last executing test programs: 24m23.017473807s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40025b0c, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) 24m19.3942548s ago: executing program 0 (id=30): mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, &(0x7f0000000800)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000816abb05797ad5453475444b12164e387f24ea460980ad9ccf4867c5493e2b6508dd6a36279bdb7fb89b91164a830530b9626502d26bdd5a0d68408018941336e1fbf7de656e7219fccce9838eb1dbab9732f71dba9a1d7fcfbbf7360", @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000011002a00250301af3f75060000070042000000000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0xffc}}, 0x0, @random=0x8, 0x1, @void, @void, @void, @void, @void, @void, @void, @void}, 0x24) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a03874000802110000008845e1e0211b5738cd0802110800001943ee7a55883b4a2661bc07"], 0x2c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x2, 0xe0, 0x4}, {0x1, 0xb, 0xfb, 0x5}, {0x9, 0x40, 0x3, 0x6}]}, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x5, 0x7}, 'port1\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x5, 0x40000, 0x20009, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000006c0)={0x800100, 0xfffffffd, 0x22, 0xe0, 0xc, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x20000001, 0x40, 0x2, 0xa7, 0x0, r3}) clock_gettime(0xfffffffffffffffb, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 24m15.761719913s ago: executing program 0 (id=35): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, &(0x7f0000000040)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 24m15.363113126s ago: executing program 0 (id=36): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 24m14.572775484s ago: executing program 0 (id=39): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}], 0x2, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x3e0}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d", 0xc5}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 24m12.473272345s ago: executing program 0 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xc, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25170000000c009900ffffffff0d000000"], 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2c048004}, 0x890) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 23m56.649957962s ago: executing program 32 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xc, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25170000000c009900ffffffff0d000000"], 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2c048004}, 0x890) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c8708786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb83928d7b568daf133e50b003ff76433c9a0e6e687f97aecbc861c60c4296d49de4ff22a4d0eb8d04ad206c73cee7b43725690a9a45a7f7a79962edbd97c86d77b09bfe6ecedecda2be0cea971ff7beeae8cbb016a54d948310e36e03601708bab36e355b4731dccddb0058ca3bf7a9acbb9ab12353c69d5895c19616069c0e5524de75c8a682f0b772277977593cb12216adf4ff05654866decaf03d068e90cb7bc4285e978afa4cd7cc2bdfc1b0e359edc86696149193b2779014cd2ddc2dd971b0104ecc2b7f097fd36c1ffd10665cf34be94457354087be788daf6d0f9543d32ab5eef13c97ba7b967fa66cc1a48e743521d4c717625", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 5m13.69540911s ago: executing program 4 (id=2265): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0xa001, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000400)={0x0, 0x0, 0x80000000, 0x0, 0x11}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ptrace(0x10, 0x0) 5m11.501241744s ago: executing program 4 (id=2271): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r3, 0x0, 0x400, 0x100, &(0x7f0000000540)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m10.781499208s ago: executing program 4 (id=2273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000b00)=""/4103, 0x1007}], 0x2}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 5m9.324947008s ago: executing program 4 (id=2274): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000002600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 5m6.855631962s ago: executing program 4 (id=2279): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0xa001, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000400)={0x0, 0x0, 0x80000000, 0x0, 0x11}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ptrace(0x10, 0x0) 5m2.567478017s ago: executing program 4 (id=2288): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 4m47.109861952s ago: executing program 33 (id=2288): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 16.79206663s ago: executing program 1 (id=2864): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 14.924165273s ago: executing program 5 (id=2869): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000400)=""/59) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtfilter={0x211c, 0x2c, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x8, 0xa}, {0xfff3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_route={{0xa}, {0x207c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x9, 0xdb, 0x7, 0x6, 0x4, 0xf5, 0xfffffff7, 0xc3b5, 0x6, 0x80000001, 0x4, 0xfffffffe, 0x6, 0x5, 0x9, 0x6, 0x0, 0xa770, 0x4, 0x2, 0x9, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x0, 0x8, 0xc4, 0x1, 0x2, 0x1, 0x1ff, 0x3ff, 0x101, 0x0, 0x3, 0x10, 0x8, 0x3, 0x3, 0x8, 0x1, 0x4, 0x800, 0x5, 0x4, 0x0, 0x200000, 0x4, 0xf47, 0x0, 0x6cc2912e, 0x6, 0x4, 0x4, 0x7, 0x4, 0x8, 0xe, 0x7, 0x6, 0x9, 0xb3e, 0x7, 0x6, 0x7, 0x2, 0x80, 0x0, 0x5dc, 0x6, 0x1, 0x2, 0x9, 0x4, 0x401, 0xfffffffc, 0x401, 0x3, 0x80, 0x5, 0xfffffffe, 0x3, 0x3, 0x40, 0x3, 0xfffffffc, 0x930, 0x6b2, 0x3, 0x80, 0x0, 0x3, 0x343, 0xffffffff, 0x7, 0x6d, 0x7, 0x7, 0xf4, 0x1641, 0x7, 0x1000, 0x1000, 0x5, 0x400, 0x7ff, 0xff, 0x9, 0xfffffff1, 0xffffffff, 0x5, 0x6, 0xfffffff7, 0x7f, 0x8, 0x200, 0x6, 0x2, 0x975, 0x80, 0x3, 0x4, 0x100, 0x6, 0x2, 0x1, 0x1000, 0x4, 0x3, 0x9131, 0x9, 0x6b7, 0x9, 0x80000000, 0x8, 0xd, 0x1, 0x100, 0xff, 0x1, 0x3ff, 0x6, 0x8, 0x7ff, 0x4, 0x388df126, 0x8001, 0x2, 0x81, 0x2, 0x2, 0x0, 0x7, 0x5, 0x7, 0xe8, 0x6, 0x7, 0x5, 0x43, 0x0, 0x65, 0x3, 0x4, 0xff, 0x0, 0x0, 0x1ff, 0xb, 0x98de, 0x9, 0x4, 0x10000, 0xc221, 0x8, 0x2, 0xfff, 0x8, 0x7, 0x4, 0xe, 0x3f, 0x53a91556, 0x5, 0x8001, 0x1, 0x400, 0x7, 0x7, 0xffffffff, 0x0, 0xe, 0x3, 0x800, 0xfffffffb, 0x5, 0x5, 0x1, 0x6, 0x1, 0x0, 0x0, 0x3, 0x5, 0x3, 0x3, 0x1, 0x9, 0xf39, 0x21, 0x7ff, 0x2, 0x6, 0x3029, 0x80000, 0x8, 0x8, 0x7, 0x1, 0x81, 0xb, 0x4, 0x3, 0x180, 0x5, 0x7, 0x2, 0x40, 0x0, 0x1, 0x10f939ee, 0x80, 0x4, 0x23d, 0x5, 0x8, 0xffffffff, 0x80000001, 0x1f, 0x1, 0x0, 0x5, 0x2, 0x81, 0xd, 0x3, 0xffff, 0x8, 0x7, 0x7, 0xd, 0x6, 0x19ac]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x6, 0x8001, 0x86c, 0x10000, 0x6, 0xd6f7, 0x754, 0x101, 0x1ff, 0xe, 0x3, 0x3, 0x7fff, 0x5, 0xe, 0x20, 0x3, 0x7fffffff, 0x65, 0x4, 0x6, 0xbaaf, 0x4bd, 0x5, 0x81, 0x3, 0x5, 0x4, 0x2, 0x2, 0x3, 0xd7, 0x9, 0x5, 0x2, 0x8, 0x6, 0x0, 0x1ff, 0x400, 0xe9f8, 0x7, 0x2f920e94, 0x6d, 0xfffffc01, 0x9, 0x8, 0x101, 0x0, 0x4, 0x80000001, 0x2, 0x2, 0x3, 0x7, 0x7, 0x9, 0x5, 0xfffffffd, 0x80, 0x3, 0x4, 0xffff0001, 0x5353c9f3, 0x9, 0x3d5, 0x5, 0x2ce, 0xfffffffa, 0x2, 0xfffff784, 0x80, 0x81, 0x7, 0x5b, 0x80000001, 0xff, 0x9, 0x2, 0x7, 0x0, 0x7ff, 0x163, 0x2, 0x518a, 0x9, 0x7, 0x4, 0x7, 0x7, 0x200000, 0x0, 0x7, 0x2, 0x5, 0xffffffff, 0x2, 0x7, 0x8000, 0x10001, 0x10, 0x787, 0x5, 0x9, 0x79a, 0xe6, 0x6, 0x4, 0x1, 0x2, 0x5, 0x9, 0x5, 0x800, 0x40000004, 0x3, 0x2, 0x9, 0x8, 0x80, 0x0, 0x9, 0x200008, 0x56, 0x10, 0xfffff366, 0x200, 0x7, 0x0, 0x2, 0xf, 0x6, 0x80000001, 0xbf0, 0x1c0, 0xb428, 0x4, 0x4, 0x3, 0xb5, 0x7fff, 0x40, 0x7b0, 0xfccb, 0x3, 0x8, 0xfffffff8, 0x7, 0x1, 0x8, 0x36510efa, 0x9, 0xf60e, 0x10, 0x6, 0xfa40, 0x0, 0x0, 0x2, 0x401, 0x4, 0xc51, 0x7f4, 0x7fffffff, 0xe, 0x379, 0x3, 0x2, 0x4, 0x69b, 0xff, 0x7, 0x3403a6b3, 0xd, 0x5, 0x5, 0xf, 0x9, 0x10, 0xa6, 0xd3a, 0x5, 0xfffffffc, 0x1000, 0x8935, 0x400, 0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x7, 0x0, 0xad17, 0x84, 0x6, 0xefa, 0x3c0c, 0x8, 0xfff, 0x1, 0x4d3, 0x6, 0x45, 0x8, 0xffffff75, 0x401, 0x8, 0x3, 0x2785, 0x81, 0x100, 0x0, 0x8, 0x7ff, 0x2, 0x3008c380, 0x621, 0x0, 0x8, 0x0, 0x800, 0x9, 0x10000000, 0x469d, 0x3, 0x26, 0xf0325f22, 0x9774, 0x800, 0x1, 0x0, 0x0, 0x2, 0x2, 0x2, 0x2, 0x3, 0x2, 0x95cf, 0x1, 0x10000, 0x9, 0x5, 0x8000, 0x10000, 0x3, 0xffffffff, 0xff, 0x7, 0xff, 0x7f, 0x5, 0x3, 0xf7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x5, 0x1, 0xc, {0x3, 0x1, 0x2ce0, 0x9, 0xfff, 0x62}, {0x2, 0x1, 0x3ff, 0x1, 0x1, 0x1}, 0xfffffffa, 0x7, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xd6a, 0xfffffff7, 0x1, 0xb, 0x9, 0x4, 0x0, 0x4, 0x3, 0x3, 0x583, 0x7, 0x1, 0x4, 0xff, 0x101, 0x6, 0x9, 0xc, 0x94, 0x4, 0x4, 0x530, 0x0, 0x2, 0x6, 0x8, 0x4, 0x7, 0x6, 0x1, 0x38000000, 0x80, 0x80000000, 0x6, 0x9, 0x6, 0x9, 0x9, 0xffffffc0, 0x5, 0x8, 0x24e0, 0x8, 0x586, 0x1, 0x6, 0x4a05, 0xac891c5, 0x9654, 0x0, 0x119, 0x3, 0x13d70000, 0x101, 0x75, 0x9, 0x9, 0x5, 0x0, 0x1, 0x6, 0x3147, 0xa, 0x3, 0x0, 0xfffffffc, 0xf, 0x7, 0x7, 0x2ef, 0x0, 0x6, 0x101, 0x5, 0xfffffffd, 0x7fffffff, 0x5, 0x9, 0x800, 0x7, 0x2d4, 0x7, 0xfffffff6, 0xb, 0x9, 0x5, 0xffff0001, 0x8, 0x2b, 0x1, 0x8, 0x37e, 0x3, 0x4, 0x1, 0x0, 0x2, 0x5, 0x400, 0x2, 0xfffffff9, 0x40000000, 0x7, 0x1, 0x2, 0xd, 0x6, 0x920, 0x37, 0x0, 0xc, 0x7fffffff, 0x8, 0x7, 0x0, 0x9, 0x3ff, 0x0, 0x356, 0x44170787, 0xfffffffd, 0x7fff, 0x9, 0x200, 0xf6e, 0x9, 0x10, 0x8, 0x8, 0x7, 0x8, 0x8, 0x3, 0x1, 0x7a, 0x5, 0xbc6, 0x33c8, 0xfffffff7, 0x5, 0xb8, 0x7fffffff, 0x1, 0x80, 0x4, 0xb8, 0x81, 0x5, 0x200, 0x8, 0xdb140000, 0x7, 0x800, 0x4, 0x8, 0x71, 0x6, 0x1ea, 0x1, 0x9, 0x2, 0x7, 0x1, 0x1ff, 0x696, 0x3, 0x103, 0x6, 0x40000, 0x2, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x80000000, 0x3, 0x100, 0x73d, 0x0, 0x4, 0x6, 0x72e5, 0x0, 0x6, 0x81, 0x9, 0x2, 0x8e27, 0x400, 0x3, 0x0, 0xc, 0x95160000, 0xb59, 0x19c, 0x8, 0x0, 0x0, 0xe, 0x1, 0x6, 0x8, 0x2, 0x3ff, 0x70, 0x2, 0x1, 0xffffffff, 0x10001, 0x1, 0x5, 0x20000000, 0x9, 0x756d, 0x81, 0x80, 0x5, 0x3, 0x0, 0x1, 0x1, 0x2, 0x400, 0x3, 0x5, 0xe99, 0x1, 0x3ff, 0x5, 0x8, 0x6, 0x0, 0x5, 0x400, 0xfd, 0x48e, 0x7, 0xffffb91a, 0x2, 0x7, 0x10, 0xffffffff, 0xff, 0x9, 0x9, 0x9, 0x4, 0x80, 0x4, 0x4, 0x0, 0x394, 0x4, 0x48d5]}]}, @TCA_ROUTE4_ACT={0x1390, 0x6, [@m_mirred={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4c7, 0x400, 0xffffffffffffffff, 0xfffffffe, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x1, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xc4, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0x98, 0x6, "870d58fcc05412f1d03bbd0b79494f9f1b79b9c3d04dd2f81b2f72bbd159195681c0bb805e3a091bb8c2b06f29ecf83b85dec51c40119e743824a3a5484bfa4491ac89a7fa506070a488ea9b12d34312cdcd41122f48281a68435b38c9c313aedabc4ed431edbdeb1290d5d195cc45dd33cf92e80881cf5d8c995384b09458661ea4e2116e23a37901052b3614b52498e7c4b1d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x1070, 0xb, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x7, 0x6, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf42}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xb, 0x7, 0x3, 0x9}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1e8, 0x1f, 0x0, 0x0, {{0x7}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4e, 0x6, {0xf, 'security\x00', 0x5, 0x401, "03f4168dc6bd8197bfe1a4c4154e836a2904b14a6953a6c7517a4fb91c093278a19c7fe9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe1}, @TCA_IPT_TARG={0x90, 0x6, {0x2, 'mangle\x00', 0x3, 0xff8a, "d9d4dcdc978642505d72663bc24e78fe19552066495ac4a8e9239bf3e406a4d0b1cc656de3997a046cc08177c69fc8bba9ff3a35978ec8e814a0141e5c4250bee352f0a1d23c87000757ccc1198a12d719c27176201a61a24af79f6c1ab017e30bff3af1eb22"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_TARG={0x7b, 0x6, {0x7, 'mangle\x00', 0x3, 0x0, "f6fd3ce01811fa535ea9c34db6a84452d551cca69b085a822dd9af8c3b405b3dedee085d8a885fe98445d1a4759e2417bd00c5bfc9c4d8361b0bf0a5eb65e29692867a040ca89f0b91f54bd930d06e9449"}}, @TCA_IPT_TARG={0x3b, 0x6, {0x10, 'filter\x00', 0xff, 0x7fff, "7114c1eaae851cdf15648bfadce9c5da3b"}}]}, {0x6, 0x6, 'Ly'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x81, 0x101, 0x2, {0x0, 0x0, 0x9, 0x2, 0x4, 0x6}, {0x1d, 0x2, 0x4, 0x7, 0x68a1, 0x3}, 0x4, 0x2, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x81, 0x2, 0x500, {0x1, 0x2, 0x40, 0x1, 0x95fb, 0x485}, {0xa, 0x2, 0x12d, 0x8, 0x7, 0x8e8}, 0x4, 0xa94, 0x4}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x28, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x81}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xcec}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x211c}, 0x1, 0x0, 0x0, 0x804}, 0x4004881) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x12, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x400000) 12.391280589s ago: executing program 3 (id=2874): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000}, 0x6e) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x15, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 10.801906133s ago: executing program 3 (id=2875): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.801186543s ago: executing program 2 (id=2876): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x151) fcntl$notify(r0, 0x402, 0x8000001f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 10.680567578s ago: executing program 1 (id=2877): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000040)={0x3, 0x4, 0x5, 0x2, 0x8, "5d2ca36a07330aee0c3d8b86dc41a6f45009d1", 0x2, 0x2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1da) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=']) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x300, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000005c0)={0x2, 0x0, @pic={0x0, 0x2, 0x7, 0x3, 0x10, 0x6, 0x2, 0x9, 0x1, 0x1a, 0xbe, 0x0, 0xf4, 0x63, 0x5, 0x4}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x2) readv(r7, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/93, 0x5d}], 0x1) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x17, {0x17, 0x6, "a045f8ae2573d778b94d51a30917b38d0c72d43dab"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003ae000000ae03ef31e9718498027037b43e487eb303b4f4b53260499feb98117a61e48731e1371a61f6c4c3ff168ca21ed48779ffc93e1b3bf4ddb65d7504f1464d0409843961652d0000deb9c4289e09d648a8cfff7f8fd38e39b4aa8e3a6cb31028905dcf8ebe988c72989285a20dcfc68eb1e546abc525f9811ba61ab77242dabccebf959d8d74bcce4cbec1d2e13ca0615c70117e5f9926291352e0f2d2ef7df0e2a71d4bccf4238e9b02a9f38c717482"]}, &(0x7f0000000680)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0x1c, "64b04d9147423a70823061d50cce1adb38c4d95ad8d1bf0f6c5632d2"}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "969657088685a73ad6fb47c7f3577cdeaff0667aa0b7abcf1ffd6960d74dbfa296a41a1410ee169c7838831374493b2f5b5c79e93dedf5af83a0f7c0e702a1a54274bf8c1399f33a4d20bf1ee83de3e2e85d00a819a889b4d782dd2e9e8acfc55793bb62f548ab370c464853f735c38402f9ed96c13777ab05bc9fbe6ac8c1be40f65bc63e74472a8e2eaf8e9309c2dd59399117fd88248418444d3cec03c7ea5b382c7b7145364d6cdc841441b7232d5cf4842ad5ba6777c33348989eee6235cf25a7be139e02eca5b26c4a5e875b31148bb0632f38ba77f0c32d014790904cc1fee9791e0632fba01171b601935bd578685632a8060c1b125fc8e42bece58d19ea2d98fc5c1115f40c8bf3a8e3d0d69d10c77714f3ae601ccd2c9549d937ad64cc1cb2abe8c9ce1531431d4ab276eb85787972bfb262724daef6087a674aa84784ec7e1186f6414f4eeb60f18d63ebe23cd63e9bfcf6afe5629f2ebd00d30fbad73f81341032390d3e3857cee3837deacb6a331c42994f4124f9d55f690a002f1f05b8950d26a994774037c1daff76fd89750ec9f369fd5cee774f792b1b3c3f3dc0c2f835a3857add084d5379a5e6bee3b22c44b06171424993e18946a86a7b60fd086337209586af11015dc78d6c0b18cd76bd932dd57bdf6717d998f30f413c1b0d32bdf75303625bbf87e99e601250afcfc0cacb57f5212d17d0b8059db0343616c8469381d7e0ab87a6fdcd212e7b469da97abcaa3c1e1fded49ab6ac548ef26f945fc0a383ab686e3f2565a821e763c6be63843ae797aa14095a6fdb9bd209c1b5fa23e4a3ae8403d69443836c20dec54fd095639881205a0f63b8fa823a445dc34337ccaa2d29938539de82ff2051e039dfdf5237779e10a48e861a2205df7a2233df1287c4376d1f9b99665ca80842a68bbcaa4a8c37283a628042eabd1689a8bc2eb61d1c0c5f8c5d0d03993fe6da6b82e97a07580ba7d7223efc797946a775f0e76db78a9d8a164ccaaa6469f7bf3fdbe22551256d7cca1e86ce6367de0cea05bebb042b6dfa209c764c48d353199656420f97519f48c24ed3fa983fcb2114f717383379366fcef4e56292345f0cd030bd57b51f794a7508339d46d5395a3bac66615da9697d652fcbca3705f122a84fd7b067b0acafffcf7226a60b6182ccf05f254c584daba7642fe743f105b2c7c21535446c93b0efbc225d6d99b9db2261e68a6f2475c93ddf3a560a4ab1595172a3539ad6c2736cbde7434f1bd3fdc802adf4837b94e9c21b790b929b789f2d84a62cc07eccb2d56943e0ea49271ac89dcd0bf835ec29b59e4e627ec1fbb1859e6b1419bc4bca5f5f6cc8dad9c11bea9ebcf7b940b0d98a5b9f29c7e3ad62ea0e402991b160fdf3204df9ca69228ccc6684779c925d2e56c9948357d976a8ff53021aaa7b7ae7263bd9b5"}, &(0x7f0000000640)={0x21, 0x0, 0x2, 'O9'}}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 10.564045951s ago: executing program 2 (id=2878): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) prlimit64(r4, 0x8, &(0x7f0000000040)={0x8, 