ T127] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 3519.393237][T25893] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3519.393237][T25893] program syz.5.5287 not setting count and/or reply_len properly [ 3520.464480][ T4376] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 3521.055818][ T4376] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3521.174578][ T4376] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3521.185656][ T4376] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3521.199162][ T4376] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3521.962371][ T4376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3522.048435][ T4376] usb 6-1: invalid MIDI out EP 0 [ 3522.147441][T25913] tmpfs: Unknown parameter 'grpquota' [ 3522.154089][ T4376] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 3522.168976][T25913] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 3522.168976][T25913] program syz.0.5294 not setting count and/or reply_len properly [ 3522.729615][T25500] udevd[25500]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3522.809638][ T4376] usb 6-1: USB disconnect, device number 93 [ 3522.984470][ T9169] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3524.103023][ T9169] usb 2-1: Using ep0 maxpacket: 8 [ 3524.135171][ T9169] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3524.551007][ T9169] usb 2-1: config 0 has no interfaces? [ 3524.614195][ T9169] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3524.638324][ T9169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.664366][ T9169] usb 2-1: Product: syz [ 3524.683384][ T9169] usb 2-1: Manufacturer: syz [ 3524.705873][ T9169] usb 2-1: SerialNumber: syz [ 3527.016363][ T9169] usb 2-1: config 0 descriptor?? [ 3527.213905][ T9169] usb 2-1: can't set config #0, error -71 [ 3527.221693][ T9169] usb 2-1: USB disconnect, device number 33 [ 3527.567176][ C0] ------------[ cut here ]------------ [ 3527.573702][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 3527.586529][ C0] WARNING: CPU: 0 PID: 15 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 3527.596716][ C0] Modules linked in: [ 3527.600889][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 3527.608490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3527.618835][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 3527.625469][ C0] Code: ef e8 98 78 c5 fd 4c 8b 45 00 48 c7 c7 00 06 df 8a 48 c7 c6 c0 02 df 8a 48 c7 c2 60 07 df 8a 8b 0c 24 4d 89 e9 e8 a4 81 41 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 30 14 [ 3527.645526][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 3527.651897][ C0] RAX: e36cd03ba3269c00 RBX: ffffffff96e65590 RCX: ffff88813fef3b80 [ 3527.660222][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 3527.668575][ C0] RBP: ffffffff8a8de220 R08: dffffc0000000000 R09: fffff52000028ea5 [ 3527.676766][ C0] R10: fffff52000028ea5 R11: 1ffff92000028ea4 R12: ffff88802f210e00 [ 3527.685179][ C0] R13: ffffffff8918f950 R14: ffff88802f210000 R15: ffff88802f210c90 [ 3527.693497][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3527.702859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3527.709927][ C0] CR2: 00007fc7943f2f4c CR3: 00000000380cc000 CR4: 00000000003506f0 [ 3527.718337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3527.726725][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3527.735033][ C0] Call Trace: [ 3527.738559][ C0] [ 3527.741780][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 3527.747529][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 3527.752951][ C0] __kmem_cache_free+0xb6/0x1f0 [ 3527.758186][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 3527.763397][ C0] ? call_timer_fn+0x187/0x670 [ 3527.768325][ C0] call_timer_fn+0x1a0/0x670 [ 3527.773131][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 3527.778527][ C0] ? call_timer_fn+0xc1/0x670 [ 3527.783554][ C0] ? __run_timers+0x7c0/0x7c0 [ 3527.788540][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3527.794035][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 3527.799617][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 3527.804852][ C0] __run_timers+0x525/0x7c0 [ 3527.809578][ C0] ? detach_timer+0x350/0x350 [ 3527.814481][ C0] ? lock_chain_count+0x20/0x20 [ 3527.819491][ C0] run_timer_softirq+0x63/0xf0 [ 3527.824726][ C0] handle_softirqs+0x2a1/0x920 [ 3527.829625][ C0] ? run_ksoftirqd+0x98/0xf0 [ 3527.834340][ C0] ? do_softirq+0x200/0x200 [ 3527.839121][ C0] run_ksoftirqd+0x98/0xf0 [ 3527.843701][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 3527.849130][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 3527.854785][ C0] ? takeover_tasklets+0x800/0x800 [ 3527.860080][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 3527.865724][ C0] smpboot_thread_fn+0x64a/0xa40 [ 3527.877065][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 3527.882230][ C0] kthread+0x29d/0x330 [ 3527.886595][ C0] ? cpu_report_death+0x230/0x230 [ 3527.891826][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3527.896765][ C0] ret_from_fork+0x1f/0x30 [ 3527.901487][ C0] [ 3527.904784][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3527.912071][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 3527.919363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3527.929499][ C0] Call Trace: [ 3527.932773][ C0] [ 3527.935716][ C0] dump_stack_lvl+0x168/0x22e [ 3527.940492][ C0] ? memcpy+0x3c/0x60 [ 3527.944475][ C0] ? show_regs_print_info+0x12/0x12 [ 3527.949702][ C0] ? load_image+0x3b0/0x3b0 [ 3527.954209][ C0] panic+0x2c9/0x710 [ 3527.958122][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 3527.962640][ C0] ? ret_from_fork+0x1f/0x30 [ 3527.967430][ C0] __warn+0x2f8/0x4f0 [ 3527.971452][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 3527.977210][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 3527.983052][ C0] report_bug+0x2ba/0x4f0 [ 3527.987417][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 3527.993244][ C0] handle_bug+0x3a/0x70 [ 3527.997408][ C0] exc_invalid_op+0x16/0x40 [ 3528.001910][ C0] asm_exc_invalid_op+0x16/0x20 [ 3528.006844][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 3528.013210][ C0] Code: ef e8 98 78 c5 fd 4c 8b 45 00 48 c7 c7 00 06 df 8a 48 c7 c6 c0 02 df 8a 48 c7 c2 60 07 df 8a 8b 0c 24 4d 89 e9 e8 a4 81 41 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 30 14 [ 3528.032900][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 3528.039055][ C0] RAX: e36cd03ba3269c00 RBX: ffffffff96e65590 RCX: ffff88813fef3b80 [ 3528.047038][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 3528.055017][ C0] RBP: ffffffff8a8de220 R08: dffffc0000000000 R09: fffff52000028ea5 [ 3528.063072][ C0] R10: fffff52000028ea5 R11: 1ffff92000028ea4 R12: ffff88802f210e00 [ 3528.071038][ C0] R13: ffffffff8918f950 R14: ffff88802f210000 R15: ffff88802f210c90 [ 3528.079028][ C0] ? rose_transmit_link+0x730/0x730 [ 3528.084314][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 3528.089719][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 3528.094936][ C0] __kmem_cache_free+0xb6/0x1f0 [ 3528.099801][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 3528.105699][ C0] ? call_timer_fn+0x187/0x670 [ 3528.110459][ C0] call_timer_fn+0x1a0/0x670 [ 3528.115059][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 3528.120074][ C0] ? call_timer_fn+0xc1/0x670 [ 3528.124742][ C0] ? __run_timers+0x7c0/0x7c0 [ 3528.129413][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3528.134607][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 3528.139812][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 3528.144842][ C0] __run_timers+0x525/0x7c0 [ 3528.149387][ C0] ? detach_timer+0x350/0x350 [ 3528.154084][ C0] ? lock_chain_count+0x20/0x20 [ 3528.158939][ C0] run_timer_softirq+0x63/0xf0 [ 3528.163699][ C0] handle_softirqs+0x2a1/0x920 [ 3528.168463][ C0] ? run_ksoftirqd+0x98/0xf0 [ 3528.173050][ C0] ? do_softirq+0x200/0x200 [ 3528.177565][ C0] run_ksoftirqd+0x98/0xf0 [ 3528.181987][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 3528.187182][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 3528.192550][ C0] ? takeover_tasklets+0x800/0x800 [ 3528.197652][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 3528.202855][ C0] smpboot_thread_fn+0x64a/0xa40 [ 3528.207831][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 3528.212897][ C0] kthread+0x29d/0x330 [ 3528.216963][ C0] ? cpu_report_death+0x230/0x230 [ 3528.221984][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3528.226571][ C0] ret_from_fork+0x1f/0x30 [ 3528.230983][ C0] [ 3528.234394][ C0] Kernel Offset: disabled [ 3528.238819][ C0] Rebooting in 86400 seconds..