last executing test programs: 17m13.543225988s ago: executing program 0 (id=220): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872eeda0c235f8be3088a880", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m12.943175009s ago: executing program 0 (id=222): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x758, 0xd0, 0x1b8, 0x1b8, 0x528, 0x528, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5, 0x1}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x62}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast, 0x10}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x8, 0x0, 0xff}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:xen_device_t:s0\x00'}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffff00], 'bridge_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0xff, 0x3c, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0xfffd]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48}}, @common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x2, 0xf8, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000015b93b1c000000000000000000a5c000000060a0b0400000000000000000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000090900010073797a30000000000900020073797a32000000001400000000000000000000000af6dcd3f88abb01e4867a07897570f05b727a1f77f12c13cf54e9d1dc14892e"], 0x84}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0x6c9, 0xffffffffffffffff, 0x31) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x533b38816533e130) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8, 0x80}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8805}, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17m10.508469183s ago: executing program 1 (id=225): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x80, 0x2}}) 17m10.206080643s ago: executing program 0 (id=226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x24001, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000500)={0x80000000, 0x86, {}, {r4}, 0x9, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r5 = socket$isdn(0x22, 0x2, 0x10) r6 = socket$isdn(0x22, 0x2, 0x2) r7 = dup3(r6, r5, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 17m10.205925533s ago: executing program 1 (id=227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 17m3.462646605s ago: executing program 3 (id=240): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m3.206187363s ago: executing program 3 (id=242): r0 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) r3 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1, 0x135a, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x6, 0x69, {0x69, 0x1, "a0c3a4fa26085ff0d2ea2f2b7447e13a4b964d1b8fc9702fb31f6ca8d622f671a9917ec6a8dad8858cd9f5b360db3167a34116d509668db1d592c440226f10917e60b67fd2079fe5daaffda866db099f3d985668a06082bf47a4b62726fe70128deb95db50dba3"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x12, 0xdc, "a468ab446bbd34164682044bc0e155bedfb4853c2f47072f7de9983df3e4b58d9223ce8c8f84847e64b9972e9641711911f8bffde9ecf3c3b5532d257128a3406059e23f39d5dc7b8c16b066601d4227fd02dcc50a576a3c08c921e5775a2b26eb55a238fd5c74748ceacf4fc4af19298a77f517a91abfaffe7c42fe360280965ce23a8e6ff76f27e246fbb4d85fdeb47a3368d56c353d4663750af0f6d9d9c7d38430d396b9f3ff3245a1bfc25fd791dab742c953c561dba436bc5d41dc60feeea01dca64b49393a66c138c8c2fa22053d257e8b19f028ad6f08d9d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000400)={0xc0, 0x5, 0x3, "95bc26"}, &(0x7f0000000440)}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r8, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) 17m2.129579721s ago: executing program 2 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 17m1.094165836s ago: executing program 3 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 17m0.926064372s ago: executing program 2 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x2d, 0x4, @val=@netfilter={0x3, 0x4, 0xffff, 0x696395be989d9ad2}}, 0x20) 17m0.770697977s ago: executing program 2 (id=247): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$setperm(0x5, 0x0, 0x40808) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m0.726022529s ago: executing program 0 (id=248): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x8800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x400b601, 0x20, 0x5, 0x38f}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) r5 = socket$inet(0x2b, 0x801, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000040)={0xff, @broadcast, 0x4e25, 0x3, 'dh\x00', 0x33, 0xfffffffe, 0xfffffffc}, 0x2c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0xd0, 0x0, 0xff}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 17m0.582067304s ago: executing program 1 (id=249): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 17m0.39566114s ago: executing program 1 (id=250): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$setperm(0x5, 0x0, 0x40808) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16m59.575806218s ago: executing program 2 (id=251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}}, 0x100, 0x4, 0x4, 0x3, 0x18, 0x5, 0x4}, 0x9c) 16m59.567869789s ago: executing program 3 (id=252): syz_usb_connect(0x0, 0xf2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 16m57.939356635s ago: executing program 1 (id=253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="a000", 0x2, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x4, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 16m57.826119889s ago: executing program 2 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 16m56.694702667s ago: executing program 3 (id=255): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x30) 16m56.593859351s ago: executing program 2 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x24001, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000500)={0x80000000, 0x86, {}, {r4}, 0x9, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r5 = socket$isdn(0x22, 0x2, 0x10) r6 = socket$isdn(0x22, 0x2, 0x2) r7 = dup3(r6, r5, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 16m56.054147679s ago: executing program 1 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 16m55.43317851s ago: executing program 0 (id=258): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) 16m54.551001421s ago: executing program 3 (id=259): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$setperm(0x5, 0x0, 0x40808) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16m54.442167895s ago: executing program 0 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 16m22.360290188s ago: executing program 32 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 16m22.231215602s ago: executing program 33 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 16m22.045634088s ago: executing program 34 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x24001, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000500)={0x80000000, 0x86, {}, {r4}, 0x9, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r5 = socket$isdn(0x22, 0x2, 0x10) r6 = socket$isdn(0x22, 0x2, 0x2) r7 = dup3(r6, r5, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 16m21.938272681s ago: executing program 35 (id=259): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$setperm(0x5, 0x0, 0x40808) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 28.238664403s ago: executing program 7 (id=2517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 26.782135524s ago: executing program 7 (id=2520): socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7cad, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) socket$inet6(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) syz_open_dev$dri(0x0, 0x1, 0x48000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x60}, {0x6, 0x1}, {0x60}, {0x18, 0x1}, {0x4}, {0x6, 0x1}, {0xb, 0x1}, {0x1, 0x1}, {0xb}, {0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) 24.302094081s ago: executing program 7 (id=2526): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x8) accept$netrom(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e0080", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.473114024s ago: executing program 6 (id=2568): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b", 0xdf}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36", 0x69}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24", 0x82}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.240307957s ago: executing program 6 (id=2575): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x1, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) 4.601267469s ago: executing program 4 (id=2579): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}}, 0xc000) 4.430089435s ago: executing program 4 (id=2580): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_destroy(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000001340)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f00000006c0)}, 0x2400d8c0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000400)=""/179, 0xb3, 0x0, 0x2, 0x4}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) 3.626396304s ago: executing program 4 (id=2582): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b", 0xdf}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36", 0x69}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24", 0x82}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.513633438s ago: executing program 5 (id=2583): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x8) accept$netrom(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e0080000000", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.198212479s ago: executing program 6 (id=2584): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x67d}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb77d}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000108004680002c0000000000069078ac141400ac1e000107"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 2.600108779s ago: executing program 4 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 2.501889793s ago: executing program 5 (id=2586): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4004080) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000010c0)={'raw\x00', 0x0, [0x101, 0x4a3, 0xe2d, 0x40004, 0xfffefffa]}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000f40)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x1}, @dstopts={0x2b}]}}}}}, 0x0) 2.472940074s ago: executing program 4 (id=2587): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x82, 0x1, 'k'}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.214171883s ago: executing program 5 (id=2588): io_uring_setup(0x403f, &(0x7f00000003c0)={0x0, 0x9358, 0x0, 0x3, 0x211}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.590059865s ago: executing program 5 (id=2589): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_destroy(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000001340)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f00000006c0)}, 0x2400d8c0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) 1.454269909s ago: executing program 6 (id=2590): socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7cad, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) socket$inet6(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) syz_open_dev$dri(0x0, 0x1, 0x48000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x60}, {0x6, 0x1}, {0x60}, {0x18, 0x1}, {0x4}, {0x6, 0x1}, {0xb, 0x1}, {0x1, 0x1}, {0xb}, {0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) 1.197510659s ago: executing program 6 (id=2591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.144692ms ago: executing program 6 (id=2592): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 813.897342ms ago: executing program 7 (id=2532): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 398.432597ms ago: executing program 7 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 310.816189ms ago: executing program 5 (id=2595): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 86.112608ms ago: executing program 7 (id=2596): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc", 0x68}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 40.709199ms ago: executing program 5 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) 0s ago: executing program 4 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000006c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x9, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x2, 0xa7}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) kernel console output (not intermixed with test programs): ibceph: mon0 (1)[c::]:6789 connect error [ 896.214329][T13740] ceph: No mds server is up or the cluster is laggy [ 898.393955][T12820] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 898.594295][T12820] usb 7-1: Using ep0 maxpacket: 16 [ 898.615676][T12820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.646350][T12820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 898.661605][T13783] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 898.724638][T12820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 898.746440][T12820] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 898.801690][T12820] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.891794][T12820] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 898.969964][T12820] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 898.992860][T12820] usb 7-1: Manufacturer: syz [ 899.064029][T12820] usb 7-1: config 0 descriptor?? [ 899.424026][T12820] rc_core: IR keymap rc-hauppauge not found [ 899.453087][T12820] Registered IR keymap rc-empty [ 899.474814][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.534823][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.586352][T12820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 899.637570][T12820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input28 [ 899.704132][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.744357][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.793294][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.844621][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.874014][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.917449][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 899.965175][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 900.014818][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 900.062547][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 900.104062][T12820] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 900.149964][T12820] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 900.186922][T12820] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 900.222920][T12820] usb 7-1: USB disconnect, device number 18 [ 900.678593][T13794] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 904.806240][T13836] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 907.182530][T13850] autofs4:pid:13850:autofs_fill_super: called with bogus options [ 908.781915][T13877] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 911.942516][T13893] autofs4:pid:13893:autofs_fill_super: called with bogus options [ 913.927915][T13908] syz.7.1705 (13908): drop_caches: 2 [ 915.115831][T13932] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 915.514540][ T5813] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 915.734062][ T5813] usb 7-1: Using ep0 maxpacket: 16 [ 916.545748][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.584178][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.622498][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 916.658453][ T5813] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 916.671412][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.690289][ T5813] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.709161][ T5813] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.718102][ T5813] usb 7-1: Manufacturer: syz [ 916.728307][ T5813] usb 7-1: config 0 descriptor?? [ 918.504149][ T5813] rc_core: IR keymap rc-hauppauge not found [ 918.522495][ T5813] Registered IR keymap rc-empty [ 918.578054][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.628557][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.675149][ T5813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 918.765559][ T5813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29 [ 918.824349][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.873988][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.934924][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.004165][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.064121][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.125821][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.194142][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.315077][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.835463][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.884037][ T5813] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 919.898957][T13959] syz.6.1716 (13959): drop_caches: 2 [ 919.959624][ T5813] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 920.003376][ T5813] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 920.048667][ T5813] usb 7-1: USB disconnect, device number 19 [ 920.528099][T13979] autofs4:pid:13979:autofs_fill_super: called with bogus options [ 921.613431][T13215] libceph: connect (1)[c::]:6789 error -101 [ 921.648933][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 923.245550][T13987] ceph: No mds server is up or the cluster is laggy [ 923.255306][T13215] libceph: connect (1)[c::]:6789 error -101 [ 923.264296][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 923.730828][T14010] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 923.873986][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 924.103886][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 924.172216][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.230225][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.338428][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 924.403917][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 924.457278][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.490046][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 924.510725][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 924.534159][ T9] usb 6-1: Manufacturer: syz [ 924.582197][ T9] usb 6-1: config 0 descriptor?? [ 925.306467][ T9] rc_core: IR keymap rc-hauppauge not found [ 925.315343][ T9] Registered IR keymap rc-empty [ 925.320291][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 925.384029][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 925.435446][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 925.569481][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 925.872698][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 925.964460][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.230836][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.274648][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.414838][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.453288][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.502457][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.544027][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.591234][T14021] bond1: entered promiscuous mode [ 926.596720][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.625819][T14021] syz.4.1729 (14021): drop_caches: 2 [ 926.644321][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 926.798985][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 926.912816][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 927.003633][T13215] libceph: connect (1)[c::]:6789 error -101 [ 927.106047][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 927.277076][ T9] usb 6-1: USB disconnect, device number 19 [ 927.654880][T13215] libceph: connect (1)[c::]:6789 error -101 [ 927.661044][T14043] ceph: No mds server is up or the cluster is laggy [ 927.671747][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 927.851436][T14052] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 928.499142][ T9] libceph: connect (1)[c::]:6789 error -101 [ 928.673301][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 929.172810][T14060] tipc: Enabled bearer , priority 0 [ 929.202070][T14060] syzkaller0: entered promiscuous mode [ 929.247967][T14060] syzkaller0: entered allmulticast mode [ 929.314633][T14060] tipc: Resetting bearer [ 929.347179][T14059] tipc: Resetting bearer [ 929.375292][T14059] tipc: Disabling bearer [ 930.473965][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 930.774107][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 930.800282][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.819170][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.833470][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 930.847909][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 930.860818][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.881117][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 930.912343][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 930.937958][ T9] usb 6-1: Manufacturer: syz [ 930.951026][ T9] usb 6-1: config 0 descriptor?? [ 931.173215][T14090] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 931.800274][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.807059][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.156767][T10783] libceph: connect (1)[c::]:6789 error -101 [ 932.273284][T10783] libceph: mon0 (1)[c::]:6789 connect error [ 932.588189][ T9] rc_core: IR keymap rc-hauppauge not found [ 932.672603][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 932.687828][ T9] Registered IR keymap rc-empty [ 932.728186][T14085] bond2: entered promiscuous mode [ 932.744523][T14095] ceph: No mds server is up or the cluster is laggy [ 932.814119][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 932.816081][T14091] syz.4.1745 (14091): drop_caches: 2 [ 932.822473][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 933.183362][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 933.264652][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 933.339311][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 933.437078][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 933.484058][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 933.644517][T14114] autofs4:pid:14114:autofs_fill_super: called with bogus options [ 933.918939][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.071888][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.109537][T14117] fuse: Unknown parameter 'grou00000000000000000000' [ 934.127571][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.184026][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.234343][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.430437][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.473975][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.728270][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 934.775813][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 934.818349][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 934.987785][ T9] usb 6-1: USB disconnect, device number 20 [ 935.096330][T14137] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 937.493922][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 937.684565][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 937.714960][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.754002][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.793942][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.830872][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.883916][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.945302][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.959518][T14155] fuse: Unknown parameter 'grou00000000000000000000' [ 937.963889][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.993898][ T9] usb 5-1: Manufacturer: syz [ 938.001377][ T9] usb 5-1: config 0 descriptor?? [ 938.193467][T14161] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 938.339620][T14150] bond1: entered promiscuous mode [ 938.359326][ T9] rc_core: IR keymap rc-hauppauge not found [ 938.370615][ T9] Registered IR keymap rc-empty [ 938.380717][T14150] syz.7.1760 (14150): drop_caches: 2 [ 938.381895][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.434018][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.475772][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 938.489936][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 938.512432][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.554707][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.604124][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.804700][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.854427][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.884122][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 939.665012][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 939.709426][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 939.749469][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 939.806101][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 940.145911][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 940.369789][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 940.432761][ T9] usb 5-1: USB disconnect, device number 21 [ 941.074928][T10783] libceph: connect (1)[c::]:6789 error -101 [ 941.089590][T10783] libceph: mon0 (1)[c::]:6789 connect error [ 941.237274][T14189] ceph: No mds server is up or the cluster is laggy [ 942.206224][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 942.679296][T14215] syz.6.1773 (14215): drop_caches: 2 [ 942.791733][T14200] bond1: entered promiscuous mode [ 943.378172][T14221] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 943.463968][T12820] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 943.663631][T12820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.678635][T12820] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 943.723754][T12820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.750219][T12820] usb 7-1: config 0 descriptor?? [ 943.772559][T12820] pwc: Askey VC010 type 2 USB webcam detected. [ 944.067993][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.078373][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 944.083940][ T27] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 944.186270][T12820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 944.197129][T12820] pwc: recv_control_msg error -32 req 02 val 2700 [ 944.239502][T12820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 944.260862][T12820] pwc: recv_control_msg error -32 req 04 val 1000 [ 944.279472][ T9] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 944.283885][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 944.288331][ T9] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 944.296346][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.305146][ T9] usb 8-1: config 220 descriptor has 1 excess byte, ignoring [ 944.317149][T12820] pwc: recv_control_msg error -32 req 04 val 1300 [ 944.320276][ T9] usb 8-1: config 220 has no interface number 2 [ 944.327569][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 944.333414][ T9] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 944.343658][T12820] pwc: recv_control_msg error -32 req 04 val 1400 [ 944.357016][ T9] usb 8-1: config 220 interface 0 has no altsetting 0 [ 944.370392][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 944.370421][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 944.370505][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.390831][ T27] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 944.416820][ T27] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 944.421091][ T9] usb 8-1: config 220 interface 76 has no altsetting 0 [ 944.425273][T12820] pwc: recv_control_msg error -32 req 02 val 2000 [ 944.432117][ T9] usb 8-1: config 220 interface 1 has no altsetting 0 [ 944.438996][ T27] usb 5-1: Manufacturer: syz [ 944.449368][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 944.454507][T12820] pwc: recv_control_msg error -32 req 02 val 2100 [ 944.459798][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.477294][T12820] pwc: recv_control_msg error -32 req 04 val 1500 [ 944.478930][ T9] usb 8-1: Product: syz [ 944.489255][T12820] pwc: recv_control_msg error -32 req 02 val 2500 [ 944.489620][ T9] usb 8-1: Manufacturer: syz [ 944.496077][ T27] usb 5-1: config 0 descriptor?? [ 944.502851][ T9] usb 8-1: SerialNumber: syz [ 944.547866][T12820] pwc: recv_control_msg error -32 req 02 val 2400 [ 944.584912][T12820] pwc: recv_control_msg error -32 req 02 val 2600 [ 944.615422][T12820] pwc: recv_control_msg error -32 req 02 val 2900 [ 944.759054][ T9] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 944.774446][ T9] usb 8-1: No valid video chain found. [ 944.791683][ T9] usb 8-1: selecting invalid altsetting 0 [ 944.821914][ T9] usb 8-1: selecting invalid altsetting 0 [ 944.851922][ T9] usbtest: probe of 8-1:220.1 failed with error -22 [ 944.855359][T12820] pwc: recv_control_msg error -71 req 04 val 1100 [ 944.933718][T12820] pwc: recv_control_msg error -71 req 04 val 1200 [ 944.940789][ T9] usb 8-1: USB disconnect, device number 17 [ 944.981904][T12820] pwc: Registered as video103. [ 945.000272][T12820] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input34 [ 945.024051][ T27] rc_core: IR keymap rc-hauppauge not found [ 945.030035][ T27] Registered IR keymap rc-empty [ 945.040450][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.083103][T12820] usb 7-1: USB disconnect, device number 20 [ 945.114068][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.147915][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 945.164383][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 945.189098][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.224429][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.255533][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.284458][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.315160][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.353981][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.385568][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.424203][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.472471][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.524018][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 945.576638][ T27] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 945.619616][ T27] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 945.660243][ T27] usb 5-1: USB disconnect, device number 22 [ 946.877177][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1784'. [ 947.118013][T14245] bond2: entered promiscuous mode [ 947.122204][T14262] syz.7.1784 (14262): drop_caches: 2 [ 949.016455][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.413896][T10783] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 949.670600][T10783] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 949.689691][T10783] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 949.703824][T10783] usb 7-1: config 220 descriptor has 1 excess byte, ignoring [ 949.719764][T10783] usb 7-1: config 220 has no interface number 2 [ 949.734187][T10783] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 949.763874][T10783] usb 7-1: config 220 interface 0 has no altsetting 0 [ 949.783984][T10783] usb 7-1: config 220 interface 76 has no altsetting 0 [ 949.793893][T10783] usb 7-1: config 220 interface 1 has no altsetting 0 [ 949.803305][T10783] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 949.819877][T10783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.838584][T10783] usb 7-1: Product: syz [ 949.843125][T10783] usb 7-1: Manufacturer: syz [ 949.849660][T10783] usb 7-1: SerialNumber: syz [ 950.067761][T10783] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 950.075614][T10783] usb 7-1: No valid video chain found. [ 950.081345][T10783] usb 7-1: selecting invalid altsetting 0 [ 950.109625][T10783] usb 7-1: selecting invalid altsetting 0 [ 950.115683][T10783] usbtest: probe of 7-1:220.1 failed with error -22 [ 950.154882][T10783] usb 7-1: USB disconnect, device number 21 [ 950.303987][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 950.496418][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.552524][ T27] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 950.654089][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.775461][ T27] usb 5-1: config 0 descriptor?? [ 950.826434][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 951.505139][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 951.520057][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 951.540599][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 951.549350][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 951.559067][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 951.563927][T13215] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 951.574722][T14303] program syz.5.