0x5}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x3, 0x18, 0x0, 0x5c, 0x4}}) 10.453166125s ago: executing program 3 (id=2879): fanotify_init(0xf00, 0x300) setresuid(0xee01, 0xee00, 0x0) getuid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 9.471034208s ago: executing program 3 (id=2880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getpgid(r2) 9.331373563s ago: executing program 2 (id=2881): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}], 0x2, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x3e0}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d", 0xc5}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.66086364s ago: executing program 3 (id=2882): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, r0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ea19a6cd956cec436c74787246d13ca11081dbabebcb76c1d2e8b7d0c8c1aabdd95fc51096c8d57e818ce768ccceed4d115abed88468be323c820ade265a87419a77736785f202fe11a5dd77773ba9a4c83087f956929503b1e1ff5b37da9fe53fb758af2d89f01e0df78efd88cf4a01c0b8766c480a0394b6c8fc9fc12099c5bb81de2cb7a9f7cda5c9b265453e575767fb58b840bfe5d709889eea7579a18472fdd1630e7fbbe9d68f75a7a51eb7e00854a1f71f", 0xb5}, {&(0x7f0000000580)="b309d3ef91dd92a3b7e1c73ff0a368ae33c77fd11e3c04fdf36d2f9461a7ee76290ce0f6449e8a16fb86ee80c6ae62ec109763ae520d", 0x36}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832", 0x11}], 0x3}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)="a590902a494aeaa8345cc36e3baafae8603b7dca66a102375bff06a96fefcb42def096636b07c90f4fcc1e603e4344945d65949f8060d29943d637225ae1487d0e50cd650ef42c634bf4c96a466cd6a0bbaad461e8da5295d6e67b041e597a6204a4ea5d177c0895cbc60f2c6edbe0cf5ce787ba93d8d070f7a7d51cf0b81f6c48aecbc944db5a735cff3816ec24f77a43b59b905350d778ecbf80411ee62619f8dfc9559f98ab1459ab9c9d4d66c660959e0ea4ceb914", 0xb7}, {&(0x7f0000001200)="e03edf555ccc657c1f51f2e2d556c56634e24d753289e65d5c7fbaaf2a49182660fdc72e77d70ab6e91175c5ad36269eeea9cd41439c1c5c9c2b067776dab238b4", 0x41}, {&(0x7f0000000dc0)="01a39e0c5ec49d6e0b93dd6beca3e517897424180fb4e96b6573a988d5782892be518865237b71644b916af7c71374f4427b8247f33a3a62bdc426f1ebf448a28576bd380ad75d9b18115b6443b99516d044277c99d727e5ffcfe951f48a0e24b6de1d996fb075451b7e759e19755e33a4704934dfd67451089b302825e273b3e8691d15aa8d65d5f1959124fe8bcd674d1519ce2c5c901ec581dff5f26b094bc03c9a74984d08f1ff096c338eb4ca837ba75ca3", 0xb4}, {&(0x7f0000001000)="18a8583924039aadf86313c609284663d89bbf4926f433da348624e066f55a2241069c638f862039561bc732a9a380a05c6a8ab5adb65188f24882cb13f9dd604ef15ea43abc5ccdfc9bfe6b966c343da49e10cebdd875ae8793f2398278658eacbed7b13eaa2fe77a74ee08c4986f8683af3caacbe3b6c0a5a10f1fed7418a7d4af3f5bd43d33ea14afed50e430cd8dcf38a33f2a10456eaaa71a611a4f", 0x9e}], 0x4}}], 0x3, 0x200000c0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19b", 0x59}], 0x5}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x7953bb0c2b576ac9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x26000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x6, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x5800, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.460011407s ago: executing program 1 (id=2883): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) io_uring_setup(0x53a2, &(0x7f0000002f80)={0x0, 0x44e5, 0x2, 0x2, 0x37a}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x2, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x200006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x4, 0x3, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) 7.36219594s ago: executing program 2 (id=2884): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) syslog(0x4, 0x0, 0x0) syslog(0x3, &(0x7f0000002d00)=""/147, 0x93) 6.584704687s ago: executing program 1 (id=2885): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.341952485s ago: executing program 2 (id=2886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) 4.479894158s ago: executing program 2 (id=2887): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xbf, {0x20, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x20e) pipe(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x840) 4.178980238s ago: executing program 5 (id=2888): fanotify_init(0xf00, 0x300) setresuid(0xee01, 0xee00, 0x0) getuid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 3.871031949s ago: executing program 5 (id=2889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) prlimit64(r4, 0x8, &(0x7f0000000040)={0x8, 0x5}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x3, 0x18, 0x0, 0x5c, 0x4}}) 2.629144091s ago: executing program 5 (id=2890): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e", 0x22}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19b", 0x59}], 0x5}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x7953bb0c2b576ac9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x26000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x6, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x5800, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.280870053s ago: executing program 1 (id=2891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 689.865387ms ago: executing program 1 (id=2892): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}], 0x2, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x3e0}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d", 0xc5}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 287.74553ms ago: executing program 5 (id=2893): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) io_uring_setup(0x53a2, &(0x7f0000002f80)={0x0, 0x44e5, 0x2, 0x2, 0x37a}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x2, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x200006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x4, 0x3, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) 123.227146ms ago: executing program 3 (id=2894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000080)=0xf67, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=2895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sb 5-1: Product: syz [ 1157.758043][T11793] usb 5-1: Manufacturer: syz [ 1157.763280][T11793] usb 5-1: SerialNumber: syz [ 1157.778324][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1157.781412][T11793] usb 5-1: config 0 descriptor?? [ 1157.814903][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1157.856901][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1157.910892][T13947] ceph: No mds server is up or the cluster is laggy [ 1157.912330][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1157.954564][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1157.961090][T11793] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1157.999274][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1158.082620][ T5810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1158.227307][ T5810] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1158.377163][T11793] usb 5-1: selecting invalid altsetting 1 [ 1158.383981][ T5810] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.392106][T11793] gspca_stk014: init reg: 0x00 [ 1158.417765][T11793] stk014: probe of 5-1:0.0 failed with error -5 [ 1158.420088][ T5810] usb 4-1: USB disconnect, device number 98 [ 1158.611256][T13960] autofs4:pid:13960:autofs_fill_super: called with bogus options [ 1158.987261][T11793] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1159.347496][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.362742][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.378801][T11793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.593475][T11793] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1159.617499][ T9] usb 5-1: USB disconnect, device number 109 [ 1159.643936][T11793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.683203][T11793] usb 2-1: config 0 descriptor?? [ 1162.509220][T11793] usbhid 2-1:0.0: can't add hid device: -71 [ 1162.516425][T11793] usbhid: probe of 2-1:0.0 failed with error -71 [ 1162.527889][T11793] usb 2-1: USB disconnect, device number 94 [ 1162.943267][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 1162.953530][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2078'. [ 1164.011495][T13992] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1164.284368][T13997] autofs4:pid:13997:autofs_fill_super: called with bogus options [ 1165.188075][T11793] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1165.673940][T11793] usb 4-1: Using ep0 maxpacket: 8 [ 1165.690312][T11793] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1165.712413][T11793] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1165.724797][T11793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.732978][T11793] usb 4-1: Product: syz [ 1165.745068][T11793] usb 4-1: Manufacturer: syz [ 1165.749729][T11793] usb 4-1: SerialNumber: syz [ 1165.765526][T11793] usb 4-1: config 0 descriptor?? [ 1165.955921][T14006] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1166.996705][T14006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.017688][T14006] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1167.029986][T14006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.061415][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1167.062885][T14006] usb 5-1: config 0 descriptor?? [ 1167.068505][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1167.192075][T14008] ceph: No mds server is up or the cluster is laggy [ 1168.572584][ T8] usb 4-1: USB disconnect, device number 99 [ 1169.068773][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 1169.462276][T14006] usbhid 5-1:0.0: can't add hid device: -71 [ 1169.778426][T14006] usbhid: probe of 5-1:0.0 failed with error -71 [ 1169.809279][T14041] input: syz1 as /devices/virtual/input/input17 [ 1169.827712][T14006] usb 5-1: USB disconnect, device number 110 [ 1170.104655][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 1170.206535][T14050] autofs4:pid:14050:autofs_fill_super: called with bogus options [ 1170.359152][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'. [ 1170.915346][T14056] picdev_read: 77 callbacks suppressed [ 1170.915363][T14056] kvm: pic: non byte read [ 1170.935456][T14056] kvm: pic: non byte read [ 1170.959257][T14056] kvm: pic: non byte read [ 1171.034012][T14056] kvm: pic: non byte read [ 1171.065422][T14056] kvm: pic: non byte read [ 1171.073920][T14056] kvm: pic: non byte read [ 1171.081702][T14056] kvm: pic: non byte read [ 1171.167932][T14056] kvm: pic: non byte read [ 1171.364356][T14056] kvm: pic: non byte read [ 1171.373451][T14056] kvm: pic: non byte read [ 1173.099541][T14089] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1173.190917][ T5812] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1173.243469][T14092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2100'. [ 1173.504037][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 1173.703086][ T5812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.776048][ T5812] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1173.814159][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.822504][ T5812] usb 4-1: Product: syz [ 1173.844552][ T5812] usb 4-1: Manufacturer: syz [ 1173.849399][ T5812] usb 4-1: SerialNumber: syz [ 1173.912517][ T5812] usb 4-1: config 0 descriptor?? [ 1175.014601][T14106] autofs4:pid:14106:autofs_fill_super: called with bogus options [ 1175.682675][ T8] usb 4-1: USB disconnect, device number 100 [ 1176.423768][T14115] netlink: set zone limit has 8 unknown bytes [ 1176.469589][T14115] netlink: set zone limit has 8 unknown bytes [ 1177.252959][T14119] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1177.544333][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.550878][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.437245][ T1198] libceph: connect (1)[c::]:6789 error -101 [ 1178.447205][ T1198] libceph: mon0 (1)[c::]:6789 connect error [ 1178.704403][ T1198] libceph: connect (1)[c::]:6789 error -101 [ 1178.718177][ T1198] libceph: mon0 (1)[c::]:6789 connect error [ 1178.749331][ T8] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1178.973306][T14131] ceph: No mds server is up or the cluster is laggy [ 1179.237794][ T1198] libceph: connect (1)[c::]:6789 error -101 [ 1179.254850][ T1198] libceph: mon0 (1)[c::]:6789 connect error [ 1179.454085][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1179.494059][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1179.514843][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.540426][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.909791][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1180.083543][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.207004][ T8] usb 2-1: Product: syz [ 1180.215493][ T8] usb 2-1: Manufacturer: syz [ 1180.298419][T14145] autofs4:pid:14145:autofs_fill_super: called with bogus options [ 1180.471571][ T8] usb 2-1: SerialNumber: syz [ 1181.075836][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1181.098769][ T8] usb 2-1: MIDIStreaming interface descriptor not found [ 1181.311691][ T8] usb 2-1: USB disconnect, device number 95 [ 1181.471699][T13690] udevd[13690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.221858][T12243] libceph: connect (1)[c::]:6789 error -101 [ 1183.229131][T12243] libceph: mon0 (1)[c::]:6789 connect error [ 1183.500327][T12243] libceph: connect (1)[c::]:6789 error -101 [ 1183.508019][T12243] libceph: mon0 (1)[c::]:6789 connect error [ 1183.737839][T14171] ceph: No mds server is up or the cluster is laggy [ 1184.040086][T12243] libceph: connect (1)[c::]:6789 error -101 [ 1184.047287][T12243] libceph: mon0 (1)[c::]:6789 connect error [ 1184.173393][T14180] autofs4:pid:14180:autofs_fill_super: called with bogus options [ 1184.201950][T14180] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2122'. [ 1185.685907][T14195] input: syz1 as /devices/virtual/input/input18 [ 1186.117344][T14200] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1186.193522][T14206] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1187.292673][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1187.314866][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1187.717214][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1187.724719][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1187.735862][T14214] autofs4:pid:14214:autofs_fill_super: called with bogus options [ 1187.801453][T14214] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2133'. [ 1187.847914][T14215] ceph: No mds server is up or the cluster is laggy [ 1188.275529][T14222] binder: 14220:14222 ioctl c0306201 2000000004c0 returned -14 [ 1188.994004][T11793] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1189.594814][T11793] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1189.604988][T11793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1189.640542][T11793] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1189.659849][T11793] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1189.678640][T11793] usb 3-1: Product: syz [ 1189.682879][T11793] usb 3-1: Manufacturer: syz [ 1189.695758][T11793] usb 3-1: SerialNumber: syz [ 1189.731138][T11793] usb 3-1: config 0 descriptor?? [ 1189.881659][T11793] usb 3-1: selecting invalid altsetting 0 [ 1189.999046][T14239] affs: No valid root block on device nullb0 [ 1190.761726][T14237] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1190.776516][T11793] usb 3-1: USB disconnect, device number 99 [ 1190.955947][T14244] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1191.819442][T14254] autofs4:pid:14254:autofs_fill_super: called with bogus options [ 1191.852848][T14254] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1193.263228][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 1193.959582][T14272] ISOFS: Unable to identify CD-ROM format. [ 1194.028065][T14276] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1194.455253][ T5810] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1195.264365][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 1195.295495][ T5810] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.303950][ T5810] usb 3-1: config 0 has no interface number 0 [ 1195.317921][ T5810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.343417][ T5810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.374991][ T5810] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1195.388046][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.786794][ T5810] usb 3-1: config 0 descriptor?? [ 1195.835139][T14288] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1196.544338][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.552387][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.560421][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.568524][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.576565][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.579476][T14291] autofs4:pid:14291:autofs_fill_super: called