last executing test programs: 3m9.175615238s ago: executing program 2 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x48, 0x9e7a, 0x0, 0x3, 0x400400025a1}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x12}, {0x0, 0x6, 0x0, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x20000000) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x12}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="01", 0x1}], 0x1}, 0x8014) 3m8.35109705s ago: executing program 2 (id=1907): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x9}, 0x26) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m8.059023941s ago: executing program 2 (id=1911): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) listen(r0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00074002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3m7.609664451s ago: executing program 2 (id=1913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 3m6.702388265s ago: executing program 2 (id=1917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x19b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 3m2.321943919s ago: executing program 2 (id=1924): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4da}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400000020}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x401, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x10, 0x802, 0xffff, 0x0, 0x0, '\a\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x42000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x80000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$ndb(0x0, 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 2m47.176328012s ago: executing program 32 (id=1924): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4da}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400000020}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x401, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x10, 0x802, 0xffff, 0x0, 0x0, '\a\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x42000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x80000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$ndb(0x0, 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 1m33.952618218s ago: executing program 5 (id=2261): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) prlimit64(r0, 0xb, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) 1m31.459020046s ago: executing program 1 (id=2264): socket$can_bcm(0x1d, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x1, 0x1f8, 0x3, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a40008090501010002"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xd9}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r4 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x4007}, {0x20, 0x7f, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000040)={0x2, @raw_data="c2778e7a7d9e8cac28dade87400ac05888189843672b3a0e11a0cf07aba83d17d17f2088e8a81f4b368d9ba31e2571da596a45fc703441afb8c59cf9720d586478cd3b9d9d67424a793c15c5832e68bad10a002316cf05a5314ee77ebbffd7574f34ae28bbae87357ed8bd9269731dcc49adfa126566aa0561d140d4bc601eeaf3eca311e6a70a99ef9d1e2d94bd1ffaf6d33a144d8ecb328231d4763ff7056d1683ae0d7db9d91526b7a23bec2bdca645aa53dbde797cbdc805036bbc7dea339bb555093a9986eb"}) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000"], 0x0, 0x1a, 0x0, 0x1, 0xfffff929}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400030080000300", 0x33a) 1m30.498602296s ago: executing program 4 (id=2268): unshare(0x26020480) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa, 0x14) 1m30.31889715s ago: executing program 5 (id=2269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 1m29.77260975s ago: executing program 5 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) 1m29.709506747s ago: executing program 4 (id=2272): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000700e4091f4166f9d283a2528838ef3c4e9ab15cc69bb0340e000000000000d39f8518082d2f66258a4002ebae1d", @ANYRES32, @ANYRES32=r0, @ANYBLOB="00000000040000000400"/28], 0x50) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x400000001, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\t\x00'/16], 0x28) 1m29.369480416s ago: executing program 5 (id=2275): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac14"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 1m29.174676551s ago: executing program 1 (id=2277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2404c894}, 0x20004000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, &(0x7f0000000300)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000070600060000000000000000010000050900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004050}, 0x20004011) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000740), 0x341902, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000340), 0x3, 0xb8c40) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 1m29.130611896s ago: executing program 4 (id=2278): r0 = socket$nl_generic(0x10, 0x3, 0x10) syncfs(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, [0x0, 0xe, 0x0, 0x20000, 0x400000, 0x5]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x7900, 0x8a}, 0x50) syz_usb_connect$uac2(0x3, 0xee, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x250, 0xf9, 0x4, 0x2, 0x20}, 0x44, &(0x7f0000001640)={0x5, 0xf, 0x44, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x7708, 0x3, [0xff0170, 0xf, 0xffff00, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xff, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc, 0x9, 0x1d4}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x39, 0x0, 0x25e, 0xf, 0x1}]}, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000001700)=@string={0x2}}, {0x31, &(0x7f0000001800)=@string={0x31, 0x3, "0c2460df7cb0e0ae75a6f1858962e1ecc68f8576907c219974c6815ac16e6fae17f4959d2db8ae6cafddb86fcaab09"}}, {0x9b, &(0x7f0000001880)=@string={0x9b, 0x3, "4a8a742ef635b25ad12b6ec829276148b3ebbee66483cb406ba0252201f2ba29f200ed928769f1a0139147daae5f2035d821f80da2ab25b05ce32da2b5b12680966f367d6cadedb8b41a124c4d55c236e3c012e1a662bf2978e5fc850b8eb9d504d083e58783b361deabaaa89b992075434a811ad265a5796af2ff7338d4dcfb01f851851dd8671a97ca84e9921db4f66be349423da3c3bc12"}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) getsockname$qrtr(r5, &(0x7f0000001440), &(0x7f0000001480)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r4) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x100010, r5, 0x4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{0x0}], 0x1}}, {{&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/157, 0x9d}], 0x1, &(0x7f0000000340)=""/86, 0x56}, 0x9}], 0x2, 0x10122, 0x0) 1m28.182926492s ago: executing program 5 (id=2280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) 1m27.639402572s ago: executing program 1 (id=2282): unshare(0x26020480) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa, 0x14) 1m26.79868908s ago: executing program 1 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) 1m25.382574079s ago: executing program 1 (id=2287): socket$can_bcm(0x1d, 0x2, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x1, 0x1f8, 0x3, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a40008090501010002"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xd9}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x4007}, {0x20, 0x7f, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000040)={0x2, @raw_data="c2778e7a7d9e8cac28dade87400ac05888189843672b3a0e11a0cf07aba83d17d17f2088e8a81f4b368d9ba31e2571da596a45fc703441afb8c59cf9720d586478cd3b9d9d67424a793c15c5832e68bad10a002316cf05a5314ee77ebbffd7574f34ae28bbae87357ed8bd9269731dcc49adfa126566aa0561d140d4bc601eeaf3eca311e6a70a99ef9d1e2d94bd1ffaf6d33a144d8ecb328231d4763ff7056d1683ae0d7db9d91526b7a23bec2bdca645aa53dbde797cbdc805036bbc7dea339bb555093a9986eb"}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000"], 0x0, 0x1a, 0x0, 0x1, 0xfffff929}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400030080000300", 0x33a) 1m24.179163294s ago: executing program 5 (id=2290): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) ppoll(&(0x7f0000000500)=[{r2, 0x9f712fd3135d61af}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) pselect6(0x40, &(0x7f0000000240)={0x80000000000000, 0x0, 0xcd, 0x403, 0x0, 0x8000, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x5, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x9, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000617e2918573e8f7ea900"/31], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802c2090000000000000000000000008d00f300bc00000085000000600000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) socket(0x1d, 0x5, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c0000002fbd7000000000000300060033000000020010000000000000000000000000000200010000000000000005fc010000e0030005000000000002000000ac1414aa000000000000000002000800080000003400000000"], 0x60}, 0x1, 0x7}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 1m24.03951432s ago: executing program 4 (id=2291): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) prlimit64(r0, 0xb, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) 1m16.182570226s ago: executing program 4 (id=2294): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1m15.593712898s ago: executing program 1 (id=2296): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0xc00, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) io_uring_enter(r2, 0xeed, 0xeed, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0xb, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@any, 0x6, 0x7ff, 0x1, 0xb21, 0xe94d, "605b578ea8362674db43001019023e432aa92364041f82dd1968a73cf5dfc0e831a2f4527f90d607b9fad5cfd82257103f8b9442d1d15410affbe0605a2fb55cccc0735c649915314b7a721e622451dc388b1dc55ac368c886a22e815cbbf8a46f676bb02d7c902734d56cb7538d1bdd22b8d9f4ae3fc2f9ae76f91c234c7584"}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m11.980153955s ago: executing program 4 (id=2299): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.666044331s ago: executing program 33 (id=2290): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) ppoll(&(0x7f0000000500)=[{r2, 0x9f712fd3135d61af}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) pselect6(0x40, &(0x7f0000000240)={0x80000000000000, 0x0, 0xcd, 0x403, 0x0, 0x8000, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x5, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x9, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000617e2918573e8f7ea900"/31], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802c2090000000000000000000000008d00f300bc00000085000000600000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) socket(0x1d, 0x5, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c0000002fbd7000000000000300060033000000020010000000000000000000000000000200010000000000000005fc010000e0030005000000000002000000ac1414aa000000000000000002000800080000003400000000"], 0x60}, 0x1, 0x7}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 56.759854219s ago: executing program 34 (id=2296): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0xc00, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) io_uring_enter(r2, 0xeed, 0xeed, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0xb, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@any, 0x6, 0x7ff, 0x1, 0xb21, 0xe94d, "605b578ea8362674db43001019023e432aa92364041f82dd1968a73cf5dfc0e831a2f4527f90d607b9fad5cfd82257103f8b9442d1d15410affbe0605a2fb55cccc0735c649915314b7a721e622451dc388b1dc55ac368c886a22e815cbbf8a46f676bb02d7c902734d56cb7538d1bdd22b8d9f4ae3fc2f9ae76f91c234c7584"}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) socket$inet6_mptcp(0xa, 0x1, 0x106) 56.170324836s ago: executing program 35 (id=2299): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.144345491s ago: executing program 6 (id=2467): r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x78}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0x5}, 0x2) 11.782330427s ago: executing program 8 (id=2476): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) 11.472954907s ago: executing program 7 (id=2478): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 11.21686057s ago: executing program 6 (id=2479): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="440000001000010400000202000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c0002800800", @ANYRES32=0x0, @ANYBLOB="c8d79730bc68f2afff2030df40a87e7e517191049089e3ba825cc081698b312182ccdafc19c999243567"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x17) r5 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x8, 0x2, 0x401, 0x9, 0x7, 0x3, 0x5, 0x8, 0x0, 0x0, 0x0, 0x91d, 0x6, 0x3, 0x4, 0x10000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x2, 0x2, 0xa, 0x9, 0x7, 0x80000001, 0x6, 0x900000, 0x8, 0x70, 0x3, 0xec80, 0xbc6, 0x3, 0x5, 0x101, 0xb315, 0x2, 0x9, 0x4, 0x7, 0xffffffff, 0x2c, 0x0, 0xa, 0x7, 0x0, 0x40, 0x5, 0x3, 0x6, 0xe7, 0x48b, 0x1, 0x2a, 0x2, 0x2, 0xff, 0x3, 0x2, 0x8000000, 0xfffffff9, 0x9, 0x800, 0xfffffe00, 0x0, 0x0, 0x9, 0x6, 0x9, 0x5, 0x5, 0x5, 0x1000000, 0x7, 0x4c8, 0x3, 0xfffffffb, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x5, 0x4, 0x965, 0x9, 0x6, 0x479e, 0x75a, 0xffff0000, 0xffffffff, 0x9, 0x8, 0x3, 0xe, 0x2, 0xfd, 0x4, 0x80000000, 0xe1, 0x5, 0x2, 0x2a0, 0xd, 0xd2, 0x7, 0xffffffff, 0x6, 0x3, 0x7fff, 0x101, 0x7, 0x1, 0x7, 0x8, 0x2, 0x9, 0x6, 0x3ff, 0x3, 0x8001, 0x1, 0x6, 0xe, 0x7, 0x2, 0x3, 0x46, 0x7, 0x9, 0x1, 0x3d, 0xab6, 0x4cc399b1, 0x1, 0x2, 0x0, 0x5e2, 0x6810, 0x3, 0x0, 0x1, 0x2, 0xd8c0534, 0x6, 0x8, 0x40, 0x0, 0x4, 0x1, 0xd, 0x8, 0x1, 0x4, 0x3, 0x4, 0x5, 0xbce, 0x2, 0xe432, 0xe, 0x7af2, 0x5, 0xb, 0xbe, 0x7f, 0x7fffffff, 0x3a4, 0x9, 0x3, 0x1, 0x7fffffff, 0x9, 0xffffe898, 0x100, 0x0, 0x1, 0x2, 0x7, 0x100000c, 0x6, 0x9, 0xe8f, 0x572, 0x8, 0x8d8, 0x4, 0x200, 0x2, 0x9, 0xf, 0xcb5, 0x5, 0x9, 0x5, 0x5, 0x5e, 0x6, 0xa, 0x800, 0x8, 0xfff, 0x5, 0x4, 0x7, 0x6, 0x6, 0x2, 0x9, 0xffffff80, 0x9cbe, 0x0, 0x5, 0xa, 0x7, 0x800, 0x0, 0x2, 0x3, 0xffffffff, 0x4, 0x4, 0x9, 0x5, 0x9, 0x40, 0x800, 0x4, 0x100, 0x7, 0x3000000, 0xffffffff, 0x10001, 0x3, 0x200, 0x3cb4, 0xac, 0x1, 0x4, 0x6, 0x0, 0x8001, 0xfffff7e2, 0x7, 0x8, 0x101, 0xfffffe00, 0x200, 0x5da4, 0x800, 0x3, 0x1, 0x80, 0x1, 0x1, 0xc, 0x7, 0x2, 0xf67, 0xffffff81, 0x1b, 0x9, 0x8001, 0x8, 0xd6bc, 0xc8, 0x5, 0xffffffff, 0x6, 0x3, 0x9, 0xa9, 0x1, 0x5, 0x7, 0x8, 0x9, 0x7, 0xffff28d1, 0x3, 0x0, 0x9, 0x7ff, 0xe, 0xfe99, 0x3, 0x4, 0xae4, 0x8, 0x58, 0xfffffffd, 0x80000001, 0x7, 0x5f, 0x1, 0x9, 0x7ff, 0x7ff, 0x101, 0x58b4, 0xff, 0x10000, 0xd1, 0xfffffffc, 0x0, 0x938, 0x5, 0x0, 0x10001, 0x1, 0x3, 0xfffff800, 0x1, 0xfffffffc, 0x2, 0x80000001, 0x40, 0x0, 0x7fffffff, 0x6, 0x7, 0x20000000, 0x7, 0x6, 0x5, 0x5, 0x53, 0x8, 0x4, 0xffff689a, 0x7, 0x0, 0x2, 0x6, 0x7, 0x6, 0xf6a, 0x3, 0x0, 0x8ca, 0xffffde31, 0x9, 0x7, 0x9, 0x5484a737, 0x400, 0x2, 0xa, 0x3, 0x2, 0x1, 0x2, 0x5, 0xd, 0x800, 0xdf44, 0x2, 0x4, 0x4, 0x7, 0x0, 0xa, 0x1000, 0x77, 0x9, 0x8, 0x94, 0x4797, 0x4, 0x904, 0x4, 0x92fa, 0x8, 0x80000000, 0x2, 0x1, 0x9, 0x9, 0x10001, 0x7, 0xdc6, 0xca, 0x20cf, 0x31c3, 0x6, 0x0, 0x0, 0x6, 0x8, 0x6, 0x8, 0x0, 0x9, 0x8001, 0x2, 0x3, 0x8, 0x8, 0x5, 0x7e1ff7da, 0x7, 0x4, 0x80, 0xd3c, 0x9, 0x3, 0x80000000, 0x3, 0x1, 0x80, 0x8, 0xb, 0x80000000, 0x0, 0x10001, 0x3, 0x1, 0x1, 0x0, 0xf03, 0x10001, 0x8, 0x7, 0x9, 0x400, 0x101, 0x5, 0x9, 0x2f4, 0xc, 0x8, 0x6, 0x76, 0x7, 0x4, 0x8, 0xe, 0x10, 0x10000, 0x1, 0x3, 0x9, 0x7, 0x6941, 0x3, 0x9fe8, 0x72, 0x40, 0x8, 0x5, 0x6, 0x8, 0xfff, 0x4, 0x4, 0x1, 0xb5, 0x8, 0xfffffffd, 0x2, 0x8, 0xffff, 0x1, 0x7, 0x8001, 0xc, 0x8, 0xfffffffb, 0x0, 0x5, 0xb8, 0x5, 0x0, 0x2, 0x2bd, 0xc67, 0x2, 0x0, 0x3, 0x8, 0x4, 0x10001, 0xfa11, 0x4, 0x8000, 0xee0d, 0x2, 0x6, 0x4, 0x3, 0x17d6, 0x8, 0x4, 0xfffffff9, 0x6, 0x2, 0xff, 0x3516c66d, 0x51, 0x2, 0x9, 0x9f5c, 0x3c2, 0x6, 0x6, 0x9, 0x6ba800, 0xfffffffa, 0x6, 0x3, 0x43, 0x7c80, 0xffff, 0x6, 0xc, 0x3bbe, 0x3, 0x476, 0x4, 0x5, 0x5, 0x7, 0x2fffffe, 0x9, 0x0, 0x4, 0x3fe0, 0xd2c, 0x9, 0x758, 0x0, 0x4, 0xbc, 0x3, 0x4, 0x7, 0x4, 0x4, 0x80, 0x5, 0x0, 0x400, 0x0, 0x400, 0x5, 0x6, 0x9, 0x10, 0xdf, 0x5, 0xffffd5c2, 0xffffffff, 0x7, 0x3, 0xff, 0x3ff, 0xc, 0xcf, 0x0, 0x6, 0x80000000, 0x3, 0x4, 0xf, 0x5, 0xffffffff, 0x1, 0xffffffff, 0x8001, 0x3, 0x964a, 0x7fffffff, 0x7, 0x1, 0x6, 0x76, 0x4, 0xc8e, 0x2, 0xa8, 0x7, 0x6, 0xb, 0x7, 0xa, 0x5, 0xa, 0xffffffff, 0xcdf, 0x1, 0x9, 0x9, 0xfffffff0, 0xff, 0xffff, 0x80000001, 0x8001, 0x2, 0x10001, 0x5, 0xcc, 0x6, 0x9, 0x7, 0x7, 0x367b, 0x77, 0x5, 0x9, 0xb, 0x3, 0x10b6, 0x2, 0x9, 0x1, 0x84, 0x5, 0x2, 0xffff27ad, 0x6, 0x8, 0x400, 0x7, 0x0, 0x0, 0xfffffffa, 0x457, 0x25ff, 0xfffffffe, 0x7, 0x3, 0x1, 0x1, 0x8001, 0x9, 0xe7, 0x1, 0x6, 0x6, 0x5, 0x3, 0x0, 0x400, 0xcdf9, 0x0, 0x7, 0xf55, 0x7, 0x0, 0xd, 0x0, 0x9, 0x2, 0x9, 0x4, 0x2, 0x4cd5, 0x3, 0xa455, 0x5, 0x1d, 0x7f, 0x9, 0xfffffff8, 0x8, 0xb55a6dc, 0x8, 0x0, 0x5, 0x10, 0x9, 0x6, 0x7fffffff, 0x144870fa, 0x1, 0x4, 0x1, 0x1, 0x7, 0x3, 0x3800000, 0x8, 0x3, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfffffffc, 0x6, 0x3ee6, 0x7, 0x5, 0x4, 0xfffffffc, 0x60000000, 0x213, 0x243, 0x1, 0x2, 0x9e8, 0x8000, 0xfffffff8, 0xb, 0x8000002, 0x1, 0x8, 0x53, 0x5, 0xb2cd, 0x2, 0x9, 0x8, 0xe941, 0x2, 0x7, 0x1, 0x9, 0x9, 0x4, 0x4, 0x9, 0x1, 0x7, 0x2, 0xbb, 0x8, 0xfff, 0x0, 0x2, 0x2, 0x66a, 0x5ae3, 0xb, 0x7, 0x2, 0x5, 0x3, 0xef, 0xbe12, 0x401, 0x1, 0x81, 0x9, 0x400, 0x5, 0x6, 0x7f, 0x1, 0x4, 0xb9e, 0x5, 0xe, 0xb58d, 0x59, 0x3, 0x768, 0x78, 0x3, 0x3, 0x0, 0x40, 0x40, 0x4, 0x1, 0x0, 0x7, 0x7fffffff, 0x10001, 0xc, 0x3, 0x8, 0x9, 0xa363, 0x9, 0x3ff, 0x101, 0x2, 0x2d1, 0x272f, 0x615, 0x5, 0x4, 0x0, 0x1ae3, 0x7, 0x8, 0x4, 0x9, 0xba, 0x9, 0x3, 0xfffffffb, 0x0, 0x1, 0x5, 0x401, 0x0, 0x800, 0xdc2, 0x1000, 0x6, 0x0, 0x4, 0xf, 0x2, 0x8, 0xb, 0x5, 0xfffffff8, 0x1, 0x6, 0x6, 0xc7, 0x3, 0x2, 0x7, 0x6, 0x2, 0xca0, 0x400, 0x3eb, 0x7f, 0x13, 0x80000001, 0x6, 0x7, 0xe96, 0x3, 0x7, 0xe9, 0x773b, 0x2, 0x2, 0x40, 0x6, 0xfffffff9, 0x6, 0x1, 0x6, 0x2, 0x1, 0x6, 0x4da, 0x1000, 0x0, 0x3, 0x3f0, 0x2, 0x0, 0x80000001, 0x3, 0xffffffff, 0x2, 0x52d6, 0x3, 0x0, 0x9, 0x7, 0x80000000, 0x6, 0xf2f3, 0x6, 0x2, 0x159, 0x800, 0x1, 0x4, 0x4, 0x0, 0x5, 0x4fb9, 0x7fff, 0xa0, 0xd, 0x7a, 0x2, 0x3, 0x6, 0x2700000, 0x7, 0xcc, 0x7, 0x2, 0x9b3, 0x0, 0x5, 0x1, 0x5, 0x800, 0x6, 0x9, 0x0, 0x6, 0x800, 0xde, 0x7, 0xb1, 0x2, 0x800, 0x2d5, 0xda3d, 0x0, 0x5, 0x7fff, 0x2, 0x2, 0x2, 0xfffffffa, 0x81, 0x10, 0x2, 0x3, 0xc8e0, 0x244, 0x6, 0x7, 0xbf, 0x5b7, 0x0, 0x6, 0x8001, 0x6, 0x7, 0xb, 0xfffffffe, 0x80000001, 0x2, 0xe, 0x9, 0x9, 0x2, 0xfffffff6, 0x3ff, 0x0, 0x5, 0x66c4, 0x5, 0x1, 0xff, 0x9, 0x823, 0x1, 0x1000, 0x6, 0x1, 0x3228, 0x12000, 0x9, 0x3, 0x9b, 0x7, 0x3, 0x9, 0x5, 0xffffd3aa, 0x1, 0x6, 0x9bf7, 0x8c, 0x9, 0x8, 0x1, 0x387, 0x21e058ca, 0x1, 0xfffffff4, 0x3, 0x1, 0x7, 0x4, 0x1, 0x4, 0x31b, 0x401, 0x4, 0x6054, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x0, 0x8, 0x80000001, 0x4, 0x9, 0xd1f, 0x5, 0x7ff, 