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 951.593001][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 951.600966][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 951.652225][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 951.659984][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 951.668045][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 951.686918][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 951.694960][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 951.702388][ T27] pwc: recv_control_msg error -32 req 02 val 2900 [ 951.763967][T13215] usb 7-1: Using ep0 maxpacket: 32 [ 951.784161][T13215] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 951.794766][T13215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.803070][T13215] usb 7-1: Product: syz [ 951.807563][T13215] usb 7-1: Manufacturer: syz [ 951.812285][T13215] usb 7-1: SerialNumber: syz [ 951.820804][T13215] usb 7-1: config 0 descriptor?? [ 951.838381][T13215] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 951.919198][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 951.943170][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 951.963042][ T27] pwc: Registered as video103. [ 952.019496][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 952.091990][ T27] usb 5-1: USB disconnect, device number 23 [ 953.686808][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1797'. [ 954.073833][T13215] gspca_ov534_9: reg_r err -110 [ 954.694805][ T9093] libceph: connect (1)[c::]:6789 error -101 [ 954.700966][T13215] gspca_ov534_9: Unknown sensor 0000 [ 954.701019][ T9093] libceph: mon0 (1)[c::]:6789 connect error [ 954.701064][T13215] ov534_9: probe of 7-1:0.0 failed with error -22 [ 954.729386][T14325] ceph: No mds server is up or the cluster is laggy [ 954.794268][T13215] usb 7-1: USB disconnect, device number 22 [ 955.098024][T10783] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 956.037242][T10783] usb 8-1: Using ep0 maxpacket: 16 [ 956.076546][T10783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.125549][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.152199][T13215] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 956.179400][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 957.743274][T10783] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 957.761449][T10783] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.802955][T10783] usb 8-1: string descriptor 0 read error: -71 [ 957.822341][T10783] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.873949][T10783] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.908762][T10783] usb 8-1: config 0 descriptor?? [ 957.948261][T10783] usb 8-1: can't set config #0, error -71 [ 957.986946][T10783] usb 8-1: USB disconnect, device number 18 [ 958.092191][T13215] usb 7-1: device descriptor read/all, error -71 [ 958.852385][T14372] fuse: Unknown parameter 'group_i00000000000000000000' [ 960.514391][T10783] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 960.746241][T10783] usb 7-1: Using ep0 maxpacket: 16 [ 960.822895][T10783] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.873912][T10783] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.911774][T10783] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.970745][T10783] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 960.983142][T13215] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 961.051563][T10783] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.085802][T10783] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 961.135282][T10783] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 961.153621][T10783] usb 7-1: Manufacturer: syz [ 961.170225][T10783] usb 7-1: config 0 descriptor?? [ 961.756913][T13215] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 961.771992][T13215] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 961.784495][T13215] usb 6-1: config 220 descriptor has 1 excess byte, ignoring [ 961.792122][T13215] usb 6-1: config 220 has no interface number 2 [ 961.803331][T13215] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 961.818281][ T9093] libceph: connect (1)[c::]:6789 error -101 [ 961.834163][T13215] usb 6-1: config 220 interface 0 has no altsetting 0 [ 961.834184][ T9093] libceph: mon0 (1)[c::]:6789 connect error [ 961.862270][T13215] usb 6-1: config 220 interface 76 has no altsetting 0 [ 961.871266][T13215] usb 6-1: config 220 interface 1 has no altsetting 0 [ 961.888153][T13215] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 961.897858][T13215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.906528][T13215] usb 6-1: Product: syz [ 961.910996][T13215] usb 6-1: Manufacturer: syz [ 961.915765][T13215] usb 6-1: SerialNumber: syz [ 961.933932][T10783] rc_core: IR keymap rc-hauppauge not found [ 961.939917][T10783] Registered IR keymap rc-empty [ 961.947869][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 961.997702][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.036130][T10783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 962.052046][T14401] ceph: No mds server is up or the cluster is laggy [ 962.063379][T10783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input39 [ 962.088640][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.129594][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.190364][T13215] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 962.197699][T13215] usb 6-1: No valid video chain found. [ 962.204786][T13215] usb 6-1: selecting invalid altsetting 0 [ 962.215481][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.241439][T13215] usb 6-1: selecting invalid altsetting 0 [ 962.250097][T13215] usbtest: probe of 6-1:220.1 failed with error -22 [ 962.260463][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.291260][T13215] usb 6-1: USB disconnect, device number 21 [ 962.324941][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.366539][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.414571][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.463539][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.494640][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.542773][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 962.585974][T10783] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 962.597900][T10783] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 962.613299][T10783] usb 7-1: USB disconnect, device number 25 [ 962.717998][T14416] random: crng reseeded on system resumption [ 963.472514][T14423] netlink: 592 bytes leftover after parsing attributes in process `syz.7.1829'. [ 963.614130][T14428] fuse: Bad value for 'fd' [ 964.846357][T13215] libceph: connect (1)[c::]:6789 error -101 [ 964.941182][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 964.986036][T14436] ceph: No mds server is up or the cluster is laggy [ 965.594114][T12820] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 965.829619][T12820] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 965.870411][T12820] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 965.913897][T12820] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 965.943894][T12820] usb 5-1: config 220 has no interface number 2 [ 965.954305][T12820] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 965.993660][T12820] usb 5-1: config 220 interface 0 has no altsetting 0 [ 966.003844][T12820] usb 5-1: config 220 interface 76 has no altsetting 0 [ 966.022788][T12820] usb 5-1: config 220 interface 1 has no altsetting 0 [ 966.049644][T12820] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 966.059018][T12820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.067233][T12820] usb 5-1: Product: syz [ 966.071516][T12820] usb 5-1: Manufacturer: syz [ 966.076862][T12820] usb 5-1: SerialNumber: syz [ 966.160002][T14456] can0: slcan on ttyS3. [ 966.384692][T12820] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 966.391112][T12820] usb 5-1: No valid video chain found. [ 966.445562][T14441] can0 (unregistered): slcan off ttyS3. [ 966.478512][T12820] usb 5-1: selecting invalid altsetting 0 [ 966.624162][ T27] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 966.632992][T12820] usb 5-1: selecting invalid altsetting 0 [ 966.663085][T12820] usbtest: probe of 5-1:220.1 failed with error -22 [ 966.693641][T12820] usb 5-1: USB disconnect, device number 24 [ 966.844097][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 966.858720][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.885069][T14466] random: crng reseeded on system resumption [ 966.948942][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.994582][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 967.004440][ T27] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 967.014316][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.092317][ T27] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 967.103139][ T27] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 967.494280][ T27] usb 8-1: Manufacturer: syz [ 967.541755][ T27] usb 8-1: config 0 descriptor?? [ 968.934009][ T27] rc_core: IR keymap rc-hauppauge not found [ 968.948789][ T27] Registered IR keymap rc-empty [ 969.447229][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 969.494413][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.032096][T13215] libceph: connect (1)[c::]:6789 error -101 [ 970.054016][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 970.054912][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 970.098242][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input41 [ 970.104841][T14482] ceph: No mds server is up or the cluster is laggy [ 970.247495][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.322212][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.366089][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.418739][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.494184][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.625682][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.696592][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.754481][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.804327][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.866900][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 970.942177][ T27] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 970.979808][ T27] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 971.059010][ T27] usb 8-1: USB disconnect, device number 19 [ 973.564983][T14522] random: crng reseeded on system resumption [ 975.907883][ T27] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 976.203893][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 978.610136][ T27] usb 7-1: device descriptor read/all, error -71 [ 979.457770][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 979.497606][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 979.784632][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 979.812810][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 980.257965][T14564] ceph: No mds server is up or the cluster is laggy [ 980.396240][ T27] libceph: connect (1)[c::]:6789 error -101 [ 980.417733][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 981.665660][T14583] can0: slcan on ttyS3. [ 982.244549][T14559] can0 (unregistered): slcan off ttyS3. [ 982.574067][T10783] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 983.643873][T10783] usb 8-1: Using ep0 maxpacket: 16 [ 983.664134][T10783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.683861][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.756459][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.807435][T10783] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.869699][T10783] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.122474][T14606] random: crng reseeded on system resumption [ 984.511553][T10783] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.521319][T10783] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.539963][T10783] usb 8-1: Manufacturer: syz [ 984.603451][T10783] usb 8-1: config 0 descriptor?? [ 984.984247][T10783] rc_core: IR keymap rc-hauppauge not found [ 985.003220][T10783] Registered IR keymap rc-empty [ 985.054715][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.124200][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.208208][T10783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 985.245324][T10783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input45 [ 985.348146][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.424397][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.474313][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.524134][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.576197][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.604500][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.613930][ T27] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 985.647968][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.704108][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.754588][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.824678][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 985.875778][T10783] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 985.912788][ T27] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 985.923919][T10783] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 985.925283][ T27] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 985.984847][ T27] usb 5-1: config 220 has no interface number 2 [ 985.998707][T10783] usb 8-1: USB disconnect, device number 20 [ 986.027982][ T27] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 986.049929][ T27] usb 5-1: config 220 interface 0 has no altsetting 0 [ 986.065650][ T27] usb 5-1: config 220 interface 76 has no altsetting 0 [ 986.078025][ T27] usb 5-1: config 220 interface 1 has no altsetting 0 [ 986.112162][ T27] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 986.144720][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.176155][ T27] usb 5-1: Product: syz [ 986.202395][ T27] usb 5-1: Manufacturer: syz [ 986.219637][ T27] usb 5-1: SerialNumber: syz [ 986.466431][T14645] fuse: Bad value for 'user_id' [ 986.474532][ T27] usb 5-1: selecting invalid altsetting 0 [ 986.523984][ T27] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 986.544436][ T27] usb 5-1: No valid video chain found. [ 986.575452][ T27] usb 5-1: selecting invalid altsetting 0 [ 986.581265][ T27] usbtest: probe of 5-1:220.1 failed with error -22 [ 986.637789][ T27] usb 5-1: USB disconnect, device number 25 [ 986.930200][ T27] libceph: connect (1)[c::]:6789 error -101 [ 986.963145][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 987.017446][ T27] libceph: connect (1)[c::]:6789 error -101 [ 987.209405][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 987.304321][T14657] can0: slcan on ttyS3. [ 988.541377][T14650] ceph: No mds server is up or the cluster is laggy [ 988.645801][T14654] can0 (unregistered): slcan off ttyS3. [ 990.940185][T14687] fuse: Bad value for 'user_id' [ 993.240731][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.247371][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.284032][ T27] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 993.542810][ T27] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 993.558222][T13215] libceph: connect (1)[c::]:6789 error -101 [ 993.574250][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 993.574738][ T27] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 993.599268][ T27] usb 7-1: config 220 has no interface