with bogus options [ 1196.584394][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.600390][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.615585][ T5810] holtek_mouse 0003:04D9:A081.0012: unknown main item tag 0x0 [ 1196.621504][T14291] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1196.675590][ T5810] holtek_mouse 0003:04D9:A081.0012: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.2-1/input1 [ 1197.303772][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1197.306416][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1197.515518][T14293] ceph: No mds server is up or the cluster is laggy [ 1197.573250][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1197.581047][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1197.669339][T14006] usb 3-1: USB disconnect, device number 100 [ 1197.756600][T14296] fido_id[14296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1198.481194][T14306] binder: 14303:14306 ioctl c0306201 2000000004c0 returned -14 [ 1198.732548][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 1199.455995][T14315] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1199.542742][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2163'. [ 1200.540175][T14335] autofs4:pid:14335:autofs_fill_super: called with bogus options [ 1200.566955][T14335] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2168'. [ 1201.107246][T14332] ceph: No mds server is up or the cluster is laggy [ 1201.128270][T11838] libceph: connect (1)[c::]:6789 error -101 [ 1201.136603][T11838] libceph: mon0 (1)[c::]:6789 connect error [ 1201.544139][ T5812] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1201.580068][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1202.084087][ T5810] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1202.098056][T14326] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1202.109124][T14326] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1202.203975][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 1202.276256][ T5812] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1202.297573][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 1202.314292][ T5812] usb 2-1: config 0 has no interface number 0 [ 1202.322064][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1202.333501][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1202.355948][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1202.369868][ T5812] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1202.404031][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.968527][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.978872][ T5812] usb 2-1: config 0 descriptor?? [ 1202.996118][ T5812] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1203.017761][ T5810] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1203.036882][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.051024][T14352] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1203.070279][ T5810] usb 4-1: Product: syz [ 1203.078884][ T5810] usb 4-1: Manufacturer: syz [ 1203.092232][ T5810] usb 4-1: SerialNumber: syz [ 1203.099930][ T5810] usb 4-1: config 0 descriptor?? [ 1203.111884][ T5810] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1203.118539][ T5810] usb 4-1: selecting invalid altsetting 1 [ 1203.341195][ T5810] gspca_stk014: init reg: 0x00 [ 1203.361876][ T5810] stk014: probe of 4-1:0.0 failed with error -5 [ 1203.382792][ T5818] usb 2-1: USB disconnect, device number 96 [ 1204.673353][T14366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.683714][T14366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.189707][ T5812] usb 4-1: USB disconnect, device number 101 [ 1206.870084][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1206.883609][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1207.040258][T14373] ceph: No mds server is up or the cluster is laggy [ 1207.218386][T14380] autofs4:pid:14380:autofs_fill_super: called with bogus options [ 1207.315782][T14380] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2179'. [ 1207.959660][T14386] overlayfs: missing 'lowerdir' [ 1208.653895][T14006] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1208.698078][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 1209.414141][T14006] usb 2-1: Using ep0 maxpacket: 8 [ 1210.686584][T14401] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1211.031521][T14410] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1211.235503][T14410] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1211.448549][T14006] usb 2-1: device descriptor read/all, error -71 [ 1214.059344][T14432] autofs4:pid:14432:autofs_fill_super: called with bogus options [ 1214.082460][T14432] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2190'. [ 1218.630900][T14006] libceph: connect (1)[c::]:6789 error -101 [ 1218.665774][T14006] libceph: mon0 (1)[c::]:6789 connect error [ 1218.697850][T14465] autofs4:pid:14465:autofs_fill_super: called with bogus options [ 1218.768239][T14465] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2201'. [ 1218.828627][T14462] ceph: No mds server is up or the cluster is laggy [ 1220.694079][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2204'. [ 1222.239491][T14512] ISOFS: Unable to identify CD-ROM format. [ 1222.979747][T14527] autofs4:pid:14527:autofs_fill_super: called with bogus options [ 1223.032933][T14527] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1226.863054][ T35] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1227.342564][T14579] ISOFS: Unable to identify CD-ROM format. [ 1227.744024][ T5818] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1227.978765][T14585] autofs4:pid:14585:autofs_fill_super: called with bogus options [ 1227.994007][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 1227.995751][T14585] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2224'. [ 1228.036360][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.106845][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1228.118081][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1228.127962][ T5818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1228.140001][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.181488][ T5818] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1228.193171][ T5818] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1228.211263][ T5818] usb 2-1: Manufacturer: syz [ 1228.251143][ T5818] usb 2-1: config 0 descriptor?? [ 1228.994359][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1229.000473][ T5818] Registered IR keymap rc-empty [ 1229.024154][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.064856][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.109876][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1229.141166][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 1229.193986][ T8] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1229.194071][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.294219][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.344005][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.384633][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1229.384732][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.395994][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1229.499034][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.634781][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.645632][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1229.675654][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.680860][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.709442][T14595] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1229.734991][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.739443][ T8] usb 3-1: Product: syz [ 1229.785389][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.827604][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.830119][ T8] usb 3-1: Manufacturer: syz [ 1229.906746][ T5818] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1229.919493][ T5818] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1229.926339][ T8] usb 3-1: SerialNumber: syz [ 1229.983332][ T5818] usb 2-1: USB disconnect, device number 99 [ 1230.146218][ T8] usb 3-1: config 0 descriptor?? [ 1230.589403][T14605] input: syz1 as /devices/virtual/input/input20 [ 1231.392435][T14615] autofs4:pid:14615:autofs_fill_super: called with bogus options [ 1231.478722][T14615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2233'. [ 1231.857498][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2232'. [ 1231.949983][ T5810] usb 3-1: USB disconnect, device number 101 [ 1233.054439][T14631] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1233.501650][T14635] binder: 14630:14635 ioctl c0306201 2000000004c0 returned -14 [ 1234.204206][T14627] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 1234.475611][T14650] autofs4:pid:14650:autofs_fill_super: called with bogus options [ 1234.502005][T14650] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2242'. [ 1236.317025][T14006] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1236.372067][T14006] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1236.471535][T14663] fido_id[14663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1237.062265][T14671] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1237.363017][T14639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.710448][T14678] autofs4:pid:14678:autofs_fill_super: called with bogus options [ 1237.855634][T11793] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1238.399279][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1238.424065][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1238.436162][T11793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.459310][T11793] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1238.478936][T11793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.491394][T11793] usb 4-1: config 0 descriptor?? [ 1238.719129][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1238.730449][T14682] ceph: No mds server is up or the cluster is laggy [ 1238.739369][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1238.970191][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.976712][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.096632][T14699] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1241.314340][T11793] usbhid 4-1:0.0: can't add hid device: -71 [ 1241.333979][T11793] usbhid: probe of 4-1:0.0 failed with error -71 [ 1241.363011][T11793] usb 4-1: USB disconnect, device number 102 [ 1241.604484][ T5810] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1241.806336][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.846367][ T5810] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1241.877542][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.920091][ T5810] usb 5-1: config 0 descriptor?? [ 1242.556176][T14713] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1244.124704][T14725] autofs4:pid:14725:autofs_fill_super: called with bogus options [ 1244.472105][ T5810] usbhid 5-1:0.0: can't add hid device: -71 [ 1244.485940][ T5810] usbhid: probe of 5-1:0.0 failed with error -71 [ 1244.779099][ T5810] usb 5-1: USB disconnect, device number 111 [ 1246.094058][ T8] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1246.129634][T14738] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2265'. [ 1246.294003][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1246.324775][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.357425][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.381784][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1246.409910][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.434270][ T8] usb 4-1: config 0 descriptor?? [ 1246.490621][T14716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.357723][ T5810] usb 4-1: USB disconnect, device number 103 [ 1247.581452][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2268'. [ 1248.239854][T14758] autofs4:pid:14758:autofs_fill_super: called with bogus options [ 1248.329405][T11838] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1248.868584][T11838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.900752][T11838] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1248.921512][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.948085][T11838] usb 4-1: config 0 descriptor?? [ 1248.970480][T14760] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1249.150419][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 1251.057509][T11838] usbhid 4-1:0.0: can't add hid device: -71 [ 1251.068174][T11838] usbhid: probe of 4-1:0.0 failed with error -71 [ 1251.078021][T11838] usb 4-1: USB disconnect, device number 104 [ 1252.463979][T11838] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1252.664635][T11838] usb 4-1: Using ep0 maxpacket: 8 [ 1252.685479][T11838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1252.707827][T11838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.722823][T11838] usb 4-1: Product: syz [ 1252.732983][T11838] usb 4-1: Manufacturer: syz [ 1252.746692][T11838] usb 4-1: SerialNumber: syz [ 1252.755077][T14006] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1252.769219][T11838] usb 4-1: config 0 descriptor?? [ 1252.964077][T14006] usb 3-1: Using ep0 maxpacket: 32 [ 1253.010019][T11838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1253.024326][T14006] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.041266][T14006] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1253.051614][T14006] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1253.071443][T14006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.074560][T14792] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2279'. [ 1253.153036][T14006] usb 3-1: config 0 descriptor?? [ 1253.316685][T11838] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1254.443405][ T9] usb 3-1: USB disconnect, device number 102 [ 1254.487233][ T5810] usb 4-1: USB disconnect, device number 105 [ 1254.669881][T14802] autofs4:pid:14802:autofs_fill_super: called with bogus options [ 1255.319750][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 1256.129314][T14812] overlayfs: missing 'lowerdir' [ 1258.259058][T14833] input: syz1 as /devices/virtual/input/input21 [ 1260.062686][T14839] autofs4:pid:14839:autofs_fill_super: called with bogus options [ 1261.460007][ T5810] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1261.682507][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 1261.703098][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.724734][ T5810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.832089][T14849] overlayfs: missing 'lowerdir' [ 1262.284016][ T5810] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1262.293374][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.327265][ T5810] usb 3-1: config 0 descriptor?? [ 1262.431234][T14852] input: syz1 as /devices/virtual/input/input22 [ 1262.574224][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2296'. [ 1262.954309][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1263.260563][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1263.334314][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1263.343517][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.363701][ T5818] usb 3-1: USB disconnect, device number 103 [ 1263.428227][ T9] usb 2-1: Product: syz [ 1263.453534][ T9] usb 2-1: Manufacturer: syz [ 1263.493350][ T9] usb 2-1: SerialNumber: syz [ 1263.515417][T14861] input: syz1 as /devices/virtual/input/input23 [ 1263.645131][ T9] usb 2-1: config 0 descriptor?? [ 1263.990994][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1264.634821][ T9] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 1265.114173][T14872] autofs4:pid:14872:autofs_fill_super: called with bogus options [ 1265.902676][ T8] usb 2-1: USB disconnect, device number 100 [ 1266.028052][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2302'. [ 1266.892690][T14886] 9pnet_fd: Insufficient options for proto=fd [ 1267.905860][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2305'. [ 1269.049131][ T5810] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1269.254281][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 1269.325188][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.368271][ T5810] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1269.381190][ T5810] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1269.392375][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.552590][ T5810] usb 4-1: config 0 descriptor?? [ 1270.414542][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.422666][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.497854][ T5810] usb 4-1: USB disconnect, device number 106 [ 1271.261301][T14910] autofs4:pid:14910:autofs_fill_super: called with bogus options [ 