0x1, 0x9, 0x8, 0x2, 0x3a121014, 0x7, 0x8, 0x4f, 0x400, 0xc, 0x0, 0x1, 0x1, 0x3, 0x10001, 0x3, 0x0, 0xd, 0xa, 0x5, 0xb, 0x6, 0x6, 0xfffffffe, 0x0, 0x5, 0x7f, 0x1, 0x5, 0x8, 0x4, 0x1], 0x4, 0x400, 0x9}) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3ff, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 11.112429297s ago: executing program 8 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) timer_create(0x4, 0x0, &(0x7f0000bbdffc)) syz_io_uring_setup(0xf04, &(0x7f0000000500)={0x0, 0x1e58, 0x800, 0x0, 0x2ff}, 0x0, &(0x7f00000004c0), &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008801300024000000000000000000c000140f5ff0000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) shmctl$IPC_RMID(r0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='-\x00', 0x200, 0x0, 0xb3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) 9.977838807s ago: executing program 7 (id=2483): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="b76e975edd7b", 'ip6gre0\x00'}}, 0x1e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) close(0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f3843", 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010102}, 0x10) close(r1) socket$inet6(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x10c6, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x176, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="f5b10200000000001c0012800b0001006970766c616e00000c000280060001008bc0c9b3576bf26e8e791dc02146e5c8c34ac5085088734fcc2633b9b7ef7e4aea142b8294f6540be7a5186eeea06a204f796d6aa630ff28e3c83db05e02ea8cdcabf68f97571e133c4a3ea8784294a6948f2923793ec4bd73dca36c3b37f1ed25e8e970da65876e11bbacf129d2415d798bef7a62066909047ad6", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7.13490407s ago: executing program 6 (id=2484): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0xfffffffffffffdf9) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac2(r2, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "fb89342772e5c7010454574408fd7265a39f25a43a9b672c8c"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0x37, 0x3, "42f419"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x81, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000180)={0x1ff, 0x6, 0x7, 0xffffffb2, 0x0, "4d6b45c3f600c4000000002f12088200", 0xc, 0x9}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a320000000009000100000000000000000034000480300001800a0001006d400000000000000000028005000300020000000b000100736f636b657400000800024000000002140000001808004ff80e6c80244971e79c030bec0a0103000000000000000002000000140000001100010400000000000000000500000a"], 0x9c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0x7248}], 0x1, 0x80) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24b4}}, 0x0) 7.134338799s ago: executing program 8 (id=2485): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x1, 0x1f8, 0x3, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a40008090501010002"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xd9}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r6 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x4007}, {0x20, 0x7f, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000040)={0x2, @raw_data="c2778e7a7d9e8cac28dade87400ac05888189843672b3a0e11a0cf07aba83d17d17f2088e8a81f4b368d9ba31e2571da596a45fc703441afb8c59cf9720d586478cd3b9d9d67424a793c15c5832e68bad10a002316cf05a5314ee77ebbffd7574f34ae28bbae87357ed8bd9269731dcc49adfa126566aa0561d140d4bc601eeaf3eca311e6a70a99ef9d1e2d94bd1ffaf6d33a144d8ecb328231d4763ff7056d1683ae0d7db9d91526b7a23bec2bdca645aa53dbde797cbdc805036bbc7dea339bb555093a9986eb"}) r8 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000"], 0x0, 0x1a, 0x0, 0x1, 0xfffff929}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r8, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400030080000300", 0x33a) 7.130041234s ago: executing program 3 (id=2486): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 6.690707166s ago: executing program 3 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {0x0}, {&(0x7f0000000680)="37bcb3", 0x3}], 0x3) 5.52749119s ago: executing program 7 (id=2491): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) 5.419449016s ago: executing program 3 (id=2492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x2, 0x1000ee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000240)={@multicast2, @local, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x8800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x3, 0x0, 0x0) 5.155473035s ago: executing program 7 (id=2494): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x17) r5 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x8, 0x2, 0x401, 0x9, 0x7, 0x3, 0x5, 0x8, 0x0, 0x0, 0x0, 0x91d, 0x6, 0x3, 0x4, 0x10000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x2, 0x2, 0xa, 0x9, 0x7, 0x80000001, 0x6, 0x900000, 0x8, 0x70, 0x3, 0xec80, 0xbc6, 0x3, 0x5, 0x101, 0xb315, 0x2, 0x9, 0x4, 0x7, 0xffffffff, 0x2c, 0x0, 0xa, 0x7, 0x0, 0x40, 0x5, 0x3, 0x6, 0xe7, 0x48b, 0x1, 0x2a, 0x2, 0x2, 0xff, 0x3, 0x2, 0x8000000, 0xfffffff9, 0x9, 0x800, 0xfffffe00, 0x0, 0x0, 0x9, 0x6, 0x9, 0x5, 0x5, 0x5, 0x1000000, 0x7, 0x4c8, 0x3, 0xfffffffb, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x5, 0x4, 0x965, 0x9, 0x6, 0x479e, 0x75a, 0xffff0000, 0xffffffff, 0x9, 0x8, 0x3, 0xe, 0x2, 0xfd, 0x4, 0x80000000, 0xe1, 0x5, 0x2, 0x2a0, 0xd, 0xd2, 0x7, 0xffffffff, 0x6, 0x3, 0x7fff, 0x101, 0x7, 0x1, 0x7, 0x8, 0x2, 0x9, 0x6, 0x3ff, 0x3, 0x8001, 0x1, 0x6, 0xe, 0x7, 0x2, 0x3, 0x46, 0x7, 0x9, 0x1, 0x3d, 0xab6, 0x4cc399b1, 0x1, 0x2, 0x0, 0x5e2, 0x6810, 0x3, 0x0, 0x1, 0x2, 0xd8c0534, 0x6, 0x8, 0x40, 0x0, 0x4, 0x1, 0xd, 0x8, 0x1, 0x4, 0x3, 0x4, 0x5, 0xbce, 0x2, 0xe432, 0xe, 0x7af2, 0x5, 0xb, 0xbe, 0x7f, 0x7fffffff, 0x3a4, 0x9, 0x3, 0x1, 0x7fffffff, 0x9, 0xffffe898, 0x100, 0x0, 0x1, 0x2, 0x7, 0x100000c, 0x6, 0x9, 0xe8f, 0x572, 0x8, 0x8d8, 0x4, 0x200, 0x2, 0x9, 0xf, 0xcb5, 0x5, 0x9, 0x5, 0x5, 0x5e, 0x6, 0xa, 0x800, 0x8, 0xfff, 0x5, 0x4, 0x7, 0x6, 0x6, 0x2, 0x9, 0xffffff80, 0x9cbe, 0x0, 0x5, 0xa, 0x7, 0x800, 0x0, 0x2, 0x3, 0xffffffff, 0x4, 0x4, 0x9, 0x5, 0x9, 0x40, 0x800, 0x4, 0x100, 0x7, 0x3000000, 0xffffffff, 0x10001, 0x3, 0x200, 0x3cb4, 0xac, 0x1, 0x4, 0x6, 0x0, 0x8001, 0xfffff7e2, 0x7, 0x8, 0x101, 0xfffffe00, 0x200, 0x5da4, 0x800, 0x3, 0x1, 0x80, 0x1, 0x1, 0xc, 0x7, 0x2, 0xf67, 0xffffff81, 0x1b, 0x9, 0x8001, 0x8, 0xd6bc, 0xc8, 0x5, 0xffffffff, 0x6, 0x3, 0x9, 0xa9, 0x1, 0x5, 0x7, 0x8, 0x9, 0x7, 0xffff28d1, 0x3, 0x0, 0x9, 0x7ff, 0xe, 0xfe99, 0x3, 0x4, 0xae4, 0x8, 0x58, 0xfffffffd, 0x80000001, 0x7, 0x5f, 0x1, 0x9, 0x7ff, 0x7ff, 0x101, 0x58b4, 0xff, 0x10000, 0xd1, 0xfffffffc, 0x0, 0x938, 0x5, 0x0, 0x10001, 0x1, 0x3, 0xfffff800, 0x1, 0xfffffffc, 0x2, 0x80000001, 0x40, 0x0, 0x7fffffff, 0x6, 0x7, 0x20000000, 0x7, 0x6, 0x5, 0x5, 0x53, 0x8, 0x4, 0xffff689a, 0x7, 0x0, 0x2, 0x6, 0x7, 0x6, 0xf6a, 0x3, 0x0, 0x8ca, 0xffffde31, 0x9, 0x7, 0x9, 0x5484a737, 0x400, 0x2, 0xa, 0x3, 0x2, 0x1, 0x2, 0x5, 0xd, 0x800, 0xdf44, 0x2, 0x4, 0x4, 0x7, 0x0, 0xa, 0x1000, 0x77, 0x9, 0x8, 0x94, 0x4797, 0x4, 0x904, 0x4, 0x92fa, 0x8, 0x80000000, 0x2, 0x1, 0x9, 0x9, 0x10001, 0x7, 0xdc6, 0xca, 0x20cf, 0x31c3, 0x6, 0x0, 0x0, 0x6, 0x8, 0x6, 0x8, 0x0, 0x9, 0x8001, 0x2, 0x3, 0x8, 0x8, 0x5, 0x7e1ff7da, 0x7, 0x4, 0x80, 0xd3c, 0x9, 0x3, 0x80000000, 0x3, 0x1, 0x80, 0x8, 0xb, 0x80000000, 0x0, 0x10001, 0x3, 0x1, 0x1, 0x0, 0xf03, 0x10001, 0x8, 0x7, 0x9, 0x400, 0x101, 0x5, 0x9, 0x2f4, 0xc, 0x8, 0x6, 0x76, 0x7, 0x4, 0x8, 0xe, 0x10, 0x10000, 0x1, 0x3, 0x9, 0x7, 0x6941, 0x3, 0x9fe8, 0x72, 0x40, 0x8, 0x5, 0x6, 0x8, 0xfff, 0x4, 0x4, 0x1, 0xb5, 0x8, 0xfffffffd, 0x2, 0x8, 0xffff, 0x1, 0x7, 0x8001, 0xc, 0x8, 0xfffffffb, 0x0, 0x5, 0xb8, 0x5, 0x0, 0x2, 0x2bd, 0xc67, 0x2, 0x0, 0x3, 0x8, 0x4, 0x10001, 0xfa11, 0x4, 0x8000, 0xee0d, 0x2, 0x6, 0x4, 0x3, 0x17d6, 0x8, 0x4, 0xfffffff9, 0x6, 0x2, 0xff, 0x3516c66d, 0x51, 0x2, 0x9, 0x9f5c, 0x3c2, 0x6, 0x6, 0x9, 0x6ba800, 0xfffffffa, 0x6, 0x3, 0x43, 0x7c80, 0xffff, 0x6, 0xc, 0x3bbe, 0x3, 0x476, 0x4, 0x5, 0x5, 0x7, 0x2fffffe, 0x9, 0x0, 0x4, 0x3fe0, 0xd2c, 0x9, 0x758, 0x0, 0x4, 0xbc, 0x3, 0x4, 0x7, 0x4, 0x4, 0x80, 0x5, 0x0, 0x400, 0x0, 0x400, 0x5, 0x6, 0x9, 0x10, 0xdf, 0x5, 0xffffd5c2, 0xffffffff, 0x7, 0x3, 0xff, 0x3ff, 0xc, 0xcf, 0x0, 0x6, 0x80000000, 0x3, 0x4, 0xf, 0x5, 0xffffffff, 0x1, 0xffffffff, 0x8001, 0x3, 0x964a, 0x7fffffff, 0x7, 0x1, 0x6, 0x76, 0x4, 0xc8e, 0x2, 0xa8, 0x7, 0x6, 0xb, 0x7, 0xa, 0x5, 0xa, 0xffffffff, 0xcdf, 0x1, 0x9, 0x9, 0xfffffff0, 0xff, 0xffff, 0x80000001, 0x8001, 0x2, 0x10001, 0x5, 0xcc, 0x6, 0x9, 0x7, 0x7, 0x367b, 0x77, 0x5, 0x9, 0xb, 0x3, 0x10b6, 0x2, 0x9, 0x1, 0x84, 0x5, 0x2, 0xffff27ad, 0x6, 0x8, 0x400, 0x7, 0x0, 0x0, 0xfffffffa, 0x457, 0x25ff, 0xfffffffe, 0x7, 0x3, 0x1, 0x1, 0x8001, 0x9, 0xe7, 0x1, 0x6, 0x6, 0x5, 0x3, 0x0, 0x400, 0xcdf9, 0x0, 0x7, 0xf55, 0x7, 0x0, 0xd, 0x0, 0x9, 0x2, 0x9, 0x4, 0x2, 0x4cd5, 0x3, 0xa455, 0x5, 0x1d, 0x7f, 0x9, 0xfffffff8, 0x8, 0xb55a6dc, 0x8, 0x0, 0x5, 0x10, 0x9, 0x6, 0x7fffffff, 0x144870fa, 0x1, 0x4, 0x1, 0x1, 0x7, 0x3, 0x3800000, 0x8, 0x3, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfffffffc, 0x6, 0x3ee6, 0x7, 0x5, 0x4, 0xfffffffc, 0x60000000, 0x213, 0x243, 0x1, 0x2, 0x9e8, 0x8000, 0xfffffff8, 0xb, 0x8000002, 0x1, 0x8, 0x53, 0x5, 0xb2cd, 0x2, 0x9, 0x8, 0xe941, 0x2, 0x7, 0x1, 0x9, 0x9, 0x4, 0x4, 0x9, 0x1, 0x7, 0x2, 0xbb, 0x8, 0xfff, 0x0, 0x2, 0x2, 0x66a, 0x5ae3, 0xb, 0x7, 0x2, 0x5, 0x3, 0xef, 0xbe12, 0x401, 0x1, 0x81, 0x9, 0x400, 0x5, 0x6, 0x7f, 0x1, 0x4, 0xb9e, 0x5, 0xe, 0xb58d, 0x59, 0x3, 0x768, 0x78, 0x3, 0x3, 0x0, 0x40, 0x40, 0x4, 0x1, 0x0, 0x7, 0x7fffffff, 0x10001, 0xc, 0x3, 0x8, 0x9, 0xa363, 0x9, 0x3ff, 0x101, 0x2, 0x2d1, 0x272f, 0x615, 0x5, 0x4, 0x0, 0x1ae3, 0x7, 0x8, 0x4, 0x9, 0xba, 0x9, 0x3, 0xfffffffb, 0x0, 0x1, 0x5, 0x401, 0x0, 0x800, 0xdc2, 0x1000, 0x6, 0x0, 0x4, 0xf, 0x2, 0x8, 0xb, 0x5, 0xfffffff8, 0x1, 0x6, 0x6, 0xc7, 0x3, 0x2, 0x7, 0x6, 0x2, 0xca0, 0x400, 0x3eb, 0x7f, 0x13, 0x80000001, 0x6, 0x7, 0xe96, 0x3, 0x7, 0xe9, 0x773b, 0x2, 0x2, 0x40, 0x6, 0xfffffff9, 0x6, 0x1, 0x6, 0x2, 0x1, 0x6, 0x4da, 0x1000, 0x0, 0x3, 0x3f0, 0x2, 0x0, 0x80000001, 0x3, 0xffffffff, 0x2, 0x52d6, 0x3, 0x0, 0x9, 0x7, 0x80000000, 0x6, 0xf2f3, 0x6, 0x2, 0x159, 0x800, 0x1, 0x4, 0x4, 0x0, 0x5, 0x4fb9, 0x7fff, 0xa0, 0xd, 0x7a, 0x2, 0x3, 0x6, 0x2700000, 0x7, 0xcc, 0x7, 0x2, 0x9b3, 0x0, 0x5, 0x1, 0x5, 0x800, 0x6, 0x9, 0x0, 0x6, 0x800, 0xde, 0x7, 0xb1, 0x2, 0x800, 0x2d5, 0xda3d, 0x0, 0x5, 0x7fff, 0x2, 0x2, 0x2, 0xfffffffa, 0x81, 0x10, 0x2, 0x3, 0xc8e0, 0x244, 0x6, 0x7, 0xbf, 0x5b7, 0x0, 0x6, 0x8001, 0x6, 0x7, 0xb, 0xfffffffe, 0x80000001, 0x2, 0xe, 0x9, 0x9, 0x2, 0xfffffff6, 0x3ff, 0x0, 0x5, 0x66c4, 0x5, 0x1, 0xff, 0x9, 0x823, 0x1, 0x1000, 0x6, 0x1, 0x3228, 0x12000, 0x9, 0x3, 0x9b, 0x7, 0x3, 0x9, 0x5, 0xffffd3aa, 0x1, 0x6, 0x9bf7, 0x8c, 0x9, 0x8, 0x1, 0x387, 0x21e058ca, 0x1, 0xfffffff4, 0x3, 0x1, 0x7, 0x4, 0x1, 0x4, 0x31b, 0x401, 0x4, 0x6054, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x0, 0x8, 0x80000001, 0x4, 0x9, 0xd1f, 0x5, 0x7ff, 0x1, 0x9, 0x8, 0x2, 0x3a121014, 0x7, 0x8, 0x4f, 0x400, 0xc, 0x0, 0x1, 0x1, 0x3, 0x10001, 0x3, 0x0, 0xd, 0xa, 0x5, 0xb, 0x6, 0x6, 0xfffffffe, 0x0, 0x5, 0x7f, 0x1, 0x5, 0x8, 0x4, 0x1], 0x4, 0x400, 0x9}) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3ff, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 4.873311607s ago: executing program 6 (id=2496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000cd9000/0x1000)=nil, 0x1000}}) pipe2$9p(0x0, 0x900) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x18624000) 4.72673373s ago: executing program 0 (id=2497): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x61, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0x8ff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e"], 0x0, 0x44}, 0x28) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r3) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x9}, 0x8) r6 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7c800000004aad04316977586f2"], 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000035c0), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000003680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000003700)={0x18, r8, 0x2, 0x0, &(0x7f00000036c0)=[{0x5, 0x7}, {0x5, 0x8}]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000020008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x358, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x330, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2f8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2e8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x2c8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "fedc690fb89bd8e43f638f30e2fe84834ef004f056d961dcc6484f5cca35b074e54ea90daef6cecf08c477df104a44e1eb74fd979be56f329edfcba6085c9f8e385368573d9b6b20e270702e069044f91d3e9ffba221ca0b668f6083afa2132a8029842324c2da3d3d80fb9c2fc124ba1712233871d26ee627de55ca37d6b06f668766a7a1ff96fdfe35989afd15ea59"}, @NFTA_DATA_VALUE={0xed, 0x1, "b0cf825f61d37fcfce0e9ccf8f3e93986212af2fd694cc1f7eb610986aec76aa3a499892c56b88562b2f6e13f8c07d586045e0bbd1385f01d4f68cff31b0377ff4064e1855ff9138d86a572b7b3d3b938e3cb19ff64a2940122260217c94636de4b708bc806688927e41a77d7cf3cf7e0bc3b088e6fe167aab1a472d4282ce05e93c8d298f8e8e90beba221a27b18dacc6d6588aca3219cad5a6a7de697c9b8187b97e28784397151ee8aa399df92dfa3d0a839abc69e8f85f33829787da16e58958e3a0a2517c72f8aae400259df1e40b917f150111917eb4588304b99bc8b9236b19ac2c80782da8"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x610e68d623909e78}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x25, 0x1, "55cb6d15aed8c5b78b7492be86ca99d577dd914f269cfcc4b8129a3f9a3768ec80"}, @NFTA_DATA_VALUE={0x49, 0x1, "95e11eb0f004fc40389b47dd562293529ef70e7058355bd76a3d814d8af901a80a6c80e459372e31ccd7a803535554a0b105a0e79744223571f0befa6f6baeceddc524cc6d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3cc}}, 0x0) 4.585580525s ago: executing program 3 (id=2498): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000000900010073797a310000000014000480100001800a00010072656469720000000900020073797a320000000014000000110001000000000000000000f046e85b78970369941b0707db86eb0100000a4499a80dbc78d8838ba5"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 3.813169128s ago: executing program 8 (id=2499): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) 2.336167692s ago: executing program 0 (id=2500): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 2.334720276s ago: executing program 7 (id=2501): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="b76e975edd7b", 'ip6gre0\x00'}}, 0x1e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) close(0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f3843", 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010102}, 0x10) close(r1) socket$inet6(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x10c6, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x176, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="f5b10200000000001c0012800b0001006970766c616e00000c000280060001008bc0c9b3576bf26e8e791dc02146e5c8c34ac5085088734fcc2633b9b7ef7e4aea142b8294f6540be7a5186eeea06a204f796d6aa630ff28e3c83db05e02ea8cdcabf68f97571e133c4a3ea8784294a6948f2923793ec4bd73dca36c3b37f1ed25e8e970da65876e11bbacf129d2415d798bef7a62066909047ad6", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.195813423s ago: executing program 8 (id=2502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {0x0}, {&(0x7f0000000680)="37bcb3", 0x3}], 0x3) 1.067072566s ago: executing program 0 (id=2503): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x2}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x100300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0xffffd000) 686.622026ms ago: executing program 0 (id=2504): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) 562.473222ms ago: executing program 6 (id=2505): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0x0, 0x9, 0x5, {0x6}, 0x7fdf}) 300.780483ms ago: executing program 3 (id=2506): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 300.59374ms ago: executing program 0 (id=2507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 226.482871ms ago: executing program 6 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x2, 0x1000ee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x12) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@multicast2, @local, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x8800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x3, 0x0, 0x0) 165.004519ms ago: executing program 7 (id=2509): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006949818548ec12692ec66a5563984646c46d7979aac5e0b116b80e10d87c7f0c664222bbe5510b09e9baf67dd9678d6c46375877f721b78ef425b54e8dfc0872716195072cd0039e65655e3a68536bf0cc48d4f0be5b5616eabacf38d46267568bc4d2191e9157ed4c799c057549d6d00fc18e0c781f61242e2f0530195f7370abd06e1c2075067d2f6e1c9d8e2c2123a910aeafc0818d8b28cb6bfd48632ebfd6fc5126b2e50bf5d9ef1e4a3514e48bfd71118e84ec443be2f4f62e70272d"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) fsopen(&(0x7f0000000140)='efs\x00', 0x1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x335, 0x40, 0xd65}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x1d75ace51f32de09, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 51.346394ms ago: executing program 8 (id=2510): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c00000000000000950000000000000018100000c802829e72d5ab27b9d269b65967de753ff28b6ccce45646b711b58a3a39307d596ab545f2c4f528d7bd5ba9f3", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 201.375µs ago: executing program 0 (id=2511): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x61, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0x8ff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e"], 0x0, 0x44}, 0x28) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r3) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x9}, 0x8) r6 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7c800000004aad04316977586f2"], 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000035c0), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000003680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000003700)={0x18, r8, 0x2, 0x0, &(0x7f00000036c0)=[{0x5, 0x7}, {0x5, 0x8}]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000020008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x358, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x330, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2f8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2e8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x2c8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "fedc690fb89bd8e43f638f30e2fe84834ef004f056d961dcc6484f5cca35b074e54ea90daef6cecf08c477df104a44e1eb74fd979be56f329edfcba6085c9f8e385368573d9b6b20e270702e069044f91d3e9ffba221ca0b668f6083afa2132a8029842324c2da3d3d80fb9c2fc124ba1712233871d26ee627de55ca37d6b06f668766a7a1ff96fdfe35989afd15ea59"}, @NFTA_DATA_VALUE={0xed, 