number 2 [ 993.621527][ T27] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 993.659078][ T27] usb 7-1: config 220 interface 0 has no altsetting 0 [ 993.682896][ T27] usb 7-1: config 220 interface 76 has no altsetting 0 [ 993.703536][ T27] usb 7-1: config 220 interface 1 has no altsetting 0 [ 993.729842][ T27] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 993.741723][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.752729][ T27] usb 7-1: Product: syz [ 993.760607][ T27] usb 7-1: Manufacturer: syz [ 993.768827][ T27] usb 7-1: SerialNumber: syz [ 993.844507][T13215] libceph: connect (1)[c::]:6789 error -101 [ 993.852502][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 994.026995][ T27] usb 7-1: selecting invalid altsetting 0 [ 994.054464][ T27] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 994.064244][ T27] usb 7-1: No valid video chain found. [ 994.094618][ T27] usb 7-1: selecting invalid altsetting 0 [ 994.122436][ T27] usbtest: probe of 7-1:220.1 failed with error -22 [ 994.287988][T14709] ceph: No mds server is up or the cluster is laggy [ 994.544580][T13215] libceph: connect (1)[c::]:6789 error -101 [ 994.572026][ T27] usb 7-1: USB disconnect, device number 28 [ 995.010981][T13215] libceph: mon0 (1)[c::]:6789 connect error [ 995.299335][T14722] fuse: Bad value for 'fd' [ 995.774063][T14735] can0: slcan on ttyS3. [ 996.605117][T14726] can0 (unregistered): slcan off ttyS3. [ 996.693887][ T787] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 997.213932][ T787] usb 8-1: Using ep0 maxpacket: 16 [ 997.244062][ T787] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.254501][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.266898][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 997.277502][ T787] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 997.287748][ T787] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.333433][ T787] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 997.353492][ T787] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 997.361761][ T787] usb 8-1: Manufacturer: syz [ 997.390562][ T787] usb 8-1: config 0 descriptor?? [ 997.843912][ T787] rc_core: IR keymap rc-hauppauge not found [ 997.850036][ T787] Registered IR keymap rc-empty [ 997.855428][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 997.889373][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 997.925223][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 997.946434][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input46 [ 997.982368][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.054323][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.196054][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.361923][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.515009][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.634316][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.684095][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.744078][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.785217][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.836508][ T787] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 998.921066][ T787] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 998.941864][T10783] libceph: connect (1)[c::]:6789 error -101 [ 998.948949][ T787] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 998.967461][T10783] libceph: mon0 (1)[c::]:6789 connect error [ 998.994475][ T787] usb 8-1: USB disconnect, device number 21 [ 999.228012][T14764] fuse: Bad value for 'fd' [ 999.244385][ T787] libceph: connect (1)[c::]:6789 error -101 [ 999.261476][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 999.730695][T14757] ceph: No mds server is up or the cluster is laggy [ 999.931708][T14777] can0: slcan on ttyS3. [ 1001.350121][T14772] can0 (unregistered): slcan off ttyS3. [ 1001.629207][T13215] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1001.702093][T14797] fuse: Bad value for 'fd' [ 1001.843974][T13215] usb 5-1: Using ep0 maxpacket: 16 [ 1001.894350][T13215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.913982][T13215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.937628][T13215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1001.954696][T13215] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1001.971780][T13215] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.015998][T13215] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1002.046395][T13215] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1002.075258][T13215] usb 5-1: Manufacturer: syz [ 1002.095129][T13215] usb 5-1: config 0 descriptor?? [ 1002.574374][T13215] rc_core: IR keymap rc-hauppauge not found [ 1002.621911][T13215] Registered IR keymap rc-empty [ 1002.641774][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1002.693969][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1002.743954][T13215] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1002.874449][T13215] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 1002.952691][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1002.999058][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.044195][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.086877][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.124001][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.184842][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.273935][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.338536][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.390931][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1003.458571][T13215] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1004.063979][T13215] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1004.099705][T13215] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1004.128109][T13215] usb 5-1: USB disconnect, device number 26 [ 1007.306622][T14864] can0: slcan on ttyS3. [ 1007.368523][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1007.391358][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1007.664375][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1007.674504][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1007.834920][T14855] can0 (unregistered): slcan off ttyS3. [ 1008.148965][T14866] ceph: No mds server is up or the cluster is laggy [ 1013.012721][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1943'. [ 1013.044659][T14909] netlink: 'syz.6.1943': attribute type 20 has an invalid length. [ 1013.068749][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 1013.111101][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 1013.122695][T14909] syz.6.1943 (14909): drop_caches: 2 [ 1013.394958][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 1013.838667][T14932] ceph: No mds server is up or the cluster is laggy [ 1013.999780][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 1015.245264][T14958] can0: slcan on ttyS3. [ 1015.574636][T14950] can0 (unregistered): slcan off ttyS3. [ 1017.206892][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1017.226994][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1017.486281][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1017.492403][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1017.969411][T14991] ceph: No mds server is up or the cluster is laggy [ 1020.599304][T15042] can0: slcan on ttyS3. [ 1020.686402][T15041] can0 (unregistered): slcan off ttyS3. [ 1020.824380][T10783] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1021.064049][T10783] usb 7-1: Using ep0 maxpacket: 16 [ 1021.065248][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 1021.075609][T10783] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.081170][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 1021.086394][T10783] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.105274][T10783] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1021.115237][T10783] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1021.125168][T10783] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.142343][T10783] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1021.165854][T10783] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1021.187156][T10783] usb 7-1: Manufacturer: syz [ 1021.249234][T10783] usb 7-1: config 0 descriptor?? [ 1021.799111][T15054] ceph: No mds server is up or the cluster is laggy [ 1022.293857][T10783] rc_core: IR keymap rc-hauppauge not found [ 1022.315545][T10783] Registered IR keymap rc-empty [ 1022.321831][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1022.354670][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1022.413828][T10783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1022.438951][T10783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input53 [ 1022.498592][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1022.548577][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1022.606601][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1022.772243][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.004770][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.234523][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.324288][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.400906][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.439895][T15079] 9pnet_virtio: no channels available for device ./bus [ 1023.457219][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.521349][T10783] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1023.576485][T10783] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1023.606314][T10783] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1023.664321][T10783] usb 7-1: USB disconnect, device number 29 [ 1023.856705][T15086] can0: slcan on ttyS3. [ 1024.015830][T15085] can0 (unregistered): slcan off ttyS3. [ 1024.230917][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 1024.247664][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 1024.515056][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1024.553309][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1025.051971][T15095] ceph: No mds server is up or the cluster is laggy [ 1027.720723][T15139] can0: slcan on ttyS3. [ 1027.780877][ T27] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1027.794329][T15138] can0 (unregistered): slcan off ttyS3. [ 1027.968630][T15146] 9pnet_virtio: no channels available for device ./bus [ 1028.083043][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 1028.092080][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 1028.114261][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 1028.126842][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.149848][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.163965][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1028.173689][ T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1028.183526][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.198959][ T27] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1028.208278][ T27] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1028.224121][ T27] usb 6-1: Manufacturer: syz [ 1028.240544][ T27] usb 6-1: config 0 descriptor?? [ 1028.354414][ T9093] libceph: connect (1)[c::]:6789 error -101 [ 1028.360498][ T9093] libceph: mon0 (1)[c::]:6789 connect error [ 1029.565521][T15151] ceph: No mds server is up or the cluster is laggy [ 1030.503936][ T27] rc_core: IR keymap rc-hauppauge not found [ 1030.519814][ T27] Registered IR keymap rc-empty [ 1030.797418][T15177] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1031.571193][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1031.604027][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1031.701195][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1031.838172][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 1031.961205][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1031.972519][T15191] 9pnet_virtio: no channels available for device ./bus [ 1032.105885][T15195] random: crng reseeded on system resumption [ 1032.428304][T15190] can0: slcan on ttyS3. [ 1032.464363][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.504601][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.564974][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.594828][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.624472][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.714576][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.757716][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.793999][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.824968][T15188] can0 (unregistered): slcan off ttyS3. [ 1032.836833][ T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1032.887211][ T27] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1032.904007][ T27] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1033.095138][ T27] usb 6-1: USB disconnect, device number 22 [ 1036.996733][T15238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1039.497418][T15244] can0: slcan on ttyS3. [ 1039.575304][T15243] can0 (unregistered): slcan off ttyS3. [ 1042.420459][T15280] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1044.395920][T15302] random: crng reseeded on system resumption [ 1049.583949][T15337] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1050.431109][T15347] random: crng reseeded on system resumption [ 1053.046952][T15375] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1054.680651][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.687236][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.190164][T15391] random: crng reseeded on system resumption [ 1056.832887][T15410] program syz.7.2043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1057.786458][T15419] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1060.171334][T15440] random: crng reseeded on system resumption [ 1061.619287][T15468] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1065.299672][T15493] random: crng reseeded on system resumption [ 1065.757311][T15505] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1069.539347][T15549] random: crng reseeded on system resumption [ 1070.393197][T15563] tipc: Enabled bearer , priority 0 [ 1070.420146][T15563] syzkaller0: entered promiscuous mode [ 1070.436506][T15563] syzkaller0: entered allmulticast mode [ 1070.482973][T15563] tipc: Resetting bearer [ 1070.605290][T15562] tipc: Resetting bearer [ 1071.076423][T15562] tipc: Disabling bearer [ 1072.188554][T15578] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2087'. [ 1072.670051][T15594] random: crng reseeded on system resumption [ 1073.289826][T15604] tipc: Enabling of bearer rejected, failed to enable media [ 1077.444009][T13215] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1077.616009][T15648] tipc: Enabled bearer , priority 0 [ 1077.640311][T15648] tipc: Resetting bearer [ 1077.676895][T15647] tipc: Disabling bearer [ 1078.079544][T15653] random: crng reseeded on system resumption [ 1078.579844][T13215] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1078.740003][T13215] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.790627][T13215] usb 6-1: config 220 has no interface number 2 [ 1078.817467][T13215] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1078.880220][T13215] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1078.900454][T13215] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1078.916491][T13215] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1078.963181][T13215] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1078.986425][T13215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.013072][T13215] usb 6-1: Product: syz [ 1079.023511][T13215] usb 6-1: Manufacturer: syz [ 1079.034760][T13215] usb 6-1: SerialNumber: syz [ 1079.286078][T13215] usb 6-1: selecting invalid altsetting 0 [ 1079.325611][T13215] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1079.352188][T13215] usb 6-1: No valid video chain found. [ 1079.405831][T13215] usb 6-1: selecting invalid altsetting 0 [ 1079.437414][T13215] usbtest: probe of 6-1:220.1 failed with error -22 [ 1079.497539][T13215] usb 6-1: USB disconnect, device number 23 [ 1079.943949][ T9093] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1080.162838][ T9093] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.174197][ T9093] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.192122][ T9093] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.204370][ T9093] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1080.212542][ T9093] usb 8-1: Product: syz [ 1080.216925][ T9093] usb 8-1: SerialNumber: syz [ 1080.274154][ T27] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1080.479455][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 1080.513240][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.534793][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1080.545929][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1080.555860][ T27] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1080.565870][ T27] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.601628][ T27] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1080.611791][ T27] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1080.620128][ T27] usb 7-1: Manufacturer: syz [ 1080.659973][ T27] usb 7-1: config 0 descriptor?? [ 1081.074141][ T27] rc_core: IR keymap rc-hauppauge not found [ 1081.907357][ T27] Registered IR keymap rc-empty [ 1081.915973][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1081.925507][ T9093] cdc_ncm 8-1:1.0: bind() failure [ 1081.936323][ T9093] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1081.943201][ T9093] cdc_ncm 8-1:1.1: bind() failure [ 1081.950043][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1081.985033][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1082.192368][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input62 [ 1082.225633][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1082.267660][ C1] rc rc0: IR event FIFO is full! [ 1082.272674][ C1] rc rc0: IR event FIFO is full! [ 1082.277707][ C1] rc rc0: IR event FIFO is full! [ 1082.283114][ C1] rc rc0: IR event FIFO is full! [ 1082.293959][ C1] rc rc0: IR event FIFO is full! [ 1082.299077][ C1] rc rc0: IR event FIFO is full! [ 1082.304683][ C1] rc rc0: IR event FIFO is full! [ 1082.309728][ C1] rc rc0: IR event FIFO is full! [ 1082.314712][ C1] rc rc0: IR event FIFO is full! [ 1082.319649][ C1] rc rc0: IR event FIFO is full! [ 1082.324585][ C1] rc rc0: IR event FIFO is full! [ 1082.329548][ C1] rc rc0: IR event FIFO is full! [ 1082.334479][ C1] rc rc0: IR event FIFO is full! [ 1082.339500][ C1] rc rc0: IR event FIFO is full! [ 1082.344546][ C1] rc rc0: IR event FIFO is full! [ 1082.353957][ C1] rc rc0: IR event FIFO is full! [ 1082.359026][ C1] rc rc0: IR event FIFO is full! [ 1082.364664][ C1] rc rc0: IR event FIFO is full! [ 1082.369643][ C1] rc rc0: IR event FIFO is full! [ 1082.374782][ C1] rc rc0: IR event FIFO is full! [ 1082.379734][ C1] rc rc0: IR event FIFO is full! [ 1082.384693][ C1] rc rc0: IR event FIFO is full! [ 1082.390121][ C1] rc rc0: IR event FIFO is full! [ 1082.395251][ C1] rc rc0: IR event FIFO is full! [ 1082.400436][ C1] rc rc0: IR event FIFO is full! [ 1082.405408][ C1] rc rc0: IR event FIFO is full! [ 1082.410516][ C1] rc rc0: IR event FIFO is full! [ 1082.415464][ C1] rc rc0: IR event FIFO is full! [ 1082.420434][ C1] rc rc0: IR event FIFO is full! [ 1082.425379][ C1] rc rc0: IR event FIFO is full! [ 1082.430644][ C1] rc rc0: IR event FIFO is full! [ 1082.435676][ C1] rc rc0: IR event FIFO is full! [ 1082.440609][ C1] rc rc0: IR event FIFO is full! [ 1082.445549][ C1] rc rc0: IR event FIFO is full! [ 1082.450481][ C1] rc rc0: IR event FIFO is full! [ 1082.455413][ C1] rc rc0: IR event FIFO is full! [ 1082.460681][ C1] rc rc0: IR event FIFO is full! [ 1083.523069][T15704] random: crng reseeded on system resumption [ 1083.545362][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1083.667090][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1083.728986][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1083.759626][T13215] usb 8-1: USB disconnect, device number 22 [ 1083.781319][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1083.854046][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1083.909375][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1084.008020][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1084.458479][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1084.523212][ T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1084.588175][T15723] fuse: Bad value for 'fd' [ 1084.627875][ T27] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1084.648529][ T27] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1084.696130][ T27] usb 7-1: USB disconnect, device number 30 [ 1085.414631][T15740] tipc: Enabled bearer , priority 0 [ 1085.461368][T15740] tipc: Resetting bearer [ 1085.539625][T15738] tipc: Disabling bearer [ 1086.424030][T10783] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1086.684870][T10783] usb 8-1: Using ep0 maxpacket: 16 [ 1086.737678][T10783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.871059][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1087.117490][T10783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1087.142716][T10783] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1087.208969][T10783] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.261958][T10783] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1087.273894][T10783] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1087.283919][T10783] usb 8-1: Manufacturer: syz [ 1087.341541][T10783] usb 8-1: config 0 descriptor?? [ 1087.419369][T15763] random: crng reseeded on system resumption [ 1087.744120][T10783] rc_core: IR keymap rc-hauppauge not found [ 1087.795649][T10783] Registered IR keymap rc-empty [ 1087.841518][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1087.935037][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.020312][T10783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1088.068622][T10783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input63 [ 1088.162337][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.211245][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.306204][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.425407][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.474047][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.561287][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.624021][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.668335][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.714156][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.732711][T15777] fuse: Unknown parameter 'group_i00000000000000000000' [ 1088.755734][T10783] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1088.805422][T10783] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1088.831814][T10783] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1088.897025][T10783] usb 8-1: USB disconnect, device number 23 [ 1090.545256][ T5811] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1090.793972][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.805285][ T5811] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1090.815263][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.862346][ T5811] usb 8-1: config 0 descriptor?? [ 1090.918577][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 1091.425246][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1091.433225][ T5811] pwc: recv_control_msg error -32 req 02 val 2700 [ 1091.459721][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1091.472321][ T5811] pwc: recv_control_msg error -32 req 04 val 1000 [ 1091.482572][ T5811] pwc: recv_control_msg error -32 req 04 val 1300 [ 1091.648855][ T5811] pwc: recv_control_msg error -32 req 04 val 1400 [ 1091.748284][ T5811] pwc: recv_control_msg error -32 req 02 val 2000 [ 1091.841612][ T5811] pwc: recv_control_msg error -32 req 02 val 2100 [ 1092.011782][ T5811] pwc: recv_control_msg error -32 req 04 val 1500 [ 1092.207359][ T5811] pwc: recv_control_msg error -32 req 02 val 2500 [ 1092.230617][ T5811] pwc: recv_control_msg error -32 req 02 val 2400 [ 1092.261553][ T5811] pwc: recv_control_msg error -32 req 02 val 2600 [ 1092.291406][ T5811] pwc: recv_control_msg error -32 req 02 val 2900 [ 1092.517085][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 1092.546971][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 1092.580918][ T5811] pwc: Registered as video103. [ 1093.536613][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input64 [ 1093.580249][ T5811] usb 8-1: USB disconnect, device number 24 [ 1094.354000][ T5811] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1094.433382][ T5812] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1094.589770][ T5811] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1094.598609][ T5811] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1094.609780][ T5811] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.621924][ T5811] usb 8-1: config 220 has no interface number 2 [ 1094.630153][ T5811] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1094.644310][ T5811] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1094.651407][ T5811] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1094.677829][ T5811] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1094.704831][ T5811] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1094.714725][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.722832][ T5811] usb 8-1: Product: syz [ 1094.727426][ T5811] usb 8-1: Manufacturer: syz [ 1094.732457][ T5811] usb 8-1: SerialNumber: syz [ 1094.732600][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 1094.785223][ T5812] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1094.801853][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.811126][ T5812] usb 5-1: Product: syz [ 1094.821232][ T5812] usb 5-1: Manufacturer: syz [ 1094.826316][ T5812] usb 5-1: SerialNumber: syz [ 1094.842225][ T5812] usb 5-1: config 0 descriptor?? [ 1094.860157][ T5812] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1095.800385][ T5811] usb 8-1: selecting invalid altsetting 0 [ 1095.807816][ T5811] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1095.814615][ T5811] usb 8-1: No valid video chain found. [ 1095.824618][ T5812] gspca_ov534_9: reg_w failed -110 [ 1095.828760][ T5811] usb 8-1: selecting invalid altsetting 0 [ 1095.836288][ T5811] usbtest: probe of 8-1:220.1 failed with error -22 [ 1095.853136][ T5811] usb 8-1: USB disconnect, device number 25 [ 1096.006407][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2168'. [ 1097.893199][T15870] program syz.7.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.293926][ T5812] gspca_ov534_9: Unknown sensor 0000 [ 1098.294024][ T5812] ov534_9: probe of 5-1:0.0 failed with error -22 [ 1098.339521][ T5812] usb 5-1: USB disconnect, device number 27 [ 1098.614004][ T27] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1098.847585][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.884066][ T27] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1098.894604][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.921156][ T27] usb 7-1: config 0 descriptor?? [ 1098.957126][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 1099.463605][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1099.488909][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 1099.501078][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1099.531667][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 1099.544773][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 1099.554117][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 1099.561593][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 1099.569648][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 1099.577971][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 1099.587740][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 1099.601957][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 1099.626050][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 1099.687757][ T27] pwc: recv_control_msg error -32 req 02 val 2900 [ 1099.934425][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 1100.446088][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 1100.487021][ T27] pwc: Registered as video103. [ 1100.493674][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65 [ 1100.571648][ T27] usb 7-1: USB disconnect, device number 31 [ 1100.804151][T10783] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1101.825193][T10783] usb 5-1: Using ep0 maxpacket: 32 [ 1101.851565][T10783] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1101.961644][T10783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.073326][T10783] usb 5-1: Product: syz [ 1102.119408][T10783] usb 5-1: Manufacturer: syz [ 1102.157683][T10783] usb 5-1: SerialNumber: syz [ 1102.320789][T10783] usb 5-1: config 0 descriptor?? [ 1102.402306][T10783] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1103.565914][T15926] program syz.5.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.315451][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1104.639159][T10783] gspca_ov534_9: reg_r err -110 [ 1104.691021][T15936] syzkaller0: entered promiscuous mode [ 1104.696872][T15936] syzkaller0: entered allmulticast mode [ 1104.993983][T10783] gspca_ov534_9: Unknown sensor 0000 [ 1104.994083][T10783] ov534_9: probe of 5-1:0.0 failed with error -22 [ 1105.125958][T15941] can0: slcan on ttyS3. [ 1105.755400][T15937] can0 (unregistered): slcan off ttyS3. [ 1105.926917][T10783] usb 5-1: USB disconnect, device number 28 [ 1107.604199][T15970] syzkaller0: entered promiscuous mode [ 1107.612229][T15970] syzkaller0: entered allmulticast mode [ 1109.090634][T15974] can0: slcan on ttyS3. [ 1109.295915][T15971] can0 (unregistered): slcan off ttyS3. [ 1109.486116][T15988] random: crng reseeded on system resumption [ 1109.573963][ T5811] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1109.795540][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 1109.882850][ T5811] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1109.893253][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.901517][ T5811] usb 6-1: Product: syz [ 1109.906671][ T5811] usb 6-1: Manufacturer: syz [ 1109.911416][ T5811] usb 6-1: SerialNumber: syz [ 1109.979436][ T5811] usb 6-1: config 0 descriptor?? [ 1110.013667][ T5811] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1110.938186][T16017] program syz.7.