last executing test programs: 17m1.338875655s ago: executing program 2 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f00000000c0)={0xfd}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r3, &(0x7f0000000180)=""/4151, 0x1037, 0x40) 17m0.093353084s ago: executing program 1 (id=1255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c921}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16m58.658195832s ago: executing program 2 (id=1257): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008c40)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 16m56.438572431s ago: executing program 1 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) 16m55.892710122s ago: executing program 2 (id=1264): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m54.369966559s ago: executing program 1 (id=1265): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) ioperm(0x4, 0x8, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) close(r1) sendfile(r0, r0, 0x0, 0x7) 16m54.36810757s ago: executing program 2 (id=1266): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 16m52.319122716s ago: executing program 2 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 16m52.318212662s ago: executing program 1 (id=1269): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) r3 = syz_open_dev$loop(&(0x7f0000000200), 0xff, 0x740) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = open(&(0x7f0000000000)='./file0\x00', 0x22740, 0x9b) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 16m50.345186346s ago: executing program 2 (id=1275): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)=@chain) socket$inet_sctp(0x2, 0x1, 0x84) 16m48.643921309s ago: executing program 1 (id=1278): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0xfffffffffffffffb) 16m45.643885794s ago: executing program 1 (id=1283): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r2 = epoll_create(0x2) r3 = socket(0x1, 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000000}) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000140)={r2, r3}) 16m30.033230021s ago: executing program 32 (id=1275): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)=@chain) socket$inet_sctp(0x2, 0x1, 0x84) 16m29.344167915s ago: executing program 33 (id=1283): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r2 = epoll_create(0x2) r3 = socket(0x1, 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000000}) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000140)={r2, r3}) 14m47.232576331s ago: executing program 3 (id=1425): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x42200) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) syz_clone(0x10028100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="90f5eca62000f3c12c595e1661b508ef45753900facbb966d98b186e1de896ba304a3e4cc4df4e0d000000008000003f667722b871b703e45b7f032ba7dd4a4af9cb17") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 14m46.982052796s ago: executing program 3 (id=1427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x891d, 0x0) 14m45.634985058s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b26000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000300)={&(0x7f00000002c0)=""/53, 0x35}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000280)=0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x10, 0x27, 0x1, 0x0, 0x0, "", [@generic]}, 0x10}], 0x1}, 0x0) r5 = socket(0x2, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 14m44.207860894s ago: executing program 3 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) syz_open_pts(r5, 0x200) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6e9f) 14m41.677003398s ago: executing program 3 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, 0x0, 0x48c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 14m41.508365201s ago: executing program 3 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x80000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 14m25.768534433s ago: executing program 34 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x80000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 12m48.34821746s ago: executing program 0 (id=1557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0xc33) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 12m47.95144849s ago: executing program 0 (id=1559): syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000075f84c1071042703a461d10000012b90d4d77e10fe5c000345"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x2008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r3, &(0x7f0000000140)="1e1508", 0x3) 12m43.787876323s ago: executing program 0 (id=1562): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x8100000b, 0xfffffffffffffffd) 12m41.613402669s ago: executing program 0 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, 0x0, 0x140) r2 = getpid() futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[], 0x90) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x84) 12m40.100871123s ago: executing program 0 (id=1566): syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) getdents(r6, &(0x7f0000000000)=""/42, 0x2a) getdents64(r6, &(0x7f0000000080)=""/147, 0x93) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) pwritev2(r7, 0x0, 0x0, 0xc15, 0xffffff80, 0x1e) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)='./file0\x00', 0x40, 0x20101, 0x23456}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x41b3, 0x3, 0x1000000004, 0x1, r2}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r8, 0x3, 0x5001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r9) sendmsg$NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 12m38.599540115s ago: executing program 0 (id=1567): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 12m23.342582194s ago: executing program 35 (id=1567): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 11m32.017380243s ago: executing program 8 (id=1577): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) writev(r6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r5}) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x14, 0xf9, 0x8, 0x5, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d2, 0xa6, 0x3, 0xd7, 0x1, 0x60000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x28}}, 0x80) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x49a080, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0x1000, 0x2, 0xc0000000, 0x4, 0x0, "4ae23ae17df2e98cd88f00", 0x0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffe5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) r9 = io_uring_setup(0x9, &(0x7f00000001c0)={0x0, 0xc2c1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m29.616947392s ago: executing program 8 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000b000000002e392421"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = msgget$private(0x0, 0x3ac) msgsnd(r5, &(0x7f0000000000)=ANY=[], 0x5d, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x1, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x9, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x13c) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000480)=""/69) syz_extract_tcp_res(0x0, 0x6, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, 0x0, 0x0) eventfd(0xfffffff9) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 11m25.687362711s ago: executing program 8 (id=1602): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x6, 0x2, @thr={&(0x7f0000000740)="e0e2c865a9a427001469bc4876fd1fa2d199b8cd7626d3c46df5f3f67e45d0879db084978b1ed6552f7ae0473dd1acd965223fe5eace9c5c7c51a6acad1e7072973684a09ca4a9fcc684a193d8a8415f75d7b162f330d537de93fe66e80bd14138fe26ec5602b4726bbcf1ab5d859ffcacacd7e9a0e6031e080c1dedd48dc01318793d55d7a4435a6b9d9267884bf796cda5c098987f38523acee4efa6af1f787446e38146a89fc42b05a8fbf6c5f37117890898ae8b88a3abe70ad532be47bc6bd2f67f7dc2c15c7d73e0d9f77562d36bc7c7d1fcf2c4ebe5400356c9", &(0x7f0000000840)="3526b365af22afc86cf76e67eade1d19ce252f318e5ded117d687f3afaeef2ac0077c022425908106ec0f91bab0fe1247dfe3789d9c9d82db0dd84c2a11ffb84c9f165b3ce6b69a3b2fbe3bead6080d5038b21e2d1"}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x8, 0x120052, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0}) 11m19.224195202s ago: executing program 8 (id=1608): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000140)={r11, 0xe0d, 0x4, 0x7, 0x2, 0x8001}, 0x14) 11m14.66817544s ago: executing program 8 (id=1614): syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffa, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x8, 0x14}, 0x18) fcntl$getown(r0, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r4, 0x0, 0x22) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x5}}, 0x54) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_io_uring_setup(0x3b1c, &(0x7f0000000140)={0x0, 0xa68e, 0x40, 0x3, 0x27d}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x52, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1318}}) 10m59.268880624s ago: executing program 36 (id=1614): syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffa, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x8, 0x14}, 0x18) fcntl$getown(r0, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r4, 0x0, 0x22) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x5}}, 0x54) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_io_uring_setup(0x3b1c, &(0x7f0000000140)={0x0, 0xa68e, 0x40, 0x3, 0x27d}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x52, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1318}}) 24.917256186s ago: executing program 9 (id=4648): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c0}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) readv(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.745415872s ago: executing program 4 (id=4656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 20.410474141s ago: executing program 9 (id=4659): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20) 20.252263951s ago: executing program 4 (id=4660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.946395317s ago: executing program 9 (id=4663): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 18.630337093s ago: executing program 9 (id=4666): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(0x0, 0x0, 0x10) 18.496268634s ago: executing program 4 (id=4669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 15.408912656s ago: executing program 7 (id=4676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) 15.298103431s ago: executing program 4 (id=4678): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 13.877011063s ago: executing program 7 (id=4681): r0 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 13.768124458s ago: executing program 4 (id=4682): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000a0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020) 13.094851378s ago: executing program 7 (id=4686): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 10.942899683s ago: executing program 7 (id=4688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 8.235460036s ago: executing program 6 (id=4692): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0xfd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6f, 0x3, 0xf}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x501}}) 6.918305617s ago: executing program 6 (id=4695): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x8140aecc, &(0x7f0000000080)={0x2, 0x0, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9386, 0x0) ioctl$TCGETA(r1, 0x5405, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000002c0)=ANY=[]) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 6.691394175s ago: executing program 9 (id=4697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) 6.492734639s ago: executing program 6 (id=4699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.680483639s ago: executing program 9 (id=4700): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.677754959s ago: executing program 6 (id=4701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f00000013c0)=ANY=[], 0x2, 0x0) 4.558134625s ago: executing program 5 (id=4702): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x250}}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.43815974s ago: executing program 5 (id=4703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r7, r7, 0x998d, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6(0xa, 0x1, 0x8010000000000084) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x2000000000000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x2e, 0x61, 0x2e]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) 4.357257147s ago: executing program 5 (id=4704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x401}], 0x1) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.226199485s ago: executing program 5 (id=4705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) flock(0xffffffffffffffff, 0x4) pread64(r0, 0x0, 0x0, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.155618436s ago: executing program 5 (id=4706): r0 = socket$inet6(0xa, 0x802, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}, @md5sig={0x13, 0x12, "6ff10ff662227a1ee386aead7cbb04f5"}]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'virt_wifi0\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x6]}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c767056898119827bf698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000ff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca6"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x40047452, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'vlan1\x00'}}) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="1c49bcdb344efe4bc34547c67cae96dbbb45e9a18d4e83688a8230beab54ad3282c4eb0d05c5dcae2bfa1bd786252a5772a963094468ffaaf16d1a053bcf5323a9e9bda42fd8278924fcd249b98ad32616041f6ce47b4302000ac06ecd77d564f7e2060b3c64c35c4a013dff2a85a25053d00dd491cb2df28ff090c282191acebdea8a2fe9d84c4fce5a5f20da4f42695e0c2221c82f90eca401f67dc778fb11", 0xa0}], 0x1, 0x0, 0x0, 0x48060}], 0x1, 0x200000d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.992496017s ago: executing program 6 (id=4707): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$KDSIGACCEPT(r3, 0x80047456, 0x100000001ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) 2.646112067s ago: executing program 7 (id=4708): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) 2.605249412s ago: executing program 4 (id=4709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.335683647s ago: executing program 5 (id=4710): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) setreuid(0xee01, 0xee01) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 35.667239ms ago: executing program 6 (id=4711): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)='<', 0x1}], 0x2) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 0s ago: executing program 7 (id=4712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) kernel console output (not intermixed with test programs): CSI ioctl, please convert it to SG_IO [ 956.677796][T13842] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 956.682175][T13829] dvb-usb: bulk message failed: -22 (3/0) [ 956.682204][T13829] cxusb: i2c wr: len=78 is too big! [ 956.682204][T13829] [ 956.752890][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2334'. [ 956.772395][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.963929][ T5862] usb 5-1: selecting invalid altsetting 6 [ 956.963955][ T5862] usb 5-1: digital interface selection failed (-22) [ 956.963973][ T5862] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 956.974717][ T5862] usb 5-1: setting power OFF [ 956.975055][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 956.975078][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 956.975094][ T5862] (NULL device *): no alternate interface [ 957.241371][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 