last executing test programs: 1m13.167059653s ago: executing program 1 (id=1053): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 1m12.038045685s ago: executing program 1 (id=1058): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0xca4f000) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000000)={0x14}, 0x14) read$FUSE(r4, 0x0, 0x0) 1m11.897623705s ago: executing program 1 (id=1060): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000280), 0x4002, 0x0) io_uring_enter(r2, 0x3699, 0x3fd8, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r7, 0x16, 0x0, @void}, 0x10) write(r4, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) 1m10.643969336s ago: executing program 1 (id=1070): openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) fanotify_init(0x40, 0x101000) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040), 0x4800) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x20) r2 = io_uring_setup(0x2bc4, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1, 0x0, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="3261f2d3669e67923790a8724e333761335706f89764e3b3966d2e18fef819732f6208e307898257f312a8a4e4d5b398641d04fa6b7117ebcffd764f4847a220a1", 0x41}, {&(0x7f0000000440)="5c65f52a85590dbdc88246ab4bfc3ba322e044d5eb2c3d10d40dde83e315ca4961744d7f3290b8e0ef04dbff3f5e1dabe1838d306168e922e637419f349bac768ae603f545b59c53d2234f5cc5b26e6b825eca539e47ddcc5e68", 0x5a}, {&(0x7f0000000540)="4b9dea83c1be4af0caa79a8e263f947c2feb91e2cd5b3685d6641f7536c08ec83386e310ea71a8e7c27f5f81710e45dc0db8968dcacfda969de6d0e00570b324150194e1937fc7c919d6d6a26ed845e074cf2517d4c758f7294640c92661a8286ce4ae0dc34c670586414e3c36888329", 0x70}], 0x3}, 0x0) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.136604112s ago: executing program 1 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@verity_on}, {@redirect_dir_nofollow}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$sr(0xffffff9c, &(0x7f0000000100), 0xa0002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x404c840) connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0x1}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000048a84c132c15ecb5da4b4da433739da11c", @ANYRES16=r7, @ANYBLOB="01032bbd7000fedbdf251c000000"], 0x14}}, 0x0) getdents64(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) 1m8.837346201s ago: executing program 1 (id=1069): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 48.013857115s ago: executing program 32 (id=1069): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 4.5268763s ago: executing program 0 (id=1342): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="95875a7786da", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'x:\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x60}}}}}}, 0x0) 4.520962821s ago: executing program 4 (id=1343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0xe, 0x3, 0x18284, 0x0, 0x2}, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) socket$inet6(0xa, 0x3, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r7, 0x4000401}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r9, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) getgid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000208", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = socket(0x200000000000011, 0x2, 0xfffffffd) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r11, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000002c0)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r13, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r12, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 4.403818988s ago: executing program 0 (id=1344): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0xfffffffc, 0x1, 0x100}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="18000000010000", 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r9, 0x901, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x404c0e4}, 0x20000804) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fdc7df250600000008000d000291000008000100d0"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xca}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async) 4.331157379s ago: executing program 4 (id=1345): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2800000bbbbbbbbbbbb0800450000340000000000019078ac090000001414aa0400907800000000449700070067fffd03020002ac1414aa64aa010144041660"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 4.232467207s ago: executing program 3 (id=1346): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$USERFAULTFD_IOC_NEW(r8, 0xaa00) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0xff, 0x9, 0x4, 0x5, 0x81, 0x0, 0x8, 0x8, 0x2, 0x6, 0x5, 0x0, 0x5b, 0x9, 0x5, 0x1}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x34c210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 4.190585437s ago: executing program 0 (id=1347): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0xfffffffc, 0xfffffffc, 0x0, 0xffffffff}, 0x3c) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="6782e9a2e0052e1d524675a11020b3b75ce4f7cbaabed64acbeecf39be8d2bb1156d97adf07aa65b"]) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x4, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0x8, 0x0, 0x1, 0x1}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) r5 = signalfd4(r4, &(0x7f0000000080)={[0x59e5]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'veth1_virt_wifi\x00', @random="5021bcc2233c"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4a25, @loopback}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x200b, 0x0, 0x200003, 0x5}) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x0) write(r6, &(0x7f0000000000)="010000000000000020", 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137ceae42a1a07d62c0012800e0001006970366772657461700000001800020000000000000000000000000108001f0056e953e301ef019c00000008000d000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000743000/0x3000)=nil, 0x3000, 0x3, 0x8031, r1, 0x85b4000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) 3.847877497s ago: executing program 3 (id=1348): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000004003c0000003c000000060000000000bb6cd13134c0cb9f"], 0x0, 0x52, 0x0, 0x1}, 0x28) setresuid(0x0, 0xee00, 0x0) r1 = io_uring_setup(0x3852, &(0x7f0000000640)={0x0, 0xbfffeffb, 0x800, 0x3, 0x2}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x8001, 0x10ffff, 0x3, 0x0, 0x0, 0x1fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x200000ad, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) setrlimit(0x4, &(0x7f00000001c0)={0xdfff8003, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, 0x0, 0x0, 0xd23) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x4000811, 0x0, 0x7, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) dup(r4) dup(r3) 2.841393115s ago: executing program 4 (id=1350): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0xfffc, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) 2.158049657s ago: executing program 4 (id=1351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=@newtaction={0x188, 0x30, 0x1, 0x0, 0x0, {}, [{0x174, 0x1, [@m_simple={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'ns/cgroup\x00'}]}, {0x7b, 0x6, "203788ca78fa7e61588fd3b728fdf3b07a2abad2963b209811a3846f73ea4aa154fc0efcb543882a5814e405e3de58d5636d7bc685e99c66f725958b29a9131ccdfe2b88ea67669c0e315629d15c86cbe3957a7fb6d4f8ba88b4827eb68693aceb574eab066f20d56b273c694da5caffff983f512f70cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xb8, 0x4, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x44, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7348}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x498e}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffd}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4c, 0x6, "88e7256f77f0a5e889e4b5f5ca126b8737a272f4983d599b3961031b6fbce79e7bb5f2cad4f6548c4ae4f6942ce50b928799f5ee743cf44883d67e7d3ee6048ffb61dbc36877e55a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x15, &(0x7f0000000300)=""/21, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) add_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000004c0)="3ec98621c15e1cd4cc97c50adc82b18ef142930a2d8f866d7d73e8347dbb927b5d08ed6df488cfde9762fbd42269432570efdb36b8e7f6ad7460bfba719425a23ad65b679801cde0275354c8c75f17acee259094841b65e3d79f15c712d6972aa338435d11c691d30307e237b40d84791d75a59fbd", 0x75, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078000000e0e0004df6bc304e2000089078ef7fa336fa6e4d3fe83378"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 2.149902566s ago: executing program 0 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x3c) 1.581803989s ago: executing program 0 (id=1361): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) (async) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x300, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) write(r0, &(0x7f0000000340)="372b830fece200ddc7e08af20d187352d44a21dc1d9d03289469b4c1629b3ad7a7cce33a4ada74bc", 0x28) 1.542721582s ago: executing program 0 (id=1354): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x4}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000440)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42ab9c2cb963049f346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0a9f1ae8ed5da24421c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d61422bc30e6e10e22d720771a4f8e3f24c0b1990d233508cbf95d279f5c7ac0c4d0dbc05f89d4d67a6fb06b44f64ef6e2ae9122c65") bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) socket(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000000)=0x100ce, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) 1.328569609s ago: executing program 4 (id=1357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xebd, @mcast1}, 0x1c) r1 = syz_open_pts(0xffffffffffffffff, 0x4500c0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x88, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x2001) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0000, 0x0) dup(r4) syz_open_dev$tty1(0xc, 0x4, 0x4) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='autofs\x00', 0x8040, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f0000000080)='./file0\x00', 0xe960e1062f48eff3, 0x12d) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x20000000000000bf, &(0x7f0000000480)=ANY=[], 0x0, 0x80000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) 797.713839ms ago: executing program 2 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x3c) (fail_nth: 2) 552.73614ms ago: executing program 2 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)={0x268, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @nested={0x248, 0x120, 0x0, 0x1, [@generic="040b486a7a3759e0c38570d9364b461cf6f867bef20506ebda33a7e8721f8414eab716ab0033dd5bbbdafe600af160c71d0f2758289c988719bedecdc75b3f6ce8776d2c426408e3265dbcdc41aa1818498e15ab82a9939d75b4fb0a8cfb3efa4b04d0125bbf20a52ae873cfb31818835c76005efecd18bfcb2da8fc367cb2cc4aba8a66a51b4de3dea29eb50601a0037cca3eac097e837a38442173ed556944673bbac68e0e8e6dfd64cb56f267cffac2b7eb3e67a0c8527216a076bd3e3eda1ce0c72653e0c545dcf81e9b25fd046df21c4a5756a169cb58f463a7b36c465ef165582790b40aa814a36392d055eabb2d1677d36b0549c2e01764", @typed={0x8, 0x4a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x129}, @generic="a7032e8cf2c354de6bd6a075324f365dcaac04ceb10376e01d016f2a8dbf9021173d6f3495d6011ebc51759956d7079385f7ef4098d494577a21ee056964ff9ae198185231b27e45a5fc38b84b8f9371717be7a85a4f85108fca26ce1e9e0c2af8b4f049f78dd179695205d1a338de221810b7866e1cf7d80446a84cb3b945090b1bd710b08dafd7f0364641f85d739d445215275f054fa8aecd7d7938c6fc829be19fe1e531936c08d4e4ed8da3c761bfd08586e16fb9a076e088859024be61db1a93", @generic="981e7807cb069285f29ccc3796937c719ac75de45f6f22f5c20a1e97735b4cfee9c2e73321ab0eacce680dbe2490c1362b5f206d892b553534322243410259b513d72e4e6dc379cada4cca17effebd40439539e741a7496504839a0e061cd840e49ba2b5fe43056fb80e62d8a9b584c201df"]}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x268}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd07, &(0x7f0000000000)="040000000000000000000000380100") (fail_nth: 5) 539.620166ms ago: executing program 2 (id=1363): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x10000f4}) (fail_nth: 2) 539.207934ms ago: executing program 3 (id=1364): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ppoll(&(0x7f0000000080)=[{r0, 0xc511}], 0x1, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) unshare(0x6020400) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x88) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xa610) 363.471761ms ago: executing program 3 (id=1365): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, &(0x7f00000022c0)=""/4109, &(0x7f0000000080)=0x1055) recvmmsg(r1, &(0x7f0000005880)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000032c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/72, 0x48}, {&(0x7f0000001140)=""/110, 0x6e}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/143, 0x8f}, {&(0x7f0000003280)=""/15, 0xf}], 0x7, &(0x7f0000003300)=""/213, 0xd5}, 0x7}, {{&(0x7f0000003400)=@un=@abs, 0x80, &(0x7f00000036c0)=[{&(0x7f0000005980)=""/127, 0x7f}, {&(0x7f0000003500)=""/131, 0x83}, {&(0x7f00000035c0)=""/39, 0x27}, {&(0x7f0000003600)=""/152, 0x98}], 0x4, &(0x7f0000003700)=""/115, 0x73}, 0x5}, {{&(0x7f0000003780)=@ethernet, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003800)=""/198, 0xc6}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/175, 0xaf}], 0x3, &(0x7f0000004a00)=""/177, 0xb1}, 0x1}, {{&(0x7f0000004b00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004b80)=""/192, 0xc0}, {&(0x7f0000004c40)=""/185, 0xb9}, {&(0x7f0000004d00)=""/23, 0x17}, {&(0x7f0000004d40)=""/88, 0x58}], 0x4, &(0x7f0000004e00)=""/177, 0xb1}, 0x24}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004ec0)=""/9, 0x9}, {&(0x7f0000004f00)=""/142, 0x8e}, {&(0x7f0000004fc0)=""/7, 0x7}], 0x3}, 0x2}, {{&(0x7f0000005040)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000005780)=[{&(0x7f00000050c0)=""/25, 0x19}, {&(0x7f0000005100)=""/82, 0x52}, {&(0x7f0000005180)=""/91, 0x5b}, {&(0x7f0000005200)=""/216, 0xd8}, {&(0x7f0000005300)=""/147, 0x93}, {&(0x7f00000053c0)=""/213, 0xd5}, {&(0x7f00000054c0)=""/236, 0xec}, {&(0x7f00000055c0)=""/199, 0xc7}, {&(0x7f00000056c0)}, {&(0x7f0000003480)=""/91, 0x5b}], 0xa, &(0x7f0000005800)=""/128, 0x80}, 0x7}], 0x6, 0x100, &(0x7f0000005940)={0x77359400}) 304.463506ms ago: executing