0x1, "b0cf825f61d37fcfce0e9ccf8f3e93986212af2fd694cc1f7eb610986aec76aa3a499892c56b88562b2f6e13f8c07d586045e0bbd1385f01d4f68cff31b0377ff4064e1855ff9138d86a572b7b3d3b938e3cb19ff64a2940122260217c94636de4b708bc806688927e41a77d7cf3cf7e0bc3b088e6fe167aab1a472d4282ce05e93c8d298f8e8e90beba221a27b18dacc6d6588aca3219cad5a6a7de697c9b8187b97e28784397151ee8aa399df92dfa3d0a839abc69e8f85f33829787da16e58958e3a0a2517c72f8aae400259df1e40b917f150111917eb4588304b99bc8b9236b19ac2c80782da8"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x610e68d623909e78}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x25, 0x1, "55cb6d15aed8c5b78b7492be86ca99d577dd914f269cfcc4b8129a3f9a3768ec80"}, @NFTA_DATA_VALUE={0x49, 0x1, "95e11eb0f004fc40389b47dd562293529ef70e7058355bd76a3d814d8af901a80a6c80e459372e31ccd7a803535554a0b105a0e79744223571f0befa6f6baeceddc524cc6d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3cc}}, 0x0) 0s ago: executing program 3 (id=2512): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) kernel console output (not intermixed with test programs): et 1024 [ 416.624950][ T5591] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.624984][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.625005][ T5591] usb 1-1: Product: syz [ 416.625021][ T5591] usb 1-1: Manufacturer: syz [ 416.625037][ T5591] usb 1-1: SerialNumber: syz [ 416.691332][ T5591] usb 1-1: config 0 descriptor?? [ 416.698360][ T9143] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 416.758009][ T9137] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 416.768259][ T821] usb 4-1: USB disconnect, device number 47 [ 416.870077][ T821] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 416.904929][ T5614] usb 1-1: USB disconnect, device number 56 [ 417.941403][ T821] usb 2-1: USB disconnect, device number 61 [ 418.240123][ T5614] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 418.390661][ T5614] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.393586][ T5614] usb 1-1: not running at top speed; connect to a high speed hub [ 418.396054][ T5614] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 418.396083][ T5614] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 418.396104][ T5614] usb 1-1: config 5 has no interface number 0 [ 418.396175][ T5614] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 418.396204][ T5614] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.396233][ T5614] usb 1-1: config 5 interface 246 has no altsetting 0 [ 418.484738][ T5614] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 418.484770][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.484792][ T5614] usb 1-1: Product: syz [ 418.484807][ T5614] usb 1-1: Manufacturer: syz [ 418.484823][ T5614] usb 1-1: SerialNumber: syz [ 418.903067][ T5614] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 418.921419][ T5614] usb 1-1: USB disconnect, device number 57 [ 418.967770][ T70] usb 1-1: Failed to submit usb control message: -19 [ 418.967807][ T70] usb 1-1: unable to send the bmi data to the device: -19 [ 418.967826][ T70] usb 1-1: unable to get target info from device [ 419.021399][ T70] usb 1-1: could not get target info (-19) [ 419.021655][ T70] usb 1-1: could not probe fw (-19) [ 419.144080][ T9186] binder: BINDER_SET_CONTEXT_MGR already set [ 419.144097][ T9186] binder: 9185:9186 ioctl 4018620d 200000004a80 returned -16 [ 421.417284][ T5591] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 421.567332][ T5591] usb 4-1: Using ep0 maxpacket: 32 [ 421.570261][ T5591] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.574538][ T5591] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.574571][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.574593][ T5591] usb 4-1: Product: syz [ 421.574608][ T5591] usb 4-1: Manufacturer: syz [ 421.574624][ T5591] usb 4-1: SerialNumber: syz [ 421.629803][ T5591] usb 4-1: config 0 descriptor?? [ 421.630979][ T9194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 421.844627][ T5591] usb 4-1: USB disconnect, device number 48 [ 422.258733][ T36] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 422.423104][ T36] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 422.423134][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.448359][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.448390][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.448411][ T36] usb 1-1: Product: syz [ 422.448427][ T36] usb 1-1: Manufacturer: syz [ 422.448442][ T36] usb 1-1: SerialNumber: syz [ 422.506571][ T36] usb 1-1: 0:2 : does not exist [ 422.506763][ T36] usb 1-1: unit 9 not found! [ 422.712569][ T36] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 422.790076][ T36] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 422.812353][ T36] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 422.825872][ T36] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 422.845419][ T36] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 422.863173][ T36] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 422.888755][ T36] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 423.037825][ T36] usb 1-1: USB disconnect, device number 58 [ 423.047580][ T5614] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 423.125512][ T9221] overlayfs: failed to resolve './file0': -2 [ 423.220617][ T5614] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 423.220647][ T5614] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 423.220670][ T5614] usb 4-1: config 0 has no interface number 0 [ 423.242833][ T5614] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 423.242919][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.242981][ T5614] usb 4-1: Product: syz [ 423.243022][ T5614] usb 4-1: Manufacturer: syz [ 423.243064][ T5614] usb 4-1: SerialNumber: syz [ 423.307640][ T5614] usb 4-1: config 0 descriptor?? [ 423.734055][ T9213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1275'. [ 424.017654][ T5614] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 424.017690][ T5614] uvcvideo 4-1:0.64: No valid video chain found. [ 424.038960][ T5614] usb 4-1: USB disconnect, device number 49 [ 424.097329][ T5591] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 424.250963][ T5591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.251764][ T5591] usb 1-1: not running at top speed; connect to a high speed hub [ 424.253319][ T5591] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 424.253345][ T5591] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 424.253366][ T5591] usb 1-1: config 5 has no interface number 0 [ 424.253413][ T5591] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 424.253443][ T5591] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.253471][ T5591] usb 1-1: config 5 interface 246 has no altsetting 0 [ 425.253619][ T5591] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 425.253654][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.253676][ T5591] usb 1-1: Product: syz [ 425.253692][ T5591] usb 1-1: Manufacturer: syz [ 425.253708][ T5591] usb 1-1: SerialNumber: syz [ 425.707402][ T5591] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 425.744258][ T5591] usb 1-1: USB disconnect, device number 59 [ 425.781638][ T1497] usb 1-1: Failed to submit usb control message: -71 [ 425.781678][ T1497] usb 1-1: unable to send the bmi data to the device: -71 [ 425.781697][ T1497] usb 1-1: unable to get target info from device [ 425.781713][ T1497] usb 1-1: could not get target info (-71) [ 425.781802][ T1497] usb 1-1: could not probe fw (-71) [ 426.423948][ T5614] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 426.627854][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 426.677252][ T5614] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 426.677284][ T5614] usb 4-1: config 0 has no interface number 0 [ 426.677331][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.677357][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 426.677888][ T5614] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.677945][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.678115][ T5614] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 426.678191][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.901600][ T5614] usb 4-1: config 0 descriptor?? [ 427.248865][ T5614] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 427.637968][ T36] usb 4-1: USB disconnect, device number 50 [ 427.668861][ T36] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 429.837616][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 429.987298][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 429.994148][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.994174][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.994190][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.994247][ T10] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 429.994265][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.079939][ T10] usb 2-1: config 0 descriptor?? [ 431.706811][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.706852][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.706891][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.706919][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.706947][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.706975][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.707003][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.707030][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.707058][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.707372][ T10] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 431.792199][ T5614] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 431.933592][ T10] pantherlord 0003:0810:0002.0003: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 431.933631][ T10] pantherlord 0003:0810:0002.0003: no output reports found [ 431.988005][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 431.993598][ T5614] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 431.993636][ T5614] usb 4-1: config 0 has no interface number 0 [ 431.993681][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.993708][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 431.993736][ T5614] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.993764][ T5614] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.993808][ T5614] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 431.993833][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.299780][ T5614] usb 4-1: config 0 descriptor?? [ 432.362031][ T5614] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 432.381663][ T10] usb 2-1: USB disconnect, device number 62 [ 432.519793][ T5614] usb 4-1: USB disconnect, device number 51 [ 432.603232][ T5614] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 435.808325][ T9370] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 436.137290][ T821] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 436.287658][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 436.295025][ T821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 436.295063][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.325905][ T821] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 436.325937][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.325960][ T821] usb 4-1: Product: syz [ 436.325976][ T821] usb 4-1: Manufacturer: syz [ 436.325991][ T821] usb 4-1: SerialNumber: syz [ 436.368683][ T821] usb 4-1: config 0 descriptor?? [ 436.390687][ T821] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 436.390805][ T821] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 436.985587][ T821] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 436.986682][ T821] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 437.004441][ T821] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 437.004465][ T821] em28xx 4-1:0.0: No AC97 audio processor [ 437.461929][ T821] usb 4-1: USB disconnect, device number 52 [ 437.465876][ T821] em28xx 4-1:0.0: Disconnecting em28xx [ 437.502800][ T821] em28xx 4-1:0.0: Freeing device [ 438.707309][ T9] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 438.863431][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.865060][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 438.911671][ T9] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 438.911701][ T9] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 438.911722][ T9] usb 1-1: config 5 has no interface number 0 [ 438.911770][ T9] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 438.911812][ T9] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 438.911841][ T9] usb 1-1: config 5 interface 246 has no altsetting 0 [ 439.000125][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 439.000149][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.000164][ T9] usb 1-1: Product: syz [ 439.000174][ T9] usb 1-1: Manufacturer: syz [ 439.000184][ T9] usb 1-1: SerialNumber: syz [ 439.450810][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 439.468000][ T9] usb 1-1: USB disconnect, device number 60 [ 439.483102][ T12] usb 1-1: Failed to submit usb control message: -19 [ 439.483140][ T12] usb 1-1: unable to send the bmi data to the device: -19 [ 439.483159][ T12] usb 1-1: unable to get target info from device [ 439.483175][ T12] usb 1-1: could not get target info (-19) [ 439.483287][ T12] usb 1-1: could not probe fw (-19) [ 440.168568][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.168642][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.398490][ T9] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 445.549744][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.549775][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.552652][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.552684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.552704][ T9] usb 2-1: Product: syz [ 445.552722][ T9] usb 2-1: Manufacturer: syz [ 445.552732][ T9] usb 2-1: SerialNumber: syz [ 445.650332][ T9] usb 2-1: 0:2 : does not exist [ 445.908717][ T9] usb 2-1: USB disconnect, device number 63 [ 446.050088][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.478916][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 446.627256][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 446.632166][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 446.632192][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.634679][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.634713][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.634728][ T9] usb 4-1: Product: syz [ 446.634739][ T9] usb 4-1: Manufacturer: syz [ 446.634749][ T9] usb 4-1: SerialNumber: syz [ 446.666645][ T9513] syz_tun: entered allmulticast mode [ 446.742915][ T9] usb 4-1: config 0 descriptor?? [ 446.758628][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.758655][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 446.867408][ T5591] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 447.052991][ T5591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.053632][ T5591] usb 1-1: not running at top speed; connect to a high speed hub [ 447.054892][ T5591] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 447.054918][ T5591] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 447.054938][ T5591] usb 1-1: config 5 has no interface number 0 [ 447.081602][ T5591] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 447.083142][ T5591] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 447.083177][ T5591] usb 1-1: config 5 interface 246 has no altsetting 0 [ 447.140479][ T5591] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 447.140503][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.140537][ T5591] usb 1-1: Product: syz [ 447.140672][ T5591] usb 1-1: Manufacturer: syz [ 447.140688][ T5591] usb 1-1: SerialNumber: syz [ 447.375579][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 447.376326][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 447.377550][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 447.377595][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 447.429125][ T9511] syz_tun: left allmulticast mode [ 447.792722][ T5591] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 447.808492][ T5591] usb 1-1: USB disconnect, device number 61 [ 447.816928][ T9] usb 4-1: USB disconnect, device number 53 [ 447.830891][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 447.891167][ T66] usb 1-1: Failed to submit usb control message: -19 [ 447.891195][ T66] usb 1-1: unable to send the bmi data to the device: -19 [ 447.891209][ T66] usb 1-1: unable to get target info from device [ 447.891220][ T66] usb 1-1: could not get target info (-19) [ 447.944452][ T9] em28xx 4-1:0.0: Freeing device [ 447.945432][ T66] usb 1-1: could not probe fw (-19) [ 448.933195][ T9549] syzkaller0: entered promiscuous mode [ 448.933216][ T9549] syzkaller0: entered allmulticast mode [ 450.260296][ T5591] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 450.407330][ T5591] usb 1-1: Using ep0 maxpacket: 16 [ 450.409618][ T5591] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 450.409657][ T5591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.412035][ T5591] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.412066][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.412081][ T5591] usb 1-1: Product: syz [ 450.412092][ T5591] usb 1-1: Manufacturer: syz [ 450.412108][ T5591] usb 1-1: SerialNumber: syz [ 450.474956][ T5591] usb 1-1: config 0 descriptor?? [ 450.494940][ T5591] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.494966][ T5591] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 450.587291][ T821] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 450.740077][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 450.747395][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.747436][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.747490][ T821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 450.747518][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.801611][ T821] usb 2-1: config 0 descriptor?? [ 451.141454][ T5591] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 451.143815][ T5591] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 451.145298][ T5591] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 451.145318][ T5591] em28xx 1-1:0.0: No AC97 audio processor [ 451.244751][ T9590] syzkaller0: entered promiscuous mode [ 451.244778][ T9590] syzkaller0: entered allmulticast mode [ 451.385731][ T821] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 451.655844][ T5591] usb 2-1: USB disconnect, device number 64 [ 451.872015][ T9602] syz_tun: entered allmulticast mode [ 452.269255][ T5735] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 452.417261][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 452.422088][ T5735] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 452.422155][ T5735] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.422189][ T5735] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.422215][ T5735] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.422247][ T5735] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.422294][ T5735] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.422311][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.644499][ T9600] syz_tun: left allmulticast mode [ 452.698715][ T5735] usb 4-1: usb_control_msg returned -32 [ 452.698769][ T5735] usbtmc 4-1:16.0: can't read capabilities [ 452.902218][ T821] usb 4-1: USB disconnect, device number 54 [ 453.081782][ T5721] usb 1-1: USB disconnect, device number 62 [ 453.084992][ T5721] em28xx 1-1:0.0: Disconnecting em28xx [ 453.150685][ T5721] em28xx 1-1:0.0: Freeing device [ 453.377536][ T821] hid_parser_main: 30 callbacks suppressed [ 453.377638][ T821] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 453.452873][ T821] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 453.907308][ T821] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 454.066809][ T821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 454.066842][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.066862][ T821] usb 2-1: Product: syz [ 454.066878][ T821] usb 2-1: Manufacturer: syz [ 454.066893][ T821] usb 2-1: SerialNumber: syz [ 454.107595][ T821] usb 2-1: config 0 descriptor?? [ 454.557630][ T821] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 455.807298][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 455.869927][ T821] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 455.894301][ T821] usb 2-1: USB disconnect, device number 65 [ 455.967751][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 455.971207][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 455.971253][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.042851][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.042875][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.042889][ T9] usb 1-1: Product: syz [ 456.042900][ T9] usb 1-1: Manufacturer: syz [ 456.042910][ T9] usb 1-1: SerialNumber: syz [ 456.091432][ T9] usb 1-1: config 0 descriptor?? [ 456.111950][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 456.111978][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 456.742443][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 456.744269][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 456.747984][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 456.748049][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 457.631907][ T5735] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 457.695334][ T5735] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.583605][ T5721] usb 1-1: USB disconnect, device number 63 [ 458.595631][ T5721] em28xx 1-1:0.0: Disconnecting em28xx [ 458.793562][ T5721] em28xx 1-1:0.0: Freeing device [ 461.667210][ T5721] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 461.846620][ T5721] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 461.846654][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.846676][ T5721] usb 1-1: Product: syz [ 461.846691][ T5721] usb 1-1: Manufacturer: syz [ 461.846706][ T5721] usb 1-1: SerialNumber: syz [ 461.911501][ T5721] usb 1-1: config 0 descriptor?? [ 462.011792][ T5721] usb 1-1: can't set config #0, error -71 [ 462.100921][ T5721] usb 1-1: USB disconnect, device number 64 [ 462.687257][ T5721] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 462.848886][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 462.864743][ T5721] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 462.864765][ T5721] usb 1-1: config 0 has no interface number 0 [ 462.890045][ T5721] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 462.890078][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.890100][ T5721] usb 1-1: Product: syz [ 462.890116][ T5721] usb 1-1: Manufacturer: syz [ 462.890131][ T5721] usb 1-1: SerialNumber: syz [ 463.001991][ T5721] usb 1-1: config 0 descriptor?? [ 463.406994][ T5721] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 463.412203][ T5721] uvcvideo 1-1:0.31: Failed to initialize entity for entity 32774 [ 463.412276][ T5721] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 463.622864][ T5591] usb 1-1: USB disconnect, device number 65 [ 463.827223][ T5721] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 463.993033][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.993067][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.993111][ T5721] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 463.993128][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.053873][ T5721] usb 4-1: config 0 descriptor?? [ 464.528293][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 464.702362][ T5721] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 464.760465][ T5721] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 464.887769][ T5591] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 465.056335][ T5591] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 465.056367][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.056389][ T5591] usb 1-1: Product: syz [ 465.056405][ T5591] usb 1-1: Manufacturer: syz [ 465.056421][ T5591] usb 1-1: SerialNumber: syz [ 465.096271][ T5591] usb 1-1: config 0 descriptor?? [ 465.337148][ T5591] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 466.575063][ T5591] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 466.590742][ T5591] usb 1-1: USB disconnect, device number 66 [ 466.998629][ T5721] usb 4-1: USB disconnect, device number 55 [ 469.266704][ T9797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1499'. [ 471.065877][ T9832] netlink: 'syz.0.1512': attribute type 21 has an invalid length. [ 471.065901][ T9832] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1512'. [ 471.065991][ T9832] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 471.066242][ T9832] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1512'. [ 471.181372][ T9834] netlink: 'syz.3.1513': attribute type 4 has an invalid length. [ 471.494801][ T9839] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1512'. [ 471.494822][ T9839] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 471.572625][ T9832] comedi comedi3: 8255: I/O base address not correctly aligned [ 474.862181][ T5721] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 474.955564][ T5721] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.275558][ T9901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.807316][ T5735] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 477.960922][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 477.969931][ T5735] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 477.970008][ T5735] usb 4-1: config 0 has no interface number 0 [ 477.970163][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.970235][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 477.970264][ T5735] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.970365][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.970487][ T5735] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 477.970544][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.064365][ T5735] usb 4-1: config 0 descriptor?? [ 478.176157][ T5735] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 479.133399][ T5721] usb 4-1: USB disconnect, device number 56 [ 479.361659][ T5721] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 481.111920][ T9941] mmap: syz.1.1551 (9941) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 484.007236][ T5735] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 484.165019][ T5735] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 484.165069][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.196416][ T5735] usb 2-1: config 0 descriptor?? [ 484.215523][ T5735] cp210x 2-1:0.0: cp210x converter detected [ 484.612843][ T5735] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 484.615811][ T5735] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 484.702793][ T5735] usb 2-1: cp210x converter now attached to ttyUSB0 [ 484.860283][ T36] usb 2-1: USB disconnect, device number 66 [ 484.965418][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 484.966228][ T36] cp210x 2-1:0.0: device disconnected [ 485.068758][ T9971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1562'. [ 485.076010][ T9971] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1562'. [ 488.437896][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 488.587221][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 488.589932][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 488.589990][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 488.590015][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 488.590041][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.590064][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.590095][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 488.590112][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.146087][ T10] usb 2-1: usb_control_msg returned -32 [ 489.146124][ T10] usbtmc 2-1:16.0: can't read capabilities [ 489.390939][ T5721] usb 2-1: USB disconnect, device number 67 [ 494.627344][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 494.777233][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 494.779691][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 494.779758][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.779783][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.779810][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.779835][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.779879][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.779903][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.203044][ T10] usb 4-1: usb_control_msg returned -32 [ 495.203095][ T10] usbtmc 4-1:16.0: can't read capabilities [ 495.399644][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'. [ 495.418425][ T10] usb 4-1: USB disconnect, device number 57 [ 496.409237][T10096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.490708][T10096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.515499][T10096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.530397][T10096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.531444][T10096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.984866][T10090] netlink: set zone limit has 4 unknown bytes [ 497.385743][T10107] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1612'. [ 498.718445][ T5609] Bluetooth: hci5: command tx timeout [ 499.940612][T10135] ======================================================= [ 499.940612][T10135] WARNING: The mand mount option has been deprecated and [ 499.940612][T10135] and is ignored by this kernel. Remove the mand [ 499.940612][T10135] option from the mount to silence this warning. [ 499.940612][T10135] ======================================================= [ 499.987293][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.987426][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.995691][T10093] bridge_slave_0: entered allmulticast mode [ 500.037006][T10093] bridge_slave_0: entered promiscuous mode [ 500.068838][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.087438][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.087644][T10093] bridge_slave_1: entered allmulticast mode [ 500.095597][T10093] bridge_slave_1: entered promiscuous mode [ 500.325302][T10093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.382243][T10093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.472285][T10093] team0: Port device team_slave_0 added [ 500.476969][T10093] team0: Port device team_slave_1 added [ 500.540912][T10093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.540932][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.540964][T10093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.543687][T10093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.543704][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.543735][T10093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.657241][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 500.796525][T10093] hsr_slave_0: entered promiscuous mode [ 500.810259][T10093] hsr_slave_1: entered promiscuous mode [ 500.814920][T10093] debugfs: 'hsr0' already exists in 'hsr' [ 500.814951][T10093] Cannot create hsr debugfs directory [ 500.851201][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 500.853924][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 500.853985][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.854010][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.854037][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.854063][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.854108][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 500.854133][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.887353][ T5609] Bluetooth: hci5: command tx timeout [ 501.237049][ T10] usb 1-1: usb_control_msg returned -32 [ 501.237180][ T10] usbtmc 1-1:16.0: can't read capabilities [ 501.462637][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.512627][ T10] usb 1-1: USB disconnect, device number 67 [ 501.632882][T10150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1622'. [ 502.715925][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.716001][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.806044][ T5609] Bluetooth: hci5: command tx timeout [ 504.238862][ T36] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 504.429210][ T36] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 504.429233][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 504.431690][ T36] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 504.431713][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.431727][ T36] usb 4-1: Product: syz [ 504.431738][ T36] usb 4-1: Manufacturer: syz [ 504.431749][ T36] usb 4-1: SerialNumber: syz [ 504.493220][ T36] usb 4-1: config 0 descriptor?? [ 504.508076][ T36] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 504.653454][T10093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.286944][T10093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.533506][ T36] gspca_sunplus: reg_r err -32 [ 505.533584][ T36] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 505.588351][ T36] usb 4-1: USB disconnect, device number 58 [ 505.837743][T10096] Bluetooth: hci5: command tx timeout [ 505.874416][T10093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.411297][T10093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.728571][T10186] hsr0: entered promiscuous mode [ 506.732918][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 507.296630][ T37] audit: type=1326 audit(1780498505.011:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff23ace59 code=0x7ffc0000 [ 507.324182][ T37] audit: type=1326 audit(1780498505.071:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faff23ace59 code=0x7ffc0000 [ 507.326731][ T37] audit: type=1326 audit(1780498505.071:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff23ace59 code=0x7ffc0000 [ 507.337831][ T37] audit: type=1326 audit(1780498505.091:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faff23ace59 code=0x7ffc0000 [ 507.449500][ T37] audit: type=1326 audit(1780498505.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff234e1d9 code=0x7ffc0000 [ 507.583826][ T37] audit: type=1326 audit(1780498505.211:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff234e1d9 code=0x7ffc0000 [ 507.584267][ T37] audit: type=1326 audit(1780498505.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff234e1d9 code=0x7ffc0000 [ 507.584677][ T37] audit: type=1326 audit(1780498505.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff23ace59 code=0x7ffc0000 [ 507.584738][ T37] audit: type=1326 audit(1780498505.