957.245116][T13855] netlink: 'syz.9.2339': attribute type 1 has an invalid length. [ 957.245139][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2339'. [ 957.270930][ T5862] usb 5-1: USB disconnect, device number 16 [ 957.417963][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 957.566917][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 957.585289][ T5886] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 957.588014][ T5886] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 957.588036][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.588050][ T5886] usb 7-1: Product: syz [ 957.588060][ T5886] usb 7-1: Manufacturer: syz [ 957.588071][ T5886] usb 7-1: SerialNumber: syz [ 957.606849][ T5886] usb 7-1: config 0 descriptor?? [ 957.658682][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 957.658734][ T5886] usb 7-1: setting power ON [ 957.658754][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 957.692710][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 957.693511][ T5886] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 957.693570][ T5886] usb 7-1: media controller created [ 957.794937][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.820594][T13869] xt_bpf: check failed: parse error [ 957.842537][T13851] dvb-usb: bulk message failed: -22 (3/0) [ 957.842560][T13851] cxusb: i2c wr: len=79 is too big! [ 957.842560][T13851] [ 957.880755][ T5886] usb 7-1: selecting invalid altsetting 6 [ 957.880779][ T5886] usb 7-1: digital interface selection failed (-22) [ 957.880833][ T5886] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 957.883108][ T5886] usb 7-1: setting power OFF [ 957.883131][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 957.883149][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 957.883163][ T5886] (NULL device *): no alternate interface [ 957.938873][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 957.954535][ T5886] usb 7-1: USB disconnect, device number 4 [ 958.075316][ T7448] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 958.419316][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.556079][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.685441][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 958.693200][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 959.046813][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.224102][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.275058][ T5799] Bluetooth: hci1: hardware error 0x00 [ 959.295516][ T7448] usb 8-1: Using ep0 maxpacket: 32 [ 959.380818][ T7448] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.380853][ T7448] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.383162][ T7448] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 959.383192][ T7448] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 959.383214][ T7448] usb 8-1: Product: syz [ 959.383231][ T7448] usb 8-1: Manufacturer: syz [ 959.492455][ T7448] hub 8-1:4.0: USB hub found [ 959.517945][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.707701][ T7448] hub 8-1:4.0: config failed, hub has too many ports! (err -19) [ 960.037251][ T7471] usb 8-1: USB disconnect, device number 10 [ 960.320125][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.252221][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.929607][ T5799] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 965.585518][ T7448] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 966.555258][ T7448] usb 7-1: Using ep0 maxpacket: 16 [ 966.557854][ T7448] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.557915][ T7448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.557946][ T7448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.557969][ T7448] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 966.557993][ T7448] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.559506][ T7448] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.559534][ T7448] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.559556][ T7448] usb 7-1: Manufacturer: syz [ 966.706076][ T7448] usb 7-1: config 0 descriptor?? [ 967.154350][ T7448] rc_core: IR keymap rc-hauppauge not found [ 967.154373][ T7448] Registered IR keymap rc-empty [ 967.155822][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.175489][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.209397][ T7448] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 967.259045][ T7448] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 967.305670][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.325741][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.345887][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.365591][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.385382][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.405470][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.425402][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.449550][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.465403][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.485870][ T7448] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 967.528303][ T7448] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 967.528332][ T7448] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 967.601720][ T7448] usb 7-1: USB disconnect, device number 5 [ 969.026308][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2400'. [ 969.027447][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2400'. [ 969.095375][ T7447] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 969.265301][ T7447] usb 10-1: Using ep0 maxpacket: 32 [ 969.267917][ T7447] usb 10-1: config 1 has an invalid interface number: 236 but max is 0 [ 969.267946][ T7447] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.267968][ T7447] usb 10-1: config 1 has no interface number 0 [ 969.268017][ T7447] usb 10-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 969.268046][ T7447] usb 10-1: config 1 interface 236 has no altsetting 0 [ 969.269668][ T7447] usb 10-1: config 1 has an invalid interface number: 236 but max is 0 [ 969.269693][ T7447] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.269714][ T7447] usb 10-1: config 1 has no interface number 0 [ 969.269762][ T7447] usb 10-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 969.269791][ T7447] usb 10-1: config 1 interface 236 has no altsetting 0 [ 969.273215][ T7447] usb 10-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 969.273245][ T7447] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.273267][ T7447] usb 10-1: Product: syz [ 969.273282][ T7447] usb 10-1: Manufacturer: syz [ 969.273297][ T7447] usb 10-1: SerialNumber: syz [ 969.516315][ T7447] ti_usb_3410_5052 10-1:1.236: required endpoints missing [ 970.241886][ T5799] Bluetooth: hci7: unexpected subevent 0x01 length: 5 < 18 [ 970.462217][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 970.468864][ T5862] usb 10-1: USB disconnect, device number 5 [ 971.066610][T14056] sctp: [Deprecated]: syz.6.2417 (pid 14056) Use of int in max_burst socket option. [ 971.066610][T14056] Use struct sctp_assoc_value instead [ 971.495383][ T5862] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 971.649687][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 971.649723][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.649926][ T5862] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.649972][ T5862] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 971.649997][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.660715][ T5862] usb 10-1: config 0 descriptor?? [ 971.695381][ T7471] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 971.847709][ T7471] usb 8-1: Using ep0 maxpacket: 8 [ 971.853666][ T7471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.854569][ T7471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.854598][ T7471] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 971.854644][ T7471] usb 8-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 971.859962][ T7471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.974720][ T7471] usb 8-1: config 0 descriptor?? [ 972.252167][ T5862] steelseries 0003:1038:1410.000C: not enough fields in HID_OUTPUT_REPORT 0 [ 972.395125][ T5862] usb 10-1: USB disconnect, device number 6 [ 972.509579][ T7471] nzxt-kraken2 0003:1E71:170E.000D: ignoring exceeding usage max [ 972.573180][ T7471] nzxt-kraken2 0003:1E71:170E.000D: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.7-1/input0 [ 972.851794][ T7471] usb 8-1: USB disconnect, device number 11 [ 973.778117][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.855313][ T7447] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 974.005535][ T7447] usb 7-1: Using ep0 maxpacket: 8 [ 974.007887][ T7447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 974.007922][ T7447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.007946][ T7447] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 974.007971][ T7447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 974.007998][ T7447] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 974.008040][ T7447] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 974.008063][ T7447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.113605][ T7447] usb 7-1: config 0 descriptor?? [ 974.115142][T14101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 974.315366][ T5862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 974.397222][ T5117] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 974.475340][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 974.477819][ T5862] usb 5-1: config 0 has no interfaces? [ 974.477857][ T5862] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 974.477882][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.528343][ T5862] usb 5-1: config 0 descriptor?? [ 974.589834][ T5886] usb 7-1: USB disconnect, device number 6 [ 974.597758][ T5799] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 974.757055][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.765373][ T7471] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 974.788117][ T5862] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 974.836421][T11203] usb 5-1: USB disconnect, device number 17 [ 974.941812][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.941908][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.941933][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 974.941978][ T5862] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 974.942002][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.943006][ T7471] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 974.943040][ T7471] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 974.943061][ T7471] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 974.943081][ T7471] usb 10-1: config 220 has no interface number 2 [ 974.943150][ T7471] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 974.943178][ T7471] usb 10-1: config 220 interface 0 has no altsetting 0 [ 974.943197][ T7471] usb 10-1: config 220 interface 76 has no altsetting 0 [ 974.943215][ T7471] usb 10-1: config 220 interface 1 has no altsetting 0 [ 974.965506][ T7471] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 974.965529][ T7471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.965543][ T7471] usb 10-1: Product: syz [ 974.965554][ T7471] usb 10-1: Manufacturer: syz [ 974.965564][ T7471] usb 10-1: SerialNumber: syz [ 975.110406][ T5862] usb 8-1: config 0 descriptor?? [ 975.420435][ T7471] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 975.421103][ T7471] uvcvideo 10-1:220.0: No valid video chain found. [ 975.422027][ T7471] usb 10-1: selecting invalid altsetting 0 [ 975.501458][ T7471] usb 10-1: selecting invalid altsetting 0 [ 975.501594][ T7471] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 975.525974][ T7471] usb 10-1: USB disconnect, device number 7 [ 975.647907][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.712528][ T5862] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x2 [ 975.712571][ T5862] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x6 [ 976.361779][ T5862] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 976.434326][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.735597][ T7447] usb 8-1: USB disconnect, device number 12 [ 976.959125][T14132] fido_id[14132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 982.725617][T14188] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 982.725678][T14188] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 982.725731][T14188] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 982.725782][T14188] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.725834][T14188] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 982.725890][T14188] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 982.725945][T14188] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 982.726642][T14188] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 982.726698][T14188] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 982.726752][T14188] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 982.726803][T14188] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 982.726857][T14188] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.726909][T14188] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.726960][T14188] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 982.727066][T14188] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 982.727117][T14188] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 982.727168][T14188] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 982.727219][T14188] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 982.727372][T14188] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 982.727467][T14188] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 982.727518][T14188] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 982.727614][T14188] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 982.727664][T14188] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 983.446011][ T7471] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 983.825357][ T7471] usb 8-1: Using ep0 maxpacket: 32 [ 983.828491][ T7471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 983.828525][ T7471] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 984.480832][ T7471] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 984.480865][ T7471] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 984.480888][ T7471] usb 8-1: Product: syz [ 984.480904][ T7471] usb 8-1: Manufacturer: syz [ 984.480920][ T7471] usb 8-1: SerialNumber: syz [ 984.507743][ T7471] usb 8-1: config 0 descriptor?? [ 984.509084][T14197] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 984.962456][ T7471] usb 8-1: USB disconnect, device number 13 [ 988.019295][T14232] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2488'. [ 988.019325][T14232] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2488'. [ 989.435578][T14239] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 989.698658][T14246] team_slave_0: entered promiscuous mode [ 989.698746][T14246] team_slave_1: entered promiscuous mode [ 989.724716][T14246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 990.668432][T14271] mkiss: ax0: crc mode is auto. [ 990.979472][T14279] TCP: TCP_TX_DELAY enabled [ 991.925351][ T10] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 991.926088][ T5862] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 992.090288][ T10] usb 10-1: config 0 has an invalid interface number: 32 but max is 0 [ 992.090324][ T10] usb 10-1: config 0 has no interface number 0 [ 992.090376][ T10] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 992.090404][ T10] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.090445][ T10] usb 10-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 