program 2 (id=1366): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0xfffffffc, 0x1, 0x100}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="18000000010000", 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r9, 0x901, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x404c0e4}, 0x20000804) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fdc7df250600000008000d000291000008000100d0"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x336}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xca}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async) 283.548006ms ago: executing program 4 (id=1367): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 248.332137ms ago: executing program 2 (id=1368): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) 117.266294ms ago: executing program 2 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/file0\x00', 0x200, 0x1c9) write(r0, &(0x7f0000000380)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vidtv.0', 0x7) 24.976411ms ago: executing program 3 (id=1370): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0xe, 0x3, 0x18284, 0x0, 0x2}, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r8, 0x4000401}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r10, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x54) getgid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000208", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r11 = socket(0x200000000000011, 0x2, 0xfffffffd) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r12, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000002c0)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r14, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1371): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="11223344556677889900aabbccdd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x400, 0x2, 0x5, 0x8}, {0x9, 0x5, 0x3, 0x2, 0x20, 0xff, 0x65, 0xa5}, {0x9, 0x5, 0xe, 0x3, 0x0, 0x39, 0x97, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000780)={0xc, &(0x7f00000005c0)={0x40, 0x3, 0xdb, {0xdb, 0x23, "26028c9485ae65238c4407511637201e3c2c6b8ca9e24a3421d490149cc443360e7b5013768bb7da2f7b6b830dc585872386088a7430f0e2d8a03372dae0b1fc02e4abf155b52772b19e03ac799aadaee6df242e3bdf5f42e73aa3d470dfc1933f89293599a187c4d13caeca2dddcd8fee43ed9afbf33915c96987b6c193ac4490e8b429dea42438d236be52cbf6918603ecf3291bc6bdbb472089202a0b48a0175cd7cd3f678e1198ea8fe708111680899a695ead8d2e0fe6a5964356c77774776175a99a89b0fb2ae02dea3d34ade328212330ba3431bcfb"}}, &(0x7f00000006c0)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "2aee1f628bbcedc1b288dd73aa6dc65427496482c77c9d3193e5e7b36d5a7e42edf8169b2312f8ddccd55c766755c4d0af6e180514db6f5613b8853a9ddd1b44217cf039affe10a6628d7e78ea43e6e8ae42bcd8f580fbd03d8e36432a77fe038944fd4e7d7697b545b07b62a574537ba2a6bb266bfefc5cbcfd7e1eaf5560d23a4a5b4afe0bb54369ddd307454bc057f90374e0f583b5be3f3117f5d9efafa48e"}}}, &(0x7f0000000d40)={0x10, &(0x7f00000007c0)={0x0, 0x16, 0xed, "2b721815ce0a9554e43ea62e0783d02d3609970653d776c6ba757cfc5f454a37f83875264a3c0cfc22a1ca80cc6b349fabe6245dca6072c5c2b1de5380c6a6d65a370aa52b82f8f3c2e01860e3bf627212b7e56c587c07bc5afeebd79da3994ea3ecdd5ee5d56c0b49a5aa562d3f7f9f9ff2962d84dcd31eae217353e2123e21e2f5a39d8208a72037b3fbb9d67243c775623992a96233642b66ac8b44632090c6dd0b430f119abe56f315f9fce176e2e2a73913ba821787df4a1305d15f03f31d3b48b4981e0bf739d9389e4cbdcf6082f686c9a847bbf1ad618048428670c68d81f17677c7d6a7ee00778bb2"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d00)={0x21, 0x0, 0x4, "15b11bd7"}}) read$hiddev(r3, &(0x7f0000000040)=""/117, 0x75) kernel console output (not intermixed with test programs): g [ 412.876121][ T59] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 412.879848][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 412.883298][ T59] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 412.886767][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 412.890595][ T59] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 412.894049][ T59] usb 8-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 412.897344][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 412.901144][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 412.904739][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 412.907938][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 412.911582][ T59] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 412.914901][ T59] usb 8-1: config 11 interface 31 has no altsetting 0 [ 412.917035][ T59] usb 8-1: config 11 interface 188 has no altsetting 0 [ 412.921342][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.923871][ T59] usb 8-1: Product: 㰁 [ 412.925235][ T59] usb 8-1: Manufacturer: Ч [ 412.926687][ T59] usb 8-1: SerialNumber: Ў [ 413.060375][ T9844] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 413.104000][ T9844] typec_fusb302 0-0022: failed to request gpio_int_n [ 413.106729][ T9846] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 413.141440][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 413.149481][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 413.162840][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 413.167690][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 413.182495][ T9847] Invalid option length (1047276) for dns_resolver key [ 413.198978][ T9844] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 413.199791][ T9846] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 413.208301][ T9844] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 413.224998][ T59] usb 8-1: USB disconnect, device number 55 [ 413.242097][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'. [ 413.245232][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'. [ 413.554857][ T9854] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 413.562691][ T9853] fuse: Bad value for 'fd' [ 413.641689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.765223][ T9866] netlink: 'syz.2.1081': attribute type 4 has an invalid length. [ 413.785563][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 413.891529][ T9868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.066586][ T9875] bond0: Error: Cannot enslave bond to itself. [ 414.082621][ T9871] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.087037][ T9871] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.126857][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 414.166709][ T9871] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.170972][ T9871] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.228687][ T9871] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.238221][ T9871] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.301280][ T9871] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.304361][ T9871] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.378329][ T8486] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 414.428866][ T5546] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.434867][ T5546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.438307][ T5546] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.441161][ T5546] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.468248][ T5546] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.471413][ T5546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.474300][ T5546] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.477026][ T5546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.528983][ T8486] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 414.533071][ T8486] usb 8-1: config 0 has no interfaces? [ 414.536602][ T8486] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 414.540102][ T8486] usb 8-1: Product: syz [ 414.542214][ T8486] usb 8-1: Manufacturer: syz [ 414.544344][ T8486] usb 8-1: SerialNumber: syz [ 414.548800][ T8486] usb 8-1: config 0 descriptor?? [ 414.688205][ T59] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 414.795439][ T8486] usb 8-1: USB disconnect, device number 56 [ 414.840323][ T59] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 414.859423][ T59] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 414.862652][ T59] usb 7-1: Product: syz [ 414.867159][ T59] usb 7-1: Manufacturer: syz [ 414.869137][ T59] usb 7-1: SerialNumber: syz [ 414.871911][ T59] usb 7-1: config 0 descriptor?? [ 414.875690][ T59] ch341 7-1:0.0: ch341-uart converter detected [ 415.162860][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 415.170571][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 415.828875][ T9890] Console: switching to colour dummy device 80x25 [ 415.959102][ T59] usb 7-1: failed to receive control message: -110 [ 415.962483][ T59] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 416.572978][ T9891] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 416.594125][ T9891] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 416.596746][ T9891] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 416.599894][ T9891] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 416.604131][ T9891] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 416.637917][ T9894] sctp: [Deprecated]: syz.0.1091 (pid 9894) Use of int in max_burst socket option. [ 416.637917][ T9894] Use struct sctp_assoc_value instead [ 416.668917][ T9891] pci 0000:00:01.0: Adding to iommu group 1 [ 416.672565][ T9] usb 7-1: USB disconnect, device number 58 [ 416.676483][ T9] ch341 7-1:0.0: device disconnected [ 416.690719][ T9891] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 416.692980][ T9891] pci 0000:00:01.0: vgaarb: bridge control possible [ 416.695096][ T9891] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 416.706132][ T9891] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 416.709153][ T9891] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 416.712714][ T9891] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 416.725334][ T9891] [drm] Found bochs VGA, ID 0xb0c5. [ 416.727462][ T9891] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 416.738048][ T9891] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 416.950546][ T1353] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 417.036021][ T9891] Console: switching to colour frame buffer device 160x50 [ 417.110914][ T1353] usb 5-1: not running at top speed; connect to a high speed hub [ 417.110947][ T1353] usb 5-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 417.112356][ T1353] usb 5-1: config 11 has an invalid interface number: 31 but max is 2 [ 417.112379][ T1353] usb 5-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 417.112396][ T1353] usb 5-1: config 11 has an invalid interface number: 188 but max is 2 [ 417.112415][ T1353] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 417.112430][ T1353] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 417.112444][ T1353] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 417.112459][ T1353] usb 5-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 417.112472][ T1353] usb 5-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 417.112482][ T1353] usb 5-1: config 11 has no interface number 0 [ 417.112491][ T1353] usb 5-1: config 11 has no interface number 1 [ 417.112526][ T1353] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 417.112544][ T1353] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 417.112558][ T1353] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 417.112570][ T1353] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 417.112584][ T1353] usb 5-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 417.112596][ T1353] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 417.112607][ T1353] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 417.112623][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 417.112635][ T1353] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 417.112650][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 417.112663][ T1353] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 417.112677][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 417.112689][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 417.112700][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 417.112712][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 417.112724][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 417.112736][ T1353] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 417.112748][ T1353] usb 5-1: config 11 interface 31 has no altsetting 0 [ 417.112757][ T1353] usb 5-1: config 11 interface 188 has no altsetting 0 [ 417.116615][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.116636][ T1353] usb 5-1: Product: 㰁 [ 417.116648][ T1353] usb 5-1: Manufacturer: Ч [ 417.116662][ T1353] usb 5-1: SerialNumber: Ў [ 417.332906][ T9891] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 417.351680][ T1353] usb 5-1: USB disconnect, device number 56 [ 417.912618][ T9900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.911365][ T9918] netlink: 'syz.2.1097': attribute type 11 has an invalid length. [ 419.227787][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.240536][ T9923] __nla_validate_parse: 6 callbacks suppressed [ 419.240548][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 420.245780][ T9945] input: syz0 as /devices/virtual/input/input17 [ 421.248215][ T6096] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 421.269136][ T9966] pim6reg: entered allmulticast mode [ 421.408668][ T6096] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 421.412800][ T6096] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 421.415852][ T6096] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 421.421975][ T6096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.424559][ T6096] usb 7-1: Product: syz [ 421.425891][ T6096] usb 7-1: Manufacturer: syz [ 421.427306][ T6096] usb 7-1: SerialNumber: syz [ 421.431113][ T9961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.433882][ T9961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.437955][ T6096] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 421.441586][ T6096] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 421.445307][ T6096] usbserial_generic 7-1:1.0: generic converter detected [ 421.450703][ T6096] usb 7-1: generic converter now attached to ttyUSB0 [ 421.643834][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 421.646929][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 421.654882][ T9961] netlink: 