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff234e1d9 code=0x7ffc0000 [ 507.585419][ T37] audit: type=1326 audit(1780498505.331:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.3.1639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff234e1d9 code=0x7ffc0000 [ 508.896142][T10200] capability: warning: `syz.2.1642' uses deprecated v2 capabilities in a way that may be insecure [ 509.111500][T10093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.160427][T10093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.162693][T10093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.248047][T10093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.250061][T10093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.936661][T10093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.335128][T10093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.521396][T10093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.754944][T10093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.796013][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.819822][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.820043][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.885449][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.885598][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.249426][T10093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.279900][ T36] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 512.440624][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.441268][ T36] usb 4-1: not running at top speed; connect to a high speed hub [ 512.443566][ T36] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 512.443593][ T36] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 512.443614][ T36] usb 4-1: config 5 has no interface number 0 [ 512.443656][ T36] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 512.443676][ T36] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.443696][ T36] usb 4-1: config 5 interface 246 has no altsetting 0 [ 512.446979][ T36] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 512.447008][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.447032][ T36] usb 4-1: Product: syz [ 512.447224][ T36] usb 4-1: Manufacturer: syz [ 512.447268][ T36] usb 4-1: SerialNumber: syz [ 512.911383][ T36] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 512.943724][T10276] fuse: fd is not a fuse device [ 513.007625][ T66] usb 4-1: Failed to submit usb control message: -71 [ 513.007663][ T66] usb 4-1: unable to send the bmi data to the device: -71 [ 513.007683][ T66] usb 4-1: unable to get target info from device [ 513.007699][ T66] usb 4-1: could not get target info (-71) [ 513.007787][ T66] usb 4-1: could not probe fw (-71) [ 513.011540][ T36] usb 4-1: USB disconnect, device number 59 [ 513.228739][T10093] veth0_vlan: entered promiscuous mode [ 513.247405][T10093] veth1_vlan: entered promiscuous mode [ 513.334416][T10093] veth0_macvtap: entered promiscuous mode [ 513.393306][T10093] veth1_macvtap: entered promiscuous mode [ 513.427213][ T5614] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 513.504210][T10093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.547856][T10093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.579258][ T1497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.579926][ T1497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.580181][ T1497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.580223][ T1497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.640699][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.640733][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.640772][ T5614] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 513.640797][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.729287][ T5614] usb 2-1: config 0 descriptor?? [ 514.277098][ T5614] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 514.447014][ T5614] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 514.508285][ T5614] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 515.104868][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.104892][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.342036][ T5614] usb 2-1: USB disconnect, device number 68 [ 515.443904][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.443926][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.849777][T10309] netlink: 'syz.2.1675': attribute type 21 has an invalid length. [ 515.849801][T10309] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1675'. [ 515.849929][T10309] netlink: 'syz.2.1675': attribute type 4 has an invalid length. [ 515.849944][T10309] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1675'. [ 516.588813][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 516.717698][ T10] usb 2-1: device descriptor read/64, error -71 [ 516.957421][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 517.087212][ T10] usb 2-1: device descriptor read/64, error -71 [ 517.197695][ T10] usb usb2-port1: attempt power cycle [ 517.537356][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 517.558009][ T10] usb 2-1: device descriptor read/8, error -71 [ 517.777339][ T36] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 517.798929][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 517.818002][ T10] usb 2-1: device descriptor read/8, error -71 [ 517.934365][ T10] usb usb2-port1: unable to enumerate USB device [ 517.936580][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.936614][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.936653][ T36] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 517.936678][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.991012][ T36] usb 5-1: config 0 descriptor?? [ 518.429708][ T36] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 518.453647][ T36] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 518.624334][ T36] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 519.389519][T10386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 519.458723][ T10] usb 5-1: USB disconnect, device number 15 [ 519.878429][T10400] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 519.968377][T10400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.146188][T10403] bond1: (slave geneve2): making interface the new active one [ 520.307810][T10403] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 520.513445][T10403] syz.1.1712 (10403) used greatest stack depth: 16448 bytes left [ 520.900977][T10412] syzkaller0: entered promiscuous mode [ 520.901007][T10412] syzkaller0: entered allmulticast mode [ 524.038355][T10096] Bluetooth: hci3: connection err: -111 [ 524.627255][ T36] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 524.794359][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 524.806283][ T36] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.806313][ T36] usb 5-1: config 0 has no interface number 0 [ 524.806358][ T36] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.806385][ T36] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 524.806414][ T36] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.806442][ T36] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.806488][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.806513][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.903323][ T36] usb 5-1: config 0 descriptor?? [ 524.940567][ T36] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 525.393003][ T36] usb 5-1: USB disconnect, device number 16 [ 525.456398][ T36] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 528.791777][T10535] 9pnet_virtio: no channels available for device syz [ 528.865422][T10535] overlay: Unknown parameter '/' [ 531.753644][T10548] 9pnet_virtio: no channels available for device syz [ 531.764685][T10548] process 'syz.3.1766' launched './file0' with NULL argv: empty string added [ 534.686556][T10560] openvswitch: netlink: EtherType 0 is less than min 600 [ 538.225770][ T5591] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 538.450127][ T5591] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 538.450158][ T5591] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 538.450180][ T5591] usb 4-1: config 0 has no interface number 0 [ 538.453175][ T5591] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 538.453206][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.453229][ T5591] usb 4-1: Product: syz [ 538.453244][ T5591] usb 4-1: Manufacturer: syz [ 538.453259][ T5591] usb 4-1: SerialNumber: syz [ 538.517780][ T5591] usb 4-1: config 0 descriptor?? [ 538.947700][ T5591] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 538.947740][ T5591] uvcvideo 4-1:0.64: No valid video chain found. [ 540.870632][ T5735] usb 4-1: USB disconnect, device number 60 [ 541.996775][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1794'. [ 543.266715][T10633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.337410][ T5735] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 543.490117][ T5735] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 543.490149][ T5735] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 543.490171][ T5735] usb 4-1: config 0 has no interface number 0 [ 543.494032][ T5735] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 543.494064][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.494086][ T5735] usb 4-1: Product: syz [ 543.494102][ T5735] usb 4-1: Manufacturer: syz [ 543.494118][ T5735] usb 4-1: SerialNumber: syz [ 543.559786][ T5735] usb 4-1: config 0 descriptor?? [ 546.567272][ T5735] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 546.567313][ T5735] uvcvideo 4-1:0.64: No valid video chain found. [ 546.599279][ T5735] usb 4-1: USB disconnect, device number 61 [ 547.235990][T10096] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 547.358790][T10633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.985917][T10633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.742904][T10633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.997371][ T5591] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 549.298678][ T5591] usb 5-1: unable to get BOS descriptor or descriptor too short [ 549.300797][ T5591] usb 5-1: not running at top speed; connect to a high speed hub [ 549.304221][ T5591] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 549.304250][ T5591] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 549.304270][ T5591] usb 5-1: config 5 has no interface number 0 [ 549.304317][ T5591] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 549.304345][ T5591] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.304388][ T5591] usb 5-1: config 5 interface 246 has no altsetting 0 [ 549.392554][ T5591] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 549.392587][ T5591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.392607][ T5591] usb 5-1: Product: syz [ 549.392622][ T5591] usb 5-1: Manufacturer: syz [ 549.392638][ T5591] usb 5-1: SerialNumber: syz [ 549.862378][ T5591] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 549.945138][ T5591] usb 5-1: USB disconnect, device number 17 [ 549.974911][ T70] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.974973][ T70] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.989527][ T1420] usb 5-1: Failed to submit usb control message: -71 [ 549.989641][ T1420] usb 5-1: unable to send the bmi data to the device: -71 [ 549.989743][ T1420] usb 5-1: unable to get target info from device [ 549.989792][ T1420] usb 5-1: could not get target info (-71) [ 549.990055][ T1420] usb 5-1: could not probe fw (-71) [ 550.172492][ T70] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.269905][ T1028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.045299][T10723] syzkaller0: entered promiscuous mode [ 551.045327][T10723] syzkaller0: entered allmulticast mode [ 551.077857][ T821] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 551.414808][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 551.433011][ T821] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 551.433081][ T821] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.433105][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.433131][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.433155][ T821] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.433199][ T821] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.433222][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.789964][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1835'. [ 554.521069][ T821] usb 2-1: usb_control_msg returned -71 [ 554.521121][ T821] usbtmc 2-1:16.0: can't read capabilities [ 554.707660][ T821] usb 2-1: USB disconnect, device number 73 [ 556.847221][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 556.999817][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 556.999850][ T9] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 556.999871][ T9] usb 4-1: config 0 has no interface number 0 [ 557.003094][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 557.003126][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.003148][ T9] usb 4-1: Product: syz [ 557.003164][ T9] usb 4-1: Manufacturer: syz [ 557.003179][ T9] usb 4-1: SerialNumber: syz [ 557.069690][ T9] usb 4-1: config 0 descriptor?? [ 557.475783][ T9] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 557.475820][ T9] uvcvideo 4-1:0.64: No valid video chain found. [ 557.715095][T10755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1842'. [ 560.890624][ T5735] usb 4-1: USB disconnect, device number 62 [ 563.142098][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.142172][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.740862][T10811] securityfs: Unknown parameter 'm8{>bvZ000&' [ 568.354496][T10839] usb usb7: usbfs: process 10839 (syz.3.1870) did not claim interface 0 before use [ 569.954069][T10841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.762964][T10841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.890238][T10851] fuse: fd is not a fuse device [ 571.130043][T10841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.104701][T10841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.395065][ T1235] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.430428][ T1420] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.430483][ T1420] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.477274][ T165] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.295588][T10876] syzkaller0: entered promiscuous mode [ 574.295617][T10876] syzkaller0: entered allmulticast mode [ 574.969116][T10890] 9pnet_virtio: no channels available for device syz [ 575.067254][ T5735] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 575.230417][ T5735] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.231209][ T5735] usb 4-1: not running at top speed; connect to a high speed hub [ 575.232872][ T5735] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 575.232900][ T5735] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 575.232921][ T5735] usb 4-1: config 5 has no interface number 0 [ 575.232969][ T5735] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 575.232999][ T5735] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 575.233027][ T5735] usb 4-1: config 5 interface 246 has no altsetting 0 [ 575.236598][ T5735] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 575.236836][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.236860][ T5735] usb 4-1: Product: syz [ 575.236877][ T5735] usb 4-1: Manufacturer: syz [ 575.236893][ T5735] usb 4-1: SerialNumber: syz [ 576.431487][ T5735] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 576.458427][ T1497] usb 4-1: Failed to submit usb control message: -71 [ 576.458465][ T1497] usb 4-1: unable to send the bmi data to the device: -71 [ 576.458484][ T1497] usb 4-1: unable to get target info from device [ 576.458500][ T1497] usb 4-1: could not get target info (-71) [ 576.458590][ T1497] usb 4-1: could not probe fw (-71) [ 576.460957][ T5735] usb 4-1: USB disconnect, device number 63 [ 577.352017][T10922] syzkaller0: entered promiscuous mode [ 577.352046][T10922] syzkaller0: entered allmulticast mode [ 579.046689][ T37] kauditd_printk_skb: 173 callbacks suppressed [ 579.046847][ T37] audit: type=1326 audit(1780498576.781:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.047609][ T37] audit: type=1326 audit(1780498576.791:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.078842][ T37] audit: type=1326 audit(1780498576.831:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.078999][ T37] audit: type=1326 audit(1780498576.831:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.095420][ T37] audit: type=1326 audit(1780498576.841:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.095579][ T37] audit: type=1326 audit(1780498576.841:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.101303][ T37] audit: type=1326 audit(1780498576.851:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.101516][ T37] audit: type=1326 audit(1780498576.851:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21370fce59 code=0x7ffc0000 [ 579.118857][ T37] audit: type=1326 audit(1780498576.861:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213709e1d9 code=0x7ffc0000 [ 579.147790][ T37] audit: type=1326 audit(1780498576.881:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10956 comm="syz.2.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213709e1d9 code=0x7ffc0000 [ 599.503793][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.532325][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.573554][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.584189][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.588081][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.507349][T11128] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 601.757333][T10096] Bluetooth: hci1: command tx timeout [ 602.671251][T11159] binder: BINDER_SET_CONTEXT_MGR already set [ 602.671268][T11159] binder: 11157:11159 ioctl 4018620d 200000000100 returned -16 [ 602.831364][T11161] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 602.831392][T11161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.901970][T11161] vhci_hcd vhci_hcd.0: Device attached [ 602.957563][T11163] vhci_hcd: connection closed [ 603.191841][ T56] vhci_hcd vhci_hcd.3: stop threads [ 603.207210][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 603.224446][ T56] vhci_hcd vhci_hcd.3: release socket [ 603.267189][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 603.839583][T10096] Bluetooth: hci1: command tx timeout [ 605.093908][T11017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.918439][T10096] Bluetooth: hci1: command tx timeout [ 606.476991][T11017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.001120][T10096] Bluetooth: hci1: command tx timeout [ 608.200790][T11017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.307326][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 608.405304][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.405548][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.405822][T11096] bridge_slave_0: entered allmulticast mode [ 608.450293][T11096] bridge_slave_0: entered promiscuous mode [ 608.573847][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.584280][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.584543][T11096] bridge_slave_1: entered allmulticast mode [ 608.625144][T11096] bridge_slave_1: entered promiscuous mode [ 608.786237][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 609.690866][T11017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.775024][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.842713][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.095918][T11096] team0: Port device team_slave_0 added [ 610.103969][T11096] team0: Port device team_slave_1 added [ 610.207766][T11096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.207785][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.207816][T11096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.215731][T11096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.215748][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.215779][T11096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.396653][T11096] hsr_slave_0: entered promiscuous mode [ 610.419388][T11096] hsr_slave_1: entered promiscuous mode [ 611.918799][T11096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.132438][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.153172][T11096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.533745][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.830632][T11096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.901655][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.906067][T11096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 612.958761][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.307679][T11017] bridge_slave_1: left allmulticast mode [ 614.307932][T11017] bridge_slave_1: left promiscuous mode [ 614.345061][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.572863][T11017] bridge_slave_0: left allmulticast mode [ 614.572902][T11017] bridge_slave_0: left promiscuous mode [ 614.616444][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.835077][T11017] pimreg: left allmulticast mode [ 616.087943][ T5821] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 616.277193][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 