992.090470][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.223163][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.269410][ T10] usb 10-1: config 0 descriptor?? [ 993.104543][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.127700][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.127741][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 993.130733][ T5862] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 993.130762][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.130886][ T5862] usb 5-1: Product: syz [ 993.130902][ T5862] usb 5-1: Manufacturer: syz [ 993.130916][ T5862] usb 5-1: SerialNumber: syz [ 993.238654][ T7471] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 993.241229][ T5862] usb 5-1: config 0 descriptor?? [ 993.278368][ T5862] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 993.308241][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.312696][ T5862] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 993.312759][ T5862] usb 5-1: media controller created [ 993.624899][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.651406][ T7471] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.651455][ T7471] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 993.651480][ T7471] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.145500][ T7471] usb 7-1: config 0 descriptor?? [ 994.467212][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.517513][ T10] uclogic 0003:256C:006E.000F: interface is invalid, ignoring [ 994.575388][ T10] usb 10-1: USB disconnect, device number 8 [ 994.827706][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.985465][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 995.468875][ T7448] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 995.707406][ T7448] usb 8-1: Using ep0 maxpacket: 8 [ 995.734057][ T7448] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 995.734098][ T7448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.734120][ T7448] usb 8-1: Product: syz [ 995.734136][ T7448] usb 8-1: Manufacturer: syz [ 995.734152][ T7448] usb 8-1: SerialNumber: syz [ 995.795599][ T7448] usb 8-1: config 0 descriptor?? [ 995.847653][ T7448] gspca_main: sq930x-2.14.0 probing 2770:930c [ 995.976944][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.003939][ T7471] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 996.188307][ T7471] lenovo 0003:17EF:6047.0010: Failed to switch F7/9/11 mode: -71 [ 996.194207][ T7471] lenovo 0003:17EF:6047.0010: Failed to switch middle button: -71 [ 996.196703][ T7471] lenovo 0003:17EF:6047.0010: Fn-lock setting failed: -71 [ 996.197796][ T7471] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71 [ 996.234887][ T7471] usb 7-1: USB disconnect, device number 7 [ 996.302922][ T5862] DVB: Unable to find symbol tda10046_attach() [ 996.302940][ T5862] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 996.302954][ T5862] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 996.313208][ T5862] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 996.335626][ T5862] usb 5-1: USB disconnect, device number 18 [ 996.590939][ T7448] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 996.591069][ T7448] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 996.614184][ T7448] usb 8-1: USB disconnect, device number 14 [ 996.680332][T14353] fido_id[14353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 998.441014][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.441090][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.625566][ T7448] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 998.794798][ T7448] usb 10-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 998.794830][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.794852][ T7448] usb 10-1: Product: syz [ 998.794867][ T7448] usb 10-1: Manufacturer: syz [ 998.794882][ T7448] usb 10-1: SerialNumber: syz [ 998.846417][ T7448] usb 10-1: config 0 descriptor?? [ 998.874724][ T7448] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 999.159635][T14415] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2567'. [ 999.301639][ T7448] input: sonixb as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 999.537355][ T7447] usb 10-1: USB disconnect, device number 9 [ 1000.775527][ T7471] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1000.928675][ T7471] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.928736][ T7471] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.928764][ T7471] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.928788][ T7471] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1000.928823][ T7471] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1000.928847][ T7471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.212441][ T7471] usb 8-1: config 0 descriptor?? [ 1002.233248][ T7471] kye 0003:0458:5015.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1002.234588][ T7471] kye 0003:0458:5015.0011: unknown main item tag 0x1 [ 1002.274213][ T7471] kye 0003:0458:5015.0011: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.7-1/input0 [ 1002.274246][ T7471] kye 0003:0458:5015.0011: tablet-enabling feature report not found [ 1002.274260][ T7471] kye 0003:0458:5015.0011: tablet enabling failed [ 1002.455905][ T7471] usb 8-1: USB disconnect, device number 15 [ 1002.557155][T14458] fido_id[14458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1002.605324][ T7448] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1002.777990][ T7448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.778039][ T7448] usb 7-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 1002.778063][ T7448] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.868772][ T7448] usb 7-1: config 0 descriptor?? [ 1004.226855][ T7450] usb 7-1: USB disconnect, device number 8 [ 1004.295047][T14480] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1004.525591][T14487] [U]  [ 1007.009918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.482628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.026039][T14557] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2627'. [ 1008.109017][ T5886] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1008.273322][ T5886] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1008.273353][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.273373][ T5886] usb 8-1: Product: syz [ 1008.273388][ T5886] usb 8-1: Manufacturer: syz [ 1008.273403][ T5886] usb 8-1: SerialNumber: syz [ 1008.283095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.347416][ T5886] usb 8-1: config 0 descriptor?? [ 1008.621314][ T5886] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1009.038441][ T5886] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1009.061174][ T5886] usb 8-1: USB disconnect, device number 16 [ 1009.406557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.991751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.024593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.042918][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1011.042946][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1011.042975][T14591] netlink: 'syz.5.2639': attribute type 14 has an invalid length. [ 1011.042990][T14591] netlink: 'syz.5.2639': attribute type 13 has an invalid length. [ 1011.213699][T14590] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1014.186968][T14616] netlink: 19 bytes leftover after parsing attributes in process `syz.9.2650'. [ 1015.610358][T14644] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2663'. [ 1015.610427][T14644] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2663'. [ 1015.731463][T14650] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1017.935651][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2672'. [ 1018.195362][ T7471] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1018.234722][T14677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.275354][T11203] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1018.350299][ T7471] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.350337][ T7471] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1018.350373][ T7471] usb 8-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1018.350397][ T7471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.361365][ T7471] usb 8-1: config 0 descriptor?? [ 1018.425474][T11203] usb 5-1: Using ep0 maxpacket: 8 [ 1018.434311][T11203] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1018.434421][T11203] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1018.434453][T11203] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.434490][T11203] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1018.434515][T11203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.496393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.498529][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1018.651644][T11203] usb 5-1: config 0 descriptor?? [ 1018.655428][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1018.658373][ T10] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1018.658400][ T10] usb 7-1: config 0 has no interface number 0 [ 1018.658565][ T10] usb 7-1: config 0 interface 255 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.658597][ T10] usb 7-1: config 0 interface 255 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.658627][ T10] usb 7-1: config 0 interface 255 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1018.658661][ T10] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1018.658700][ T10] usb 7-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1018.658724][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.679563][ T10] usb 7-1: config 0 descriptor?? [ 1018.866434][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867165][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867197][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867221][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867245][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867331][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.867357][ T7471] viewsonic 0003:0543:E621.0013: unknown main item tag 0x0 [ 1018.965446][ T7471] viewsonic 0003:0543:E621.0013: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.7-1/input0 [ 1019.032483][ T7471] usb 8-1: USB disconnect, device number 17 [ 1019.214747][ T10] uclogic 0003:28BD:1903.0014: interface is invalid, ignoring [ 1019.313156][T14682] fido_id[14682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1019.319095][T11203] gt683r_led 0003:1770:FF00.0015: item fetching failed at offset 3/5 [ 1019.319941][T11203] gt683r_led 0003:1770:FF00.0015: hid parsing failed [ 1019.320078][T11203] gt683r_led 0003:1770:FF00.0015: probe with driver gt683r_led failed with error -22 [ 1019.411525][ T10] usb 7-1: USB disconnect, device number 9 [ 1019.511492][ T7448] usb 5-1: USB disconnect, device number 19 [ 1019.595400][T11203] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1019.747840][T11203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.747884][T11203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.747924][T11203] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1019.747948][T11203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.769093][T11203] usb 10-1: config 0 descriptor?? [ 1020.002675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.146175][ T38] audit: type=1326 audit(1759866970.053:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.150362][ T38] audit: type=1326 audit(1759866970.053:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.150421][ T38] audit: type=1326 audit(1759866970.053:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.150470][ T38] audit: type=1326 audit(1759866970.053:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.150521][ T38] audit: type=1326 audit(1759866970.053:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.153870][ T38] audit: type=1326 audit(1759866970.053:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.154809][ T38] audit: type=1326 audit(1759866970.053:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14689 comm="syz.6.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa401eceec9 code=0x7ffc0000 [ 1020.340955][T11203] bigben 0003:146B:0902.0016: unexpected rdesc, please submit for review [ 1020.411858][T11203] bigben 0003:146B:0902.0016: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.9-1/input0 [ 1020.411898][T11203] bigben 0003:146B:0902.0016: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1020.411920][T11203] bigben 0003:146B:0902.0016: no output report found [ 1020.554372][ T10] usb 10-1: USB disconnect, device number 10 [ 1020.646896][T14697] fido_id[14697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1021.192264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.864799][T11203] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1021.867488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.243266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.672686][T14721] nbd: must specify a size in bytes for the device [ 1022.717881][T11203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.717917][T11203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.717941][T11203] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1022.717988][T11203] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.718011][T11203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.779090][T11203] usb 7-1: config 0 descriptor?? [ 1023.202038][T11203] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 1023.204200][T11203] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x5 [ 1023.204238][T11203] plantronics 0003:047F:FFFF.0017: item fetching failed at offset 13/15 [ 1023.205077][T11203] plantronics 0003:047F:FFFF.0017: parse failed [ 1023.250449][T11203] plantronics 0003:047F:FFFF.0017: probe with driver plantronics failed with error -22 [ 1023.319441][ T38] audit: type=1326 audit(1759866973.223:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14738 comm="syz.9.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbedfeec9 code=0x7ffc0000 [ 1023.320061][ T38] audit: type=1326 audit(1759866973.223:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14738 comm="syz.9.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbedfeec9 code=0x7ffc0000 [ 1023.320486][ T38] audit: type=1326 audit(1759866973.223:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14738 comm="syz.9.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f7fbedfeec9 code=0x7ffc0000 [ 1023.516346][ T7450] usb 7-1: USB disconnect, device number 10 [ 1024.143845][T14755] sch_fq: defrate 4294967295 ignored. [ 1030.911157][T14850] xt_socket: unknown flags 0x40 [ 1030.915543][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1031.511041][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.511092][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1031.511117][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.557565][ T10] usb 7-1: config 0 descriptor?? [ 1032.021290][ T10] wacom 0003:056A:00C6.0018: unknown main item tag 0x0 [ 1032.062480][ T10] wacom 0003:056A:00C6.0018: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.6-1/input0 [ 1032.217540][ T10] usb 7-1: USB disconnect, device number 11 [ 1032.386263][T14860] fido_id[14860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1032.760465][T14875] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1034.085900][T14890] genirq: Flags mismatch irq 1. 