1271.926158][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 1273.630258][T14934] input: syz1 as /devices/virtual/input/input24 [ 1274.261832][T14945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1274.272269][T14945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1274.281639][T14945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1274.291443][T14945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1274.298766][T11838] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1274.307974][T14945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1274.315508][T14945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1274.533692][T11838] usb 2-1: Using ep0 maxpacket: 32 [ 1274.554175][T11838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.572805][T11838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1274.609016][T11838] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1274.628646][T11838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.650007][T11838] usb 2-1: config 0 descriptor?? [ 1274.682074][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2320'. [ 1275.530177][ T5810] usb 2-1: USB disconnect, device number 101 [ 1275.638323][T14944] chnl_net:caif_netlink_parms(): no params data found [ 1275.794034][T14944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.802128][T14944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.809510][T14944] bridge_slave_0: entered allmulticast mode [ 1275.817789][T14944] bridge_slave_0: entered promiscuous mode [ 1275.828826][T14944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.837363][T14944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.845982][T14944] bridge_slave_1: entered allmulticast mode [ 1275.854343][T14944] bridge_slave_1: entered promiscuous mode [ 1276.137831][T14944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.178874][T14944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.326714][T14963] autofs4:pid:14963:autofs_fill_super: called with bogus options [ 1276.405440][T14945] Bluetooth: hci1: command tx timeout [ 1276.974783][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.985755][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.019188][T14944] team0: Port device team_slave_0 added [ 1277.035271][T14944] team0: Port device team_slave_1 added [ 1277.436071][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1277.555184][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.962867][T14944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.970208][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.047482][T14944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.088547][T14944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.096751][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.129345][T14944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.152254][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 1278.200588][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.246814][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.498079][T14945] Bluetooth: hci1: command tx timeout [ 1278.614767][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.654001][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.709077][T14944] hsr_slave_0: entered promiscuous mode [ 1278.726329][T14944] hsr_slave_1: entered promiscuous mode [ 1279.133244][T11793] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1279.312295][T11793] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1279.510447][T14978] binder: 14975:14978 ioctl c0306201 2000000004c0 returned -14 [ 1280.019115][T14976] fido_id[14976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1280.484250][T14990] autofs4:pid:14990:autofs_fill_super: called with bogus options [ 1280.564856][T14945] Bluetooth: hci1: command tx timeout [ 1280.894520][ T8] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1281.244722][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1281.296207][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.773897][T14997] 9pnet_fd: Insufficient options for proto=fd [ 1281.876038][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1281.965210][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1282.067583][T14944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1282.089700][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.145840][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1282.158634][ T8] usb 4-1: config 0 descriptor?? [ 1282.413952][T14944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1282.643939][T14945] Bluetooth: hci1: command tx timeout [ 1283.421167][T14944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1283.565277][T14944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1283.765049][ T8] usb 4-1: USB disconnect, device number 107 [ 1284.845145][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1284.854826][T15029] binder: 15027:15029 ioctl c0306201 2000000004c0 returned -14 [ 1285.738144][T15034] input: syz1 as /devices/virtual/input/input25 [ 1286.076183][T15038] autofs4:pid:15038:autofs_fill_super: called with bogus options [ 1287.051073][ T35] hsr_slave_0: left promiscuous mode [ 1287.065896][ T35] hsr_slave_1: left promiscuous mode [ 1287.072774][T15043] 9pnet_fd: Insufficient options for proto=fd [ 1287.092106][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.370843][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.424495][T15045] 9pnet_fd: Insufficient options for proto=fd [ 1287.444878][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.452428][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.514489][ T35] bridge_slave_1: left allmulticast mode [ 1287.525217][ T35] bridge_slave_1: left promiscuous mode [ 1287.531025][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.544830][ T35] bridge_slave_0: left allmulticast mode [ 1287.550500][ T35] bridge_slave_0: left promiscuous mode [ 1287.578623][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.655117][ T35] veth1_macvtap: left promiscuous mode [ 1287.660732][ T35] veth0_macvtap: left promiscuous mode [ 1287.679351][ T35] veth1_vlan: left promiscuous mode [ 1287.694335][ T35] veth0_vlan: left promiscuous mode [ 1287.824299][T11838] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1288.024262][T11838] usb 4-1: Using ep0 maxpacket: 32 [ 1288.056411][T11838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.090506][T11838] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.120540][T11838] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1288.149717][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.205942][T11838] usb 4-1: config 0 descriptor?? [ 1289.133185][T12243] usb 4-1: USB disconnect, device number 108 [ 1289.644434][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1289.729778][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1289.907009][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.203683][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.772376][T15079] autofs4:pid:15079:autofs_fill_super: called with bogus options [ 1292.357326][ T35] bond0 (unregistering): Released all slaves [ 1292.514297][T15072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1292.647869][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.660484][T15086] 9pnet_fd: Insufficient options for proto=fd [ 1292.735234][T14944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.788211][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.795554][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.803912][T11838] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1292.856780][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.865118][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.175284][T14944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.224477][T11838] usb 4-1: Using ep0 maxpacket: 8 [ 1293.229415][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2351'. [ 1293.238175][T11838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1293.268545][T11838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.298391][T11838] usb 4-1: Product: syz [ 1293.304120][T11838] usb 4-1: Manufacturer: syz [ 1293.308928][T11838] usb 4-1: SerialNumber: syz [ 1293.340793][T11838] usb 4-1: config 0 descriptor?? [ 1293.571084][T11838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1293.956486][T14944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.849800][T11838] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1294.869030][ T1198] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1294.871279][T14944] veth0_vlan: entered promiscuous mode [ 1294.886962][T11838] usb 4-1: USB disconnect, device number 109 [ 1294.947227][T14944] veth1_vlan: entered promiscuous mode [ 1295.042146][T14944] veth0_macvtap: entered promiscuous mode [ 1295.081447][T14944] veth1_macvtap: entered promiscuous mode [ 1295.087455][ T1198] usb 3-1: Using ep0 maxpacket: 32 [ 1295.114314][ T1198] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.158112][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.169705][ T1198] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1295.193997][ T1198] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1295.219297][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.229803][ T1198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.244061][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.276620][ T1198] usb 3-1: config 0 descriptor?? [ 1295.303725][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.331472][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.349916][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.363111][T14944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.392105][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.405291][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.416389][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.427223][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.437442][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.461306][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.482332][T14944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.499469][T14944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.509302][T14944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.523061][T14944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.597931][T14944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.796366][ T1198] usb 3-1: USB disconnect, device number 104 [ 1298.252029][T15149] autofs4:pid:15149:autofs_fill_super: called with bogus options [ 1298.349051][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.455846][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.857175][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2357'. [ 1298.888740][ T7830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.908341][ T7830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.118788][T15159] input: syz1 as /devices/virtual/input/input26 [ 1300.447975][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.456261][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.641106][T15170] input: syz1 as /devices/virtual/input/input27 [ 1301.047994][T15179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1301.174422][T15181] 9pnet_fd: Insufficient options for proto=fd [ 1301.704124][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2365'. [ 1302.168834][T15194] tmpfs: Unknown parameter 'grpq' [ 1302.665140][T15198] ISOFS: Unable to identify CD-ROM format. [ 1303.068428][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.140194][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.380312][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.392100][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.494788][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.516128][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.561123][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.571769][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.581220][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1303.595591][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1303.612894][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1303.620486][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1303.677894][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.755556][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.666976][T15221] syzkaller0: entered promiscuous mode [ 1305.685139][T15221] syzkaller0: entered allmulticast mode [ 1305.713623][T14945] Bluetooth: hci2: command tx timeout [ 1306.933227][T15236] 9pnet_fd: Insufficient options for proto=fd [ 1307.771936][T14945] Bluetooth: hci2: command tx timeout [ 1309.850476][T14945] Bluetooth: hci2: command tx timeout [ 1310.023284][T15256] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1310.163316][T15234] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1310.581359][T15266] input: syz1 as /devices/virtual/input/input28 [ 1311.925800][T14945] Bluetooth: hci2: command tx timeout [ 1311.941279][T15205] chnl_net:caif_netlink_parms(): no params data found [ 1312.911291][T15276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2381'. [ 1313.418698][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.441025][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.464212][T15205] bridge_slave_0: entered allmulticast mode [ 1313.498094][T15205] bridge_slave_0: entered promiscuous mode [ 1313.564126][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.601616][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.664048][T15205] bridge_slave_1: entered allmulticast mode [ 1313.694924][T15205] bridge_slave_1: entered promiscuous mode [ 1314.175196][T15286] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1314.607681][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.782996][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.041756][T15295] syzkaller0: entered promiscuous mode [ 1315.070702][T15295] syzkaller0: entered allmulticast mode [ 1315.120707][T15205] team0: Port device team_slave_0 added [ 1315.130040][T15305] input: syz1 as /devices/virtual/input/input29 [ 1315.332136][T15205] team0: Port device team_slave_1 added [ 1319.964275][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1320.090188][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.109585][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.142915][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.348141][T15334] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1320.768374][ T49] hsr_slave_0: left promiscuous mode [ 1320.788593][ T49] hsr_slave_1: left promiscuous mode [ 1320.818927][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.872898][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.987992][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.014421][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.023407][ T49] bridge_slave_1: left allmulticast mode [ 1321.030433][ T49] bridge_slave_1: left promiscuous mode [ 1321.054236][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.071342][T15337] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1321.089596][ T49] bridge_slave_0: left allmulticast mode [ 1321.095476][ T49] bridge_slave_0: left promiscuous mode [ 1321.101307][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.167338][ T49] veth1_macvtap: left promiscuous mode [ 1321.173053][ T49] veth0_macvtap: left promiscuous mode [ 1321.179358][ T49] veth1_vlan: left promiscuous mode [ 1321.179885][T15341] input: syz1 as /devices/virtual/input/input30 [ 1321.196408][ T49] veth0_vlan: left promiscuous mode [ 1321.361173][T15328] udevd[15328]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1321.710802][T15348] 9pnet_fd: Insufficient options for proto=fd [ 1323.553265][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1323.667140][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1323.771853][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.882891][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.836955][ T49] bond0 (unregistering): Released all slaves [ 1324.972949][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.980411][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.007283][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.021274][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 1325.660796][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1326.255797][T15373] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1326.727443][T15367] syzkaller0: entered promiscuous mode [ 1326.753416][T15367] syzkaller0: entered allmulticast mode [ 1330.007654][T15387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2404'. [ 1331.278490][T15205] hsr_slave_0: entered promiscuous mode [ 1331.358919][T15205] hsr_slave_1: entered promiscuous mode [ 1331.396789][T15205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.424855][T15205] Cannot create hsr debugfs directory [ 