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.738091][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'. [ 1112.084874][ T5811] gspca_ov534_9: reg_r err -110 [ 1112.467668][ T5811] gspca_ov534_9: Unknown sensor 0000 [ 1112.468189][ T5811] ov534_9: probe of 6-1:0.0 failed with error -22 [ 1113.775243][T16041] can0: slcan on ttyS3. [ 1114.173871][ T787] usb 6-1: USB disconnect, device number 24 [ 1114.314505][T16035] can0 (unregistered): slcan off ttyS3. [ 1114.376553][T16049] syzkaller0: entered promiscuous mode [ 1114.382085][T16049] syzkaller0: entered allmulticast mode [ 1114.547076][T16055] random: crng reseeded on system resumption [ 1114.969010][T16071] fuse: Bad value for 'user_id' [ 1116.118789][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.125684][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.504799][ T787] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1116.704037][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 1116.740227][ T787] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1116.764109][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.883594][T16101] can0: slcan on ttyS3. [ 1117.475762][T16095] can0 (unregistered): slcan off ttyS3. [ 1117.653493][ T787] usb 5-1: Product: syz [ 1117.670870][ T787] usb 5-1: Manufacturer: syz [ 1117.676870][ T787] usb 5-1: SerialNumber: syz [ 1117.685235][ T787] usb 5-1: config 0 descriptor?? [ 1117.696809][ T787] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1117.820518][T16107] fuse: Bad value for 'fd' [ 1117.873977][T12820] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1118.086926][T12820] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1118.107938][T12820] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1118.136320][T12820] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 1118.159280][T12820] usb 6-1: config 220 descriptor has 1 excess byte, ignoring [ 1118.175693][T12820] usb 6-1: config 220 has no interface number 2 [ 1118.192756][T12820] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1118.217895][T12820] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1118.225347][T12820] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1118.232251][T12820] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1118.242995][T12820] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1118.259063][T12820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.279830][T12820] usb 6-1: Product: syz [ 1118.284769][ T5811] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1118.297686][T12820] usb 6-1: Manufacturer: syz [ 1118.302462][T12820] usb 6-1: SerialNumber: syz [ 1118.496339][ T5811] usb 7-1: config 0 has no interfaces? [ 1118.503069][ T5811] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1118.515931][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.602439][ T5811] usb 7-1: config 0 descriptor?? [ 1118.619203][T12820] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1118.649595][T12820] usb 6-1: No valid video chain found. [ 1118.655616][T12820] usb 6-1: selecting invalid altsetting 0 [ 1118.713817][T12820] usb 6-1: selecting invalid altsetting 0 [ 1118.719760][T12820] usbtest: probe of 6-1:220.1 failed with error -22 [ 1118.754007][T12820] usb 6-1: USB disconnect, device number 25 [ 1119.051726][T13215] usb 7-1: USB disconnect, device number 32 [ 1119.345019][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 1119.724492][ T787] gspca_ov534_9: reg_r err -110 [ 1120.123873][ T787] gspca_ov534_9: Unknown sensor 0000 [ 1120.123937][ T787] ov534_9: probe of 5-1:0.0 failed with error -22 [ 1120.739680][ T787] usb 5-1: USB disconnect, device number 29 [ 1120.858574][T16132] fuse: Bad value for 'fd' [ 1121.239150][T16143] can0: slcan on ttyS3. [ 1122.103926][T16129] can0 (unregistered): slcan off ttyS3. [ 1122.384189][T16152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.969252][T16155] syzkaller0: entered promiscuous mode [ 1123.006553][T16155] syzkaller0: entered allmulticast mode [ 1123.839863][T16169] fuse: Bad value for 'fd' [ 1124.123904][ T27] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1124.344122][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 1124.425224][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.594167][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1124.684748][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1124.694515][ T27] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1124.704694][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.745245][ T27] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1124.759211][ T27] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1124.896434][ T27] usb 8-1: Manufacturer: syz [ 1124.912970][ T27] usb 8-1: config 0 descriptor?? [ 1126.704823][ T27] rc_core: IR keymap rc-hauppauge not found [ 1126.714209][ T27] Registered IR keymap rc-empty [ 1126.742669][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1126.828507][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1126.832230][T16204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.870105][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1127.014864][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input66 [ 1127.062244][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.094651][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.644113][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.685041][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.860576][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.894501][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.924417][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.954296][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1127.985126][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1128.034611][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1128.078361][ T27] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1128.087912][ T27] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1128.117618][ T27] usb 8-1: USB disconnect, device number 26 [ 1128.464829][T16218] fuse: Bad value for 'fd' [ 1129.176662][T16234] can0: slcan on ttyS3. [ 1130.325607][T16228] can0 (unregistered): slcan off ttyS3. [ 1132.689778][T16280] can0: slcan on ttyS3. [ 1133.316142][T16273] can0 (unregistered): slcan off ttyS3. [ 1133.663556][T16286] tipc: Enabled bearer , priority 0 [ 1133.739887][T16285] tipc: Disabling bearer [ 1135.480192][T16307] syzkaller0: entered promiscuous mode [ 1135.490373][T16307] syzkaller0: entered allmulticast mode [ 1136.456275][T16300] program syz.7.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1136.604633][T16313] can0: slcan on ttyS3. [ 1136.694288][T16313] can0 (unregistered): slcan off ttyS3. [ 1137.373804][T12820] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1137.583991][T12820] usb 5-1: Using ep0 maxpacket: 16 [ 1137.595269][T12820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.617874][T12820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1137.643802][T12820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1137.653520][T12820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1137.689533][T12820] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.732528][T12820] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1137.753931][T12820] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1137.761980][T12820] usb 5-1: Manufacturer: syz [ 1137.791338][T12820] usb 5-1: config 0 descriptor?? [ 1138.238614][T12820] rc_core: IR keymap rc-hauppauge not found [ 1138.272015][T12820] Registered IR keymap rc-empty [ 1138.288492][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.382330][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.463269][T12820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1138.506189][T12820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 [ 1138.545912][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.602269][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.634611][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.665502][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.694749][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.729085][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.774333][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.843910][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.915787][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1138.955306][T12820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1139.016564][T12820] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1139.036092][T12820] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1139.074430][T12820] usb 5-1: USB disconnect, device number 30 [ 1139.346461][T16348] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2295'. [ 1139.373923][T16348] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2295'. [ 1139.429046][T16349] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2295'. [ 1140.083973][T16365] netlink: 'syz.7.2301': attribute type 10 has an invalid length. [ 1140.091870][T16365] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2301'. [ 1140.124576][T16365] veth0_vlan: left promiscuous mode [ 1140.142977][T16365] veth0_vlan: entered promiscuous mode [ 1140.167290][T16365] batman_adv: batadv0: Adding interface: veth0_vlan [ 1140.185217][T16365] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.240034][T16365] batman_adv: batadv0: Interface activated: veth0_vlan [ 1140.860839][T16372] program syz.4.2298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1141.394221][T16379] fuse: Invalid rootmode [ 1141.843160][T16374] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2303'. [ 1141.954855][T16374] syz.7.2303 (16374): drop_caches: 2 [ 1143.778817][T16413] fuse: Bad value for 'rootmode' [ 1145.899834][T16441] program syz.4.2319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1146.057018][T16447] fuse: Bad value for 'rootmode' [ 1148.704015][T16483] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2339'. [ 1148.723852][T16483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2339'. [ 1149.319597][T16499] program syz.6.2343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.262133][T16527] program syz.7.2354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.166786][T16534] fuse: Unknown parameter 'use00000000000000000000' [ 1153.234690][T12820] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1153.547111][T12820] usb 5-1: config 0 has no interfaces? [ 1153.557527][T12820] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1153.576305][T12820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.582300][T16549] syzkaller0: entered promiscuous mode [ 1153.590630][T16549] syzkaller0: entered allmulticast mode [ 1153.646838][T16554] program syz.5.2363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.475696][T12820] usb 5-1: config 0 descriptor?? [ 1154.728325][T12820] usb 5-1: USB disconnect, device number 31 [ 1155.614932][ T787] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1155.823778][ T787] usb 7-1: Using ep0 maxpacket: 16 [ 1155.831269][ T787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.852661][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.869577][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1155.880711][ T787] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1155.892027][ T787] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.210486][ T787] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1156.242994][ T787] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1156.303579][ T787] usb 7-1: Manufacturer: syz [ 1156.625359][ T787] usb 7-1: config 0 descriptor?? [ 1157.065448][ T787] rc_core: IR keymap rc-hauppauge not found [ 1157.071429][ T787] Registered IR keymap rc-empty [ 1157.100399][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.151607][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.206573][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1157.240785][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input75 [ 1157.264109][ T5811] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1157.299315][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.350565][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.402183][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.432502][ T5811] usb 6-1: device descriptor read/64, error -71 [ 1157.472555][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.504008][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.567625][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.734464][ T5811] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1157.811911][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1157.894070][ T5811] usb 6-1: device descriptor read/64, error -71 [ 1157.989408][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1158.023142][ T5811] usb usb6-port1: attempt power cycle [ 1158.028249][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1158.089843][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1158.204418][ T787] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1158.215783][ T787] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.242088][ T787] usb 7-1: USB disconnect, device number 33 [ 1158.475260][ T5811] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1158.527807][ T5811] usb 6-1: device descriptor read/8, error -71 [ 1158.805905][ T5811] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1158.877992][ T5811] usb 6-1: device descriptor read/8, error -71 [ 1158.911033][T12820] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1159.014898][ T5811] usb usb6-port1: unable to enumerate USB device [ 1159.111772][T12820] usb 7-1: config 0 has no interfaces? [ 1159.117617][T12820] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1159.128205][T12820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.145317][T12820] usb 7-1: config 0 descriptor?? [ 1159.573945][ T5811] usb 7-1: USB disconnect, device number 34 [ 1159.920567][T16600] netlink: 'syz.7.2378': attribute type 29 has an invalid length. [ 1159.931538][T16600] netlink: 'syz.7.2378': attribute type 29 has an invalid length. [ 1159.943606][T16597] netlink: 'syz.7.2378': attribute type 29 has an invalid length. [ 1160.240784][T16597] netlink: 'syz.7.2378': attribute type 29 has an invalid length. [ 1160.954378][T16623] fuse: Unknown parameter 'user_i00000000000000000000' [ 1161.264470][ T5811] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1161.281052][T16627] autofs4:pid:16627:autofs_fill_super: called with bogus options [ 1161.479517][ T5811] usb 8-1: config 0 has no interfaces? [ 1161.485256][ T5811] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1161.496770][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.552310][ T5811] usb 8-1: config 0 descriptor?? [ 1161.925434][T10783] usb 8-1: USB disconnect, device number 27 [ 1162.149441][T16634] program syz.6.2392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1163.302307][T16645] fuse: Unknown parameter 'user_i00000000000000000000' [ 1163.756942][T16659] program syz.5.2401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1164.780759][T16678] fuse: Unknown parameter 'user_i00000000000000000000' [ 1165.303933][ T5812] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1165.710539][ T5812] usb 5-1: config 0 has no interfaces? [ 1165.735726][ T5812] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1165.774476][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.990920][ T5812] usb 5-1: config 0 descriptor?? [ 1166.124570][T16699] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2414'. [ 1166.259932][T12820] usb 5-1: USB disconnect, device number 32 [ 1166.414621][T16705] fuse: Unknown parameter 'user_id00000000000000000000' [ 1169.012667][T16742] fuse: Unknown parameter 'user_id00000000000000000000' [ 1169.473269][T16752] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1170.584536][T16761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1171.005131][T13215] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1171.243995][T13215] usb 7-1: Using ep0 maxpacket: 32 [ 1171.573181][T13215] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1171.589257][T13215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.621541][T13215] usb 7-1: Product: syz [ 1171.638653][T13215] usb 7-1: Manufacturer: syz [ 1171.669172][T13215] usb 7-1: SerialNumber: syz [ 1171.816270][T13215] usb 7-1: config 0 descriptor?? [ 1171.846397][T13215] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1172.354133][T13215] gspca_ov534_9: reg_w failed -110 [ 1173.949602][T16791] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1174.689453][T13215] gspca_ov534_9: Unknown sensor 0000 [ 1174.689551][T13215] ov534_9: probe of 7-1:0.0 failed with error -22 [ 1174.726486][T13215] usb 7-1: USB disconnect, device number 35 [ 1175.158443][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2446'. [ 1175.323928][T13215] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1175.527790][T13215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.540508][T13215] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1175.550401][T13215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.563668][T13215] usb 5-1: config 0 descriptor?? [ 1175.579121][T13215] pwc: Askey VC010 type 2 USB webcam detected. [ 1176.000739][T13215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1176.012106][T13215] pwc: recv_control_msg error -32 req 02 val 2700 [ 1176.019726][T13215] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1176.030535][T13215] pwc: recv_control_msg error -32 req 04 val 1000 [ 1176.046994][T13215] pwc: recv_control_msg error -32 req 04 val 1300 [ 1176.062196][T13215] pwc: recv_control_msg error -32 req 04 val 1400 [ 1176.070081][T13215] pwc: recv_control_msg error -32 req 02 val 2000 [ 1176.080056][T13215] pwc: recv_control_msg error -32 req 02 val 2100 [ 1176.103621][T13215] pwc: recv_control_msg error -32 req 04 val 1500 [ 1176.127050][T13215] pwc: recv_control_msg error -32 req 02 val 2500 [ 1176.147870][T13215] pwc: recv_control_msg error -32 req 