00202000 (pcmmio) vs. 00202080 (i8042) [ 1039.027828][ T7450] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1039.185328][ T7450] usb 10-1: Using ep0 maxpacket: 16 [ 1039.190409][ T7450] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 1039.190438][ T7450] usb 10-1: config 0 has no interface number 0 [ 1039.190472][ T7450] usb 10-1: config 0 interface 48 has no altsetting 0 [ 1039.195020][ T7450] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1039.195050][ T7450] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.195072][ T7450] usb 10-1: Product: syz [ 1039.195087][ T7450] usb 10-1: Manufacturer: syz [ 1039.195103][ T7450] usb 10-1: SerialNumber: syz [ 1039.263964][ T7450] usb 10-1: config 0 descriptor?? [ 1039.581204][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.581872][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.738285][ T7448] usb 10-1: USB disconnect, device number 11 [ 1040.628243][T15017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'. [ 1041.095397][T11223] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1041.245328][T11223] usb 5-1: Using ep0 maxpacket: 8 [ 1041.248186][T11223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1041.248216][T11223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.294681][T11223] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1041.294701][T11223] pvrusb2: ********** [ 1041.294708][T11223] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1041.294721][T11223] pvrusb2: Important functionality might not be entirely working. [ 1041.294731][T11223] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1041.294744][T11223] pvrusb2: ********** [ 1041.534154][ T2369] pvrusb2: Invalid write control endpoint [ 1042.905406][T11203] usb 5-1: USB disconnect, device number 20 [ 1043.248315][T15049] bridge0: port 3(syz_tun) entered blocking state [ 1043.252500][T15049] bridge0: port 3(syz_tun) entered disabled state [ 1043.253234][T15049] syz_tun: entered allmulticast mode [ 1043.294361][T15049] syz_tun: entered promiscuous mode [ 1043.314167][T15049] bridge0: port 3(syz_tun) entered blocking state [ 1043.314358][T15049] bridge0: port 3(syz_tun) entered forwarding state [ 1043.494031][ T2369] pvrusb2: Invalid write control endpoint [ 1043.494049][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1043.494059][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1043.494069][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1043.494081][ T2369] pvrusb2: Device being rendered inoperable [ 1043.553705][ T7471] IPVS: starting estimator thread 0... [ 1043.567327][ T2369] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1043.570918][ T2369] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1043.614170][ T2369] pvrusb2: Attached sub-driver cx25840 [ 1043.614183][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1043.614190][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1043.663361][T15052] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1043.753164][T15053] IPVS: using max 11 ests per chain, 26400 per kthread [ 1044.442703][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2821'. [ 1044.516981][T15070] Invalid ELF header len 1 [ 1044.570001][T15067] loop6: detected capacity change from 0 to 524279808 [ 1044.651139][T15067] loop6: detected capacity change from 524279808 to 0 [ 1047.271463][T15126] netlink: 'syz.9.2846': attribute type 11 has an invalid length. [ 1047.271487][T15126] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2846'. [ 1047.704030][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2856'. [ 1047.814158][T15152] netlink: 732 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1048.423786][T15168] macvtap1: entered allmulticast mode [ 1048.423810][T15168] veth0_macvtap: entered allmulticast mode [ 1051.877204][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2887'. [ 1055.237841][T15262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.238413][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.422214][T15270] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1055.422241][T15270] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1055.422479][T15270] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1055.422499][T15270] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1056.161160][T15285] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 1056.161198][T15285] pim6reg1: owner set to 0 [ 1056.721109][T15288] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1056.756658][ T7450] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1056.905275][ T7450] usb 5-1: Using ep0 maxpacket: 8 [ 1056.907972][ T7450] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1056.909398][ T7450] usb 5-1: config 7 has an invalid interface number: 63 but max is 0 [ 1056.909423][ T7450] usb 5-1: config 7 has no interface number 0 [ 1056.909458][ T7450] usb 5-1: config 7 interface 63 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1056.909489][ T7450] usb 5-1: config 7 interface 63 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1056.913207][ T7450] usb 5-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=79.54 [ 1056.913227][ T7450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.913242][ T7450] usb 5-1: Product: syz [ 1056.913253][ T7450] usb 5-1: Manufacturer: syz [ 1056.913263][ T7450] usb 5-1: SerialNumber: syz [ 1057.478140][ T7450] usb 5-1: USB disconnect, device number 21 [ 1058.129510][T15316] input: syz1 as /devices/virtual/input/input20 [ 1058.375370][ T7447] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1058.528623][ T7447] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1058.528654][ T7447] usb 5-1: config 1 has no interface number 0 [ 1058.528704][ T7447] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1058.528732][ T7447] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1058.528759][ T7447] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1058.528785][ T7447] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.533504][ T7447] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1058.533535][ T7447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.533557][ T7447] usb 5-1: Product: syz [ 1058.533573][ T7447] usb 5-1: Manufacturer: syz [ 1058.533588][ T7447] usb 5-1: SerialNumber: syz [ 1058.658758][T15318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1058.659446][T15318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1058.892864][T15318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1058.893145][T15318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1059.310442][ T7448] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1059.417744][ T7447] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1059.467596][ T7448] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 1059.467626][ T7448] usb 7-1: config 0 has no interface number 0 [ 1059.480332][ T7448] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1059.480365][ T7448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.480387][ T7448] usb 7-1: Product: syz [ 1059.480411][ T7448] usb 7-1: Manufacturer: syz [ 1059.480426][ T7448] usb 7-1: SerialNumber: syz [ 1059.547603][ T7448] usb 7-1: config 0 descriptor?? [ 1059.551270][T15325] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1059.551886][ T7447] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1059.551904][ T7447] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1059.553472][ T7447] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1059.553968][ T7447] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1059.671735][ T7447] usb 5-1: USB disconnect, device number 22 [ 1059.711416][ T7447] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 1059.724530][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.724612][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.971394][ T7448] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1059.971416][ T7448] usb 7-1: Firmware version (0.0) predates our first public release. [ 1059.971429][ T7448] usb 7-1: Please update to version 0.2 or newer [ 1060.092229][ T7447] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1060.125365][T15339] program syz.5.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.305490][ T7448] usb 7-1: USB disconnect, device number 12 [ 1062.005769][ T5862] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1062.178715][ T5862] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1062.178748][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.225680][ T5862] usb 10-1: config 0 descriptor?? [ 1062.539820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.080226][ T5862] usb 10-1: Cannot set autoneg [ 1063.080502][ T5862] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1063.123593][ T5862] usb 10-1: USB disconnect, device number 12 [ 1063.354154][T15400] loop5: detected capacity change from 0 to 7 [ 1063.381443][T15401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1063.381462][T15401] IPv6: NLM_F_CREATE should be set when creating new route [ 1063.384446][T15400] Dev loop5: unable to read RDB block 7 [ 1063.384497][T15400] loop5: unable to read partition table [ 1063.384726][T15400] loop5: partition table beyond EOD, truncated [ 1063.391710][T15400] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.534959][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 1063.608833][ T5799] Bluetooth: hci6: unexpected event for opcode 0x2016 [ 1063.906761][T15414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.693693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1065.747474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1065.878847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1065.981024][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2979'. [ 1066.094821][T15438] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2981'. [ 1066.709502][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.714964][T15454] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1066.757144][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.467294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1067.504951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.051668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.537791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.761856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.255323][ T7448] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1069.424933][ T7448] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1069.424964][ T7448] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1069.424985][ T7448] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.425005][ T7448] usb 10-1: config 220 has no interface number 2 [ 1069.425078][ T7448] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1069.425338][ T7448] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1069.425360][ T7448] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1069.425380][ T7448] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1069.431730][ T7448] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1069.431763][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.431785][ T7448] usb 10-1: Product: syz [ 1069.431801][ T7448] usb 10-1: Manufacturer: syz [ 1069.431816][ T7448] usb 10-1: SerialNumber: syz [ 1069.921622][ T7448] uvcvideo 10-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1069.921706][ T7448] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1069.921735][ T7448] uvcvideo 10-1:220.0: No valid video chain found. [ 1069.921801][ T7448] usb 10-1: selecting invalid altsetting 0 [ 1069.973533][ T7448] usb 10-1: selecting invalid altsetting 0 [ 1069.973576][ T7448] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1070.037986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.039586][ T5862] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1070.040646][ T7448] usb 10-1: USB disconnect, device number 13 [ 1070.215781][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 1070.218213][ T5862] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.218246][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1070.218283][ T5862] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1070.218307][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.231547][ T5862] usb 5-1: config 0 descriptor?? [ 1070.615336][ T7448] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1070.756552][ T5862] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1070.765858][ T7448] usb 7-1: Using ep0 maxpacket: 8 [ 1070.792223][ T7448] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1070.792254][ T7448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.792276][ T7448] usb 7-1: Product: syz [ 1070.792291][ T7448] usb 7-1: Manufacturer: syz [ 1070.792306][ T7448] usb 7-1: SerialNumber: syz [ 1070.862609][ T7448] usb 7-1: config 0 descriptor?? [ 1071.114893][ T7448] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1071.138887][ T5862] usb 5-1: USB disconnect, device number 23 [ 1071.271149][T15517] fido_id[15517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1071.745994][ T7448] usb write operation failed. (-71) [ 1071.771394][ T7448] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1071.772033][ T7448] dvbdev: DVB: registering new adapter (Terratec H7) [ 1071.772090][ T7448] usb 7-1: media controller created [ 1071.805394][ T7448] usb read operation failed. (-71) [ 1071.805887][ T7448] usb write operation failed. (-71) [ 1071.832776][ T7448] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1071.868556][ T7448] usb 7-1: USB disconnect, device number 13 [ 1072.403918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.362396][T15557] overlayfs: failed to resolve './file0': -2 [ 1073.502134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.566742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.139112][T15574] input: syz0 as /devices/virtual/input/input21 [ 1075.610412][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1075.610432][ T38] audit: type=1326 audit(1759867025.513:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.615831][ T38] audit: type=1326 audit(1759867025.523:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.617193][ T38] audit: type=1326 audit(1759867025.523:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.617265][ T38] audit: type=1326 audit(1759867025.523:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.643890][ T38] audit: type=1326 audit(1759867025.533:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.643953][ T38] audit: type=1326 audit(1759867025.533:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.644000][ T38] audit: type=1326 audit(1759867025.533:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.644048][ T38] audit: type=1326 audit(1759867025.533:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.644104][ T38] audit: type=1326 audit(1759867025.533:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1075.644159][ T38] audit: type=1326 audit(1759867025.533:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15581 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafeb21eec9 code=0x7ffc0000 [ 1077.594280][T15628] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1077.625647][T15628] overlayfs: overlapping lowerdir path [ 1078.735373][ T7450] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1078.887720][ T7450] usb 10-1: Using ep0 maxpacket: 8 [ 1078.901912][ T7450] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1078.901943][ T7450] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.901965][ T7450] usb 10-1: Product: syz [ 1078.901980][ T7450] usb 10-1: Manufacturer: syz [ 1078.901995][ T7450] usb 10-1: SerialNumber: syz [ 1078.961433][ T7450] usb 10-1: config 0 descriptor?? [ 1078.982043][ T7450] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1079.255943][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1079.616935][ T7450] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1079.617578][ T7450] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1079.626434][ T7450] usb 10-1: USB disconnect, device number 14 [ 1080.688696][T15676] program syz.6.3082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.835851][ T7471] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1080.990158][ T7471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.990206][ T7471] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1080.990230][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.037423][ T7471] usb 5-1: config 0 descriptor?? [ 1081.520294][ T7471] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1081.781327][T15667] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1081.867622][ T7471] lenovo 0003:17EF:6047.001A: Failed to switch middle button: -71 [ 1081.871885][ T7471] lenovo 0003:17EF:6047.001A: Fn-lock setting failed: -71 [ 1081.872310][ T7471] lenovo 0003:17EF:6047.001A: Sensitivity setting failed: -71 [ 1081.944044][ T7471] usb 5-1: USB disconnect, device number 24 [ 1082.985315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.792586][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.223582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.634483][T15729] netlink: 'syz.9.3102': attribute type 6 has an invalid length. [ 1084.805450][T11223] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1085.098553][T11223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.098583][T11223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.102194][T11223] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1085.102224][T11223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1085.102247][T11223] usb 5-1: SerialNumber: syz [ 1085.174663][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3104'. [ 1085.372204][T11223] usb 5-1: 0:2 : does not exist [ 1085.381492][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880263dec00: rx timeout, send abort [ 1085.386404][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880263dec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1085.613914][T11223] usb 5-1: USB disconnect, device number 25 [ 1085.910390][T12437] udevd[12437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.751078][T15818] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1089.751122][T15818] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1089.751141][T15818] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1090.186909][T15827] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1090.664646][T15837] cgroup: fork rejected by pids controller in /syz6 [ 1091.025854][T15843] veth1_virt_wifi: entered promiscuous mode [ 1091.026099][T15843] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1092.460879][T15872] loop2: detected capacity change from 0 to 7 [ 1092.480167][T15872] loop2: [POWERTEC] p1 [ 1092.480455][T15872] loop2: p1 size 4294901760 extends beyond EOD, truncated [ 1092.847915][T11470] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.884302][T12437] udevd[12437]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1093.065300][ T7448] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1093.202947][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1093.219641][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1093.225756][ T7448] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1093.225787][ T7448] usb 10-1: config 0 has no interface number 0 [ 1093.256921][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.258905][ T7448] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1093.258934][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.258955][ T7448] usb 10-1: Product: syz [ 1093.259044][ T7448] usb 10-1: Manufacturer: syz [ 1093.259059][ T7448] usb 10-1: SerialNumber: syz [ 1093.263669][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1093.268292][ T7448] usb 10-1: config 0 descriptor?? [ 1093.320361][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1093.490352][ T7448] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1093.508080][ T7448] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1093.508475][ T7448] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1093.508527][ T7448] usb 10-1: media controller created [ 1093.549769][ T7448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.640274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.695402][ T7448] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1093.722421][T11470] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.839504][ T7448] usb 10-1: USB disconnect, device number 15 [ 1094.139761][T15910] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1094.388429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.469787][T11470] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.028500][T11470] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.390435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1095.475523][ T7471] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1095.556544][ T5799] Bluetooth: hci0: command tx timeout [ 1095.625374][ T7471] usb 5-1: Using ep0 maxpacket: 32 [ 1095.627964][ T7471] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1095.628003][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.637257][ T7471] usb 5-1: config 0 descriptor?? [ 1095.682402][T15946] netlink: 'syz.7.3194': attribute type 10 has an invalid length. [ 1095.690402][ T7471] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1096.341019][ T7471] gspca_nw80x: reg_w err -110 [ 1096.341133][ T7471] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 1096.459844][T15946] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1096.995884][T11470] bridge_slave_1: left allmulticast mode [ 1096.995913][T11470] bridge_slave_1: left promiscuous mode [ 1096.996177][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.124897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.352096][T11470] bridge_slave_0: left allmulticast mode [ 1097.352128][T11470] bridge_slave_0: left promiscuous mode [ 1097.353649][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.126625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1098.129923][ T5799] Bluetooth: hci0: command tx timeout [ 1098.257188][ T7450] usb 5-1: USB disconnect, device number 26 [ 1098.797894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.147196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.249224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.450363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.507756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.685013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.885461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.953864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.082775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.205556][ T5799] Bluetooth: hci0: command tx timeout [ 1100.259277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.310703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.376157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.426742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.486313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.706738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.754404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.928684][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.128276][T11470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.185909][T11470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.208039][T11470] bond0 (unregistering): Released all slaves [ 1101.249249][T15986] netlink: 'syz.7.3209': attribute type 29 has an invalid length. [ 1101.249276][T15986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1101.336022][T15890] chnl_net:caif_netlink_parms(): no params data found [ 1101.486865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.045236][ T5787] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1102.215425][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 1102.218112][ T5787] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1102.218140][ T5787] usb 5-1: config 0 has no interface number 0 [ 1102.221230][ T5787] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1102.221260][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.221282][ T5787] usb 5-1: Product: syz [ 1102.221297][ T5787] usb 5-1: Manufacturer: syz [ 1102.221312][ T5787] usb 5-1: SerialNumber: syz [ 1102.275541][ T5799] Bluetooth: hci0: command tx timeout [ 1102.298983][ T5787] usb 5-1: config 0 descriptor?? [ 1102.303677][ T5787] smsc95xx v2.0.0 [ 1103.409807][ T5787] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1103.409841][ T5787] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1103.410410][ T5787] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1103.410745][ T5787] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1103.456656][ T5787] usb 5-1: USB disconnect, device number 27 [ 1103.966379][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.966539][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.966806][T15890] bridge_slave_0: entered allmulticast mode [ 1103.969770][T15890] bridge_slave_0: entered promiscuous mode [ 1103.998379][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.998534][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.998836][T15890] bridge_slave_1: entered allmulticast mode [ 1104.001985][T15890] bridge_slave_1: entered promiscuous mode [ 1104.796147][T16051] batadv_slave_0: entered promiscuous mode [ 1104.923987][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.932294][T16050] batadv_slave_0: left promiscuous mode [ 1104.982460][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.206187][T11470] hsr_slave_0: left promiscuous mode [ 1105.261115][T11470] hsr_slave_1: left promiscuous mode [ 1105.262167][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.262194][T11470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.308642][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.308672][T11470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.611948][T11470] veth0_macvtap: left allmulticast mode [ 1105.612160][T11470] veth1_macvtap: left promiscuous mode [ 1105.612258][T11470] veth0_macvtap: left promiscuous mode [ 1105.614635][T11470] veth1_vlan: left promiscuous mode [ 1105.614829][T11470] veth0_vlan: left promiscuous mode [ 1109.576221][T11470] team0 (unregistering): Port device team_slave_1 removed [ 1109.865928][T11470] team0 (unregistering): Port device team_slave_0 removed [ 1113.166268][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3246'. [ 1113.621042][T15890] team0: Port device team_slave_0 added [ 1113.635438][T15890] team0: Port device team_slave_1 added [ 1114.127221][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.127241][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.127271][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.183234][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.183252][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.183280][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.782159][T15890] hsr_slave_0: entered promiscuous mode [ 1114.789168][T15890] hsr_slave_1: entered promiscuous mode [ 1114.790360][T15890] debugfs: 'hsr0' already exists in 'hsr' [ 1114.790389][T15890] Cannot create hsr debugfs directory [ 1115.124211][T11470] IPVS: stop unused estimator thread 0... [ 1115.659813][T11203] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1115.815316][T11203] usb 5-1: Using ep0 maxpacket: 8 [ 1115.817656][T11203] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1115.817716][T11203] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.817740][T11203] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1115.817766][T11203] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1115.817791][T11203] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.817835][T11203] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1115.817859][T11203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.129749][T11203] usb 5-1: usb_control_msg returned -32 [ 1116.129801][T11203] usbtmc 5-1:16.0: can't read capabilities [ 1116.587124][T16157] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 1116.761274][T11203] usb 5-1: USB disconnect, device number 28 [ 1119.197933][T16185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1119.199620][T16185] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1121.164046][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.164107][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.838529][T15890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1121.977254][T15890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1122.304849][T15890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1122.362022][T15890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1122.455995][T16223] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1122.465877][ T7471] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1122.615609][ T7471] usb 10-1: Using ep0 maxpacket: 16 [ 1122.617414][ T7471] usb 10-1: config 166 has an invalid interface number: 177 but max is 1 [ 1122.617434][ T7471] usb 10-1: config 166 has an invalid interface number: 34 but max is 1 [ 1122.617449][ T7471] usb 10-1: config 166 has no interface number 0 [ 1122.617466][ T7471] usb 10-1: config 166 has no interface number 1 [ 1122.617507][ T7471] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1122.617523][ T7471] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1122.617549][ T7471] usb 10-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1122.617569][ T7471] usb 10-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1122.617588][ T7471] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1122.617607][ T7471] usb 10-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1122.617627][ T7471] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1122.617645][ T7471] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1122.617661][ T7471] usb 10-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1122.617679][ T7471] usb 10-1: config 166 interface 177 has no altsetting 0 [ 1122.617692][ T7471] usb 10-1: config 166 interface 34 has no altsetting 0 [ 1122.623006][ T7471] usb 10-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1122.623028][ T7471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.623043][ T7471] usb 10-1: Product: syz [ 1122.623053][ T7471] usb 10-1: Manufacturer: syz [ 1122.623064][ T7471] usb 10-1: SerialNumber: syz [ 1123.004265][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.137530][ T7471] ums-realtek 10-1:166.177: USB Mass Storage device detected [ 1123.407580][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.417407][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.445801][T11470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.527928][ T7471] ums-realtek 10-1:166.34: USB Mass Storage device detected [ 1123.550483][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.550636][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.778416][ T7471] ums-realtek 10-1:166.34: probe with driver ums-realtek failed with error -5 [ 1123.980749][ T38] audit: type=1326 audit(1759867073.883:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381d51af79 code=0x7ffc0000 [ 1123.982864][ T38] audit: type=1326 audit(1759867073.883:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381d51af79 code=0x7ffc0000 [ 1124.029639][ T38] audit: type=1326 audit(1759867073.883:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.030710][ T38] audit: type=1326 audit(1759867073.933:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.032011][ T38] audit: type=1326 audit(1759867073.933:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.033502][ T38] audit: type=1326 audit(1759867073.933:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381d51af79 code=0x7ffc0000 [ 1124.034390][ T38] audit: type=1326 audit(1759867073.933:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.147421][ T38] audit: type=1326 audit(1759867074.053:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381d51af79 code=0x7ffc0000 [ 1124.149071][ T38] audit: type=1326 audit(1759867074.053:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.150875][ T38] audit: type=1326 audit(1759867074.053:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16257 comm="syz.5.