1331.660783][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1332.264289][T15398] input: syz1 as /devices/virtual/input/input31 [ 1333.822336][T15409] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1334.831385][T15424] syzkaller0: entered promiscuous mode [ 1334.853919][T15424] syzkaller0: entered allmulticast mode [ 1336.797867][T15440] binder: 15438:15440 ioctl c0306201 2000000004c0 returned -14 [ 1337.903939][T11838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1338.139348][T11838] usb 6-1: Using ep0 maxpacket: 16 [ 1338.148174][T11838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.193848][T11838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1338.218110][T11838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1338.247057][T11838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1338.278915][T11838] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.316423][T11838] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1338.344638][T11838] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1338.352780][T11838] usb 6-1: Manufacturer: syz [ 1338.383624][T11838] usb 6-1: config 0 descriptor?? [ 1338.817320][T11838] rc_core: IR keymap rc-hauppauge not found [ 1338.823386][T11838] Registered IR keymap rc-empty [ 1338.840980][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1338.897528][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1338.950407][T11838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1338.989042][T11838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 1339.093288][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.165270][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.212801][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.273379][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.304664][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.345198][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.433124][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.481485][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.532231][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.579163][T11838] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1339.640973][T11838] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1339.650468][T11838] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1339.703099][T11838] usb 6-1: USB disconnect, device number 2 [ 1341.794626][ T1198] libceph: connect (1)[c::]:6789 error -101 [ 1341.794777][ T1198] libceph: mon0 (1)[c::]:6789 connect error [ 1341.983711][T15453] ceph: No mds server is up or the cluster is laggy [ 1342.058128][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1342.061793][T15458] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1342.070007][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1342.656492][T15461] input: syz1 as /devices/virtual/input/input33 [ 1342.977881][T15205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1343.081469][T15473] binder: 15471:15473 ioctl c0306201 2000000004c0 returned -14 [ 1343.567216][T15205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1343.644791][T15205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1343.685697][T15205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1344.556114][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.898995][T12243] libceph: connect (1)[c::]:6789 error -101 [ 1346.093831][T15490] ceph: No mds server is up or the cluster is laggy [ 1346.102003][T12243] libceph: mon0 (1)[c::]:6789 connect error [ 1346.360573][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.461389][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.468692][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.648909][T15503] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1346.662536][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.670964][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.491648][T15509] syzkaller0: entered promiscuous mode [ 1347.536102][T15509] syzkaller0: entered allmulticast mode [ 1347.579956][T15517] binder: 15513:15517 ioctl c0306201 2000000004c0 returned -14 [ 1348.308112][T15522] input: syz1 as /devices/virtual/input/input34 [ 1351.231222][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1351.250783][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1351.332583][T15543] 9pnet_fd: Insufficient options for proto=fd [ 1351.376837][T15539] ceph: No mds server is up or the cluster is laggy [ 1353.224031][T15554] binder: 15552:15554 ioctl c0306201 2000000004c0 returned -14 [ 1354.890658][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.959758][T15205] veth0_vlan: entered promiscuous mode [ 1354.996261][T15205] veth1_vlan: entered promiscuous mode [ 1355.069003][T15205] veth0_macvtap: entered promiscuous mode [ 1355.078368][T15564] input: syz1 as /devices/virtual/input/input35 [ 1355.179568][T15205] veth1_macvtap: entered promiscuous mode [ 1355.408076][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.418972][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.429257][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.440172][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.450670][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.461433][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.509478][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.753347][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.823978][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.841778][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.854110][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.864205][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.877519][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.890083][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.908281][T15205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.917375][T15205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.938466][T15205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.989554][T15205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.696806][ T7830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.714303][ T7830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.741634][T15578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.749244][T15578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.997255][T15580] input: syz1 as /devices/virtual/input/input36 [ 1357.436635][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.480417][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.504715][ T8] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1359.862648][T15599] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1361.143930][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1361.234027][ T8] usb 4-1: device descriptor read/all, error -71 [ 1361.850728][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.857319][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.947844][T15615] input: syz1 as /devices/virtual/input/input37 [ 1361.980769][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1361.992952][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1362.004069][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1362.016076][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1362.024836][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1362.032097][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1362.121815][ T7830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.143973][ T7830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.556263][ T7830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.624781][ T7830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.862475][ T7830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.906015][ T7830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.434149][ T7830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1363.457639][ T7830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.094062][T14945] Bluetooth: hci3: command tx timeout [ 1364.180159][T15616] chnl_net:caif_netlink_parms(): no params data found [ 1365.751747][T15650] 9pnet_fd: Insufficient options for proto=fd [ 1366.165054][T14945] Bluetooth: hci3: command tx timeout [ 1367.410577][T15616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.446984][T15616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.464627][T15616] bridge_slave_0: entered allmulticast mode [ 1367.486176][T15616] bridge_slave_0: entered promiscuous mode [ 1367.549025][T15616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.572297][T15616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.617472][T15616] bridge_slave_1: entered allmulticast mode [ 1367.674163][T15616] bridge_slave_1: entered promiscuous mode [ 1368.246361][T14945] Bluetooth: hci3: command tx timeout [ 1368.336915][T15616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.545759][T15616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.896580][T15616] team0: Port device team_slave_0 added [ 1368.991302][T15616] team0: Port device team_slave_1 added [ 1369.456378][T15616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.513793][T15616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.624349][T15616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.769422][T15616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.799629][T15616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.903821][T15616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.155946][ T7830] hsr_slave_0: left promiscuous mode [ 1370.174887][ T7830] hsr_slave_1: left promiscuous mode [ 1370.231538][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.287874][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.334995][T14945] Bluetooth: hci3: command tx timeout [ 1370.471256][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.597379][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.802738][ T7830] batman_adv: batadv0: Interface deactivated: macsec1 [ 1370.858805][ T7830] batman_adv: batadv0: Removing interface: macsec1 [ 1370.905046][ T7830] bridge_slave_1: left allmulticast mode [ 1370.910853][ T7830] bridge_slave_1: left promiscuous mode [ 1370.974466][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.012854][ T7830] bridge_slave_0: left allmulticast mode [ 1371.028915][ T7830] bridge_slave_0: left promiscuous mode [ 1371.042910][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.118358][ T7830] veth1_macvtap: left promiscuous mode [ 1371.183840][ T7830] veth0_macvtap: left promiscuous mode [ 1371.196293][ T7830] veth1_vlan: left promiscuous mode [ 1371.212104][ T7830] veth0_vlan: left promiscuous mode [ 1373.666868][ T7830] team0 (unregistering): Port device team_slave_1 removed [ 1373.727985][ T7830] team0 (unregistering): Port device team_slave_0 removed [ 1373.789051][ T7830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.859804][ T7830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.355638][ T7830] bond0 (unregistering): Released all slaves [ 1375.168833][T15616] hsr_slave_0: entered promiscuous mode [ 1375.231021][T15616] hsr_slave_1: entered promiscuous mode [ 1375.318677][T15616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1375.397364][T15616] Cannot create hsr debugfs directory [ 1375.400118][T15736] 9pnet_fd: Insufficient options for proto=fd [ 1377.976658][T15616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1378.051331][T15616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1378.109354][T15616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1378.168834][T15616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1378.571486][T15616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.648451][T15616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.698551][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.705786][ T7830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.777491][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.784752][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.960320][T15616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1380.147429][T15791] 9pnet_fd: Insufficient options for proto=fd [ 1381.209968][T15616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.538117][T15616] veth0_vlan: entered promiscuous mode [ 1381.590748][T15616] veth1_vlan: entered promiscuous mode [ 1382.252913][T15616] veth0_macvtap: entered promiscuous mode [ 1382.477573][T15616] veth1_macvtap: entered promiscuous mode [ 1382.620985][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.642095][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.670034][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.824929][T15835] 9pnet_fd: Insufficient options for proto=fd [ 1383.254898][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.308688][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.330326][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.356718][T15616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.383130][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.412352][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.459391][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.499588][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.543518][T15616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.580753][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.632444][T15616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.785895][T15616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.831350][T15616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.864354][T15616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.873147][T15616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.579396][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.610492][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.737058][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.770704][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.165686][T11838] libceph: connect (1)[c::]:6789 error -101 [ 1387.171756][T11838] libceph: mon0 (1)[c::]:6789 connect error [ 1387.356580][T15854] ceph: No mds server is up or the cluster is laggy [ 1389.353959][ T5818] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1389.619629][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.701866][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1389.712012][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1389.720801][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1389.730363][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1389.739805][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1389.748524][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1389.760363][ T5818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1389.844021][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.865144][ T5818] usb 3-1: config 0 descriptor?? [ 1390.027956][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.063919][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.646445][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.684878][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.438027][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.452797][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.844116][T14945] Bluetooth: hci0: command tx timeout [ 1391.856496][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.904198][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.167953][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 1392.209915][ T5818] usbhid: probe of 3-1:0.0 failed with error -71 [ 1392.275976][ T5818] usb 3-1: USB disconnect, device number 105 [ 1392.550983][T15927] input: syz1 as /devices/virtual/input/input38 [ 1393.813100][T15901] chnl_net:caif_netlink_parms(): no params data found [ 1393.943404][T14945] Bluetooth: hci0: command tx timeout [ 1394.679879][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1396.141218][T14945] Bluetooth: hci0: command tx timeout [ 1396.439084][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.478508][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.507100][T15901] bridge_slave_0: entered allmulticast mode [ 1396.521944][T15901] bridge_slave_0: entered promiscuous mode [ 1396.540412][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.563952][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.571233][T15901] bridge_slave_1: entered allmulticast mode [ 1396.583927][T15901] bridge_slave_1: entered promiscuous mode [ 1396.867635][T14945] Bluetooth: Unexpected continuation frame (len 57) [ 1397.203198][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1397.381135][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.413213][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.738789][T15901] team0: Port device team_slave_0 added [ 1397.800999][T15901] team0: Port device team_slave_1 added [ 1398.277098][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.327665][T14945] Bluetooth: hci0: command tx timeout [ 1398.391553][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.514972][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.259007][ T1099] hsr_slave_0: left promiscuous mode [ 1399.312382][ T1099] hsr_slave_1: left promiscuous mode [ 1399.394297][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.453255][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.959091][T14945] Bluetooth: hci1: command 0x0406 tx timeout [ 1400.049402][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.218646][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.264337][ T1099] bridge_slave_1: left allmulticast mode [ 1400.286313][ T1099] bridge_slave_1: left promiscuous mode [ 1400.384071][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.435910][ T1099] bridge_slave_0: left allmulticast mode [ 1400.449159][ T1099] bridge_slave_0: left promiscuous mode [ 1400.467035][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.832060][ T1099] veth1_macvtap: left promiscuous mode [ 1400.868097][ T1099] veth0_macvtap: left promiscuous mode [ 1400.897283][ T5772] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1400.906077][ T5772] Bluetooth: hci2: Injecting HCI hardware error event [ 1400.919159][T14945] Bluetooth: hci2: hardware error 0x00 [ 1401.003012][ T1099] veth1_vlan: left promiscuous mode [ 1401.149247][ T1099] veth0_vlan: left promiscuous mode [ 1402.325018][T16027] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1402.861175][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 1402.920639][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 1402.976837][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.029762][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.365000][T14945] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1403.554887][T16036] 9pnet_fd: Insufficient options for proto=fd [ 1404.172347][ T1099] bond0 (unregistering): Released all slaves [ 1404.352825][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.363281][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.397487][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.271943][T16015] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.281119][T16015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.289985][T16015] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.298741][T16015] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.673955][T16015] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1405.682882][T16015] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1405.692077][T16015] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1405.701196][T16015] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1405.733304][T11793] libceph: connect (1)[c::]:6789 error -101 [ 1405.733457][T11793] libceph: mon0 (1)[c::]:6789 connect error [ 1405.870637][T16039] ceph: No mds server is up or the cluster is laggy [ 1405.898845][T15901] hsr_slave_0: entered promiscuous mode [ 1406.015170][T15901] hsr_slave_1: entered promiscuous mode [ 1406.044912][T15901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.067442][T15901] Cannot create hsr debugfs directory [ 1409.906027][T15901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1409.949836][T15901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.011001][T15901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1410.041879][T15901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1410.316117][T15901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.317861][T11838] IPVS: starting estimator thread 0... [ 1410.401770][T15901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.434103][T16094] IPVS: using max 32 ests per chain, 76800 per kthread [ 1410.469555][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.476895][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.621828][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.629015][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.254297][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1412.254465][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1412.392191][T16102] ceph: No mds server is up or the cluster is laggy [ 1413.903291][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2539'. [ 1414.313396][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.499488][T15901] veth0_vlan: entered promiscuous mode [ 1414.555800][T15901] veth1_vlan: entered promiscuous mode [ 1415.278042][T15901] veth0_macvtap: entered promiscuous mode [ 1415.469589][T15901] veth1_macvtap: entered promiscuous mode [ 1415.563054][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.576763][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.642987][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.823438][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.848366][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1417.176456][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1417.194514][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1417.216371][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.262634][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.323278][T16151] ceph: No mds server is up or the cluster is laggy [ 1417.455191][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.498397][T16159] input: syz1 as /devices/virtual/input/input39 [ 1417.538031][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.587794][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.615433][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.626375][T15901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.638417][T15901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.652047][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.688644][T15901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.734007][T15901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.742878][T15901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.752512][T15901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.034604][T16165] 9pnet_fd: Insufficient options for proto=fd [ 1418.469343][T16165] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1418.588703][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.616651][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.311700][T15070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.320971][T16175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2548'. [ 1419.343973][T15070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.089744][T16201] capability: warning: `syz.5.2553' uses 32-bit capabilities (legacy support in use) [ 1421.299525][T16205] input: syz1 as /devices/virtual/input/input40 [ 1423.200374][ T1069] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x70 [ 1423.214472][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1423.279978][T16233] input: syz1 as /devices/virtual/input/input41 [ 1423.294630][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.301253][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.472475][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1423.486726][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.550708][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1423.602533][ T8] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1423.650281][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.685289][ T8] usb 6-1: Product: syz [ 1423.728372][ T8] usb 6-1: Manufacturer: syz [ 1423.733064][ T8] usb 6-1: SerialNumber: syz [ 1424.278156][ T8] usb 6-1: config 0 descriptor?? [ 1424.518217][T16253] input: syz1 as /devices/virtual/input/input42 [ 1425.682055][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.745664][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.593755][T16277] 9pnet_fd: Insufficient options for proto=fd [ 1427.114602][T11793] usb 6-1: USB disconnect, device number 3 [ 1427.659423][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 1427.684882][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1428.615700][T16290] ceph: No mds server is up or the cluster is laggy [ 1430.718288][T16322] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1433.290106][T16333] 9pnet_fd: Insufficient options for proto=fd [ 1433.451675][T16333] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1435.321306][ T5810] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1435.336625][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1435.383235][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1435.505241][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 1435.528911][T16343] ceph: No mds server is up or the cluster is laggy [ 1435.539312][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.562421][ T5810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1435.607687][ T5810] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1435.668530][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.700890][ T5810] usb 3-1: Product: syz [ 1435.712695][ T5810] usb 3-1: Manufacturer: syz [ 1435.725130][ T5810] usb 3-1: SerialNumber: syz [ 1435.741741][ T5810] usb 3-1: config 0 descriptor?? [ 1435.832637][T16358] input: syz1 as /devices/virtual/input/input43 [ 1436.952330][T16375] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1437.446434][T16371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.461138][T16371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.946877][T16391] 9pnet_fd: Insufficient options for proto=fd [ 1439.065782][ T5810] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1439.267939][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.278279][ T5810] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1439.290351][ T5810] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1439.301119][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.366569][ T5810] usb 4-1: config 0 descriptor?? [ 1439.481300][T14006] usb 3-1: USB disconnect, device number 106 [ 1439.855649][T16399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2594'. [ 1440.760344][ T5810] usb 4-1: USB disconnect, device number 112 [ 1440.975099][T14945] Bluetooth: Unexpected continuation frame (len 57) [ 1442.733323][T16425] 9pnet_fd: Insufficient options for proto=fd [ 1443.362795][T16430] 9pnet_fd: Insufficient options for proto=fd [ 1444.810864][T14945] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1445.266822][T14945] Bluetooth: hci3: Injecting HCI hardware error event [ 1445.275845][T14945] Bluetooth: hci3: hardware error 0x00 [ 1445.598968][T16437] ceph: No mds server is up or the cluster is laggy [ 1445.796940][T14006] libceph: connect (1)[c::]:6789 error -101 [ 1445.960821][T14006] libceph: mon0 (1)[c::]:6789 connect error [ 1446.269903][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2604'. [ 1446.370203][T16448] binder_alloc: 16447: binder_alloc_buf, no vma [ 1446.580014][T16452] binder: 16449:16452 ioctl c0306201 2000000004c0 returned -14 [ 1446.595679][T16452] binder_alloc: 16449: binder_alloc_buf, no vma [ 1447.465534][T16462] input: syz1 as /devices/virtual/input/input44 [ 1448.249274][T14945] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1448.411077][T16467] syzkaller0: entered promiscuous mode [ 1448.532201][T16474] 9pnet_fd: Insufficient options for proto=fd [ 1448.547787][T16467] syzkaller0: entered allmulticast mode [ 1449.042734][T16477] 9pnet_fd: Insufficient options for proto=fd [ 1449.949276][T11838] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1449.991930][T11838] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1450.503968][T16486] fido_id[16486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1453.238564][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1453.442814][T16501] input: syz1 as /devices/virtual/input/input45 [ 1453.723404][T16506] syz.3.2619: attempt to access beyond end of device [ 1453.723404][T16506] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1453.736984][T16506] F2FS-fs (loop7): Unable to read 1th superblock [ 1453.744055][T16506] syz.3.2619: attempt to access beyond end of device [ 1453.744055][T16506] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1453.756951][T16506] F2FS-fs (loop7): Unable to read 2th superblock [ 1455.682047][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1456.078808][T16531] syzkaller0: entered promiscuous mode [ 1456.098223][T16531] syzkaller0: entered allmulticast mode [ 1456.816830][ T1198] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1456.879008][ T1198] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1457.913792][T14006] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1458.105024][T14006] usb 4-1: Using ep0 maxpacket: 16 [ 1458.123305][T14006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.150624][T14006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.180998][T14006] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1458.194963][T16557] syzkaller0: entered promiscuous mode [ 1458.201805][T14006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.210109][T16557] syzkaller0: entered allmulticast mode [ 1458.230777][T14006] usb 4-1: config 0 descriptor?? [ 1458.686985][T16562] random: crng reseeded on system resumption [ 1459.121031][T14006] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 1459.144068][T14006] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 1459.163844][T14006] mcp2221 0003:04D8:00DD.0017: collection stack underflow [ 1459.203930][T14006] mcp2221 0003:04D8:00DD.0017: item 0 0 0 12 parsing failed [ 1459.225856][T16561] syz.5.2639: attempt to access beyond end of device [ 1459.225856][T16561] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1459.239290][T16561] FAT-fs (nbd5): unable to read boot sector [ 1459.265934][T14006] mcp2221 0003:04D8:00DD.0017: can't parse reports [ 1459.282295][T14006] mcp2221: probe of 0003:04D8:00DD.0017 failed with error -22 [ 1459.330840][T14006] usb 4-1: USB disconnect, device number 113 [ 1460.745707][T14006] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1460.928627][T16585] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2646'. [ 1460.952540][T14006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.967728][T14006] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1460.980934][T14006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.993096][T14006] usb 6-1: config 0 descriptor?? [ 1461.445655][T16589] syzkaller0: entered promiscuous mode [ 1461.451377][T16589] syzkaller0: entered allmulticast mode [ 1463.564741][T14006] usbhid 6-1:0.0: can't add hid device: -71 [ 1463.570940][T14006] usbhid: probe of 6-1:0.0 failed with error -71 [ 1463.593967][T14006] usb 6-1: USB disconnect, device number 4 [ 1464.013185][T16617] input: syz1 as /devices/virtual/input/input46 [ 1464.172392][T15505] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1464.678757][T15505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.691252][T15505] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1464.701365][T15505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.738110][T15505] usb 4-1: config 0 descriptor?? [ 1465.181760][T15505] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1465.276459][T15505] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0018/input/input47 [ 1465.562647][T15505] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1465.749549][T15505] usb 4-1: USB disconnect, device number 114 [ 1465.835326][T16631] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2658'. [ 1465.873635][T16628] fido_id[16628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1467.250734][T16647] 9pnet_fd: Insufficient options for proto=fd [ 1469.226352][T16662] input: syz1 as /devices/virtual/input/input48 [ 1469.392786][T16665] input: syz1 as /devices/virtual/input/input49 [ 1470.355043][T16685] 9pnet_fd: Insufficient options for proto=fd [ 1470.387740][T16685] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1470.940573][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2673'. [ 1471.607473][T16700] random: crng reseeded on system resumption [ 1471.616059][T16701] syz.3.2677: attempt to access beyond end of device [ 1471.616059][T16701] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1471.629109][T16701] FAT-fs (nbd3): unable to read boot sector [ 1473.252343][T16712] binder_alloc: 16711: binder_alloc_buf, no vma [ 1473.490640][T16718] 9pnet_fd: Insufficient options for proto=fd [ 1474.036736][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2683'. [ 1474.122152][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1474.957640][T16744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1475.138714][T16749] syz.2.2691: attempt to access beyond end of device [ 1475.138714][T16749] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1475.165294][T16749] FAT-fs (nbd2): unable to read boot sector [ 1476.262089][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'. [ 1476.692285][T16774] 9pnet_fd: Insufficient options for proto=fd [ 1477.458117][T16779] syz.2.2700: attempt to access beyond end of