616.279250][ T5821] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 616.279278][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.279299][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.279322][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.279337][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.279352][ T5821] usb 2-1: config 0 has no interface number 0 [ 616.279383][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 616.279403][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 616.279420][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 616.279445][ T5821] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.279464][ T5821] usb 2-1: config 0 interface 125 has no altsetting 0 [ 616.279478][ T5821] usb 2-1: config 0 interface 125 has no altsetting 2 [ 616.281837][ T5821] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 616.281864][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.281879][ T5821] usb 2-1: Product: syz [ 616.281889][ T5821] usb 2-1: Manufacturer: syz [ 616.281899][ T5821] usb 2-1: SerialNumber: syz [ 616.384379][ T5821] usb 2-1: config 0 descriptor?? [ 616.463774][ T5821] usb 2-1: selecting invalid altsetting 2 [ 617.528478][ T5821] get_1284_register timeout [ 617.528748][ C1] usb 2-1: async_complete: urb error -104 [ 617.528841][ C1] usb 2-1: async_complete: urb error -104 [ 617.712581][T11017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.822533][ T9] usb 2-1: USB disconnect, device number 74 [ 617.896621][T11017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.978899][T11017] bond0 (unregistering): Released all slaves [ 618.072681][T11017] bond1 (unregistering): Released all slaves [ 618.848229][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.969088][T11017] tipc: Left network mode [ 619.015349][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.066773][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.118907][T10989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.186027][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.200997][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.336365][T11017] rxrpc: Call ffff8880112dcec0 still in use (1,Complete,1489,0)! [ 621.437252][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 621.596267][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 621.851458][T11096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.572455][T11096] veth0_vlan: entered promiscuous mode [ 623.614519][T11096] veth1_vlan: entered promiscuous mode [ 623.701444][T11096] veth0_macvtap: entered promiscuous mode [ 623.728603][T11096] veth1_macvtap: entered promiscuous mode [ 623.755358][T11096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.904006][T11096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.045997][ T1497] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.122591][ T1497] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.123644][ T1497] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.199189][ T1497] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.486144][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.487847][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.772782][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 625.326016][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.326039][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.762325][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.762346][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.409688][T11518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2054'. [ 628.979654][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 631.304369][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 633.497262][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 633.647202][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 633.652081][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 633.652118][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 633.699507][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 633.699540][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.699563][ T9] usb 6-1: Product: syz [ 633.699577][ T9] usb 6-1: Manufacturer: syz [ 633.699591][ T9] usb 6-1: SerialNumber: syz [ 633.762754][ T9] usb 6-1: config 0 descriptor?? [ 633.783425][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 633.783463][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 634.372444][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 634.374123][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 635.629643][ T9] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 635.831006][ T9] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 635.832405][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 635.832890][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 635.833322][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 635.833717][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 635.834140][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 635.895760][ T9] usb 6-1: USB disconnect, device number 2 [ 638.480773][T11720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 638.729496][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2121'. [ 639.488699][T11720] kvm: pic: level sensitive irq not supported [ 639.500099][T11720] kvm: pic: non byte read [ 639.504427][T11720] kvm: pic: level sensitive irq not supported [ 639.538800][T11720] kvm: pic: non byte read [ 639.539176][T11720] kvm: pic: level sensitive irq not supported [ 639.539724][T11720] kvm: pic: non byte read [ 639.540006][T11720] kvm: pic: level sensitive irq not supported [ 639.541161][T11720] kvm: pic: non byte read [ 639.544322][T11720] kvm: pic: level sensitive irq not supported [ 639.544401][T11720] kvm: pic: non byte read [ 639.560580][T11720] kvm: pic: level sensitive irq not supported [ 639.563143][T11720] kvm: pic: non byte read [ 639.564515][T11720] kvm: pic: level sensitive irq not supported [ 639.564599][T11720] kvm: pic: non byte read [ 639.660622][T11720] kvm: pic: level sensitive irq not supported [ 639.693171][T11720] kvm: pic: non byte read [ 639.693577][T11720] kvm: pic: level sensitive irq not supported [ 639.693918][T11720] kvm: pic: non byte read [ 641.134589][T11738] 9pnet_virtio: no channels available for device syz [ 641.315460][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.427250][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 649.580852][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 649.580884][ T9] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 649.580906][ T9] usb 5-1: config 0 has no interface number 0 [ 649.591627][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 649.591661][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.591684][ T9] usb 5-1: Product: syz [ 649.591699][ T9] usb 5-1: Manufacturer: syz [ 649.591715][ T9] usb 5-1: SerialNumber: syz [ 649.672377][ T9] usb 5-1: config 0 descriptor?? [ 650.111220][ T9] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 650.111258][ T9] uvcvideo 5-1:0.64: No valid video chain found. [ 650.473488][ T36] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 650.862772][T11871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2160'. [ 651.005178][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 651.006881][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 651.025539][ T36] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 651.027384][ T36] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 651.027402][ T36] usb 6-1: config 5 has no interface number 0 [ 651.027443][ T36] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 651.027463][ T36] usb 6-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 651.027482][ T36] usb 6-1: config 5 interface 246 has no altsetting 0 [ 651.031508][ T36] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 651.031539][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.031561][ T36] usb 6-1: Product: syz [ 651.031576][ T36] usb 6-1: Manufacturer: syz [ 651.031592][ T36] usb 6-1: SerialNumber: syz [ 651.166269][ T5821] usb 5-1: USB disconnect, device number 18 [ 651.613624][ T36] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 651.647569][ T36] usb 6-1: USB disconnect, device number 3 [ 651.649736][ T1235] usb 6-1: Failed to submit usb control message: -19 [ 651.649772][ T1235] usb 6-1: unable to send the bmi data to the device: -19 [ 651.649792][ T1235] usb 6-1: unable to get target info from device [ 651.649809][ T1235] usb 6-1: could not get target info (-19) [ 651.649980][ T1235] usb 6-1: could not probe fw (-19) [ 652.247905][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.253361][T11929] bridge0: port 2(bridge_slave_1) entered listening state [ 652.328460][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.328640][T11929] bridge0: port 1(bridge_slave_0) entered listening state [ 652.709979][T11929] 8021q: adding VLAN 0 to HW filter on device eth0 [ 652.770385][T11929] 8021q: adding VLAN 0 to HW filter on device eth1 [ 652.773006][T11929] 8021q: adding VLAN 0 to HW filter on device eth2 [ 652.775768][T11929] 8021q: adding VLAN 0 to HW filter on device eth3 [ 652.843005][ T1235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 656.508295][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2193'. [ 656.639100][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 656.792569][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 656.793241][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 656.797414][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 656.799426][ T9] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 656.799523][ T9] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 656.799577][ T9] usb 5-1: config 5 has no interface number 0 [ 656.799714][ T9] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 656.799763][ T9] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 656.799993][ T9] usb 5-1: config 5 interface 246 has no altsetting 0 [ 656.848072][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 656.848104][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.848124][ T9] usb 5-1: Product: syz [ 656.848144][ T9] usb 5-1: Manufacturer: syz [ 656.848159][ T9] usb 5-1: SerialNumber: syz [ 657.269452][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 657.291225][ T821] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 657.358748][ T9] usb 5-1: USB disconnect, device number 19 [ 657.378478][ T67] usb 5-1: Failed to submit usb control message: -19 [ 657.378516][ T67] usb 5-1: unable to send the bmi data to the device: -19 [ 657.378535][ T67] usb 5-1: unable to get target info from device [ 657.378552][ T67] usb 5-1: could not get target info (-19) [ 657.378775][ T67] usb 5-1: could not probe fw (-19) [ 657.487266][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 657.495175][ T821] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 657.495196][ T821] usb 6-1: config 0 has no interface number 0 [ 657.495226][ T821] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.495245][ T821] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 657.495263][ T821] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 657.495281][ T821] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 657.495297][ T821] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 657.495329][ T821] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 657.495345][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.597660][ T821] usb 6-1: config 0 descriptor?? [ 657.605755][ T821] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 657.707324][ T5591] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 657.832473][ T10] usb 6-1: USB disconnect, device number 4 [ 657.867212][ T5591] usb 4-1: Using ep0 maxpacket: 32 [ 657.869133][ T5591] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 657.869203][ T5591] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 657.869237][ T5591] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.869257][ T5591] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 657.871633][ T5591] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 657.871662][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.871681][ T5591] usb 4-1: Product: syz [ 657.871695][ T5591] usb 4-1: Manufacturer: syz [ 657.871715][ T5591] usb 4-1: SerialNumber: syz [ 658.000351][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 658.003280][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 658.050042][ T5591] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input25 [ 658.167604][ T5591] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 658.167640][ T5591] (id 0x00) [ 658.277774][ T5591] rc_core: IR keymap rc-imon-pad not found [ 658.277790][ T5591] Registered IR keymap rc-empty [ 658.277849][ T5591] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 658.277862][ T5591] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 658.401600][ T5591] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 658.423592][ T5591] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input26 [ 658.483567][ T5591] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:64> initialized [ 658.797809][T12002] imon:send_packet: task interrupted [ 658.797828][T12002] imon:send_packet: packet tx failed (-512) [ 658.799186][T12002] imon:vfd_write: send packet #0 failed [ 658.910284][ T5591] usb 4-1: USB disconnect, device number 64 [ 660.671565][T12042] syzkaller0: entered promiscuous mode [ 660.671591][T12042] syzkaller0: entered allmulticast mode [ 660.691115][T12038] tipc: Started in network mode [ 660.691149][T12038] tipc: Node identity 926b9a00e882, cluster identity 4711 [ 660.691347][T12038] tipc: Enabled bearer , priority 0 [ 660.722852][T12034] tipc: Resetting bearer [ 660.749033][T12033] tipc: Resetting bearer [ 660.972102][T12033] tipc: Disabling bearer [ 661.597274][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 661.637242][ T36] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 661.747458][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 661.749826][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 661.749854][ T9] usb 4-1: config 0 has no interface number 0 [ 661.749898][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.749924][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 661.749951][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.749978][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 661.750001][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 661.750043][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 661.750067][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.756902][ T9] usb 4-1: config 0 descriptor?? [ 661.873477][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 661.894846][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 661.896780][ T36] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 661.896808][ T36] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 661.896829][ T36] usb 6-1: config 5 has no interface number 0 [ 661.896876][ T36] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 661.896905][ T36] usb 6-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 661.896933][ T36] usb 6-1: config 5 interface 246 has no altsetting 0 [ 661.975767][ T36] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 661.975801][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.975824][ T36] usb 6-1: Product: syz [ 661.975839][ T36] usb 6-1: Manufacturer: syz [ 661.975857][ T36] usb 6-1: SerialNumber: syz [ 662.026380][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 662.320623][ T9] usb 4-1: USB disconnect, device number 65 [ 662.326459][ T36] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 662.411290][ T36] usb 6-1: USB disconnect, device number 5 [ 662.439200][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 662.456752][ T66] usb 6-1: Failed to submit usb control message: -71 [ 662.456777][ T66] usb 6-1: unable to send the bmi data to the device: -71 [ 662.456792][ T66] usb 6-1: unable to get target info from device [ 662.456803][ T66] usb 6-1: could not get target info (-71) [ 662.512775][ T66] usb 6-1: could not probe fw (-71) [ 664.798318][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.000976][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.001983][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.707121][ T5821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 669.869540][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 669.875460][ T5821] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 669.875491][ T5821] usb 5-1: config 0 has no interface number 0 [ 669.875537][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.875562][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 669.875588][ T5821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.875616][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.875661][ T5821] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 669.875686][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.937316][ T821] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 669.960756][ T5821] usb 5-1: config 0 descriptor?? [ 670.039285][ T5821] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 670.103136][ T821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.104921][ T821] usb 2-1: not running at top speed; connect to a high speed hub [ 670.109830][ T821] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 670.109895][ T821] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 670.109956][ T821] usb 2-1: config 5 has no interface number 0 [ 670.110009][ T821] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 670.110118][ T821] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.110200][ T821] usb 2-1: config 5 interface 246 has no altsetting 0 [ 670.158504][ T821] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 670.158595][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.158631][ T821] usb 2-1: Product: syz [ 670.158667][ T821] usb 2-1: Manufacturer: syz [ 670.158713][ T821] usb 2-1: SerialNumber: syz [ 670.320805][ T9] usb 5-1: USB disconnect, device number 20 [ 670.380119][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 670.616046][ T821] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 670.642989][ T821] usb 2-1: USB disconnect, device number 75 [ 670.645935][ T1497] usb 2-1: Failed to submit usb control message: -19 [ 670.650948][ T1497] usb 2-1: unable to send the bmi data to the device: -19 [ 670.650970][ T1497] usb 2-1: unable to get target info from device [ 670.650984][ T1497] usb 2-1: could not get target info (-19) [ 670.660527][ T1497] usb 2-1: could not probe fw (-19) [ 674.376446][T12205] securityfs: Unknown parameter 'm8{>bvZ000&' [ 