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d57eec9 code=0x7ffc0000 [ 1124.246059][ T7471] uvcvideo 10-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1124.246096][ T7471] uvcvideo 10-1:166.34: No valid video chain found. [ 1124.281319][ T7471] usb 10-1: USB disconnect, device number 16 [ 1125.536334][T16275] netlink: 'syz.9.3292': attribute type 10 has an invalid length. [ 1125.536359][T16275] netlink: 'syz.9.3292': attribute type 17 has an invalid length. [ 1125.537569][T16275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.430954][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.568251][T16306] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 1127.951093][T15890] veth0_vlan: entered promiscuous mode [ 1128.041802][T15890] veth1_vlan: entered promiscuous mode [ 1128.296086][T15890] veth0_macvtap: entered promiscuous mode [ 1128.338690][T15890] veth1_macvtap: entered promiscuous mode [ 1128.739820][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.930250][T16334] overlayfs: overlapping lowerdir path [ 1129.025326][T16333] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1129.417999][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.530433][T11470] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.533603][T11470] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.534082][T11470] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.534508][T11470] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.329832][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.329856][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.844374][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.844397][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.208580][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1133.237865][ T7448] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1133.392161][ T7448] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.392188][ T7448] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.416596][ T7448] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1133.416629][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1133.416650][ T7448] usb 5-1: SerialNumber: syz [ 1133.742909][ T7448] usb 5-1: 0:2 : does not exist [ 1133.812293][ T7448] usb 5-1: USB disconnect, device number 29 [ 1133.990461][T16425] team_slave_0: entered promiscuous mode [ 1133.990519][T16425] team_slave_1: entered promiscuous mode [ 1134.004806][T16425] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1134.008721][T16425] team0: Device macvtap1 is already an upper device of the team interface [ 1134.061647][T16092] udevd[16092]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.125593][T16425] team_slave_0: left promiscuous mode [ 1134.131123][T16425] team_slave_1: left promiscuous mode [ 1134.675601][ T7448] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1134.877678][ T7448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.877715][ T7448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.877757][ T7448] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1134.877781][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.989043][ T7448] usb 5-1: config 0 descriptor?? [ 1135.010404][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'. [ 1135.427297][ T7448] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 1135.446522][ T7448] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1135.661611][ T7471] usb 5-1: USB disconnect, device number 30 [ 1137.120002][T16491] input: syz1 as /devices/virtual/input/input23 [ 1139.545236][T11203] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1139.698035][T11203] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1139.698101][T11203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.698129][T11203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.698153][T11203] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1139.704136][T11203] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1139.704167][T11203] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1139.704190][T11203] usb 7-1: Manufacturer: syz [ 1139.746218][T11203] usb 7-1: config 0 descriptor?? [ 1140.224200][T11203] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 1140.577507][T11203] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1141.204640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.222194][ T7448] usb 7-1: USB disconnect, device number 14 [ 1141.294968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.610725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.705759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.830786][T16580] ieee802154 phy0 wpan0: encryption failed: -22 [ 1142.882180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.437710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.617685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.844267][T16603] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1144.307391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1148.405686][ T7471] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1148.558729][ T7471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.558759][ T7471] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.566688][ T7471] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1148.566724][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1148.566747][ T7471] usb 5-1: SerialNumber: syz [ 1148.903485][ T7471] usb 5-1: 0:2 : does not exist [ 1149.060163][ T7471] usb 5-1: USB disconnect, device number 31 [ 1149.257519][T16698] ceph: No mds server is up or the cluster is laggy [ 1149.258268][T11223] libceph: connect (1)[c::]:6789 error -101 [ 1149.258584][T11223] libceph: mon0 (1)[c::]:6789 connect error [ 1149.417562][T16092] udevd[16092]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1151.056095][ T7471] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1151.218696][ T7471] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1151.218732][ T7471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1151.218761][ T7471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1151.218790][ T7471] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1151.218833][ T7471] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1151.218857][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.262345][ T7471] usb 5-1: config 0 descriptor?? [ 1151.277108][T16749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1151.703652][ T7471] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 1151.779230][ T7471] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1151.805641][T11223] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1151.955802][T11223] usb 7-1: Using ep0 maxpacket: 8 [ 1151.958620][T11223] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1151.958683][T11223] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.958707][T11223] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.958732][T11223] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1151.958756][T11223] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.958801][T11223] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1151.958824][T11223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.029063][ T5787] usb 5-1: USB disconnect, device number 32 [ 1152.206500][T16773] netlink: 'syz.7.3458': attribute type 4 has an invalid length. [ 1152.304928][T11223] usb 7-1: usb_control_msg returned -32 [ 1152.304977][T11223] usbtmc 7-1:16.0: can't read capabilities [ 1153.155989][ T7471] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1153.199979][T16789] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 1153.510689][T11223] usb 7-1: USB disconnect, device number 15 [ 1153.532463][ T7471] usb 10-1: config 0 has no interfaces? [ 1153.536148][ T7471] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1153.536184][ T7471] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1153.536210][ T7471] usb 10-1: Product: syz [ 1153.536227][ T7471] usb 10-1: Manufacturer: syz [ 1153.536245][ T7471] usb 10-1: SerialNumber: syz [ 1153.547612][ T7471] usb 10-1: config 0 descriptor?? [ 1153.574485][T16793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1153.574688][T16793] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1154.290985][ T7448] usb 10-1: USB disconnect, device number 17 [ 1155.625744][T16804] netlink: 'syz.4.3469': attribute type 83 has an invalid length. [ 1157.595658][T11223] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1157.750535][T11223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.750570][T11223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.750595][T11223] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1157.750640][T11223] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1157.750663][T11223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.824019][T11223] usb 7-1: config 0 descriptor?? [ 1158.115720][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3483'. [ 1158.115743][T16840] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3483'. [ 1158.116872][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3483'. [ 1158.369157][T11223] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xe [ 1158.369203][T11223] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1158.659222][T11223] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1159.722543][T11223] usb 7-1: USB disconnect, device number 16 [ 1160.192713][T16852] fido_id[16852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1162.338732][T16888] loop6: detected capacity change from 0 to 7 [ 1162.365250][T16888] Dev loop6: unable to read RDB block 7 [ 1162.365310][T16888] loop6: unable to read partition table [ 1162.365555][T16888] loop6: partition table beyond EOD, truncated [ 1162.365594][T16888] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1166.137103][T16949] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1166.375278][ T7448] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1166.530866][ T7448] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1166.530898][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.616406][ T7448] usb 5-1: config 0 descriptor?? [ 1166.646118][ T7448] cp210x 5-1:0.0: cp210x converter detected [ 1167.080516][ T7448] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1167.115608][ T7448] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1167.328818][T11223] usb 5-1: USB disconnect, device number 33 [ 1167.385023][T11223] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1167.545758][T11223] cp210x 5-1:0.0: device disconnected [ 1167.915641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1169.050739][T17004] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3546'. [ 1170.655392][ T7448] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1170.781819][T17013] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1170.805231][ T7448] usb 10-1: Using ep0 maxpacket: 16 [ 1170.807826][ T7448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.807860][ T7448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.807884][ T7448] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1170.808562][ T7448] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1170.808589][ T7448] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.878329][ T7448] usb 10-1: config 0 descriptor?? [ 1171.506434][ T7448] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1171.506472][ T7448] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1171.506500][ T7448] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1171.598168][ T7448] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.001F/input/input25 [ 1171.766330][ T7448] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1171.815711][ T7448] usb 10-1: USB disconnect, device number 18 [ 1171.884859][T17030] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3555'. [ 1172.251060][T17031] fido_id[17031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1172.819705][T17043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.825963][T17065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1174.826136][T17065] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1177.042089][T17074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1177.042290][T17074] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1179.180739][T11203] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1179.507645][T11203] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.507692][T11203] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1179.511522][T11203] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1179.511550][T11203] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.511571][T11203] usb 10-1: Product: syz [ 1179.511586][T11203] usb 10-1: Manufacturer: syz [ 1179.511602][T11203] usb 10-1: SerialNumber: syz [ 1179.584506][T11203] usb 10-1: config 0 descriptor?? [ 1179.607365][T11203] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1179.613731][T11203] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1179.633717][T11203] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1179.633784][T11203] usb 10-1: media controller created [ 1179.753357][T11203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.132346][T11203] DVB: Unable to find symbol tda10046_attach() [ 1180.132364][T11203] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1180.132379][T11203] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1180.197889][T17111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1180.198060][T17111] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1180.512761][T11223] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1180.812650][T11223] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1181.016450][T11203] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1181.052575][T11203] usb 10-1: USB disconnect, device number 19 [ 1181.505374][T11203] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1181.657926][T11203] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1181.657962][T11203] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1181.658004][T11203] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1181.658028][T11203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.710008][T17126] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1181.748037][T11203] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1182.608304][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.608383][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.751409][T17142] overlayfs: failed to resolve './file1': -2 [ 1182.999151][T11223] usb 7-1: USB disconnect, device number 17 [ 1184.202363][T17148] kexec: Could not allocate control_code_buffer [ 1186.064110][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1186.305885][T17181] overlayfs: failed to resolve './file1': -2 [ 1186.525273][ T7450] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1186.675398][ T7450] usb 5-1: Using ep0 maxpacket: 16 [ 1186.677739][ T7450] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.677766][ T7450] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.680996][ T7450] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.681027][ T7450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.681048][ T7450] usb 5-1: Product: syz [ 1186.681063][ T7450] usb 5-1: Manufacturer: syz [ 1186.681078][ T7450] usb 5-1: SerialNumber: syz [ 1186.968618][ T7450] usb 5-1: 0:2 : does not exist [ 1186.974830][ T7450] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1187.035846][ T7450] usb 5-1: USB disconnect, device number 34 [ 1187.146885][T17071] udevd[17071]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.917557][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1191.189360][T17242] kernel