device [ 1477.458117][T16779] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1477.747325][T16779] FAT-fs (nbd2): unable to read boot sector [ 1477.816327][T16783] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1478.387961][T16795] binder: BINDER_SET_CONTEXT_MGR already set [ 1478.394599][T16795] binder: 16792:16795 ioctl 4018620d 200000004a80 returned -16 [ 1478.825117][ T786] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1478.832859][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1479.043803][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 1479.049060][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1479.066250][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.080061][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.090806][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.103121][ T786] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1479.112429][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1479.124375][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.134531][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1479.145915][ T786] usb 4-1: config 0 descriptor?? [ 1479.165985][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1479.176135][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1479.226764][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1479.242682][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1479.251595][ T8] usb 6-1: Manufacturer: syz [ 1479.266490][ T8] usb 6-1: config 0 descriptor?? [ 1479.568274][T16799] input: syz1 as /devices/virtual/input/input50 [ 1479.737329][ T786] usbhid 4-1:0.0: can't add hid device: -71 [ 1479.744305][ T786] usbhid: probe of 4-1:0.0 failed with error -71 [ 1479.784029][ T786] usb 4-1: USB disconnect, device number 115 [ 1480.034910][ T8] rc_core: IR keymap rc-hauppauge not found [ 1480.040892][ T8] Registered IR keymap rc-empty [ 1480.050452][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.097335][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.147671][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1480.193629][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 1480.216072][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.264018][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.304903][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.344198][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.373883][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.434039][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.503843][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.554526][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.645362][T16809] loop6: detected capacity change from 0 to 7 [ 1481.402492][T16809] Dev loop6: unable to read RDB block 7 [ 1481.408815][T16809] loop6: unable to read partition table [ 1481.415507][T16809] loop6: partition table beyond EOD, truncated [ 1481.421782][T16809] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1481.603892][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1481.664992][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1481.705649][ T8] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1481.723773][ T8] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1481.758281][T16817] syz.5.2711: attempt to access beyond end of device [ 1481.758281][T16817] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1481.775321][ T8] usb 6-1: USB disconnect, device number 5 [ 1481.791236][T16817] FAT-fs (nbd5): unable to read boot sector [ 1481.846499][T16824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2710'. [ 1482.363036][T16835] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1483.073520][T16844] binder: 16840:16844 ioctl c0306201 2000000004c0 returned -14 [ 1483.551551][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'. [ 1484.457530][T16859] bridge0: port 3(syz_tun) entered blocking state [ 1484.464870][T16859] bridge0: port 3(syz_tun) entered disabled state [ 1484.477127][T16859] syz_tun: entered allmulticast mode [ 1484.494260][T16859] syz_tun: entered promiscuous mode [ 1484.503937][T16859] bridge0: port 3(syz_tun) entered blocking state [ 1484.510789][T16859] bridge0: port 3(syz_tun) entered forwarding state [ 1484.584330][T16859] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 1484.794871][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.267522][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.294689][T16859] bridge0: port 3(syz_tun) entered disabled state [ 1485.301351][T16859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.309745][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.321948][T16859] bridge0: port 3(syz_tun) entered blocking state [ 1485.328679][T16859] bridge0: port 3(syz_tun) entered forwarding state [ 1485.336517][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.343634][T16859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.351045][T16859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.358190][T16859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.368087][T16859] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1486.163986][ T1198] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1486.315242][T16869] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1486.743948][ T1198] usb 2-1: Using ep0 maxpacket: 16 [ 1486.771223][ T1198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.837068][ T1198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1486.862484][ T1198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1486.886474][ T1198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1486.896633][ T1198] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.913388][ T1198] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1486.923356][ T1198] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1486.977813][ T1198] usb 2-1: Manufacturer: syz [ 1487.007281][ T1198] usb 2-1: config 0 descriptor?? [ 1487.927614][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1487.978658][ T8] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1488.073868][ T1198] rc_core: IR keymap rc-hauppauge not found [ 1488.100309][ T1198] Registered IR keymap rc-empty [ 1488.111297][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.196925][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.246993][ T1198] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1488.266884][T16884] fido_id[16884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1488.306103][ T1198] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 1488.391578][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.444057][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.514005][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.576610][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.624437][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.735714][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.784961][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.817171][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.878180][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.935133][ T1198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1488.975634][ T1198] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1488.986102][ T1198] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1489.050099][ T1198] usb 2-1: USB disconnect, device number 102 [ 1491.434028][T12243] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1491.517556][T16910] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1491.623924][T12243] usb 2-1: Using ep0 maxpacket: 8 [ 1491.644661][T12243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.694037][T12243] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1491.703816][T12243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.711935][T12243] usb 2-1: Product: syz [ 1491.716778][T12243] usb 2-1: Manufacturer: syz [ 1491.721573][T12243] usb 2-1: SerialNumber: syz [ 1491.749492][T12243] usb 2-1: config 0 descriptor?? [ 1491.803615][T12243] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1491.810751][T12243] usb 2-1: selecting invalid altsetting 1 [ 1491.986448][T12243] gspca_stk014: reg_r err -32 [ 1491.991274][T12243] stk014: probe of 2-1:0.0 failed with error -32 [ 1492.418099][T16915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.428991][T16915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.602560][T12243] usb 2-1: USB disconnect, device number 103 [ 1493.559415][T12243] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1493.612173][T12243] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1493.980910][T16931] fido_id[16931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1494.421880][T16948] 9pnet_fd: Insufficient options for proto=fd [ 1495.023628][ T8] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1496.041396][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1496.134066][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.281597][ T8] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1496.291056][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.302941][ T8] usb 3-1: Product: syz [ 1496.313042][ T8] usb 3-1: Manufacturer: syz [ 1496.321223][ T8] usb 3-1: SerialNumber: syz [ 1496.348333][ T8] usb 3-1: config 0 descriptor?? [ 1496.358042][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1496.391946][ T8] usb 3-1: selecting invalid altsetting 1 [ 1496.588389][ T8] gspca_stk014: reg_r err -32 [ 1496.593342][ T8] stk014: probe of 3-1:0.0 failed with error -32 [ 1496.781964][T16970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.792962][T16970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.161279][T12243] usb 3-1: USB disconnect, device number 107 [ 1497.735654][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1497.764395][T16980] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1497.773175][T16980] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1497.782139][T16980] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1497.791045][T16980] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.894451][T16989] input: syz1 as /devices/virtual/input/input53 [ 1499.256102][T16993] 9pnet_fd: Insufficient options for proto=fd [ 1503.372701][T14006] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1503.566629][T14006] usb 6-1: Using ep0 maxpacket: 8 [ 1503.622550][T14006] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.708092][T14006] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1503.763183][T14006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.855786][T14006] usb 6-1: Product: syz [ 1503.899847][T14006] usb 6-1: Manufacturer: syz [ 1504.041878][T14006] usb 6-1: SerialNumber: syz [ 1504.188942][T14006] usb 6-1: config 0 descriptor?? [ 1504.202241][T14006] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1504.209694][T14006] usb 6-1: selecting invalid altsetting 1 [ 1504.269456][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1504.410561][T14006] gspca_stk014: init reg: 0x00 [ 1504.417038][T14006] stk014: probe of 6-1:0.0 failed with error -5 [ 1504.836791][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.847574][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.210673][T12243] usb 6-1: USB disconnect, device number 6 [ 1506.274004][T14006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1506.474041][T14006] usb 6-1: Using ep0 maxpacket: 16 [ 1506.502517][T14006] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.561327][T14006] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1506.579378][T14006] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1506.608082][T14006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.625385][T14006] usb 6-1: config 0 descriptor?? [ 1507.093640][T14006] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1507.684259][T17049] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.693114][T17049] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.701959][T17049] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.710886][T17049] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.771772][T17049] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.781012][T17049] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.790072][T17049] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.799031][T17049] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.545558][T11838] usb 6-1: USB disconnect, device number 7 [ 1508.632707][T17055] input: syz1 as /devices/virtual/input/input54 [ 1510.423979][T11838] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1510.675076][T11838] usb 4-1: Using ep0 maxpacket: 16 [ 1510.712117][T11838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.747795][T11838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.760035][T11838] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1510.782294][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.797899][T11838] usb 4-1: config 0 descriptor?? [ 1511.230448][T11838] usbhid 4-1:0.0: can't add hid device: -71 [ 1511.253941][T11838] usbhid: probe of 4-1:0.0 failed with error -71 [ 1511.288297][T11838] usb 4-1: USB disconnect, device number 116 [ 1512.532147][T17082] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.541144][T17082] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.549965][T17082] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.558839][T17082] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.960645][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 1513.154423][T17076] input: syz1 as /devices/virtual/input/input55 [ 1513.228376][T17082] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.238579][T17082] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.248239][T17082] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.257826][T17082] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.850697][T17108] overlayfs: missing 'lowerdir' [ 1516.654626][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1516.849176][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 1516.854276][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.918282][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.955223][ T5818] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1516.978306][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.020140][ T5818] usb 6-1: config 0 descriptor?? [ 1517.464297][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 1517.472464][ T5818] usbhid: probe of 6-1:0.0 failed with error -71 [ 1517.513258][ T5818] usb 6-1: USB disconnect, device number 8 [ 1517.704318][T17123] input: syz1 as /devices/virtual/input/input57 [ 1519.023114][T17134] 9pnet_fd: Insufficient options for proto=fd [ 1525.493873][T12243] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1525.695870][T12243] usb 3-1: Using ep0 maxpacket: 16 [ 1525.712198][T12243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.740880][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1525.773453][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1525.801543][T12243] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1525.844287][T12243] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1525.898868][T12243] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1525.920775][T12243] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1525.945564][T12243] usb 3-1: Manufacturer: syz [ 1526.105728][T12243] usb 3-1: config 0 descriptor?? [ 1526.714217][T12243] rc_core: IR keymap rc-hauppauge not found [ 1526.730941][T12243] Registered IR keymap rc-empty [ 1526.743849][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1526.802176][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1526.868271][T12243] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1526.885563][T12243] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input58 [ 1526.925603][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.044288][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.137744][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.224104][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.277278][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.305197][T17211] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1527.312825][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1527.321255][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.363846][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.404018][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.455110][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.488467][T12243] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1527.537651][T12243] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1527.576054][T12243] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1527.779371][T12243] usb 3-1: USB disconnect, device number 108 [ 