'syz.2.1112': attribute type 10 has an invalid length. [ 421.657647][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1112'. [ 421.663027][ T9961] fuse: Bad value for 'group_id' [ 421.664686][ T9961] fuse: Bad value for 'group_id' [ 421.688229][ T5837] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 421.773656][ T8486] usb 7-1: USB disconnect, device number 59 [ 421.777998][ T8486] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 421.780848][ T8486] usbserial_generic 7-1:1.0: device disconnected [ 421.844460][ T5837] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 421.850699][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.853837][ T5837] usb 8-1: Product: syz [ 421.855482][ T5837] usb 8-1: Manufacturer: syz [ 421.857409][ T5837] usb 8-1: SerialNumber: syz [ 422.200075][ T6096] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 422.376761][ T5837] rtl8150 8-1:1.0: couldn't reset the device [ 422.378956][ T5837] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 422.384201][ T5837] usb 8-1: USB disconnect, device number 57 [ 422.577892][ T9990] comedi: valid board names for 8255 driver are: [ 422.583649][ T9990] 8255 [ 422.585415][ T9990] comedi: valid board names for vmk80xx driver are: [ 422.587567][ T9990] vmk80xx [ 422.588768][ T9990] comedi: valid board names for usbduxsigma driver are: [ 422.591276][ T9990] usbduxsigma [ 422.592598][ T9990] comedi: valid board names for usbduxfast driver are: [ 422.594866][ T9990] usbduxfast [ 422.595956][ T9990] comedi: valid board names for usbdux driver are: [ 422.598140][ T9990] usbdux [ 422.599221][ T9990] comedi: valid board names for ni6501 driver are: [ 422.601408][ T9990] ni6501 [ 422.602456][ T9990] comedi: valid board names for dt9812 driver are: [ 422.604772][ T9990] dt9812 [ 422.605745][ T9990] comedi: valid board names for ni_labpc_cs driver are: [ 422.607969][ T9990] ni_labpc_cs [ 422.609244][ T9990] comedi: valid board names for ni_daq_700 driver are: [ 422.611509][ T9990] ni_daq_700 [ 422.612684][ T9990] comedi: valid board names for labpc_pci driver are: [ 422.614864][ T9990] labpc_pci [ 422.615924][ T9990] comedi: valid board names for adl_pci9118 driver are: [ 422.618147][ T9990] pci9118dg [ 422.619201][ T9990] pci9118hg [ 422.620269][ T9990] pci9118hr [ 422.621349][ T9990] comedi: valid board names for 8255_pci driver are: [ 422.623673][ T9990] 8255_pci [ 422.624742][ T9990] comedi: valid board names for s526 driver are: [ 422.626823][ T9990] s526 [ 422.627722][ T9990] comedi: valid board names for multiq3 driver are: [ 422.629878][ T9990] multiq3 [ 422.631371][ T9990] comedi: valid board names for pcmuio driver are: [ 422.634126][ T9990] pcmuio48 [ 422.635243][ T9990] pcmuio96 [ 422.636278][ T9990] comedi: valid board names for pcmmio driver are: [ 422.638532][ T9990] pcmmio [ 422.639663][ T9990] comedi: valid board names for pcmda12 driver are: [ 422.642493][ T9990] pcmda12 [ 422.643701][ T9990] comedi: valid board names for pcmad driver are: [ 422.645908][ T9990] pcmad12 [ 422.646951][ T9990] pcmad16 [ 422.647968][ T9990] comedi: valid board names for ni_labpc driver are: [ 422.650165][ T9990] lab-pc-1200 [ 422.651298][ T9990] lab-pc-1200ai [ 422.652472][ T9990] lab-pc+ [ 422.653446][ T9990] comedi: valid board names for atmio16 driver are: [ 422.655592][ T9990] atmio16 [ 422.656654][ T9990] atmio16d [ 422.657903][ T9990] comedi: valid board names for ni_at_ao driver are: [ 422.660396][ T9990] at-ao-6 [ 422.661776][ T9990] at-ao-10 [ 422.662949][ T9990] comedi: valid board names for ni_at_a2150 driver are: [ 422.665017][ T9990] ni_at_a2150 [ 422.666107][ T9990] comedi: valid board names for adq12b driver are: [ 422.668218][ T9990] adq12b [ 422.669195][ T9990] comedi: valid board names for mpc624 driver are: [ 422.671237][ T9990] mpc624 [ 422.672214][ T9990] comedi: valid board names for c6xdigio driver are: [ 422.674359][ T9990] c6xdigio [ 422.675387][ T9990] comedi: valid board names for aio_iiro_16 driver are: [ 422.677532][ T9990] aio_iiro_16 [ 422.678690][ T9990] comedi: valid board names for aio_aio12_8 driver are: [ 422.680807][ T9990] aio_aio12_8 [ 422.681955][ T9990] aio_ai12_8 [ 422.683100][ T9990] aio_ao12_4 [ 422.684466][ T9990] comedi: valid board names for fl512 driver are: [ 422.686955][ T9990] fl512 [ 422.688013][ T9990] comedi: valid board names for dmm32at driver are: [ 422.690078][ T9990] dmm32at [ 422.691065][ T9990] comedi: valid board names for dt282x driver are: [ 422.693060][ T9990] dt2821 [ 422.693996][ T9990] dt2821-f [ 422.694995][ T9990] dt2821-g [ 422.696103][ T9990] dt2823 [ 422.697107][ T9990] dt2824-pgh [ 422.698204][ T9990] dt2824-pgl [ 422.699329][ T9990] dt2825 [ 422.700397][ T9990] dt2827 [ 422.701437][ T9990] dt2828 [ 422.702459][ T9990] dt2829 [ 422.703432][ T9990] dt21-ez [ 422.704615][ T9990] dt23-ez [ 422.705630][ T9990] dt24-ez [ 422.706795][ T9990] dt24-ez-pgl [ 422.707920][ T9990] comedi: valid board names for dt2817 driver are: [ 422.710255][ T9990] dt2817 [ 422.711245][ T9990] comedi: valid board names for dt2815 driver are: [ 422.713353][ T9990] dt2815 [ 422.714298][ T9990] comedi: valid board names for dt2814 driver are: [ 422.716343][ T9990] dt2814 [ 422.717275][ T9990] comedi: valid board names for dt2811 driver are: [ 422.719306][ T9990] dt2811-pgh [ 422.720391][ T9990] dt2811-pgl [ 422.721550][ T9990] comedi: valid board names for dt2801 driver are: [ 422.723573][ T9990] dt2801 [ 422.724585][ T9990] comedi: valid board names for das6402 driver are: [ 422.726583][ T9990] das6402-12 [ 422.727737][ T9990] das6402-16 [ 422.728858][ T9990] comedi: valid board names for das1800 driver are: [ 422.731341][ T9990] das-1701st [ 422.732436][ T9990] das-1701st-da [ 422.734888][ T9990] das-1702st [ 422.736165][ T9990] das-1702st-da [ 422.737357][ T9990] das-1702hr [ 422.738599][ T9990] das-1702hr-da [ 422.739793][ T9990] das-1701ao [ 422.740974][ T9990] das-1702ao [ 422.742097][ T9990] das-1801st [ 422.743239][ T9990] das-1801st-da [ 422.744480][ T9990] das-1802st [ 422.745600][ T9990] das-1802st-da [ 422.746815][ T9990] das-1802hr [ 422.747920][ T9990] das-1802hr-da [ 422.749145][ T9990] das-1801hc [ 422.750355][ T9990] das-1802hc [ 422.751510][ T9990] das-1801ao [ 422.752652][ T9990] das-1802ao [ 422.753919][ T9990] comedi: valid board names for das800 driver are: [ 422.756005][ T9990] das-800 [ 422.757059][ T9990] cio-das800 [ 422.758245][ T9990] das-801 [ 422.759743][ T9990] cio-das801 [ 422.760831][ T9990] das-802 [ 422.762004][ T9990] cio-das802 [ 422.763070][ T9990] cio-das802/16 [ 422.764216][ T9990] comedi: valid board names for isa-das08 driver are: [ 422.766332][ T9990] isa-das08 [ 422.767369][ T9990] das08-pgm [ 422.768618][ T9990] das08-pgh [ 422.769721][ T9990] das08-pgl [ 422.771043][ T9990] das08-aoh [ 422.772107][ T9990] das08-aol [ 422.773158][ T9990] das08-aom [ 422.774231][ T9990] das08/jr-ao [ 422.775329][ T9990] das08jr-16-ao [ 422.776476][ T9990] pc104-das08 [ 422.777576][ T9990] das08jr/16 [ 422.778730][ T9990] comedi: valid board names for das16m1 driver are: [ 422.780819][ T9990] das16m1 [ 422.781838][ T9990] comedi: valid board names for dac02 driver are: [ 422.783912][ T9990] dac02 [ 422.784919][ T9990] comedi: valid board names for rti802 driver are: [ 422.787027][ T9990] rti802 [ 422.788136][ T9990] comedi: valid board names for rti800 driver are: [ 422.790287][ T9990] rti800 [ 422.791508][ T9990] rti815 [ 422.792524][ T9990] comedi: valid board names for pcm3724 driver are: [ 422.794643][ T9990] pcm3724 [ 422.795645][ T9990] comedi: valid board names for pcl818 driver are: [ 422.797711][ T9990] pcl818l [ 422.798776][ T9990] pcl818h [ 422.799781][ T9990] pcl818hd [ 422.801131][ T9990] pcl818hg [ 422.802153][ T9990] pcl818 [ 422.803199][ T9990] pcl718 [ 422.804173][ T9990] pcm3718 [ 422.805295][ T9990] comedi: valid board names for pcl816 driver are: [ 422.807395][ T9990] pcl816 [ 422.808529][ T9990] pcl814b [ 422.822567][ T5837] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 422.830282][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 422.835024][ T9990] comedi: valid board names for pcl812 driver are: [ 422.837338][ T9990] pcl812 [ 422.838867][ T9990] pcl812pg [ 422.840229][ T9990] acl8112pg [ 422.841701][ T9990] acl8112dg [ 422.842902][ T9990] acl8112hg [ 422.844092][ T9990] a821pgl [ 422.845320][ T9990] a821pglnda [ 422.846638][ T9990] a821pgh [ 422.847778][ T9990] a822pgl [ 422.849026][ T9990] a822pgh [ 422.850117][ T9990] a823pgl [ 422.851121][ T9990] a823pgh [ 422.852308][ T9990] pcl813 [ 422.853415][ T9990] pcl813b [ 422.854600][ T9990] acl8113 [ 422.855558][ T9990] iso813 [ 422.856676][ T9990] acl8216 [ 422.857867][ T9990] a826pg [ 422.859043][ T9990] comedi: valid board names for pcl730 driver are: [ 422.861315][ T9990] pcl730 [ 422.862491][ T9990] iso730 [ 422.863779][ T9990] acl7130 [ 422.865785][ T9990] pcm3730 [ 422.866978][ T9990] pcl725 [ 422.868230][ T9990] p8r8dio [ 422.869356][ T9990] acl7225b [ 422.870576][ T9990] p16r16dio [ 422.871824][ T9990] pcl733 [ 422.872966][ T9990] pcl734 [ 422.874276][ T9990] opmm-1616-xt [ 422.875641][ T9990] pearl-mm-p [ 422.876895][ T9990] ir104-pbf [ 422.878237][ T9990] comedi: valid board names for pcl726 driver are: [ 422.880506][ T9990] pcl726 [ 422.881696][ T9990] pcl727 [ 422.882902][ T9990] pcl728 [ 422.884175][ T9990] acl6126 [ 422.885458][ T9990] acl6128 [ 422.886704][ T9990] comedi: valid board names for pcl724 driver are: [ 422.889077][ T9990] pcl724 [ 422.890227][ T9990] pcl722 [ 422.891312][ T9990] pcl731 [ 422.892324][ T9990] acl7122 [ 422.896927][ T9990] acl7124 [ 422.898164][ T9990] pet48dio [ 422.899340][ T9990] pcmio48 [ 422.900586][ T9990] onyx-mm-dio [ 422.901900][ T9990] comedi: valid board names for pcl711 driver are: [ 422.904116][ T9990] pcl711 [ 422.905275][ T9990] pcl711b [ 422.906532][ T9990] acl8112hg [ 422.907806][ T9990] acl8112dg [ 422.908981][ T9990] comedi: valid board names for amplc_pc263 driver are: [ 422.911590][ T9990] pc263 [ 422.912842][ T9990] comedi: valid board names for amplc_pc236 driver are: [ 422.915363][ T9990] pc36at [ 422.916766][ T9990] comedi: valid board names for amplc_dio200 driver are: [ 422.919637][ T9990] pc212e [ 422.923260][ T9990] pc214e [ 422.924495][ T9990] pc215e [ 422.925870][ T9990] pc218e [ 422.927168][ T9990] pc272e [ 422.928365][ T9990] comedi: valid board names for comedi_parport driver are: [ 422.931125][ T9990] comedi_parport [ 422.937038][ T9990] comedi: valid board names for comedi_test driver are: [ 422.940813][ T9990] comedi_test [ 422.943218][ T9990] comedi: valid board names for comedi_bond driver are: [ 422.946200][ T9990] comedi_bond [ 423.238501][ T1353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.288405][ T851] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 424.448661][ T851] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 424.454846][ T851] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 424.457473][ T851] usb 8-1: Product: syz [ 424.458884][ T851] usb 8-1: Manufacturer: syz [ 424.460827][ T851] usb 8-1: SerialNumber: syz [ 424.464193][ T851] usb 8-1: config 0 descriptor?? [ 424.469161][ T851] ch341 8-1:0.0: ch341-uart converter detected [ 424.742952][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 424.748317][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 424.751592][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 424.754457][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 424.757183][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 424.925091][ T851] usb 8-1: failed to receive control message: -71 [ 424.927750][ T851] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 424.933149][ T851] usb 8-1: USB disconnect, device number 58 [ 424.939054][ T851] ch341 8-1:0.0: device disconnected [ 427.954409][ T5836] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.959609][ T5836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.963484][ T5836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 53136 - 0 [ 428.040008][ T5836] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.043118][ T5836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.046109][ T5836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 53136 - 0 [ 428.114081][ T5836] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.117796][ T5836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.121876][ T5836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 53136 - 0 [ 428.195410][ T5836] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.199426][ T5836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.203255][ T5836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 53136 - 0 [ 428.330144][ T5836] dummy0: left allmulticast mode [ 428.338876][ T5836] bridge0: port 3(dummy0) entered disabled state [ 428.342616][ T5836] bridge_slave_1: left allmulticast mode [ 428.345320][ T5836] bridge_slave_1: left promiscuous mode [ 428.347208][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.351434][ T5836] bridge_slave_0: left allmulticast mode [ 428.353184][ T5836] bridge_slave_0: left promiscuous mode [ 428.354930][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.359442][ T5836] pim6reg: left allmulticast mode [ 428.452360][ T5836] gretap0 (unregistering): left promiscuous mode [ 428.478621][ T5836] bond0 (unregistering): left promiscuous mode [ 428.480607][ T5836] bond_slave_0: left promiscuous mode [ 428.482438][ T5836] bond_slave_1: left promiscuous mode [ 428.497003][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.507569][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.511544][ T5836] bond0 (unregistering): Released all slaves [ 428.689729][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 428.877412][ T5836] hsr_slave_0: left promiscuous mode [ 428.879583][ T5836] hsr_slave_1: left promiscuous mode [ 428.881786][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.884218][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.887059][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.889792][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.896802][ T5836] veth1_macvtap: left promiscuous mode [ 428.899743][ T5836] veth0_macvtap: left promiscuous mode [ 428.901574][ T5836] veth1_vlan: left promiscuous mode [ 428.903278][ T5836] veth0_vlan: left promiscuous mode [ 429.076501][ T5836] team0 (unregistering): Port device team_slave_1 removed [ 429.087519][ T5836] team0 (unregistering): Port device team_slave_0 removed [ 429.170141][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.355788][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.564445][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 429.590322][ T5836] IPVS: stop unused estimator thread 0... [ 432.740868][T10089] lo: entered allmulticast mode [ 432.750173][T10089] lo: left allmulticast mode [ 432.752163][T10089] pim6reg: left allmulticast mode [ 432.784844][ T5763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.796338][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.802677][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.803002][T10088] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.811387][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.815794][T10088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.818701][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.847274][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 432.927597][T10088] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.964563][T10088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.094614][T10088] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.097644][T10088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.188169][ T1353] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 433.247723][T10088] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.251042][T10088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.360691][ T1353] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.365000][ T1353] usb 7-1: config 0 has no interfaces? [ 433.371269][ T1353] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.380904][ T1353] usb 7-1: Product: syz [ 433.382315][ T1353] usb 7-1: Manufacturer: syz [ 433.389715][ T1353] usb 7-1: SerialNumber: syz [ 433.396783][ T1353] usb 7-1: config 0 descriptor?? [ 433.549294][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.551767][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.554309][T10090] bridge_slave_0: entered allmulticast mode [ 433.558456][T10090] bridge_slave_0: entered promiscuous mode [ 433.565114][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.567434][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.569897][T10090] bridge_slave_1: entered allmulticast mode [ 433.572853][T10090] bridge_slave_1: entered promiscuous mode [ 433.588263][T10090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.592627][T10090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.607339][T10090] team0: Port device team_slave_0 added [ 433.610644][T10090] team0: Port device team_slave_1 added [ 433.626709][T10090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.629146][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.637732][T10090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.643798][T10090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.646692][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.655331][T10090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.678591][T10090] hsr_slave_0: entered promiscuous mode [ 433.680856][T10090] hsr_slave_1: entered promiscuous mode [ 433.682966][T10090] debugfs: 'hsr0' already exists in 'hsr' [ 433.684767][T10090] Cannot create hsr debugfs directory [ 433.690644][ T6096] usb 7-1: USB disconnect, device number 60 [ 433.760064][ T5546] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.762765][ T5546] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.765357][ T5546] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.767902][ T5546] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.820169][T10090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.922208][T10090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.925018][T10090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.930929][T10090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.950080][T10090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.962539][T10090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.966700][T10090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.985420][T10090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.020754][ T5836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.024121][ T5836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.028489][ T5836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.034285][ T5836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.053377][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.055879][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.058882][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.061663][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.139201][T10090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.157846][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.160911][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.171142][T10090] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.182609][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.184975][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.190219][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.192632][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.501103][T10090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.541613][T10158] dummy0: left allmulticast mode [ 434.543479][T10158] bridge0: port 3(dummy0) entered disabled state [ 434.550128][T10158] bridge_slave_0: left allmulticast mode [ 434.552103][T10158] bridge_slave_0: left promiscuous mode [ 434.554116][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.559264][T10158] bridge_slave_1: left allmulticast mode [ 434.561136][T10158] bridge_slave_1: left promiscuous mode [ 434.562992][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.575064][T10158] bond0: (slave bond_slave_0): Releasing backup interface [ 434.580861][T10158] bond0: (slave bond_slave_1): Releasing backup interface [ 434.587118][T10158] team0: Port device team_slave_0 removed [ 434.594055][T10156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.597703][T10158] team0: Port device team_slave_1 removed [ 434.604976][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.607325][T10158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.615632][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.618520][T10158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.623511][T10158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.641660][T10161] team0: Mode changed to "random" [ 434.674304][T10158] vlan0: entered promiscuous mode [ 434.685587][T10158] team0: Port device vlan0 added [ 434.695710][T10158] tipc: Started in network mode [ 434.697336][T10158] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 434.704061][T10158] tipc: Enabled bearer , priority 0 [ 434.777773][T10090] veth0_vlan: entered promiscuous mode [ 434.793043][T10090] veth1_vlan: entered promiscuous mode [ 434.832801][T10090] veth0_macvtap: entered promiscuous mode [ 434.843464][T10090] veth1_macvtap: entered promiscuous mode [ 434.867278][T10090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.899879][T10090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.920001][ T5763] Bluetooth: hci1: command tx timeout [ 434.932237][T10176] lo: entered allmulticast mode [ 434.937001][T10176] lo: left allmulticast mode [ 434.948818][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.952730][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.956221][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.020546][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.064747][T10168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 435.120366][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 435.139430][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.145464][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.181825][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.184674][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.650831][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 435.831426][ T6096] tipc: Node number set to 11578026 [ 436.338294][ T8486] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 436.389203][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.488684][ T8486] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 436.496824][ T8486] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 436.500072][ T8486] usb 5-1: Product: syz [ 436.501394][ T8486] usb 5-1: Manufacturer: syz [ 436.502830][ T8486] usb 5-1: SerialNumber: syz [ 436.504629][T10219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.508711][ T8486] usb 5-1: config 0 descriptor?? [ 436.512266][ T8486] ch341 5-1:0.0: ch341-uart converter detected [ 436.630453][T10229] bond1: option arp_validate: invalid value (18446744073709551615) [ 436.652620][T10229] bond1 (unregistering): Released all slaves [ 436.667822][T10225] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.671372][T10225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.674934][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 436.689160][ T5853] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 436.784411][T10225] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.787880][T10225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.796207][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 436.801758][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 436.805479][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 436.812397][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 436.815672][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 436.830440][T10234] ip6gretap0: entered promiscuous mode [ 436.838694][ T5853] usb 7-1: Using ep0 maxpacket: 16 [ 436.847752][ T5853] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 436.855763][ T5853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.860365][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.864612][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 436.868752][ T5853] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 436.870352][T10225] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.872830][ T5853] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.876905][T10225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.883067][ T5853] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.889096][ T5853] usb 7-1: Manufacturer: syz [ 436.894416][ T5853] usb 7-1: config 0 descriptor?? [ 436.918944][ T1345] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 436.948202][T10225] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.958571][T10225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.983373][T10236] netlink: 'syz.4.1149': attribute type 19 has an invalid length. [ 436.999175][ T5763] Bluetooth: hci1: command tx timeout [ 437.063531][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.066418][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.070211][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.072900][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.075467][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.078020][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.080749][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.083416][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.086093][ T1345] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.089419][ T1345] usb 8-1: config 0 has no interfaces? [ 437.092799][ T1345] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 437.095826][ T1345] usb 8-1: Product: syz [ 437.097164][ T1345] usb 8-1: Manufacturer: syz [ 437.098775][ T1345] usb 8-1: SerialNumber: syz [ 437.102442][ T1345] usb 8-1: config 0 descriptor?? [ 437.158891][ T5853] rc_core: IR keymap rc-hauppauge not found [ 437.161313][ T5853] Registered IR keymap rc-empty [ 437.162933][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.178314][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.199556][ T5853] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 437.203877][ T5853] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 437.209826][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.228604][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.258337][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.278708][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.298236][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.321734][ T5845] usb 8-1: USB disconnect, device number 59 [ 437.330414][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.348278][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.378254][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.398320][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.418793][ T5853] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 437.462721][ T5853] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 437.468234][ T5853] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.489302][ T5853] usb 7-1: USB disconnect, device number 61 [ 437.558465][ T8486] usb 5-1: failed to receive control message: -110 [ 437.560621][ T8486] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 437.598318][ T5845] usb 5-1: USB disconnect, device number 57 [ 437.602508][ T5845] ch341 5-1:0.0: device disconnected [ 437.889068][T10244] lo: entered allmulticast mode [ 437.904054][T10244] lo: left allmulticast mode [ 438.827995][ T37] IPVS: starting estimator thread 0... [ 438.918260][T10264] IPVS: using max 21 ests per chain, 50400 per kthread [ 439.078418][ T5763] Bluetooth: hci1: command tx timeout [ 439.266641][T10276] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.269924][T10276] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.302478][T10277] fuse: Bad value for 'fd' [ 439.316754][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 439.325995][T10276] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.330067][T10276] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.371288][T10281] ipvlan0: left allmulticast mode [ 439.372787][T10281] batadv_slave_1: left allmulticast mode [ 439.376974][T10281] lo: entered allmulticast mode [ 439.380744][T10281] lo: left allmulticast mode [ 439.408203][T10276] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.411903][T10276] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.492222][T10276] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.495767][T10276] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.598312][ T6096] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 