read not supported for file /file1 (pid: 17242 comm: syz.5.3632) [ 1191.190169][ T38] kauditd_printk_skb: 117 callbacks suppressed [ 1191.190185][ T38] audit: type=1800 audit(1759867141.093:456): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3632" name="file1" dev="mqueue" ino=52674 res=0 errno=0 [ 1193.826811][T17271] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1193.826995][T17271] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1194.045299][ T5886] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1194.207520][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 1194.209751][ T5886] usb 7-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 1194.209804][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1194.209845][ T5886] usb 7-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1194.209868][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.303150][ T5886] usb 7-1: config 0 descriptor?? [ 1194.320707][ T5886] usb 7-1: bad CDC descriptors [ 1194.517045][ T5787] usb 7-1: USB disconnect, device number 18 [ 1194.615541][T17283] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1198.098591][T17307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1198.098782][T17307] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1198.261697][ T38] audit: type=1800 audit(1759867148.133:457): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3656" name="file0" dev="overlay" ino=4168 res=0 errno=0 [ 1198.615236][ T7448] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1198.821409][ T7448] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1198.821452][ T7448] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1198.846134][ T5787] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1198.850408][ T7448] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1198.850449][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.850470][ T7448] usb 10-1: Product: syz [ 1198.850486][ T7448] usb 10-1: Manufacturer: syz [ 1198.850501][ T7448] usb 10-1: SerialNumber: syz [ 1198.856210][ T7448] usb 10-1: config 0 descriptor?? [ 1198.887297][T17310] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1198.887452][T17310] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1199.042564][ T5787] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.042601][ T5787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1199.042686][ T5787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1199.042710][ T5787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1199.042756][ T5787] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1199.042780][ T5787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.303065][T17310] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1199.303217][T17310] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1200.065302][ T5787] usb 7-1: config 0 descriptor?? [ 1200.175973][ T7448] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1200.704960][ T5787] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1201.685393][ T7448] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1201.736370][ T7448] usb 10-1: USB disconnect, device number 20 [ 1203.899041][T17324] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 1205.415259][ T5787] usb 7-1: USB disconnect, device number 19 [ 1206.612959][T17373] netlink: 'syz.5.3679': attribute type 5 has an invalid length. [ 1206.937924][T17378] Bluetooth: MGMT ver 1.23 [ 1208.483962][T17433] Bluetooth: hci0: unsupported parameter 178 [ 1208.483998][T17433] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 1208.762145][T17444] binder: 17443:17444 ioctl c0306201 0 returned -14 [ 1208.875843][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1208.945621][T11223] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1209.954649][T11223] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1209.954683][T11223] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1209.960100][T11223] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1209.960133][T11223] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1209.960163][T11223] usb 7-1: Product: syz [ 1209.960179][T11223] usb 7-1: Manufacturer: syz [ 1209.960194][T11223] usb 7-1: SerialNumber: syz [ 1210.014787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.106047][T17460] overlayfs: missing 'lowerdir' [ 1210.280316][T11223] usb 7-1: config 0 descriptor?? [ 1210.299997][T17462] all: renamed from lo (while UP) [ 1210.300971][T11223] usb 7-1: selecting invalid altsetting 0 [ 1210.546435][T11223] usb 7-1: USB disconnect, device number 20 [ 1210.672417][T17079] udevd[17079]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.843508][T17510] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1211.843700][T17510] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1211.893975][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.436737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.389278][T17540] SQUASHFS error: Failed to read block 0x0: -5 [ 1213.389321][T17540] unable to read squashfs_super_block [ 1213.477866][ T38] audit: type=1326 audit(1759867163.373:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.4.3732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fb4eec9 code=0x0 [ 1214.163343][T17547] kvm: emulating exchange as write [ 1215.548893][T17564] netlink: 'syz.7.3744': attribute type 1 has an invalid length. [ 1216.010178][T17568] bond1: (slave bridge3): making interface the new active one [ 1216.083957][T17568] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1216.574945][T17574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1216.601619][T17574] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1220.517008][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 1220.624595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.141202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.013076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.133258][T17639] netlink: 'syz.9.3772': attribute type 1 has an invalid length. [ 1222.221229][T17639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.423780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.565008][T17654] loop2: detected capacity change from 0 to 7 [ 1222.590691][T17654] Dev loop2: unable to read RDB block 7 [ 1222.590739][T17654] loop2: unable to read partition table [ 1222.590988][T17654] loop2: partition table beyond EOD, truncated [ 1222.591440][T17654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1222.831074][T17664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1222.831250][T17664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1222.856000][T17665] loop2: detected capacity change from 0 to 7 [ 1222.887993][T17665] loop2: p1 [ 1222.888029][T17665] loop2: partition table partially beyond EOD, truncated [ 1222.892087][T17665] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1222.962499][T16092] udevd[16092]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1223.283869][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 1223.418625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.018096][ T38] audit: type=1326 audit(1759867174.923:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17703 comm="syz.4.3798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fb4eec9 code=0x0 [ 1225.955588][ T7471] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1226.108920][ T7471] usb 7-1: Using ep0 maxpacket: 8 [ 1226.112616][ T7471] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1226.112653][ T7471] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1226.112679][ T7471] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.112705][ T7471] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.112750][ T7471] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1226.112775][ T7471] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.388660][ T7471] usb 7-1: GET_CAPABILITIES returned 0 [ 1226.388719][ T7471] usbtmc 7-1:16.0: can't read capabilities [ 1226.597092][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1226.648772][T11223] usb 7-1: USB disconnect, device number 21 [ 1228.282239][T17779] input: syz0 as /devices/virtual/input/input27 [ 1229.021973][T17793] kvm_intel: kvm [17792]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1231.085238][ T7448] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1231.197924][T17819] loop2: detected capacity change from 0 to 7 [ 1231.234167][T16092] Dev loop2: unable to read RDB block 7 [ 1231.234218][T16092] loop2: unable to read partition table [ 1231.234505][T16092] loop2: partition table beyond EOD, truncated [ 1231.245716][T17819] Dev loop2: unable to read RDB block 7 [ 1231.245771][T17819] loop2: unable to read partition table [ 1231.246036][T17819] loop2: partition table beyond EOD, truncated [ 1231.246060][T17819] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1231.299278][ T7448] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.302524][ T7448] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.302556][ T7448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.302578][ T7448] usb 5-1: Product: syz [ 1231.302593][ T7448] usb 5-1: Manufacturer: syz [ 1231.302608][ T7448] usb 5-1: SerialNumber: syz [ 1233.197299][ T7448] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1233.197346][ T7448] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1233.197367][ T7448] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1233.239971][T17840] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1233.399907][ T7448] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1233.450209][ T7448] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1233.625663][T11203] usb 5-1: USB disconnect, device number 35 [ 1233.643457][T11203] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1234.215310][ T7448] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1234.365222][ T7448] usb 10-1: Using ep0 maxpacket: 8 [ 1234.370760][ T7448] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1234.370793][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.370814][ T7448] usb 10-1: Product: syz [ 1234.370830][ T7448] usb 10-1: Manufacturer: syz [ 1234.370846][ T7448] usb 10-1: SerialNumber: syz [ 1234.532366][T17869] 9pnet_fd: Insufficient options for proto=fd [ 1234.682440][ T7448] usb 10-1: config 0 descriptor?? [ 1234.703710][ T7448] gspca_main: se401-2.14.0 probing 047d:5003 [ 1235.790336][ T7448] gspca_se401: Frame size: 0x2 1/4th janggu [ 1235.790356][ T7448] gspca_se401: Frame size: 0x127 bayer [ 1235.790368][ T7448] gspca_se401: Frame size: 256x0 bayer [ 1235.790378][ T7448] gspca_se401: Frame size: 0x0 1/16th janggu [ 1235.790391][ T7448] gspca_se401: Frame size: 0x4 bayer [ 1236.678506][ T7448] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input28 [ 1236.780291][ T7448] usb 10-1: USB disconnect, device number 21 [ 1237.055308][T17885] netlink: 'syz.4.3865': attribute type 4 has an invalid length. [ 1237.631804][T17899] input: syz1 as /devices/virtual/input/input29 [ 1242.019751][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3885'. [ 1244.048501][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.048579][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.737436][T18008] loop4: detected capacity change from 0 to 7 [ 1246.759449][T18008] Dev loop4: unable to read RDB block 7 [ 1246.759499][T18008] loop4: unable to read partition table [ 1246.759732][T18008] loop4: partition table beyond EOD, truncated [ 1246.759752][T18008] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1250.170380][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1250.172060][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1250.741464][T18100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1250.741659][T18100] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1252.485284][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1252.699504][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.699540][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.699583][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1252.699608][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.752939][ T10] usb 5-1: config 0 descriptor?? [ 1253.219899][ T10] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 1253.249549][ T10] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1253.416879][ T10] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 1254.018111][T18172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3974'. [ 1254.040820][ T10] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 1254.054556][ T10] usb 5-1: USB disconnect, device number 36 [ 1254.249084][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3989'. [ 1254.274243][T18182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1254.862142][T18204] netlink: 'syz.6.4000': attribute type 13 has an invalid length. [ 1255.039337][T18204] gretap0: refused to change device tx_queue_len [ 1255.039917][T18204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1256.295641][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1256.479222][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.479252][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.480806][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1256.480848][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1256.480875][ T10] usb 5-1: SerialNumber: syz [ 1256.826892][ T10] usb 5-1: 0:2 : does not exist [ 1256.854667][T18233] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4012'. [ 1257.003065][ T10] usb 5-1: USB disconnect, device number 37 [ 1258.016659][T18237] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4012'. [ 1258.111519][T16092] udevd[16092]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.788978][T18263] binder: 18262:18263 ioctl c0306201 200000000240 returned -14 [ 1260.254261][T18279] ceph: No mds server is up or the cluster is laggy [ 1262.906489][ T38] audit: type=1800 audit(1759867212.813:460): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4063" name="file1" dev="overlay" ino=4571 res=0 errno=0 [ 1263.015300][ T5886] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1263.198024][ T5886] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1263.198058][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.198080][ T5886] usb 7-1: Product: syz [ 1263.198094][ T5886] usb 7-1: Manufacturer: syz [ 1263.198109][ T5886] usb 7-1: SerialNumber: syz [ 1263.209986][ T5886] usb 7-1: config 0 descriptor?? [ 1263.459768][ T5886] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1264.886681][ T5886] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1264.901986][ T5886] usb 7-1: USB disconnect, device number 22 [ 1264.988818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.119749][T18405] netlink: 'syz.9.4082': attribute type 16 has an invalid length. [ 1265.119771][T18405] netlink: 'syz.9.4082': attribute type 17 has an invalid length. [ 1265.282935][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.297684][T18404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.590173][T18405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1266.606982][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.675892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.735231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.777062][T18447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.777247][T18447] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1269.395573][ T5787] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1269.548863][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.548899][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.548940][ T5787] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1269.548964][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.600503][ T5787] usb 5-1: config 