1528.848232][T17228] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.857390][T17228] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.866321][T17228] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.875361][T17228] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.963816][T17228] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.973100][T17228] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.982316][T17228] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.991582][T17228] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.184246][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1530.194007][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1530.421662][T17246] ceph: No mds server is up or the cluster is laggy [ 1530.824024][T11793] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1531.043993][T11793] usb 3-1: Using ep0 maxpacket: 16 [ 1531.051466][T11793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.075048][T11793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1531.103720][T11793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1531.124673][T11793] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1531.143049][T11793] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1531.370962][T11793] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1531.381134][T11793] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1531.403727][T11793] usb 3-1: Manufacturer: syz [ 1531.546956][T11793] usb 3-1: config 0 descriptor?? [ 1532.495855][T17268] 9pnet_fd: Insufficient options for proto=fd [ 1533.106526][T17272] input: syz1 as /devices/virtual/input/input60 [ 1533.196239][T11793] rc_core: IR keymap rc-hauppauge not found [ 1533.202188][T11793] Registered IR keymap rc-empty [ 1533.213043][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1533.572083][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1533.819657][T11793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1533.897482][T11793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 1533.946157][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1533.978515][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.048089][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.096231][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.366210][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.503908][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.552987][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.613982][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.651212][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1534.795595][T11793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1535.706564][T17301] 9pnet_fd: Insufficient options for proto=fd [ 1535.734845][T11793] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1535.763468][T11793] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1535.788974][T11793] usb 3-1: USB disconnect, device number 109 [ 1536.170134][T17311] input: syz1 as /devices/virtual/input/input61 [ 1536.233766][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1536.475098][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1536.502436][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1536.502586][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1536.575091][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.654923][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1536.757209][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1536.765023][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1536.833140][T17316] ceph: No mds server is up or the cluster is laggy [ 1536.848404][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1537.106378][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1537.225149][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1537.396850][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1537.618697][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1537.663840][ T9] usb 6-1: Manufacturer: syz [ 1537.755151][ T9] usb 6-1: config 0 descriptor?? [ 1539.384558][ T9] rc_core: IR keymap rc-hauppauge not found [ 1539.390540][ T9] Registered IR keymap rc-empty [ 1539.396359][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.240547][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.249921][T17337] 9pnet_fd: Insufficient options for proto=fd [ 1540.286044][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1540.309964][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input62 [ 1540.362018][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.415036][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.573425][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.613875][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.648651][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.750508][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1540.933295][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1541.034106][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1541.154084][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1541.271973][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1541.395659][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1541.477614][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1541.503396][ T9] usb 6-1: USB disconnect, device number 9 [ 1544.906717][T17388] input: syz1 as /devices/virtual/input/input64 [ 1544.933816][T12243] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1545.163954][T12243] usb 2-1: Using ep0 maxpacket: 16 [ 1545.654591][T12243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.683797][T12243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1545.773765][T12243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1545.803712][T12243] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1545.833846][T12243] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.931876][T12243] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1545.962343][T12243] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1545.991563][T12243] usb 2-1: Manufacturer: syz [ 1546.029691][T12243] usb 2-1: config 0 descriptor?? [ 1546.174128][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.181283][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.193761][T12243] rc_core: IR keymap rc-hauppauge not found [ 1547.210281][T12243] Registered IR keymap rc-empty [ 1547.230691][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1547.293887][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1547.522897][T12243] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1548.332887][T17410] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1548.820159][T12243] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input65 [ 1548.904779][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1548.953920][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.023855][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.105172][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.153786][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.208902][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.273821][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.444362][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1549.484035][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1550.278928][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1550.335790][T12243] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1550.363817][T12243] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1552.025668][T12243] usb 2-1: USB disconnect, device number 104 [ 1553.413871][T12243] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1553.596369][T12243] usb 2-1: Using ep0 maxpacket: 16 [ 1553.630330][T12243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.883826][T12243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1555.117617][T12243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1555.127650][T12243] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1555.138050][T12243] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1555.153189][T12243] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1555.166861][T12243] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1555.183712][T12243] usb 2-1: Manufacturer: syz [ 1555.211956][T12243] usb 2-1: config 0 descriptor?? [ 1555.653794][T12243] rc_core: IR keymap rc-hauppauge not found [ 1555.664583][T12243] Registered IR keymap rc-empty [ 1555.689042][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1555.753847][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1555.786154][T12243] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1555.819830][T12243] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 1555.841468][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1555.874000][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1555.904099][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1555.965141][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1556.010896][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1556.233943][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1557.053917][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1557.100258][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1557.156092][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1557.193829][T12243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1557.235907][T12243] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1557.269265][T12243] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1557.297376][T12243] usb 2-1: USB disconnect, device number 105 [ 1559.764404][T17480] binder: BINDER_SET_CONTEXT_MGR already set [ 1559.784155][T17480] binder: 17478:17480 ioctl 4018620d 200000004a80 returned -16 [ 1664.983618][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1664.990852][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15901/1:b..l [ 1664.999515][ C1] rcu: (detected by 1, t=10502 jiffies, g=127937, q=174 ncpus=2) [ 1665.007345][ C1] task:syz-executor state:R running task stack:21160 pid:15901 ppid:15878 flags:0x00004002 [ 1665.019480][ C1] Call Trace: [ 1665.022800][ C1] [ 1665.025847][ C1] __schedule+0x1553/0x45a0 [ 1665.030594][ C1] ? asan.module_dtor+0x20/0x20 [ 1665.035662][ C1] ? mark_lock+0x94/0x320 [ 1665.040082][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1665.046104][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 1665.051424][ C1] preempt_schedule_irq+0xbf/0x150 [ 1665.056599][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1665.062362][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1665.068290][ C1] irqentry_exit+0x67/0x70 [ 1665.072818][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1665.078916][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 1665.084782][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1665.104605][ C1] RSP: 0000:ffffc90003ea7720 EFLAGS: 00000206 [ 1665.110811][ C1] RAX: b057a5e72226ea00 RBX: ffff88802a9f3c00 RCX: b057a5e72226ea00 [ 1665.118900][ C1] RDX: ffff88802a9f3c00 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0 [ 1665.126959][ C1] RBP: 0000000000000000 R08: ffffea0001557837 R09: 1ffffd40002aaf06 [ 1665.135042][ C1] R10: dffffc0000000000 R11: fffff940002aaf07 R12: 0000000000000002 [ 1665.143035][ C1] R13: 0000000000000246 R14: ffff88801b3b5490 R15: ffff88802a9f4730 [ 1665.151061][ C1] xas_reload+0xf9/0x470 [ 1665.155380][ C1] find_lock_entries+0x3a1/0xfe0 [ 1665.160349][ C1] ? find_lock_entries+0x126/0xfe0 [ 1665.165492][ C1] ? find_get_entries+0x8f0/0x8f0 [ 1665.170559][ C1] shmem_undo_range+0x2b3/0x1b20 [ 1665.175549][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 1665.180853][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 1665.186648][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1665.191797][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 1665.196861][ C1] shmem_evict_inode+0x245/0x9e0 [ 1665.201834][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 1665.207587][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1665.213449][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 1665.219303][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 1665.224458][ C1] ? bit_waitqueue+0x30/0x30 [ 1665.229126][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1665.234361][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1665.239939][ C1] evict+0x4ca/0x8d0 [ 1665.243880][ C1] ? proc_nr_inodes+0x230/0x230 [ 1665.248762][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1665.254001][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1665.258932][ C1] ? iput+0x706/0x920 [ 1665.262957][ C1] do_unlinkat+0x38c/0x590 [ 1665.267413][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 1665.272564][ C1] ? getname_flags+0x20a/0x500 [ 1665.277378][ C1] __x64_sys_unlink+0x49/0x50 [ 1665.282078][ C1] do_syscall_64+0x55/0xa0 [ 1665.286524][ C1] ? clear_bhb_loop+0x40/0x90 [ 1665.291231][ C1] ? clear_bhb_loop+0x40/0x90 [ 1665.295938][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1665.301891][ C1] RIP: 0033:0x7fe0a5d9b887 [ 1665.306333][ C1] RSP: 002b:00007fff1b6eb228 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1665.314787][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0a5d9b887 [ 1665.322781][ C1] RDX: 00007fff1b6eb250 RSI: 00007fff1b6eb2e0 RDI: 00007fff1b6eb2e0 [ 1665.330781][ C1] RBP: 00007fff1b6eb2e0 R08: 00007fff1b6ec2e0 R09: 00000000ffffffff [ 1665.338883][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff1b6ec370 [ 1665.346926][ C1] R13: 00007fe0a5e32050 R14: 000000000017c3a9 R15: 00007fff1b6ec3b0 [ 1665.354952][ C1] [ 1665.357995][ C1] rcu: rcu_preempt kthread starved for 10538 jiffies! g127937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1665.369477][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1665.379473][ C1] rcu: RCU grace-period kthread stack dump: [ 1665.385380][ C1] task:rcu_preempt state:R running task stack:27720 pid:17 ppid:2 flags:0x00004000 [ 1665.396194][ C1] Call Trace: [ 1665.399497][ C1] [ 1665.402472][ C1] __schedule+0x1553/0x45a0 [ 1665.407208][ C1] ? asan.module_dtor+0x20/0x20 [ 1665.412208][ C1] ? enqueue_timer+0x23d/0x550 [ 1665.417003][ C1] ? __mod_timer+0x984/0xdb0 [ 1665.421638][ C1] schedule+0xbd/0x170 [ 1665.425738][ C1] schedule_timeout+0x188/0x2d0 [ 1665.430620][ C1] ? console_conditional_schedule+0x40/0x40 [ 1665.436551][ C1] ? update_process_times+0x1b0/0x1b0 [ 1665.441950][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1665.447624][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 1665.452499][ C1] ? rcu_gp_init+0x1162/0x1560 [ 1665.457293][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1665.462169][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1665.468186][ C1] ? rcu_gp_init+0x1560/0x1560 [ 1665.472976][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1665.477947][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1665.483180][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1665.488409][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1665.493030][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1665.498180][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1665.503153][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1665.508215][ C1] kthread+0x2fa/0x390 [ 1665.512327][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1665.517465][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1665.522077][ C1] ret_from_fork+0x48/0x80 [ 1665.526544][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1665.531248][ C1] ret_from_fork_asm+0x11/0x20 [ 1665.536166][ C1] [ 1665.539297][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1665.545638][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1665.552692][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1665.562768][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1665.568432][ C1] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1665.588060][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1665.594158][ C1] RAX: 3ceb8306e04e1e00 RBX: ffffffff8162a9dd RCX: 3ceb8306e04e1e00 [ 1665.602151][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 1665.610231][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1665.618312][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1665.626306][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 1665.634387][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1665.643350][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1665.649955][ C1] CR2: 0000001b31a0dff8 CR3: 000000006af05000 CR4: 00000000003526e0 [ 1665.658101][ C1] Call Trace: [ 1665.661502][ C1] [ 1665.664468][ C1] default_idle+0x13/0x20 [ 1665.668826][ C1] default_idle_call+0x6c/0xa0 [ 1665.673617][ C1] do_idle+0x33d/0x590 [ 1665.677739][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1665.682979][ C1] ? do_idle+0x56d/0x590 [ 1665.687254][ C1] cpu_startup_entry+0x43/0x60 [ 1665.692049][ C1] start_secondary+0xee/0xf0 [ 1665.696672][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1665.702780][ C1]