439.708690][ T851] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 439.748896][ T6096] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.753218][ T6096] usb 8-1: config 0 has no interfaces? [ 439.763361][ T6096] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 439.766723][ T6096] usb 8-1: Product: syz [ 439.768842][ T6096] usb 8-1: Manufacturer: syz [ 439.770782][ T6096] usb 8-1: SerialNumber: syz [ 439.775415][ T6096] usb 8-1: config 0 descriptor?? [ 439.871569][ T851] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 439.884181][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 439.889657][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.891457][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.891487][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 439.898069][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.904750][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.912119][ T851] usb 5-1: Product: syz [ 439.913874][ T851] usb 5-1: Manufacturer: syz [ 439.915911][ T851] usb 5-1: SerialNumber: syz [ 439.921085][ T851] usb 5-1: config 0 descriptor?? [ 440.128586][ T851] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 440.329843][T10286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.333255][T10286] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 440.397241][T10298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.548197][ T8486] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 440.698740][ T8486] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 440.704098][ T8486] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 440.706751][ T8486] usb 7-1: Product: syz [ 440.708248][ T8486] usb 7-1: Manufacturer: syz [ 440.709804][ T8486] usb 7-1: SerialNumber: syz [ 440.712904][ T8486] usb 7-1: config 0 descriptor?? [ 440.717202][ T8486] ch341 7-1:0.0: ch341-uart converter detected [ 441.051623][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 441.057833][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 441.063126][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 441.067489][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 441.158296][ T5764] Bluetooth: hci1: command tx timeout [ 441.488465][ T5546] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.492972][ T5546] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.608645][ T5546] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.615691][ T5546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.625416][ T5546] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.635220][ T5546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.708271][ T5546] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.714527][ T5546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.763919][ T6096] usb 8-1: USB disconnect, device number 60 [ 441.798476][ T8486] usb 7-1: failed to receive control message: -110 [ 441.800677][ T8486] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 442.266803][T10335] lo: entered allmulticast mode [ 442.270908][T10335] lo: left allmulticast mode [ 442.843421][ T851] usb 5-1: USB disconnect, device number 58 [ 442.865602][ T6096] usb 7-1: USB disconnect, device number 62 [ 442.870960][ T6096] ch341 7-1:0.0: device disconnected [ 443.350443][T10352] ip6gretap0: entered promiscuous mode [ 443.415830][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 443.489122][T10351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.518970][T10360] lo: entered allmulticast mode [ 443.522129][T10360] lo: left allmulticast mode [ 443.565448][T10357] syzkaller0: entered promiscuous mode [ 443.567505][T10357] syzkaller0: entered allmulticast mode [ 443.642585][T10368] comedi comedi2: mpc624: a I/O base address must be specified [ 443.653176][T10365] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.657240][T10365] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.682224][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 443.688547][T10370] sctp: [Deprecated]: syz.2.1181 (pid 10370) Use of int in max_burst socket option. [ 443.688547][T10370] Use struct sctp_assoc_value instead [ 443.703100][T10351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.731455][T10365] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.737476][T10365] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.748249][ T58] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 443.796019][T10351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.835364][T10365] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.847579][T10365] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.912448][ T58] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.916367][T10351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.920956][ T58] usb 9-1: config 0 has no interfaces? [ 443.930779][ T58] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.936785][ T58] usb 9-1: Product: syz [ 443.939332][ T58] usb 9-1: Manufacturer: syz [ 443.941540][ T58] usb 9-1: SerialNumber: syz [ 443.945432][T10365] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.945556][ T58] usb 9-1: config 0 descriptor?? [ 443.949210][ T6096] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 443.954055][T10365] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.968194][ T8486] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 443.986015][T10374] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.989621][T10374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.043009][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 444.043427][T10374] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.049429][T10374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.068222][ T5546] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.070986][ T5546] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.078220][ T5546] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.090030][ T5546] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.094453][T10374] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.098566][T10374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.110172][ T6096] usb 7-1: not running at top speed; connect to a high speed hub [ 444.112834][ T6096] usb 7-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 444.116742][ T6096] usb 7-1: config 11 has an invalid interface number: 31 but max is 2 [ 444.118769][ T8486] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.120411][ T6096] usb 7-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 444.122957][ T8486] usb 8-1: config 0 has no interfaces? [ 444.125230][ T6096] usb 7-1: config 11 has an invalid interface number: 188 but max is 2 [ 444.128992][ T8486] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.130351][ T6096] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 444.132829][ T8486] usb 8-1: Product: syz [ 444.135785][ T6096] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 444.136672][ T8486] usb 8-1: Manufacturer: syz [ 444.139487][ T6096] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 444.139500][ T6096] usb 7-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 444.139510][ T6096] usb 7-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 444.139522][ T6096] usb 7-1: config 11 has no interface number 0 [ 444.139530][ T6096] usb 7-1: config 11 has no interface number 1 [ 444.139565][ T6096] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 444.141804][ T8486] usb 8-1: SerialNumber: syz [ 444.143852][ T6096] usb 7-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 444.143868][ T6096] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 444.148480][ T8486] usb 8-1: config 0 descriptor?? [ 444.150084][ T6096] usb 7-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 444.170532][ T6096] usb 7-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 444.174068][ T6096] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 444.177463][ T6096] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 444.181048][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 444.182417][T10374] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.184593][ T6096] usb 7-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 444.184611][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 444.189937][T10374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.192344][ T6096] usb 7-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 444.192364][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 444.192376][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 444.192388][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 444.214087][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 444.214842][ T8486] usb 9-1: USB disconnect, device number 2 [ 444.217562][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 444.217587][ T6096] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 444.217602][ T6096] usb 7-1: config 11 interface 31 has no altsetting 0 [ 444.217612][ T6096] usb 7-1: config 11 interface 188 has no altsetting 0 [ 444.234637][ T6096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.237587][ T6096] usb 7-1: Product: 㰁 [ 444.239041][ T6096] usb 7-1: Manufacturer: Ч [ 444.240468][ T6096] usb 7-1: SerialNumber: Ў [ 444.298223][ T6325] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 444.338345][ T5546] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.341575][ T5546] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.344730][ T5546] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.347800][ T5546] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.350531][ T5546] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.353325][ T5546] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.355973][ T5546] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.359483][ T5546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.446950][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 444.448699][ T6325] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.450064][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 444.453751][ T6325] usb 5-1: config 0 has no interfaces? [ 444.459146][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 444.460904][ T6325] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.462129][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 444.464903][ T6325] usb 5-1: Product: syz [ 444.469160][ T6325] usb 5-1: Manufacturer: syz [ 444.470657][ T6325] usb 5-1: SerialNumber: syz [ 444.478508][ T6325] usb 5-1: config 0 descriptor?? [ 444.490583][ T6096] usb 7-1: USB disconnect, device number 63 [ 444.711534][ T6325] usb 5-1: USB disconnect, device number 59 [ 444.806851][T10377] binder: 10376:10377 ioctl c00c6211 0 returned -14 [ 444.867134][T10378] overlayfs: missing 'lowerdir' [ 445.209025][T10381] input: syz0 as /devices/virtual/input/input19 [ 445.459292][T10381] netlink: 'syz.2.1185': attribute type 3 has an invalid length. [ 445.466068][ T5763] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 445.574207][ T6325] usb 8-1: USB disconnect, device number 61 [ 445.578330][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.586343][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.604381][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.613650][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.620193][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.623067][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.625767][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.628996][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.999947][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 446.004420][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.018410][ T1353] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 446.063107][T10390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.118340][T10392] lo: entered allmulticast mode [ 446.121339][T10392] lo: left allmulticast mode [ 446.131347][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.145062][T10395] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 446.200872][T10398] FAULT_INJECTION: forcing a failure. [ 446.200872][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.205005][T10398] CPU: 3 UID: 0 PID: 10398 Comm: syz.0.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.205024][T10398] Tainted: [L]=SOFTLOCKUP [ 446.205028][T10398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.205035][T10398] Call Trace: [ 446.205052][T10398] [ 446.205057][T10398] dump_stack_lvl+0x100/0x190 [ 446.205076][T10398] should_fail_ex.cold+0x5/0xa [ 446.205098][T10398] _copy_from_user+0x2e/0xd0 [ 446.205112][T10398] packet_setsockopt+0x1745/0x2380 [ 446.205134][T10398] ? __lock_acquire+0x4c5/0x1ec0 [ 446.205149][T10398] ? __pfx_packet_setsockopt+0x10/0x10 [ 446.205160][T10398] ? aa_sk_perm+0x30c/0xaa0 [ 446.205181][T10398] ? rcu_read_lock_any_held+0x6a/0x90 [ 446.205200][T10398] ? __pfx_aa_sk_perm+0x10/0x10 [ 446.205215][T10398] ? find_held_lock+0x2b/0x80 [ 446.205233][T10398] ? aa_sock_opt_perm+0xff/0x1b0 [ 446.205251][T10398] ? __pfx_packet_setsockopt+0x10/0x10 [ 446.205263][T10398] do_sock_setsockopt+0xf3/0x1d0 [ 446.205299][T10398] __sys_setsockopt+0x119/0x190 [ 446.205314][T10398] __ia32_sys_setsockopt+0xbc/0x160 [ 446.205325][T10398] ? __do_fast_syscall_32+0xb3/0x8b0 [ 446.205340][T10398] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.205352][T10398] __do_fast_syscall_32+0x13a/0x8b0 [ 446.205365][T10398] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.205378][T10398] do_fast_syscall_32+0x32/0x70 [ 446.205392][T10398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.205406][T10398] RIP: 0023:0xf706efec [ 446.205420][T10398] Code: Unable to access opcode bytes at 0xf706efc2. [ 446.205432][T10398] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 446.205444][T10398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 446.205451][T10398] RDX: 0000000000000001 RSI: 0000000080000000 RDI: 0000000000000010 [ 446.205458][T10398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.205464][T10398] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 446.205471][T10398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.205483][T10398] [ 446.348770][ T1353] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 446.788230][ T5837] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 446.958180][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 446.974709][ T5837] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.010382][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.026761][ T5837] usb 8-1: config 0 has no interfaces? [ 447.065489][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 447.084376][ T5837] usb 8-1: Product: syz [ 447.099778][ T5837] usb 8-1: Manufacturer: syz [ 447.101332][ T5837] usb 8-1: SerialNumber: syz [ 447.297938][ T5837] usb 8-1: config 0 descriptor?? [ 447.430705][ T1353] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 448.145008][ T1353] usb 9-1: Product: syz [ 448.472671][ T1353] usb 9-1: Manufacturer: syz [ 448.646211][ T1353] usb 9-1: SerialNumber: syz [ 448.653842][ T1353] usb 9-1: config 0 descriptor?? [ 448.660412][ T1353] ch341 9-1:0.0: ch341-uart converter detected [ 448.732991][ T58] usb 8-1: USB disconnect, device number 62 [ 448.784455][ T1353] usb 9-1: failed to receive control message: -71 [ 448.786448][ T1353] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 448.793249][ T1353] usb 9-1: USB disconnect, device number 3 [ 448.795860][ T1353] ch341 9-1:0.0: device disconnected [ 448.861698][T10457] dlm: non-version read from control device 0 [ 448.933951][T10462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.007493][T10465] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.011766][T10465] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.019181][ T1159] IPVS: starting estimator thread 0... [ 449.060889][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 449.104317][T10465] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.107588][T10465] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.118319][T10468] IPVS: using max 44 ests per chain, 105600 per kthread [ 449.174778][T10465] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.178040][T10465] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.188460][ T851] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 449.233929][T10465] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.237927][T10465] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.328425][ T1353] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 449.348986][T10191] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.351980][T10191] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.356076][ T851] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 449.358668][T10191] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.362681][T10191] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.366324][T10191] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.368996][T10191] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.372039][T10191] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.375511][T10191] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.377673][ T851] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 449.383700][ T851] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 449.389574][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.392151][ T851] usb 5-1: Product: syz [ 449.393621][ T851] usb 5-1: Manufacturer: syz [ 449.395118][ T851] usb 5-1: SerialNumber: syz [ 449.399690][ T851] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 449.409452][ T851] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 449.414222][ T851] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 449.482486][ T1353] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.488018][ T1353] usb 7-1: config 0 has no interfaces? [ 449.494525][ T1353] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.498189][ T1353] usb 7-1: Product: syz [ 449.499963][ T1353] usb 7-1: Manufacturer: syz [ 449.502010][ T1353] usb 7-1: SerialNumber: syz [ 449.506361][ T1353] usb 7-1: config 0 descriptor?? [ 449.519144][T10470] /dev/sg0: Can't lookup blockdev [ 449.526160][T10470] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 449.910776][ T1353] usb 7-1: USB disconnect, device number 64 [ 449.929622][T10476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 450.217395][T10481] socket: no more sockets [ 450.608299][ T6097] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 450.770363][ T6097] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 450.776988][ T6097] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 450.780289][ T6097] usb 9-1: Product: syz [ 450.781930][ T6097] usb 9-1: Manufacturer: syz [ 450.783734][ T6097] usb 9-1: SerialNumber: syz [ 450.789173][ T6097] usb 9-1: config 0 descriptor?? [ 450.794389][ T6097] ch341 9-1:0.0: ch341-uart converter detected [ 450.898339][ T1353] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 451.067472][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 451.071954][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 451.075000][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 451.080885][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 451.081220][ T1353] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 451.086631][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 451.092397][ T1353] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 451.094786][ T1353] usb 7-1: Product: syz [ 451.095995][ T1353] usb 7-1: Manufacturer: syz [ 451.097349][ T1353] usb 7-1: SerialNumber: syz [ 451.100393][ T1353] usb 7-1: config 0 descriptor?? [ 451.106114][ T1353] ch341 7-1:0.0: ch341-uart converter detected [ 451.408920][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 451.414209][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 451.418515][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 451.421726][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 451.427089][T10498] 9pnet_virtio: no channels available for device syz [ 451.895501][ T6097] usb 9-1: failed to receive control message: -110 [ 452.124683][ T1353] usb 7-1: failed to receive control message: -110 [ 452.372355][ T6097] ch341-uart ttyUSB2: probe with driver ch341-uart failed with error -110 [ 452.520164][ T59] usb 9-1: USB disconnect, device number 4 [ 452.527700][ T59] ch341 9-1:0.0: device disconnected [ 452.613651][ T1353] ch341-uart ttyUSB3: probe with driver ch341-uart failed with error -110 [ 452.740732][ T5837] usb 5-1: USB disconnect, device number 60 [ 452.772662][ T5837] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 452.781721][ T58] usb 7-1: USB disconnect, device number 65 [ 452.784630][ T58] ch341 7-1:0.0: device disconnected [ 452.790949][ T5837] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 452.796500][ T5837] ti_usb_3410_5052 5-1:2.0: device disconnected [ 453.129469][T10503] lo: entered allmulticast mode [ 453.133321][T10503] lo: left allmulticast mode [ 453.252163][ T5837] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 453.282461][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 453.454890][T10510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.478273][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 453.483388][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.495810][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.508833][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.513176][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.518069][ T5837] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 453.524251][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.549836][ T5837] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.552642][ T5837] usb 5-1: Manufacturer: syz [ 453.558058][ T5837] usb 5-1: config 0 descriptor?? [ 453.719565][T10517] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.817816][T10517] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.858191][ T5837] rc_core: IR keymap rc-hauppauge not found [ 453.860189][ T5837] Registered IR keymap rc-empty [ 453.862151][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 453.898219][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 453.901815][T10517] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.944822][ T5837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 453.956575][T10517] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.957588][ T5837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 453.987912][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.018389][ T5845] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 454.018732][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.058209][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.098227][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.128365][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.148176][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.168176][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.188238][T10191] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.192829][T10191] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.198276][ T5845] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.203711][T10191] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.207750][ T5845] usb 9-1: config 0 has no interfaces? [ 454.208184][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.212318][T10191] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.215022][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.218627][ T5845] usb 9-1: Product: syz [ 454.222353][ T5845] usb 9-1: Manufacturer: syz [ 454.223934][ T5845] usb 9-1: SerialNumber: syz [ 454.229730][ T5845] usb 9-1: config 0 descriptor?? [ 454.238322][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.285692][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 454.340108][ T5837] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 454.349662][ T5837] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.365243][ T5837] usb 5-1: USB disconnect, device number 61 [ 454.466632][ T5845] usb 9-1: USB disconnect, device number 5 [ 454.573769][T10529] SET target dimension over the limit! [ 454.646835][T10531] autofs: Unknown parameter '' [ 455.296809][T10539] lo: entered allmulticast mode [ 455.302325][T10539] lo: left allmulticast mode [ 455.819179][T10546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.838502][ T59] usb 8-1: new low-speed USB device number 63 using dummy_hcd [ 455.989527][ T59] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 1.40 [ 455.997019][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 456.009768][ T59] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 456.013970][ T59] usb 8-1: can't read configurations, error -61 [ 456.037419][T10555] evm: overlay not supported [ 456.150632][ T59] usb 8-1: new low-speed USB device number 64 using dummy_hcd [ 456.182298][T10566] tipc: Enabling of bearer rejected, failed to enable media [ 456.308626][ T59] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 1.40 [ 456.448285][ T6097] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 456.608545][ T6097] usb 5-1: Using ep0 maxpacket: 16 [ 456.623462][ T6097] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.664745][ T6097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.671420][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.674955][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 456.680477][ T6097] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 456.684957][ T6097] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.693489][ T6097] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.697411][ T6097] usb 5-1: Manufacturer: syz [ 456.703099][ T6097] usb 5-1: config 0 descriptor?? [ 457.068183][ T6097] rc_core: IR keymap rc-hauppauge not found [ 457.070132][ T6097] Registered IR keymap rc-empty [ 457.072473][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.089044][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.123548][ T6097] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 457.143424][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 457.144026][ T6097] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 457.194044][T10583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 457.199456][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.218580][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.248350][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.251784][ T59] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 457.254268][ T59] usb 8-1: can't read configurations, error -61 [ 457.257835][ T59] usb usb8-port1: attempt power cycle [ 457.278737][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.308433][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.338000][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.368256][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.388339][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.408292][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.428239][ T6097] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 457.449038][ T6097] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 457.453842][ T6097] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.488535][ T6097] usb 5-1: USB disconnect, device number 62 [ 457.618239][ T59] usb 8-1: new low-speed USB device number 65 using dummy_hcd [ 458.129406][ T59] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 1.40 [ 458.258168][T10613] netlink: 'syz.0.1238': attribute type 2 has an invalid length. [ 458.517691][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 458.524803][ T59] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 458.528148][ T59] usb 8-1: can't read configurations, error -61 [ 458.658333][ T59] usb 8-1: new low-speed USB device number 66 using dummy_hcd [ 458.868418][ T59] usb 8-1: device not accepting address 66, error -71 [ 458.872534][ T59] usb usb8-port1: unable to enumerate USB device [ 459.080459][T10625] ip6gretap0: entered promiscuous mode [ 459.124792][T10628] FAULT_INJECTION: forcing a failure. [ 459.124792][T10628] name failslab, interval 1, probability 0, space 0, times 0 [ 459.129324][T10628] CPU: 2 UID: 0 PID: 10628 Comm: syz.2.1243 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.129342][T10628] Tainted: [L]=SOFTLOCKUP [ 459.129346][T10628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.129354][T10628] Call Trace: [ 459.129370][T10628] [ 459.129375][T10628] dump_stack_lvl+0x100/0x190 [ 459.129429][T10628] should_fail_ex.cold+0x5/0xa [ 459.129474][T10628] should_failslab+0xc2/0x120 [ 459.129501][T10628] __kmalloc_noprof+0xfc/0x820 [ 459.129524][T10628] ? rcu_is_watching+0x13/0xc0 [ 459.129546][T10628] ? tomoyo_realpath_from_path+0xb6/0x690 [ 459.129579][T10628] tomoyo_realpath_from_path+0xb6/0x690 [ 