0 descriptor?? [ 1269.943223][T18501] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1270.568418][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568457][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568483][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568509][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568534][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568559][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.568584][ T5787] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1270.708689][ T5787] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1270.766400][ T5787] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x00 [ 1270.911438][T18508] input: syz1 as /devices/virtual/input/input30 [ 1271.385211][ T5787] cp2112 0003:10C4:EA90.0023: error reading lock byte: -32 [ 1271.460348][ T5787] usb 5-1: USB disconnect, device number 38 [ 1271.912165][T18530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1271.912362][T18530] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1272.369901][ T7450] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1272.528209][ T7450] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.528297][ T7450] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1272.528333][ T7450] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1272.528362][ T7450] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.528407][ T7450] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1272.528432][ T7450] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.646332][ T7450] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1272.647534][ T7450] usb 10-1: invalid MIDI out EP 0 [ 1272.941957][ T7450] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1272.961795][ T7450] usb 10-1: USB disconnect, device number 22 [ 1272.976742][T16092] udevd[16092]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1274.816588][T18566] overlayfs: statfs failed on './file0' [ 1274.896018][T18564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1275.183903][T18581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.206523][T18581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.236692][T18581] bridge0: entered allmulticast mode [ 1275.267527][T18584] bridge_slave_1: left allmulticast mode [ 1275.267668][T18584] bridge_slave_1: left promiscuous mode [ 1275.295668][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.528838][T18584] bridge_slave_0: left allmulticast mode [ 1275.528872][T18584] bridge_slave_0: left promiscuous mode [ 1275.533075][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.585168][ T7450] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1281.741017][ T7450] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1281.741049][ T7450] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.741071][ T7450] usb 10-1: Product: syz [ 1281.741086][ T7450] usb 10-1: Manufacturer: syz [ 1281.741101][ T7450] usb 10-1: SerialNumber: syz [ 1281.808841][ T7450] usb 10-1: config 0 descriptor?? [ 1282.030075][ T7450] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.088638][ T7450] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1283.301629][ T7450] usb 10-1: USB disconnect, device number 23 [ 1290.904976][T18849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.232830][T18859] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1291.233025][T18859] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1293.532917][T18887] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1293.533116][T18887] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1297.485315][T11223] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1297.639062][T11223] usb 10-1: config index 0 descriptor too short (expected 65282, got 36) [ 1297.639093][T11223] usb 10-1: config 128 has too many interfaces: 255, using maximum allowed: 32 [ 1297.639115][T11223] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.639136][T11223] usb 10-1: config 128 has 0 interfaces, different from the descriptor's value: 255 [ 1297.639174][T11223] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ae.fe [ 1297.639198][T11223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.028820][T11223] usb 10-1: string descriptor 0 read error: -71 [ 1299.043267][T11223] usb 10-1: USB disconnect, device number 24 [ 1299.195185][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1299.345118][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1299.350688][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1299.350721][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.386468][ T10] usb 7-1: config 0 descriptor?? [ 1299.619994][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1301.310843][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1301.311631][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1301.311970][ T10] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1301.392498][ T10] usb 7-1: USB disconnect, device number 23 [ 1303.784282][ T38] audit: type=1800 audit(1759867253.673:461): pid=19062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4340" name="bus" dev="tmpfs" ino=2253 res=0 errno=0 [ 1304.414555][T19075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1304.414723][T19075] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1306.207111][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.207207][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.363717][T19088] overlayfs: failed to clone upperpath [ 1307.096374][T19106] overlayfs: failed to clone lowerpath [ 1307.202650][T19107] overlayfs: failed to clone upperpath [ 1314.270669][T19187] random: crng reseeded on system resumption [ 1319.535670][ T38] audit: type=1804 audit(1759867269.443:462): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.4425" name="bus" dev="ramfs" ino=61513 res=1 errno=0 [ 1319.538765][ T38] audit: type=1804 audit(1759867269.443:463): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.4425" name="bus" dev="ramfs" ino=61513 res=1 errno=0 [ 1321.825344][T19323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1321.826863][T19323] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1322.786195][T19317] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1326.485862][T19364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1326.487512][T19364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1327.732350][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4461'. [ 1328.238210][T19383] loop9: detected capacity change from 0 to 7 [ 1328.249856][T19383] Dev loop9: unable to read RDB block 7 [ 1328.249903][T19383] loop9: unable to read partition table [ 1328.250168][T19383] loop9: partition table beyond EOD, truncated [ 1328.250192][T19383] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1342.035320][ T5799] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1343.749773][T19198] Bluetooth: hci7: unexpected subevent 0x0e length: 30 > 15 [ 1343.749821][T19198] Bluetooth: hci7: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1343.826401][T19506] syz_tun: entered allmulticast mode [ 1343.845173][T19506] dvmrp8: entered allmulticast mode [ 1343.862479][T19503] syz_tun: left allmulticast mode [ 1351.092245][T19576] netlink: 'syz.7.4534': attribute type 15 has an invalid length. [ 1352.143040][T19583] uprobe: syz.7.4537:19583 failed to unregister, leaking uprobe [ 1356.848131][T19639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1356.974081][T19649] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002 [ 1364.390003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.330531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.477403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.754852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.207859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.777111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.923153][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.923230][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.382184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.718651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.098399][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1386.178863][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1390.219636][T19891] nvme_fabrics: missing parameter 'transport=%s' [ 1390.219655][T19891] nvme_fabrics: missing parameter 'nqn=%s' [ 1398.900971][T19954] overlayfs: failed to clone upperpath [ 1400.056946][T19962] tipc: Enabling of bearer rejected, failed to enable media [ 1417.709201][ T38] audit: type=1326 audit(1759867367.613:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20100 comm="syz.9.4700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fbedfeec9 code=0x0 [ 1420.532546][ C1] ------------[ cut here ]------------ [ 1420.532562][ C1] refcount_t: addition on 0; use-after-free. [ 1420.533283][ C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1420.533339][ C1] Modules linked in: [ 1420.533370][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1420.533422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1420.533453][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1420.533487][ C1] Code: 00 00 e8 59 82 3e fd 5b 41 5e e9 c1 64 49 06 cc e8 4b 82 3e fd c6 05 ad d6 61 0a 01 90 48 c7 c7 60 9c 3e 8b e8 57 cb 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b 82 3e fd c6 05 8e d6 61 0a 01 90 48 c7 c7 [ 1420.533509][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 1420.533530][ C1] RAX: 2704ae6e35565200 RBX: 0000000000000002 RCX: ffff88801c2e1e00 [ 1420.533548][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1420.533564][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1420.533578][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 1420.533597][ C1] R13: ffff88803940f0d8 R14: ffff88803940ed00 R15: dffffc0000000000 [ 1420.533616][ C1] FS: 0000000000000000(0000) GS:ffff888126ccd000(0000) knlGS:0000000000000000 [ 1420.533636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1420.533654][ C1] CR2: 000055556064b5c8 CR3: 00000000557ac000 CR4: 00000000003526f0 [ 1420.533675][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1420.533690][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1420.533707][ C1] Call Trace: [ 1420.533722][ C1] [ 1420.533734][ C1] mptcp_schedule_work+0x164/0x1a0 [ 1420.533837][ C1] mptcp_tout_timer+0x21/0xa0 [ 1420.533887][ C1] call_timer_fn+0x17e/0x5f0 [ 1420.533929][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1420.533955][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1420.533988][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1420.534034][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.534084][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1420.534128][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1420.534154][ C1] __run_timer_base+0x648/0x970 [ 1420.534202][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1420.534251][ C1] run_timer_softirq+0xb7/0x180 [ 1420.534283][ C1] handle_softirqs+0x22f/0x710 [ 1420.534323][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1420.534364][ C1] run_ktimerd+0xcf/0x190 [ 1420.534399][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1420.534430][ C1] ? schedule+0x91/0x360 [ 1420.534463][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1420.534495][ C1] smpboot_thread_fn+0x542/0xa60 [ 1420.534529][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1420.534572][ C1] kthread+0x711/0x8a0 [ 1420.534614][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1420.534646][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.534680][ C1] ? rt_spin_unlock+0x150/0x200 [ 1420.534722][ C1] ? rt_spin_unlock+0x161/0x200 [ 1420.534755][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.534793][ C1] ret_from_fork+0x4b9/0x870 [ 1420.534826][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1420.534865][ C1] ? __switch_to_asm+0x39/0x70 [ 1420.534898][ C1] ? __switch_to_asm+0x33/0x70 [ 1420.534935][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.535014][ C1] ret_from_fork_asm+0x1a/0x30 [ 1420.535070][ C1] [ 1420.535092][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1420.535110][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1420.535139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1420.535154][ C1] Call Trace: [ 1420.535163][ C1] [ 1420.535173][ C1] dump_stack_lvl+0x99/0x250 [ 1420.535203][ C1] ? __asan_memcpy+0x40/0x70 [ 1420.535231][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1420.535261][ C1] ? __pfx__printk+0x10/0x10 [ 1420.535307][ C1] vpanic+0x237/0x6d0 [ 1420.535331][ C1] ? __pfx_vpanic+0x10/0x10 [ 1420.535368][ C1] panic+0xb9/0xc0 [ 1420.535390][ C1] ? __pfx_panic+0x10/0x10 [ 1420.535433][ C1] __warn+0x31b/0x4b0 [ 1420.535454][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 1420.535489][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 1420.535521][ C1] report_bug+0x2be/0x4f0 [ 1420.535576][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 1420.535610][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 1420.535654][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 1420.535684][ C1] handle_bug+0x84/0x160 [ 1420.535737][ C1] exc_invalid_op+0x1a/0x50 [ 1420.535787][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1420.535823][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1420.535855][ C1] Code: 00 00 e8 59 82 3e fd 5b 41 5e e9 c1 64 49 06 cc e8 4b 82 3e fd c6 05 ad d6 61 0a 01 90 48 c7 c7 60 9c 3e 8b e8 57 cb 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b 82 3e fd c6 05 8e d6 61 0a 01 90 48 c7 c7 [ 1420.535876][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 1420.535898][ C1] RAX: 2704ae6e35565200 RBX: 0000000000000002 RCX: ffff88801c2e1e00 [ 1420.535916][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1420.535937][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1420.535951][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 1420.535970][ C1] R13: ffff88803940f0d8 R14: ffff88803940ed00 R15: dffffc0000000000 [ 1420.536009][ C1] mptcp_schedule_work+0x164/0x1a0 [ 1420.536045][ C1] mptcp_tout_timer+0x21/0xa0 [ 1420.536070][ C1] call_timer_fn+0x17e/0x5f0 [ 1420.536102][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1420.536125][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1420.536156][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1420.536198][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.536223][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1420.536245][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1420.536271][ C1] __run_timer_base+0x648/0x970 [ 1420.536317][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1420.536383][ C1] run_timer_softirq+0xb7/0x180 [ 1420.536415][ C1] handle_softirqs+0x22f/0x710 [ 1420.536455][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1420.536499][ C1] run_ktimerd+0xcf/0x190 [ 1420.536532][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1420.536563][ C1] ? schedule+0x91/0x360 [ 1420.536595][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1420.536625][ C1] smpboot_thread_fn+0x542/0xa60 [ 1420.536659][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1420.536701][ C1] kthread+0x711/0x8a0 [ 1420.536742][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1420.536774][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.536808][ C1] ? rt_spin_unlock+0x150/0x200 [ 1420.536849][ C1] ? rt_spin_unlock+0x161/0x200 [ 1420.536884][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.536931][ C1] ret_from_fork+0x4b9/0x870 [ 1420.536964][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1420.537003][ C1] ? __switch_to_asm+0x39/0x70 [ 1420.537034][ C1] ? __switch_to_asm+0x33/0x70 [ 1420.537064][ C1] ? __pfx_kthread+0x10/0x10 [ 1420.537103][ C1] ret_from_fork_asm+0x1a/0x30 [ 1420.537158][ C1] [ 1420.537500][ C1] Kernel Offset: disabled