02 val 2400 [ 1176.167503][T13215] pwc: recv_control_msg error -32 req 02 val 2600 [ 1176.198108][T13215] pwc: recv_control_msg error -32 req 02 val 2900 [ 1177.787384][T13215] pwc: recv_control_msg error -71 req 04 val 1100 [ 1177.787968][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.802809][ T5812] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1177.804295][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.811044][T13215] pwc: recv_control_msg error -71 req 04 val 1200 [ 1177.826664][T13215] pwc: Registered as video103. [ 1177.833492][T13215] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 1178.019237][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 1178.424796][T13215] usb 5-1: USB disconnect, device number 33 [ 1178.436559][ T5812] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1178.459290][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.488250][ T5812] usb 7-1: Product: syz [ 1178.492484][ T5812] usb 7-1: Manufacturer: syz [ 1178.505935][ T5812] usb 7-1: SerialNumber: syz [ 1178.513469][ T5812] usb 7-1: config 0 descriptor?? [ 1178.522830][ T5812] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1178.862956][T16828] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1179.553480][ T5812] gspca_ov534_9: reg_w failed -110 [ 1179.640508][T16832] random: crng reseeded on system resumption [ 1180.184444][ T5812] gspca_ov534_9: Unknown sensor 0000 [ 1180.184898][ T5812] ov534_9: probe of 7-1:0.0 failed with error -22 [ 1182.020355][T12820] usb 7-1: USB disconnect, device number 36 [ 1183.447369][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2458'. [ 1183.871512][ T5811] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1184.024259][T16873] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1184.124644][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.278714][ T5811] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1184.441162][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.655618][ T5811] usb 8-1: config 0 descriptor?? [ 1184.687614][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 1185.170442][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1185.201905][ T5811] pwc: recv_control_msg error -32 req 02 val 2700 [ 1185.213224][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1185.224132][ T5811] pwc: recv_control_msg error -32 req 04 val 1000 [ 1185.233413][ T5811] pwc: recv_control_msg error -32 req 04 val 1300 [ 1185.250764][ T5811] pwc: recv_control_msg error -32 req 04 val 1400 [ 1185.260236][ T5811] pwc: recv_control_msg error -32 req 02 val 2000 [ 1185.273603][ T5811] pwc: recv_control_msg error -32 req 02 val 2100 [ 1185.285776][ T5811] pwc: recv_control_msg error -32 req 04 val 1500 [ 1185.297999][ T5811] pwc: recv_control_msg error -32 req 02 val 2500 [ 1185.576480][ T5811] pwc: recv_control_msg error -32 req 02 val 2400 [ 1185.593009][ T5811] pwc: recv_control_msg error -32 req 02 val 2600 [ 1185.603953][ T5811] pwc: recv_control_msg error -32 req 02 val 2900 [ 1185.819611][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 1185.828207][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 1185.851137][ T5811] pwc: Registered as video103. [ 1185.868861][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input77 [ 1185.968492][ T5811] usb 8-1: USB disconnect, device number 28 [ 1186.288953][T16885] netlink: 'syz.6.2466': attribute type 39 has an invalid length. [ 1186.451033][T16889] random: crng reseeded on system resumption [ 1187.613579][T16907] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2472'. [ 1187.883213][T16912] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1190.503911][T13215] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1190.562648][T16937] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2484'. [ 1190.715727][T13215] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.817154][T16941] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1191.551764][T13215] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1191.561094][T13215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.576090][T13215] usb 8-1: config 0 descriptor?? [ 1191.598928][T13215] pwc: Askey VC010 type 2 USB webcam detected. [ 1192.445064][T13215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1192.469857][T13215] pwc: recv_control_msg error -32 req 02 val 2700 [ 1192.493343][T13215] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1192.512063][T13215] pwc: recv_control_msg error -32 req 04 val 1000 [ 1192.520257][T13215] pwc: recv_control_msg error -32 req 04 val 1300 [ 1192.551294][T13215] pwc: recv_control_msg error -32 req 04 val 1400 [ 1192.571613][T13215] pwc: recv_control_msg error -32 req 02 val 2000 [ 1192.584981][T13215] pwc: recv_control_msg error -32 req 02 val 2100 [ 1192.605827][T13215] pwc: recv_control_msg error -32 req 04 val 1500 [ 1192.620583][T13215] pwc: recv_control_msg error -32 req 02 val 2500 [ 1192.640527][T13215] pwc: recv_control_msg error -32 req 02 val 2400 [ 1192.657790][T13215] pwc: recv_control_msg error -32 req 02 val 2600 [ 1192.685496][T13215] pwc: recv_control_msg error -32 req 02 val 2900 [ 1193.046368][T13215] pwc: recv_control_msg error -71 req 04 val 1100 [ 1193.123865][T13215] pwc: recv_control_msg error -71 req 04 val 1200 [ 1194.128108][T13215] pwc: Registered as video103. [ 1194.758559][T13215] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input78 [ 1194.870403][T13215] usb 8-1: USB disconnect, device number 29 [ 1195.156549][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2494'. [ 1195.387023][T16981] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1195.833871][T16984] program syz.5.2496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1196.867368][T16987] netlink: 'syz.5.2497': attribute type 29 has an invalid length. [ 1196.887557][T16987] netlink: 'syz.5.2497': attribute type 29 has an invalid length. [ 1196.936177][T16987] netlink: 'syz.5.2497': attribute type 29 has an invalid length. [ 1197.151578][T16995] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1198.143980][T13215] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1198.346338][T13215] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.370347][T13215] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1198.408515][T13215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.478223][T13215] usb 8-1: config 0 descriptor?? [ 1198.499539][T13215] pwc: Askey VC010 type 2 USB webcam detected. [ 1198.915376][T13215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1198.932309][T13215] pwc: recv_control_msg error -32 req 02 val 2700 [ 1198.945045][T13215] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1198.952673][T13215] pwc: recv_control_msg error -32 req 04 val 1000 [ 1198.970063][T13215] pwc: recv_control_msg error -32 req 04 val 1300 [ 1198.982847][T13215] pwc: recv_control_msg error -32 req 04 val 1400 [ 1199.019420][T13215] pwc: recv_control_msg error -32 req 02 val 2000 [ 1199.038995][T13215] pwc: recv_control_msg error -32 req 02 val 2100 [ 1199.061139][T13215] pwc: recv_control_msg error -32 req 04 val 1500 [ 1199.086716][T13215] pwc: recv_control_msg error -32 req 02 val 2500 [ 1199.112917][T13215] pwc: recv_control_msg error -32 req 02 val 2400 [ 1199.125692][T13215] pwc: recv_control_msg error -32 req 02 val 2600 [ 1199.137988][T13215] pwc: recv_control_msg error -32 req 02 val 2900 [ 1200.980241][T13215] pwc: recv_control_msg error -71 req 04 val 1100 [ 1200.987626][T13215] pwc: recv_control_msg error -71 req 04 val 1200 [ 1201.014946][T13215] pwc: Registered as video103. [ 1201.035783][T13215] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input79 [ 1201.082942][T13215] usb 8-1: USB disconnect, device number 30 [ 1201.255501][T17024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1203.251989][T17052] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1204.754232][T12820] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1204.976136][T12820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.008542][T12820] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1205.022187][T12820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.055452][T12820] usb 6-1: config 0 descriptor?? [ 1205.074527][T12820] pwc: Askey VC010 type 2 USB webcam detected. [ 1205.388455][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 1205.435305][T17064] netlink: 'syz.4.2521': attribute type 20 has an invalid length. [ 1205.471078][T17064] netlink: 'syz.4.2521': attribute type 21 has an invalid length. [ 1205.478722][T12820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1205.500420][T12820] pwc: recv_control_msg error -32 req 02 val 2700 [ 1205.510661][T12820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1205.520420][T12820] pwc: recv_control_msg error -32 req 04 val 1000 [ 1205.530796][T12820] pwc: recv_control_msg error -32 req 04 val 1300 [ 1205.541763][T12820] pwc: recv_control_msg error -32 req 04 val 1400 [ 1205.549460][T12820] pwc: recv_control_msg error -32 req 02 val 2000 [ 1205.559613][T12820] pwc: recv_control_msg error -32 req 02 val 2100 [ 1205.568667][T12820] pwc: recv_control_msg error -32 req 04 val 1500 [ 1205.589168][T12820] pwc: recv_control_msg error -32 req 02 val 2500 [ 1205.618119][T12820] pwc: recv_control_msg error -32 req 02 val 2400 [ 1205.636739][T12820] pwc: recv_control_msg error -32 req 02 val 2600 [ 1205.666192][T12820] pwc: recv_control_msg error -32 req 02 val 2900 [ 1205.767908][T17074] syzkaller0: entered promiscuous mode [ 1205.773575][T17074] syzkaller0: entered allmulticast mode [ 1205.876476][T12820] pwc: recv_control_msg error -71 req 04 val 1100 [ 1205.888413][T12820] pwc: recv_control_msg error -71 req 04 val 1200 [ 1205.913300][T12820] pwc: Registered as video103. [ 1205.943291][T12820] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 1205.994393][T12820] usb 6-1: USB disconnect, device number 30 [ 1206.115324][T17081] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 1206.156674][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2526'. [ 1206.566069][T17083] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1209.128130][T17111] syzkaller0: entered promiscuous mode [ 1209.162358][T17111] syzkaller0: entered allmulticast mode [ 1209.888634][T17126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1209.900124][T17126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1209.911066][T17126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1210.414272][T17131] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1211.365331][T17126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1211.375797][T17126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1211.383348][T17126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1211.402827][T11785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1211.424138][T11785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1211.431900][T11785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1211.440723][T11785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1211.449439][T11785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1211.458726][T11785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1212.151308][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1212.174324][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 1212.185830][T17108] netlink: 'syz.4.2533': attribute type 20 has an invalid length. [ 1212.197284][T17108] netlink: 'syz.4.2533': attribute type 21 has an invalid length. [ 1212.500376][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.102380][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.613917][T17126] Bluetooth: hci0: command tx timeout [ 1213.817206][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.913044][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.928748][T17157] syzkaller0: entered promiscuous mode [ 1213.935438][T17157] syzkaller0: entered allmulticast mode [ 1214.054400][T12820] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1214.245218][T17123] chnl_net:caif_netlink_parms(): no params data found [ 1214.261813][T12820] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1214.280754][T12820] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1214.295776][T12820] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 1214.314532][T12820] usb 5-1: config 220 has no interface number 2 [ 1214.320907][T12820] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.344261][T12820] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1214.371451][T12820] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1214.381741][T12820] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1214.401067][T12820] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1214.433757][T12820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.451829][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2549'. [ 1214.452052][T12820] usb 5-1: Product: syz [ 1214.468275][T12820] usb 5-1: Manufacturer: syz [ 1214.472927][T12820] usb 5-1: SerialNumber: syz [ 1214.498539][ T12] tipc: Left network mode [ 1214.661379][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.672708][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.701769][T17123] bridge_slave_0: entered allmulticast mode [ 1214.717688][T17123] bridge_slave_0: entered promiscuous mode [ 1214.736474][T12820] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1214.754075][T12820] usb 5-1: No valid video chain found. [ 1214.772495][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.780739][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.786353][T12820] usb 5-1: USB disconnect, device number 34 [ 1214.788647][T17123] bridge_slave_1: entered allmulticast mode [ 1214.802636][T17123] bridge_slave_1: entered promiscuous mode [ 1215.013587][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.060939][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2550'. [ 1215.089770][T17171] netlink: 'syz.6.2550': attribute type 20 has an invalid length. [ 1215.109735][T17171] netlink: 'syz.6.2550': attribute type 21 has an invalid length. [ 1215.121406][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.444046][T17123] team0: Port device team_slave_0 added [ 1215.641250][T17126] Bluetooth: hci0: command tx timeout [ 1216.305271][T17123] team0: Port device team_slave_1 added [ 1216.549791][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.583821][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.674079][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.842494][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.870438][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2559'. [ 1216.873784][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.952967][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.965771][T17211] syzkaller0: entered promiscuous mode [ 1216.977344][T17211] syzkaller0: entered allmulticast mode [ 1217.203305][T17123] hsr_slave_0: entered promiscuous mode [ 1217.225332][T17123] hsr_slave_1: entered promiscuous mode [ 1217.553551][ T12] hsr_slave_0: left promiscuous mode [ 1217.604096][ T12] hsr_slave_1: left promiscuous mode [ 1217.647926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.675083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.693550][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.713839][T17126] Bluetooth: hci0: command tx timeout [ 1217.727432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.759259][ T12] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1217.784187][ T12] batman_adv: batadv0: Removing interface: veth0_vlan [ 1217.795893][ T12] bridge_slave_1: left allmulticast mode [ 1217.811294][ T12] bridge_slave_1: left promiscuous mode [ 1217.833092][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.872433][ T12] bridge_slave_0: left allmulticast mode [ 1217.897370][ T12] bridge_slave_0: left promiscuous mode [ 1217.904373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.034420][ T12] veth1_macvtap: left promiscuous mode [ 1218.041677][ T12] veth0_macvtap: left promiscuous mode [ 1218.062104][ T12] veth1_vlan: left promiscuous mode [ 1218.082114][ T12] veth0_vlan: left promiscuous mode [ 1218.566171][ T12] bond2 (unregistering): Released all slaves [ 1218.644813][ T12] bond1 (unregistering): Released all slaves [ 1219.672419][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1219.741072][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1219.810538][T17126] Bluetooth: hci0: command tx timeout [ 1219.865196][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.195068][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.986392][ T12] bond0 (unregistering): Released all slaves [ 1223.565904][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1223.582441][T17240] netlink: 'syz.6.2562': attribute type 20 has an invalid length. [ 1223.596807][T17240] netlink: 'syz.6.2562': attribute type 21 has an invalid length. [ 1224.002260][T17270] syzkaller0: entered promiscuous mode [ 1224.018072][T17270] syzkaller0: entered allmulticast mode [ 1224.386051][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 1224.478007][ T12] IPVS: stop unused estimator thread 0... [ 1225.088965][T17123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1225.120549][T17123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1225.177298][T17123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1225.247095][T17123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1225.530790][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.594295][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.614327][T17311] syzkaller0: entered promiscuous mode [ 1225.619867][T17311] syzkaller0: entered allmulticast mode [ 1225.654362][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.661567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.833352][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.840566][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.580530][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2575'. [ 1226.590319][T17304] netlink: 'syz.6.2575': attribute type 20 has an invalid length. [ 1226.624035][T17304] netlink: 'syz.6.2575': attribute type 21 has an invalid length. [ 1227.013373][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1227.143375][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.424509][ T787] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1227.618653][ T787] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1227.644194][ T787] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1227.653219][ T787] usb 7-1: config 220 descriptor has 1 excess byte, ignoring [ 1227.685438][ T787] usb 7-1: config 220 has no interface number 2 [ 1227.705030][ T787] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1227.740765][ T787] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1227.750014][ T787] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1227.759884][ T787] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1227.817186][ T787] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1227.850882][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.881105][ T787] usb 7-1: Product: syz [ 1227.903963][ T787] usb 7-1: Manufacturer: syz [ 1227.908654][ T787] usb 7-1: SerialNumber: syz [ 1227.919871][T17123] veth0_vlan: entered promiscuous mode [ 1227.961089][T17123] veth1_vlan: entered promiscuous mode [ 1228.047164][T17123] veth0_macvtap: entered promiscuous mode [ 1228.081130][T17123] veth1_macvtap: entered promiscuous mode [ 1228.106409][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.120635][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.123966][ T27] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1228.131050][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.157744][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.168303][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.183761][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.193971][ T787] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1228.200571][ T787] usb 7-1: No valid video chain found. [ 1228.213432][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.229852][ T787] usb 7-1: USB disconnect, device number 37 [ 1228.310223][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.356666][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.364286][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.421886][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.459526][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.500278][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.532358][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.580775][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.651389][T17123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.664365][ T27] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.685887][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.698086][T17123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.708477][ T27] usb 5-1: config 0 descriptor?? [ 1228.713777][T17123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.722523][T17123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.735574][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.033611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.123627][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.149771][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1229.189497][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 1229.212274][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1229.220905][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 1229.249015][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 1229.258467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.271426][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 1229.279663][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.292729][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 1229.335634][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 1229.366330][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 1229.392135][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 1229.421690][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 1229.435258][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 1229.453398][ T27] pwc: recv_control_msg error -32 req 02 val 2900 [ 1229.662068][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 1229.683955][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 1229.713455][ T27] pwc: Registered as video103. [ 1229.754891][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 1229.827319][ T27] usb 5-1: USB disconnect, device number 35 [ 1230.464026][T17407] syzkaller0: entered promiscuous mode [ 1230.479698][T17409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.493718][T17407] syzkaller0: entered allmulticast mode [ 1230.524866][T17407] ------------[ cut here ]------------ [ 1230.530922][T17407] WARNING: CPU: 0 PID: 17407 at include/linux/skbuff.h:2903 em_nbyte_match+0x2d0/0x3e0 [ 1230.540863][T17407] Modules linked in: [ 1230.544867][T17407] CPU: 0 PID: 17407 Comm: syz.5.2597 Not tainted syzkaller #0 [ 1230.552375][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.562532][T17407] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 1230.568124][T17407] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1230.587866][T17407] RSP: 0018:ffffc90003737118 EFLAGS: 00010283 [ 1230.594028][T17407] RAX: ffffffff88b2ace0 RBX: ffff888064d06640 RCX: 0000000000080000 [ 1230.602067][T17407] RDX: ffffc9001ac00000 RSI: 00000000000006f6 RDI: 00000000000006f7 [ 1230.610273][T17407] RBP: 000000000000ffff R08: ffff88802caa9e00 R09: 0000000000000003 [ 1230.618456][T17407] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1230.626533][T17407] R13: 1ffff1100c9a0cde R14: ffff888018e82208 R15: 1ffff110031d0441 [ 1230.634852][T17407] FS: 00007f0a5d9f26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1230.643925][T17407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1230.650560][T17407] CR2: 000000110c427426 CR3: 000000002667c000 CR4: 00000000003526f0 [ 1230.658932][T17407] Call Trace: [ 1230.662258][T17407] [ 1230.665369][T17407] __tcf_em_tree_match+0x1cf/0x7a0 [ 1230.670551][T17407] ? tcf_em_tree_dump+0x900/0x900 [ 1230.675708][T17407] ? __lock_acquire+0x1273/0x7d40 [ 1230.680876][T17407] basic_classify+0x115/0x2d0 [ 1230.685887][T17407] tcf_classify+0x4c4/0xeb0 [ 1230.690485][T17407] multiq_enqueue+0x103/0x4c0 [ 1230.695475][T17407] ? sch_tree_unlock+0x1b0/0x1b0 [ 1230.700906][T17407] ? do_raw_spin_lock+0x11f/0x2c0 [ 1230.706064][T17407] ? __rwlock_init+0x150/0x150 [ 1230.710897][T17407] dev_qdisc_enqueue+0x48/0x220 [ 1230.716024][T17407] ? __dev_queue_xmit+0xd30/0x3660 [ 1230.721217][T17407] __dev_queue_xmit+0xe96/0x3660 [ 1230.726337][T17407] ? __dev_queue_xmit+0x265/0x3660 [ 1230.731570][T17407] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1230.737313][T17407] ? netdev_core_pick_tx+0x340/0x340 [ 1230.742837][T17407] ? packet_parse_headers+0x85e/0xac0 [ 1230.748401][T17407] ? __virt_addr_valid+0x18c/0x540 [ 1230.753700][T17407] ? __check_object_size+0x506/0xa20 [ 1230.759208][T17407] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1230.764913][T17407] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 1230.771084][T17407] ? packet_xmit+0x66/0x330 [ 1230.775801][T17407] ? packet_sendmsg+0x3a37/0x4d70 [ 1230.781002][T17407] packet_sendmsg+0x3b7a/0x4d70 [ 1230.786023][T17407] ? verify_lock_unused+0x140/0x140 [ 1230.791332][T17407] ? finish_task_switch+0x265/0x8f0 [ 1230.796733][T17407] ? verify_lock_unused+0x140/0x140 [ 1230.802062][T17407] ? aa_sk_perm+0x83c/0x970 [ 1230.806831][T17407] ? packet_getsockopt+0xad0/0xad0 [ 1230.812166][T17407] ? aa_sock_msg_perm+0x94/0x150 [ 1230.817282][T17407] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1230.822647][T17407] ? security_socket_sendmsg+0x80/0xa0 [ 1230.828216][T17407] ? packet_getsockopt+0xad0/0xad0 [ 1230.833406][T17407] ____sys_sendmsg+0x5ba/0x960 [ 1230.838344][T17407] ? __lock_acquire+0x7d40/0x7d40 [ 1230.843436][T17407] ? __asan_memset+0x22/0x40 [ 1230.848125][T17407] ? __sys_sendmsg_sock+0x30/0x30 [ 1230.853189][T17407] ? __import_iovec+0x5f2/0x850 [ 1230.858181][T17407] ? import_iovec+0x73/0xa0 [ 1230.862739][T17407] ___sys_sendmsg+0x2a6/0x360 [ 1230.867588][T17407] ? __sys_sendmsg+0x2a0/0x2a0 [ 1230.872462][T17407] __se_sys_sendmsg+0x1c2/0x2b0 [ 1230.877397][T17407] ? __x64_sys_sendmsg+0x80/0x80 [ 1230.882396][T17407] ? lockdep_hardirqs_on+0x98/0x150 [ 1230.887798][T17407] do_syscall_64+0x55/0xa0 [ 1230.892274][T17407] ? clear_bhb_loop+0x40/0x90 [ 1230.897116][T17407] ? clear_bhb_loop+0x40/0x90 [ 1230.901945][T17407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1230.907940][T17407] RIP: 0033:0x7f0a5cb9c819 [ 1230.912486][T17407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.932290][T17407] RSP: 002b:00007f0a5d9f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.940879][T17407] RAX: ffffffffffffffda RBX: 00007f0a5ce15fa0 RCX: 00007f0a5cb9c819 [ 1230.949107][T17407] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 1230.957248][T17407] RBP: 00007f0a5cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1230.965395][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.973406][T17407] R13: 00007f0a5ce16038 R14: 00007f0a5ce15fa0 R15: 00007ffc17b10fa8 [ 1230.981475][T17407] [ 1230.984561][T17407] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1230.991881][T17407] CPU: 0 PID: 17407 Comm: syz.5.2597 Not tainted syzkaller #0 [ 1230.999382][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1231.009487][T17407] Call Trace: [ 1231.012817][T17407] [ 1231.015888][T17407] dump_stack_lvl+0x18c/0x250 [ 1231.020658][T17407] ? show_regs_print_info+0x20/0x20 [ 1231.025916][T17407] ? load_image+0x400/0x400 [ 1231.030528][T17407] panic+0x2dc/0x730 [ 1231.034485][T17407] ? bpf_jit_dump+0xd0/0xd0 [ 1231.039055][T17407] __warn+0x2e0/0x470 [ 1231.043355][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.048265][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.053171][T17407] report_bug+0x2be/0x4f0 [ 1231.057566][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.062467][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.067369][T17407] ? em_nbyte_match+0x2d2/0x3e0 [ 1231.072271][T17407] handle_bug+0xcf/0x120 [ 1231.076644][T17407] exc_invalid_op+0x1a/0x50 [ 1231.081179][T17407] asm_exc_invalid_op+0x1a/0x20 [ 1231.086081][T17407] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 1231.091552][T17407] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1231.111255][T17407] RSP: 0018:ffffc90003737118 EFLAGS: 00010283 [ 1231.117335][T17407] RAX: ffffffff88b2ace0 RBX: ffff888064d06640 RCX: 0000000000080000 [ 1231.125491][T17407] RDX: ffffc9001ac00000 RSI: 00000000000006f6 RDI: 00000000000006f7 [ 1231.133475][T17407] RBP: 000000000000ffff R08: ffff88802caa9e00 R09: 0000000000000003 [ 1231.141467][T17407] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1231.149533][T17407] R13: 1ffff1100c9a0cde R14: ffff888018e82208 R15: 1ffff110031d0441 [ 1231.157521][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.162391][T17407] ? em_nbyte_match+0x2d0/0x3e0 [ 1231.167255][T17407] __tcf_em_tree_match+0x1cf/0x7a0 [ 1231.172383][T17407] ? tcf_em_tree_dump+0x900/0x900 [ 1231.177431][T17407] ? __lock_acquire+0x1273/0x7d40 [ 1231.182479][T17407] basic_classify+0x115/0x2d0 [ 1231.187171][T17407] tcf_classify+0x4c4/0xeb0 [ 1231.191711][T17407] multiq_enqueue+0x103/0x4c0 [ 1231.196403][T17407] ? sch_tree_unlock+0x1b0/0x1b0 [ 1231.201512][T17407] ? do_raw_spin_lock+0x11f/0x2c0 [ 1231.206549][T17407] ? __rwlock_init+0x150/0x150 [ 1231.211328][T17407] dev_qdisc_enqueue+0x48/0x220 [ 1231.216186][T17407] ? __dev_queue_xmit+0xd30/0x3660 [ 1231.221317][T17407] __dev_queue_xmit+0xe96/0x3660 [ 1231.226273][T17407] ? __dev_queue_xmit+0x265/0x3660 [ 1231.231401][T17407] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1231.236881][T17407] ? netdev_core_pick_tx+0x340/0x340 [ 1231.242264][T17407] ? packet_parse_headers+0x85e/0xac0 [ 1231.247866][T17407] ? __virt_addr_valid+0x18c/0x540 [ 1231.253080][T17407] ? __check_object_size+0x506/0xa20 [ 1231.258372][T17407] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1231.264016][T17407] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 1231.270115][T17407] ? packet_xmit+0x66/0x330 [ 1231.274708][T17407] ? packet_sendmsg+0x3a37/0x4d70 [ 1231.279749][T17407] packet_sendmsg+0x3b7a/0x4d70 [ 1231.284632][T17407] ? verify_lock_unused+0x140/0x140 [ 1231.289880][T17407] ? finish_task_switch+0x265/0x8f0 [ 1231.295085][T17407] ? verify_lock_unused+0x140/0x140 [ 1231.300304][T17407] ? aa_sk_perm+0x83c/0x970 [ 1231.304911][T17407] ? packet_getsockopt+0xad0/0xad0 [ 1231.310044][T17407] ? aa_sock_msg_perm+0x94/0x150 [ 1231.315001][T17407] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1231.320297][T17407] ? security_socket_sendmsg+0x80/0xa0 [ 1231.325766][T17407] ? packet_getsockopt+0xad0/0xad0 [ 1231.330902][T17407] ____sys_sendmsg+0x5ba/0x960 [ 1231.335675][T17407] ? __lock_acquire+0x7d40/0x7d40 [ 1231.340712][T17407] ? __asan_memset+0x22/0x40 [ 1231.345320][T17407] ? __sys_sendmsg_sock+0x30/0x30 [ 1231.350345][T17407] ? __import_iovec+0x5f2/0x850 [ 1231.355208][T17407] ? import_iovec+0x73/0xa0 [ 1231.359822][T17407] ___sys_sendmsg+0x2a6/0x360 [ 1231.364601][T17407] ? __sys_sendmsg+0x2a0/0x2a0 [ 1231.369412][T17407] __se_sys_sendmsg+0x1c2/0x2b0 [ 1231.374359][T17407] ? __x64_sys_sendmsg+0x80/0x80 [ 1231.379316][T17407] ? lockdep_hardirqs_on+0x98/0x150 [ 1231.384526][T17407] do_syscall_64+0x55/0xa0 [ 1231.389043][T17407] ? clear_bhb_loop+0x40/0x90 [ 1231.393734][T17407] ? clear_bhb_loop+0x40/0x90 [ 1231.398601][T17407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1231.404509][T17407] RIP: 0033:0x7f0a5cb9c819 [ 1231.409017][T17407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.428722][T17407] RSP: 002b:00007f0a5d9f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.437154][T17407] RAX: ffffffffffffffda RBX: 00007f0a5ce15fa0 RCX: 00007f0a5cb9c819 [ 1231.445315][T17407] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 1231.453289][T17407] RBP: 00007f0a5cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1231.461272][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.469343][T17407] R13: 00007f0a5ce16038 R14: 00007f0a5ce15fa0 R15: 00007ffc17b10fa8 [ 1231.477336][T17407] [ 1231.480858][T17407] Kernel Offset: disabled [ 1231.485366][T17407] Rebooting in 86400 seconds..