459.129598][T10628] tomoyo_path_number_perm+0x23c/0x580 [ 459.129611][T10628] ? tomoyo_path_number_perm+0x22e/0x580 [ 459.129625][T10628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.129639][T10628] ? get_pid_task+0x106/0x250 [ 459.129667][T10628] ? find_held_lock+0x2b/0x80 [ 459.129684][T10628] ? __fget_files+0x215/0x3d0 [ 459.129704][T10628] ? hook_file_ioctl_common+0x140/0x440 [ 459.129718][T10628] ? __fget_files+0x215/0x3d0 [ 459.129735][T10628] ? __fget_files+0x21f/0x3d0 [ 459.129751][T10628] security_file_ioctl_compat+0xd3/0x230 [ 459.129773][T10628] __ia32_compat_sys_ioctl+0xc2/0x360 [ 459.129789][T10628] __do_fast_syscall_32+0x13a/0x8b0 [ 459.129838][T10628] ? lockdep_hardirqs_on+0x7d/0x110 [ 459.129852][T10628] do_fast_syscall_32+0x32/0x70 [ 459.129866][T10628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.129880][T10628] RIP: 0023:0xf7f17fec [ 459.129896][T10628] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 459.129907][T10628] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 459.129919][T10628] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040044149 [ 459.129926][T10628] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.129932][T10628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.129939][T10628] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 459.129945][T10628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.129958][T10628] [ 459.129964][T10628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.203805][T10630] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 459.226427][T10630] bond1: entered promiscuous mode [ 459.229180][T10630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.251462][T10630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.255470][T10630] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 459.260257][T10630] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 459.275503][T10630] bond1: (slave ipip0): making interface the new active one [ 459.279001][T10630] ipip0: entered promiscuous mode [ 459.282046][T10630] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 459.301864][T10630] __nla_validate_parse: 2 callbacks suppressed [ 459.301883][T10630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1244'. [ 459.456977][ T1161] IPVS: starting estimator thread 0... [ 459.559025][T10650] IPVS: using max 44 ests per chain, 105600 per kthread [ 459.608668][ T6096] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 459.745946][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 459.749735][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 459.759071][T10655] geneve2: entered promiscuous mode [ 459.770693][ T6096] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 459.783129][ T6096] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 459.791223][ T6096] usb 9-1: Product: syz [ 459.793020][ T6096] usb 9-1: Manufacturer: syz [ 459.796956][ T6096] usb 9-1: SerialNumber: syz [ 459.805385][ T6096] usb 9-1: config 0 descriptor?? [ 459.812489][ T6096] ch341 9-1:0.0: ch341-uart converter detected [ 460.083306][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 460.090440][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 460.095657][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 460.100544][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 460.104764][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 460.496687][T10662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.523977][T10665] sctp: [Deprecated]: syz.3.1254 (pid 10665) Use of int in max_burst socket option. [ 460.523977][T10665] Use struct sctp_assoc_value instead [ 460.789263][ T5845] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 460.865195][ T6096] usb 9-1: failed to receive control message: -110 [ 460.941626][ T5845] usb 8-1: not running at top speed; connect to a high speed hub [ 460.944864][ T5845] usb 8-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 460.951566][ T5845] usb 8-1: config 11 has an invalid interface number: 31 but max is 2 [ 460.956356][ T5845] usb 8-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 460.963104][ T5845] usb 8-1: config 11 has an invalid interface number: 188 but max is 2 [ 460.966430][ T5845] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 460.970424][ T5845] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 460.973930][ T5845] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 460.976982][ T5845] usb 8-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 460.981473][ T5845] usb 8-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 460.985038][ T5845] usb 8-1: config 11 has no interface number 0 [ 460.987471][ T5845] usb 8-1: config 11 has no interface number 1 [ 460.990229][ T5845] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 460.994311][ T5845] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 460.998970][ T5845] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 461.002800][ T5845] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 461.007135][ T5845] usb 8-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 461.011615][ T5845] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 461.015964][ T5845] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 461.020216][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 461.024212][ T5845] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 461.028558][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 461.033281][ T5845] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 461.037752][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 461.042879][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 461.047315][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 461.051943][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 461.056346][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 461.060949][ T5845] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 461.064794][ T5845] usb 8-1: config 11 interface 31 has no altsetting 0 [ 461.067453][ T5845] usb 8-1: config 11 interface 188 has no altsetting 0 [ 461.072329][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.075646][ T5845] usb 8-1: Product: 㰁 [ 461.077321][ T5845] usb 8-1: Manufacturer: Ч [ 461.079243][ T5845] usb 8-1: SerialNumber: Ў [ 461.288046][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 461.291047][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 461.312863][ T5845] usb 8-1: USB disconnect, device number 67 [ 461.400740][ T6096] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 461.538638][ T59] usb 9-1: USB disconnect, device number 6 [ 461.542284][ T59] ch341 9-1:0.0: device disconnected [ 461.992606][T10696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.449856][T10712] comedi comedi1: dt2814: I/O base address not correctly aligned [ 462.514226][T10695] syz.2.1265 (10695): drop_caches: 2 [ 463.237046][T10723] sctp: [Deprecated]: syz.2.1273 (pid 10723) Use of int in max_burst socket option. [ 463.237046][T10723] Use struct sctp_assoc_value instead [ 463.478207][ T5845] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 463.508209][ T5837] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 463.629805][ T5845] usb 7-1: not running at top speed; connect to a high speed hub [ 463.632530][ T5845] usb 7-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 463.636729][ T5845] usb 7-1: config 11 has an invalid interface number: 31 but max is 2 [ 463.640152][ T5845] usb 7-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 463.643046][ T5845] usb 7-1: config 11 has an invalid interface number: 188 but max is 2 [ 463.645678][ T5845] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 463.648891][ T5845] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 463.651796][ T5845] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 463.654627][ T5845] usb 7-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 463.657854][ T5845] usb 7-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 463.661126][ T5845] usb 7-1: config 11 has no interface number 0 [ 463.663367][ T5845] usb 7-1: config 11 has no interface number 1 [ 463.665479][ T5845] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 463.669179][ T5845] usb 7-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 463.672806][ T5845] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 463.673793][ T5837] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 463.679441][ T5845] usb 7-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 463.680195][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 463.683163][ T5845] usb 7-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 463.686168][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 463.689529][ T5845] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 463.694626][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.698728][ T5845] usb 7-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 463.702784][ T5837] usb 5-1: Product: syz [ 463.702796][ T5837] usb 5-1: Manufacturer: syz [ 463.702806][ T5837] usb 5-1: SerialNumber: syz [ 463.704618][T10725] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.709734][T10725] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.713006][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 463.714018][ T5837] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 463.716523][ T5845] usb 7-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 463.720341][ T5837] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 463.723743][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 463.726906][ T5837] usbserial_generic 5-1:1.0: generic converter detected [ 463.728750][ T5837] usb 5-1: generic converter now attached to ttyUSB0 [ 463.736268][ T5845] usb 7-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 463.739930][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 463.748408][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 463.755087][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 463.760862][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 463.764324][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 463.767684][ T5845] usb 7-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 463.771271][ T5845] usb 7-1: config 11 interface 31 has no altsetting 0 [ 463.773543][ T5845] usb 7-1: config 11 interface 188 has no altsetting 0 [ 463.777317][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.780278][ T5845] usb 7-1: Product: 㰁 [ 463.781780][ T5845] usb 7-1: Manufacturer: Ч [ 463.783338][ T5845] usb 7-1: SerialNumber: Ў [ 463.969927][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 464.014136][ T5845] usb 7-1: USB disconnect, device number 66 [ 464.079520][ T1353] usb 5-1: USB disconnect, device number 63 [ 464.090389][ T1353] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 464.094639][ T1353] usbserial_generic 5-1:1.0: device disconnected [ 464.140740][T10730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 464.558268][ T6325] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 464.719976][ T6325] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 464.727250][ T6325] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 464.730829][ T6325] usb 9-1: Product: syz [ 464.732610][ T6325] usb 9-1: Manufacturer: syz [ 464.734716][ T6325] usb 9-1: SerialNumber: syz [ 464.739147][ T6325] usb 9-1: config 0 descriptor?? [ 464.748422][ T6325] ch341 9-1:0.0: ch341-uart converter detected [ 464.851262][T10746] block device autoloading is deprecated and will be removed. [ 464.858252][ T5845] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 465.008715][ T5845] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 465.015571][T10749] __nla_validate_parse: 7 callbacks suppressed [ 465.015629][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 465.022573][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 465.026756][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 465.030766][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 465.034192][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 465.170018][ T5845] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 465.178370][ T5845] usb 7-1: Product: syz [ 465.180126][ T5845] usb 7-1: Manufacturer: syz [ 465.188309][ T5845] usb 7-1: SerialNumber: syz [ 465.198677][ T5845] usb 7-1: config 0 descriptor?? [ 465.209207][ T5845] ch341 7-1:0.0: ch341-uart converter detected [ 465.324934][T10752] lo: entered allmulticast mode [ 465.330868][T10752] lo: left allmulticast mode [ 465.410275][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1285'. [ 465.525449][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 465.540663][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 465.545819][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 465.552531][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 465.582463][T10756] 9pnet_virtio: no channels available for device syz [ 465.801279][ T6325] usb 9-1: failed to receive control message: -110 [ 465.814447][ T6325] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 466.864515][ T5845] usb 7-1: failed to receive control message: -110 [ 466.898492][ T6325] usb 9-1: USB disconnect, device number 7 [ 466.906785][ T6325] ch341 9-1:0.0: device disconnected [ 467.028222][ T5845] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 467.208326][ T6096] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 467.273867][ T5837] usb 7-1: USB disconnect, device number 67 [ 467.278287][ T5837] ch341 7-1:0.0: device disconnected [ 467.369261][ T6096] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 467.374586][ T6096] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 467.378972][ T6096] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 467.385967][ T6096] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.389580][ T6096] usb 8-1: Product: syz [ 467.391373][ T6096] usb 8-1: Manufacturer: syz [ 467.393377][ T6096] usb 8-1: SerialNumber: syz [ 467.399296][T10761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.402572][T10761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.407133][ T6096] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 467.427395][ T6096] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 467.438235][ T6096] usbserial_generic 8-1:1.0: generic converter detected [ 467.443749][ T6096] usb 8-1: generic converter now attached to ttyUSB0 [ 467.642298][T10761] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 