675.387203][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 675.541486][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.546350][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 675.569218][ T9] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 675.569249][ T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 675.569269][ T9] usb 2-1: config 5 has no interface number 0 [ 675.569331][ T9] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 675.569360][ T9] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 675.569388][ T9] usb 2-1: config 5 interface 246 has no altsetting 0 [ 675.573765][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 675.573797][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.573819][ T9] usb 2-1: Product: syz [ 675.573834][ T9] usb 2-1: Manufacturer: syz [ 675.573850][ T9] usb 2-1: SerialNumber: syz [ 676.062111][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 676.088191][ T56] usb 2-1: Failed to submit usb control message: -71 [ 676.088233][ T56] usb 2-1: unable to send the bmi data to the device: -71 [ 676.088253][ T56] usb 2-1: unable to get target info from device [ 676.088270][ T56] usb 2-1: could not get target info (-71) [ 676.088360][ T56] usb 2-1: could not probe fw (-71) [ 676.088702][ T9] usb 2-1: USB disconnect, device number 76 [ 676.937945][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 678.069659][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 678.537162][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 678.720732][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.720766][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 678.721852][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.721911][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 678.722011][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 678.725426][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.725448][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.725466][ T9] usb 5-1: Product: syz [ 678.725477][ T9] usb 5-1: Manufacturer: syz [ 678.825681][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 678.825697][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 678.845436][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 678.845574][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 679.832002][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.868773][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.158765][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.122101][ T821] usb 5-1: USB disconnect, device number 21 [ 682.720608][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 682.721908][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 682.741438][ T36] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 683.948763][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 683.985910][ T36] usb 2-1: not running at top speed; connect to a high speed hub [ 684.025541][ T36] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 684.025578][ T36] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 684.025651][ T36] usb 2-1: config 5 has no interface number 0 [ 684.025808][ T36] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 684.025881][ T36] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 684.025950][ T36] usb 2-1: config 5 interface 246 has no altsetting 0 [ 684.067548][ T36] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 684.067622][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.067684][ T36] usb 2-1: Product: syz [ 684.067702][ T36] usb 2-1: Manufacturer: syz [ 684.067762][ T36] usb 2-1: SerialNumber: syz [ 686.479573][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.479656][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.041702][ T36] usb 2-1: can't set config #5, error -71 [ 690.097772][ T36] usb 2-1: USB disconnect, device number 77 [ 709.318227][T12320] syz.1.2296 (12320): drop_caches: 2 [ 712.157223][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.838006][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.838032][ C0] bridge0: topology change detected, propagating [ 712.838570][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.838589][ C0] bridge0: topology change detected, propagating [ 713.633279][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.727853][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.751334][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.796262][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.832869][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.177845][T10096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 714.272568][T12383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 714.297862][T10096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 714.347334][T10096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 714.347703][T12383] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 714.350935][T12383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 714.353252][T12383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 714.355250][T12383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 714.418715][T11098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 714.537040][T12383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 715.943758][ T5609] Bluetooth: hci4: command tx timeout [ 716.557188][ T5609] Bluetooth: hci7: command tx timeout [ 716.807197][ T5609] Bluetooth: hci6: command tx timeout [ 717.997349][ T5609] Bluetooth: hci4: command tx timeout [ 718.637094][ T5609] Bluetooth: hci7: command tx timeout [ 718.877562][ T5609] Bluetooth: hci6: command tx timeout [ 719.502202][T12340] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.502399][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.502593][T12340] bridge_slave_0: entered allmulticast mode [ 719.504494][T12340] bridge_slave_0: entered promiscuous mode [ 719.506311][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.506432][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.506639][T12344] bridge_slave_0: entered allmulticast mode [ 719.519483][T12344] bridge_slave_0: entered promiscuous mode [ 719.611947][T12340] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.612094][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.612388][T12340] bridge_slave_1: entered allmulticast mode [ 719.615901][T12340] bridge_slave_1: entered promiscuous mode [ 719.833800][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.833931][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.834170][T12344] bridge_slave_1: entered allmulticast mode [ 719.844375][T12344] bridge_slave_1: entered promiscuous mode [ 720.077307][ T5609] Bluetooth: hci4: command tx timeout [ 720.117867][T12340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.122287][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.161115][T12340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.164914][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.582486][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.582631][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.582843][T12347] bridge_slave_0: entered allmulticast mode [ 720.584974][T12347] bridge_slave_0: entered promiscuous mode [ 720.622033][T12340] team0: Port device team_slave_0 added [ 720.632910][T12344] team0: Port device team_slave_0 added [ 720.633328][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.633548][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.633752][T12347] bridge_slave_1: entered allmulticast mode [ 720.635945][T12347] bridge_slave_1: entered promiscuous mode [ 720.672124][T12340] team0: Port device team_slave_1 added [ 720.674429][T12344] team0: Port device team_slave_1 added [ 720.717236][ T5609] Bluetooth: hci7: command tx timeout [ 720.838978][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.840793][T12340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.840808][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.840831][T12340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.963023][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.963040][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.963062][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.968043][ T5609] Bluetooth: hci6: command tx timeout [ 720.974061][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.979015][T12340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.979058][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.979142][T12340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.983986][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.984028][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.984104][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.227233][ T36] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 721.382816][ T36] usb 4-1: config 1 has an invalid interface number: 4 but max is 1 [ 721.382847][ T36] usb 4-1: config 1 has an invalid interface number: 245 but max is 1 [ 721.382870][ T36] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.382890][ T36] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.382910][ T36] usb 4-1: config 1 has no interface number 0 [ 721.382927][ T36] usb 4-1: config 1 has no interface number 1 [ 721.382986][ T36] usb 4-1: config 1 interface 245 altsetting 4 has an endpoint descriptor with address 0x21, changing to 0x1 [ 721.383014][ T36] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0x1 has an invalid bInterval 50, changing to 9 [ 721.383051][ T36] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0x1 has invalid maxpacket 41178, setting to 1024 [ 721.383081][ T36] usb 4-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 721.383108][ T36] usb 4-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 721.383132][ T36] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 721.383160][ T36] usb 4-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 721.383188][ T36] usb 4-1: config 1 interface 4 has no altsetting 0 [ 721.383206][ T36] usb 4-1: config 1 interface 245 has no altsetting 0 [ 721.403435][ T36] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 721.403467][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.403489][ T36] usb 4-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 721.403521][ T36] usb 4-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 721.403559][ T36] usb 4-1: SerialNumber: Ѕ [ 721.674748][T12347] team0: Port device team_slave_0 added [ 721.704973][T12347] team0: Port device team_slave_1 added [ 721.749783][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 721.871740][T12486] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2333'. [ 721.894326][T12340] hsr_slave_0: entered promiscuous mode [ 721.896062][T12340] hsr_slave_1: entered promiscuous mode [ 721.898518][T12340] debugfs: 'hsr0' already exists in 'hsr' [ 721.898555][T12340] Cannot create hsr debugfs directory [ 721.943534][T12344] hsr_slave_0: entered promiscuous mode [ 721.951978][T12344] hsr_slave_1: entered promiscuous mode [ 721.962293][T12344] debugfs: 'hsr0' already exists in 'hsr' [ 721.962322][T12344] Cannot create hsr debugfs directory [ 722.018448][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.018466][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.018505][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.091606][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.091625][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.091655][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.093097][ T36] usb 4-1: USB disconnect, device number 66 [ 722.157435][ T5609] Bluetooth: hci4: command tx timeout [ 722.797215][ T5609] Bluetooth: hci7: command tx timeout [ 722.839962][T12347] hsr_slave_0: entered promiscuous mode [ 722.841670][T12347] hsr_slave_1: entered promiscuous mode [ 722.859564][T12347] debugfs: 'hsr0' already exists in 'hsr' [ 722.859594][T12347] Cannot create hsr debugfs directory [ 723.040738][ T5609] Bluetooth: hci6: command tx timeout [ 723.944695][T12344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 724.035780][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.068354][T12344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.161777][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.187428][T12344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 724.280756][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.294251][T12344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 724.324390][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.835017][T12340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 724.952697][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.970020][T12340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 725.055575][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.083680][T12340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 725.134525][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.138606][T12340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 725.176779][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.416273][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.527387][ T36] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 725.548892][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.637551][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.644358][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.693418][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.693485][ T36] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 725.693503][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.726449][ T36] usb 4-1: config 0 descriptor?? [ 725.746552][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 725.809071][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.809277][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.880066][T12347] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 725.995769][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.084648][T12347] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 726.126737][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.141761][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 726.142643][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 726.143273][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 726.144284][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 726.144918][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 726.145745][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 726.146364][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 726.201132][T12347] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 726.255023][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.276438][T12347] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 726.356929][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 726.360029][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 726.361933][ T36] pwc: recv_control_msg error -32 req 02 val 2400 [ 726.363361][ T36] pwc: recv_control_msg error -32 req 02 val 2600 [ 726.391509][ T36] pwc: recv_control_msg error -32 req 02 val 2900 [ 726.440044][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.601573][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 726.603599][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 726.633656][ T36] pwc: Registered as video103. [ 726.654168][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 726.703632][ T36] usb 4-1: USB disconnect, device number 67 [ 727.045647][T12340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.223291][T12340] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.283360][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.283606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.326101][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.326252][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.811339][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.974754][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.139684][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.139824][T10989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.169190][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.169363][T10989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.255477][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.671249][T12344] veth0_vlan: entered promiscuous mode [ 729.735890][T12344] veth1_vlan: entered promiscuous mode [ 729.892013][T12340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.999568][T12344] veth0_macvtap: entered promiscuous mode [ 730.078300][T12344] veth1_macvtap: entered promiscuous mode [ 730.154417][T12347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.164065][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.251457][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.325272][ T1420] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.326518][ T1420] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.449916][ T1420] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.453441][ T1420] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.638844][ T5735] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 730.791173][ T5735] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 730.791250][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.794175][ T5735] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 730.794208][ T5735] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 730.794230][ T5735] usb 4-1: Manufacturer: syz [ 730.858079][ T5735] usb 4-1: config 0 descriptor?? [ 731.090534][ T5735] rc_core: IR keymap rc-hauppauge not found [ 731.090555][ T5735] Registered IR keymap rc-empty [ 731.095198][ T5735] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 731.153492][ T5735] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 731.762006][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.762029][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.798966][T12340] veth0_vlan: entered promiscuous mode [ 731.842025][ T5591] usb 4-1: USB disconnect, device number 68 [ 732.012877][T12340] veth1_vlan: entered promiscuous mode [ 732.106848][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.106872][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.155325][T12347] veth0_vlan: entered promiscuous mode [ 732.277535][T12347] veth1_vlan: entered promiscuous mode [ 732.371095][T12340] veth0_macvtap: entered promiscuous mode [ 732.415432][T12340] veth1_macvtap: entered promiscuous mode [ 732.481424][T12340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.519223][T12340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.580847][T12347] veth0_macvtap: entered promiscuous mode [ 732.644328][ T1420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.737774][T12347] veth1_macvtap: entered promiscuous mode [ 732.801806][ T1420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.805678][ T1420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.833755][ T1420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.847181][ T5811] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 733.025384][ T5811] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 733.025415][ T5811] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 733.025435][ T5811] usb 4-1: config 0 has no interface number 0 [ 733.083328][T12347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.084827][ T5811] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 733.084859][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.084880][ T5811] usb 4-1: Product: syz [ 733.084894][ T5811] usb 4-1: Manufacturer: syz [ 733.084909][ T5811] usb 4-1: SerialNumber: syz [ 733.137347][ T5811] usb 4-1: config 0 descriptor?? [ 733.451400][T12347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.563395][ T5811] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 733.563433][ T5811] uvcvideo 4-1:0.64: No valid video chain found. [ 733.872933][T10989] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.998319][T10989] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.038649][T12328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.043798][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.181747][ T5735] usb 4-1: USB disconnect, device number 69 [ 734.294426][ T1497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.294452][ T1497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.842270][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.842293][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.355339][ T5614] kernel write not supported for file [eventfd] (pid: 5614 comm: kworker/1:3) [ 736.704892][T12087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.704915][T12087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.181275][T12328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.181301][T12328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.702146][T12708] netlink: 'syz.8.2394': attribute type 8 has an invalid length. [ 741.177657][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 741.880704][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 744.864327][T12779] 9p: Bad value for 'wfdno' [ 745.201303][ T5609] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 745.201506][ T5609] Bluetooth: hci3: Injecting HCI hardware error event [ 745.211898][ T5609] Bluetooth: hci3: hardware error 0x00 [ 745.567217][ T36] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 746.398041][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 746.425434][ T36] usb 7-1: not running at top speed; connect to a high speed hub [ 746.798966][ T36] usb 7-1: config 5 has an invalid interface number: 246 but max is 0 [ 746.798996][ T36] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 746.799016][ T36] usb 7-1: config 5 has no interface number 0 [ 746.799064][ T36] usb 7-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 746.799092][ T36] usb 7-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 746.799120][ T36] usb 7-1: config 5 interface 246 has no altsetting 0 [ 746.802211][ T36] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 746.802243][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.802264][ T36] usb 7-1: Product: syz [ 746.802280][ T36] usb 7-1: Manufacturer: syz [ 746.802295][ T36] usb 7-1: SerialNumber: syz [ 747.196692][ T36] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 747.285720][ T56] usb 7-1: Failed to submit usb control message: -71 [ 747.286711][ T36] usb 7-1: USB disconnect, device number 2 [ 747.300839][ T56] usb 7-1: unable to send the bmi data to the device: -71 [ 747.300864][ T56] usb 7-1: unable to get target info from device [ 747.300879][ T56] usb 7-1: could not get target info (-71) [ 747.301127][ T56] usb 7-1: could not probe fw (-71) [ 747.361005][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.361078][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.677524][ T5609] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 748.944977][T12832] binder: 12831:12832 ioctl c0306201 200000000080 returned -14 [ 750.037236][T12644] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 750.038116][T12858] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 750.191853][T12644] usb 9-1: unable to get BOS descriptor or descriptor too short [ 750.193229][T12644] usb 9-1: not running at top speed; connect to a high speed hub [ 750.195529][T12644] usb 9-1: config 5 has an invalid interface number: 246 but max is 0 [ 750.195558][T12644] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 750.195578][T12644] usb 9-1: config 5 has no interface number 0 [ 750.195625][T12644] usb 9-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 750.195655][T12644] usb 9-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 750.195684][T12644] usb 9-1: config 5 interface 246 has no altsetting 0 [ 750.273063][T12644] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 750.273095][T12644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.273110][T12644] usb 9-1: Product: syz [ 750.273121][T12644] usb 9-1: Manufacturer: syz [ 750.273131][T12644] usb 9-1: SerialNumber: syz [ 750.652535][T12644] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 750.670357][T12644] usb 9-1: USB disconnect, device number 2 [ 750.704070][ T1072] usb 9-1: Failed to submit usb control message: -19 [ 750.704107][ T1072] usb 9-1: unable to send the bmi data to the device: -19 [ 750.704123][ T1072] usb 9-1: unable to get target info from device [ 750.704137][ T1072] usb 9-1: could not get target info (-19) [ 750.704318][ T1072] usb 9-1: could not probe fw (-19) [ 750.868313][T12865] qrtr: Invalid version 127 [ 754.412180][ T5735] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 754.558009][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 754.561771][ T5735] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.563421][ T5735] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.563515][ T5735] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.605672][ T5735] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 754.605723][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.605746][ T5735] usb 4-1: Product: syz [ 754.605761][ T5735] usb 4-1: Manufacturer: syz [ 754.605776][ T5735] usb 4-1: SerialNumber: syz [ 754.924717][ T5735] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 754.987439][ T5735] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 755.485365][ T5735] usb 4-1: 2:1 : can't get Cluster Descriptor [ 755.692438][ T5735] usb 4-1: USB disconnect, device number 70 [ 756.295537][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2479'. [ 759.617362][ T821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 759.727206][ T5735] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 759.771744][ T821] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 759.771774][ T821] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 759.771794][ T821] usb 7-1: config 0 has no interface number 0 [ 759.774237][ T821] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 759.774268][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.774288][ T821] usb 7-1: Product: syz [ 759.776443][ T821] usb 7-1: Manufacturer: syz [ 759.776465][ T821] usb 7-1: SerialNumber: syz [ 759.839695][ T821] usb 7-1: config 0 descriptor?? [ 759.900152][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 759.900893][ T5735] usb 9-1: not running at top speed; connect to a high speed hub [ 759.903405][ T5735] usb 9-1: config 5 has an invalid interface number: 246 but max is 0 [ 759.903432][ T5735] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 759.903452][ T5735] usb 9-1: config 5 has no interface number 0 [ 759.903499][ T5735] usb 9-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 759.903529][ T5735] usb 9-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 759.903558][ T5735] usb 9-1: config 5 interface 246 has no altsetting 0 [ 759.920183][ T5735] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 759.920258][ T5735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.920307][ T5735] usb 9-1: Product: syz [ 759.920323][ T5735] usb 9-1: Manufacturer: syz [ 759.920339][ T5735] usb 9-1: SerialNumber: syz [ 760.273049][ T821] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 760.273085][ T821] uvcvideo 7-1:0.64: No valid video chain found. [ 760.425098][ T5735] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 760.451234][T12094] usb 9-1: Failed to submit usb control message: -71 [ 760.451274][T12094] usb 9-1: unable to send the bmi data to the device: -71 [ 760.451293][T12094] usb 9-1: unable to get target info from device [ 760.451310][T12094] usb 9-1: could not get target info (-71) [ 760.451465][T12094] usb 9-1: could not probe fw (-71) [ 760.504511][ T5735] usb 9-1: USB disconnect, device number 3 [ 760.517995][T12951] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2484'. [ 760.739737][T12644] usb 7-1: USB disconnect, device number 3 [ 766.589225][ T38] INFO: task kworker/u8:15:11017 blocked for more than 144 seconds. [ 766.589267][ T38] Tainted: G L syzkaller #0 [ 766.589282][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 766.589337][ T38] task:kworker/u8:15 state:D stack:23480 pid:11017 tgid:11017 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 766.589489][ T38] Workqueue: netns cleanup_net [ 766.589647][ T38] Call Trace: [ 766.589693][ T38] [ 766.589716][ T38] __schedule+0x16ec/0x5620 [ 766.589872][ T38] ? __pfx___schedule+0x10/0x10 [ 766.590094][ T38] ? schedule+0x90/0x360 [ 766.590172][ T38] schedule+0x164/0x360 [ 766.590250][ T38] rxrpc_destroy_all_calls+0x44e/0x570 [ 766.590423][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 766.590463][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 766.590547][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.590700][ T38] ? __timer_delete_sync+0x53e/0x610 [ 766.590836][ T38] rxrpc_exit_net+0x6f/0xc0 [ 766.590909][ T38] ops_undo_list+0x49f/0x940 [ 766.590952][ T38] ? rt_spin_unlock+0x180/0x200 [ 766.591023][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 766.591090][ T38] ? rt_spin_unlock+0x14f/0x200 [ 766.591174][ T38] ? idr_destroy+0x21b/0x2a0 [ 766.591243][ T38] ? rt_spin_unlock+0x160/0x200 [ 766.591287][ T38] cleanup_net+0x56e/0x800 [ 766.591371][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 766.591461][ T38] ? process_scheduled_works+0xa70/0x1860 [ 766.591522][ T38] ? process_scheduled_works+0xa70/0x1860 [ 766.591604][ T38] process_scheduled_works+0xb5d/0x1860 [ 766.591817][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 766.591852][ T38] ? assign_work+0x3d5/0x5e0 [ 766.591904][ T38] worker_thread+0xa53/0xfc0 [ 766.592741][ T38] kthread+0x388/0x470 [ 766.592816][ T38] ? __pfx_worker_thread+0x10/0x10 [ 766.592880][ T38] ? __pfx_kthread+0x10/0x10 [ 766.592963][ T38] ret_from_fork+0x514/0xb70 [ 766.593031][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 766.593100][ T38] ? __switch_to+0xc79/0x1410 [ 766.593192][ T38] ? __pfx_kthread+0x10/0x10 [ 766.593226][ T38] ret_from_fork_asm+0x1a/0x30 [ 766.593339][ T38] [ 766.593567][ T38] [ 766.593567][ T38] Showing all locks held in the system: [ 766.593631][ T38] 1 lock held by khungtaskd/38: [ 766.593646][ T38] #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 766.594142][ T38] 1 lock held by udevd/4968: [ 766.594196][ T38] #0: ffff88803745a480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 766.594417][ T38] 2 locks held by getty/5359: [ 766.594500][ T38] #0: ffff8880372db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 766.594661][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 766.673699][ T38] 4 locks held by syz-executor/5604: [ 766.673774][ T38] 2 locks held by syz-executor/5605: [ 766.673799][ T38] 8 locks held by kworker/0:2H/9771: [ 766.673874][ T38] 3 locks held by kworker/u8:15/11017: [ 766.673941][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 766.674071][ T38] #1: ffffc90005d97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 766.674247][ T38] #2: ffffffff8f340fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 766.674387][ T38] 1 lock held by syz-executor/12347: [ 766.674467][ T38] 5 locks held by kworker/0:2/12644: [ 766.674525][ T38] 3 locks held by syz.6.2508/13013: [ 766.674539][ T38] 1 lock held by syz.6.2508/13014: [ 766.674602][ T38] #0: ffff888031ba3490 (&substream->lock){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 766.674855][ T38] 2 locks held by syz.6.2508/13019: [ 766.674872][ T38] 3 locks held by syz.7.2509/13018: [ 766.674942][ T38] [ 766.674949][ T38] ============================================= [ 766.674949][ T38] [ 766.675024][ T38] NMI backtrace for cpu 1 [ 766.675051][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.675082][ T38] Tainted: [L]=SOFTLOCKUP [ 766.675090][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.675104][ T38] Call Trace: [ 766.675113][ T38] [ 766.675122][ T38] dump_stack_lvl+0xe8/0x150 [ 766.675150][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 766.675179][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 766.675217][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 766.675248][ T38] sys_info+0x135/0x170 [ 766.675271][ T38] watchdog+0xfd3/0x1030 [ 766.675307][ T38] ? watchdog+0x1c9/0x1030 [ 766.675339][ T38] kthread+0x388/0x470 [ 766.675372][ T38] ? __pfx_watchdog+0x10/0x10 [ 766.675395][ T38] ? __pfx_kthread+0x10/0x10 [ 766.675427][ T38] ret_from_fork+0x514/0xb70 [ 766.675456][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 766.675480][ T38] ? __switch_to+0xc79/0x1410 [ 766.675518][ T38] ? __pfx_kthread+0x10/0x10 [ 766.675550][ T38] ret_from_fork_asm+0x1a/0x30 [ 766.675594][ T38] [ 766.675604][ T38] Sending NMI from CPU 1 to CPUs 0: [ 766.675635][ C0] NMI backtrace for cpu 0 [ 766.675654][ C0] CPU: 0 UID: 0 PID: 13014 Comm: syz.6.2508 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.675681][ C0] Tainted: [L]=SOFTLOCKUP [ 766.675687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.675705][ C0] RIP: 0010:preempt_count_add+0x6d/0x190 [ 766.675730][ C0] Code: c7 c0 e0 23 75 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e5 00 00 00 83 3d bf a7 e1 17 00 75 11 65 8b 05 06 54 d6 10 0f b6 c0 <3d> f5 00 00 00 73 5d 65 8b 05 f5 53 d6 10 25 ff ff ff 7f 39 f8 75 [ 766.675759][ C0] RSP: 0018:ffffc9000405f6d0 EFLAGS: 00000046 [ 766.675818][ C0] RAX: 0000000000000002 RBX: ffff88802dd16718 RCX: ffffffff99752303 [ 766.675832][ C0] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000001 [ 766.675843][ C0] RBP: ffffc9000405f950 R08: ffffc9000405f8cf R09: 0000000000000000 [ 766.675856][ C0] R10: ffffc9000405f860 R11: fffff5200080bf1a R12: dffffc0000000000 [ 766.675870][ C0] R13: ffffc9000405f888 R14: ffff88802dd15c40 R15: dffffc0000000000 [ 766.675885][ C0] FS: 00007f256738e6c0(0000) GS:ffff888126183000(0000) knlGS:0000000000000000 [ 766.675901][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.675914][ C0] CR2: 0000200000001000 CR3: 0000000040ea0000 CR4: 00000000003526f0 [ 766.675931][ C0] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 766.675942][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 766.675955][ C0] Call Trace: [ 766.675962][ C0] [ 766.675970][ C0] _raw_spin_lock+0x12/0x40 [ 766.675998][ C0] rtlock_slowlock_locked+0x1ec/0x3c80 [ 766.676026][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 766.676099][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 766.676118][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.676140][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.676159][ C0] ? lock_acquire+0x106/0x350 [ 766.676185][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 766.676217][ C0] ? rcu_is_watching+0x15/0xb0 [ 766.676291][ C0] rt_spin_lock+0x165/0x400 [ 766.676315][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 766.676335][ C0] ? __pfx_process_timeout+0x10/0x10 [ 766.676378][ C0] ? rt_spin_unlock+0x14f/0x200 [ 766.676402][ C0] remove_wait_queue+0x23/0x110 [ 766.676433][ C0] snd_rawmidi_write+0x3ef/0xc10 [ 766.676506][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 766.676533][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 766.676583][ C0] ? __import_iovec+0x40e/0x7e0 [ 766.676672][ C0] ? rw_verify_area+0x25b/0x4e0 [ 766.676723][ C0] vfs_writev+0x4c6/0x9a0 [ 766.676769][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 766.676799][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 766.676833][ C0] ? __fget_files+0x2a/0x420 [ 766.676853][ C0] ? __fget_files+0x3a6/0x420 [ 766.676869][ C0] ? __fget_files+0x2a/0x420 [ 766.676890][ C0] do_writev+0x15a/0x2e0 [ 766.676919][ C0] ? __pfx_do_writev+0x10/0x10 [ 766.676954][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.676992][ C0] do_syscall_64+0x174/0x580 [ 766.677065][ C0] ? trace_irq_disable+0x3b/0x140 [ 766.677128][ C0] ? clear_bhb_loop+0x40/0x90 [ 766.677150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.677168][ C0] RIP: 0033:0x7f256913ce59 [ 766.677190][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.677206][ C0] RSP: 002b:00007f256738e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 766.677226][ C0] RAX: ffffffffffffffda RBX: 00007f25693b5fa0 RCX: 00007f256913ce59 [ 766.677239][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 766.677251][ C0] RBP: 00007f25691d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 766.677263][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.677274][ C0] R13: 00007f25693b6038 R14: 00007f25693b5fa0 R15: 00007fffda2942a8 [ 766.677298][ C0] [ 766.768647][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 766.768679][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.768736][ T38] Tainted: [L]=SOFTLOCKUP [ 766.768750][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.768772][ T38] Call Trace: [ 766.768789][ T38] [ 766.768805][ T38] vpanic+0x56c/0xa60 [ 766.768849][ T38] ? __pfx_vpanic+0x10/0x10 [ 766.768889][ T38] panic+0xc5/0xd0 [ 766.768916][ T38] ? __pfx_panic+0x10/0x10 [ 766.768946][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 766.768988][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 766.769020][ T38] watchdog+0x102c/0x1030 [ 766.769056][ T38] ? watchdog+0x1c9/0x1030 [ 766.769088][ T38] kthread+0x388/0x470 [ 766.769121][ T38] ? __pfx_watchdog+0x10/0x10 [ 766.769154][ T38] ? __pfx_kthread+0x10/0x10 [ 766.769185][ T38] ret_from_fork+0x514/0xb70 [ 766.769216][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 766.769241][ T38] ? __switch_to+0xc79/0x1410 [ 766.769278][ T38] ? __pfx_kthread+0x10/0x10 [ 766.769311][ T38] ret_from_fork_asm+0x1a/0x30 [ 766.769357][ T38] [ 766.769959][ T38] Kernel Offset: disabled