467.649725][T10761] fuse: Bad value for 'group_id' [ 467.652016][T10761] fuse: Bad value for 'group_id' [ 467.763969][ T6096] usb 8-1: USB disconnect, device number 68 [ 467.789684][ T6096] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 467.800688][ T6096] usbserial_generic 8-1:1.0: device disconnected [ 467.813237][ T6325] hid_parser_main: 73 callbacks suppressed [ 467.813251][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.818395][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.820999][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.825992][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.829251][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.831752][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.834135][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.836614][ T6325] hid-generic 65DE:0000:0001.0003: unknown main item tag 0x0 [ 467.856656][ T6325] hid-generic 65DE:0000:0001.0003: hidraw1: HID v0.10 Device [syz1] on syz1 [ 467.934189][T10781] lo: entered allmulticast mode [ 467.938320][T10781] lo: left allmulticast mode [ 468.098600][T10783] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.102890][T10783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.196824][T10783] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.210236][T10783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.269457][T10783] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.273518][T10783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.310363][T10786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.382286][T10789] sctp: [Deprecated]: syz.3.1296 (pid 10789) Use of int in max_burst socket option. [ 468.382286][T10789] Use struct sctp_assoc_value instead [ 468.398367][T10783] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.404819][T10783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.438319][ T6096] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 468.598378][ T5836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.603827][ T6096] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.607763][ T5836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.613450][ T6096] usb 7-1: config 0 has no interfaces? [ 468.615972][ T5836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.619895][ T5836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.623236][ T5836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.627391][ T5836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.628218][ T6325] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 468.630967][ T5836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.636208][ T5836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.639918][ T6096] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 468.643436][ T6096] usb 7-1: Product: syz [ 468.645210][ T6096] usb 7-1: Manufacturer: syz [ 468.647118][ T6096] usb 7-1: SerialNumber: syz [ 468.653887][ T6096] usb 7-1: config 0 descriptor?? [ 468.780283][ T6325] usb 8-1: not running at top speed; connect to a high speed hub [ 468.783642][ T6325] usb 8-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 468.788784][ T6325] usb 8-1: config 11 has an invalid interface number: 31 but max is 2 [ 468.792435][ T6325] usb 8-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 468.796066][ T6325] usb 8-1: config 11 has an invalid interface number: 188 but max is 2 [ 468.799696][ T6325] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 468.803232][ T6325] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 468.807242][ T6325] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 468.810840][ T6325] usb 8-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 468.818288][ T6325] usb 8-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 468.823747][ T6325] usb 8-1: config 11 has no interface number 0 [ 468.825759][ T6325] usb 8-1: config 11 has no interface number 1 [ 468.828376][ T6325] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 468.831966][ T6325] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 468.835367][ T6325] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 468.839821][ T6325] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 468.843290][ T6325] usb 8-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 468.846624][ T6325] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 468.849906][ T6325] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 468.853426][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 468.856798][ T6325] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 468.860368][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 468.863828][ T6325] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 468.867259][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 468.870824][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 468.874267][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 468.877679][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 468.881351][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 468.884827][ T6325] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 468.888302][ T6325] usb 8-1: config 11 interface 31 has no altsetting 0 [ 468.890429][ T6325] usb 8-1: config 11 interface 188 has no altsetting 0 [ 468.894210][ T6325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.896850][ T6325] usb 8-1: Product: 㰁 [ 468.898369][ T6325] usb 8-1: Manufacturer: Ч [ 468.899886][ T6325] usb 8-1: SerialNumber: Ў [ 468.903805][ T6096] usb 7-1: USB disconnect, device number 68 [ 468.990866][T10802] syz.4.1301 (10802): drop_caches: 2 [ 469.112842][T10804] lo: entered allmulticast mode [ 469.116670][T10804] lo: left allmulticast mode [ 469.122763][ T6325] usb 8-1: USB disconnect, device number 69 [ 469.345479][T10806] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.655008][T10811] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.658874][T10811] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.717441][T10819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.116318][T10832] 9p: Bad value for 'rfdno' [ 470.489488][T10845] lo: entered allmulticast mode [ 470.501673][T10845] lo: left allmulticast mode [ 470.821596][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.842422][T10853] __nla_validate_parse: 7 callbacks suppressed [ 470.842434][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 471.310187][T10877] kAFS: Invalid Command on /proc/fs/afs/cells file [ 471.314735][T10877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 471.316849][T10877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.319626][T10877] vhci_hcd vhci_hcd.0: Device attached [ 471.353173][T10877] erofs (device sr0): cannot find valid erofs superblock [ 471.598494][ T5837] usb 38-1: SetAddress Request (2) to port 0 [ 471.602084][ T5837] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 471.668273][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 471.790810][T10883] lo: entered allmulticast mode [ 471.796764][T10883] lo: left allmulticast mode [ 471.828205][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 471.830960][ T58] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 471.835791][ T58] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.840327][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 471.844052][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 471.848801][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 471.853447][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.861207][ T58] hub 9-1:1.0: bad descriptor, ignoring hub [ 471.866822][ T58] hub 9-1:1.0: probe with driver hub failed with error -5 [ 471.873648][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 471.878192][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 471.885872][ T58] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 471.893297][ T58] cdc_wdm 9-1:1.0: Unknown control protocol [ 471.904638][T10878] vhci_hcd: connection reset by peer [ 471.919167][T10191] vhci_hcd vhci_hcd.0: stop threads [ 471.921731][T10191] vhci_hcd vhci_hcd.0: release socket [ 471.936972][T10191] vhci_hcd vhci_hcd.0: disconnect device [ 472.240138][T10892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1325'. [ 472.442754][T10889] input: syz0 as /devices/virtual/input/input22 [ 472.460832][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.465985][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.588248][ T6096] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 472.748830][ T6096] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 472.754632][ T6096] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 472.757221][ T6096] usb 8-1: Product: syz [ 472.758693][ T6096] usb 8-1: Manufacturer: syz [ 472.760219][ T6096] usb 8-1: SerialNumber: syz [ 472.763160][ T6096] usb 8-1: config 0 descriptor?? [ 472.766993][ T6096] ch341 8-1:0.0: ch341-uart converter detected [ 473.025056][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.030928][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.036171][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.040381][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.044231][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.097661][T10901] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1329'. [ 473.351344][T10908] lo: entered allmulticast mode [ 473.355727][T10908] lo: left allmulticast mode [ 474.047000][ T6096] usb 8-1: failed to receive control message: -110 [ 474.182904][ T6096] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 474.890716][T10921] program syz.2.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.432010][ T851] usb 8-1: USB disconnect, device number 70 [ 475.436339][ T851] ch341 8-1:0.0: device disconnected [ 475.483333][ T6096] usb 9-1: USB disconnect, device number 8 [ 476.325659][T10944] lo: entered allmulticast mode [ 476.336763][T10944] lo: left allmulticast mode [ 476.518436][T10948] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.555266][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 476.608668][T10948] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.678511][ T5837] usb 38-1: device descriptor read/8, error -110 [ 476.696817][T10948] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.763203][T10953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.775853][T10948] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.798266][ T8486] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 476.798531][ T5845] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 476.938343][ T5836] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.941253][ T5836] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.948228][ T8486] usb 5-1: Using ep0 maxpacket: 8 [ 476.950294][ T8486] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.954960][ T8486] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.958178][ T5836] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.958660][ T8486] usb 5-1: config 179 has no interface number 0 [ 476.961252][ T5836] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.963239][ T8486] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.968746][ T5845] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.969575][ T8486] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.973236][ T5845] usb 9-1: config 0 has no interfaces? [ 476.976788][ T8486] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.976819][ T8486] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 476.980666][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 476.982945][ T8486] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.986312][ T5845] usb 9-1: Product: syz [ 476.988884][ T8486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.991907][T10951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 476.994034][ T5845] usb 9-1: Manufacturer: syz [ 477.003202][ T5845] usb 9-1: SerialNumber: syz [ 477.008545][ T5845] usb 9-1: config 0 descriptor?? [ 477.096405][ T5837] usb usb38-port1: attempt power cycle [ 477.290778][ T5845] usb 9-1: USB disconnect, device number 9 [ 477.470846][ T8486] usb 5-1: USB disconnect, device number 64 [ 477.472813][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 477.472841][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.671977][ T5837] usb usb38-port1: unable to enumerate USB device [ 477.880841][ T5845] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 478.039268][ T5845] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 478.061036][ T5845] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 478.065666][ T5845] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 478.075709][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.081188][ T5845] usb 7-1: Product: syz [ 478.085398][ T5845] usb 7-1: Manufacturer: syz [ 478.087815][ T5845] usb 7-1: SerialNumber: syz [ 478.099941][T10966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.117090][T10966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.127009][ T5845] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 478.139224][ T5845] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 478.158277][ T5845] usbserial_generic 7-1:1.0: generic converter detected [ 478.189743][ T5845] usb 7-1: generic converter now attached to ttyUSB0 [ 478.355789][T10972] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 478.358901][T10972] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 478.365816][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 478.369682][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 478.384132][T10966] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 478.389183][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 478.394061][T10972] vhci_hcd vhci_hcd.0: Device attached [ 478.407572][T10966] fuse: Bad value for 'group_id' [ 478.411410][T10966] fuse: Bad value for 'group_id' [ 478.570837][ T851] usb 7-1: USB disconnect, device number 69 [ 478.578671][ T851] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 478.582284][ T851] usbserial_generic 7-1:1.0: device disconnected [ 478.698217][ T5837] usb 46-1: SetAddress Request (2) to port 0 [ 478.700271][ T5837] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 478.939068][T10973] vhci_hcd: connection reset by peer [ 478.943243][ T5836] vhci_hcd vhci_hcd.4: stop threads [ 478.944978][ T5836] vhci_hcd vhci_hcd.4: release socket [ 478.946776][ T5836] vhci_hcd vhci_hcd.4: disconnect device [ 479.135939][T10981] binder: BINDER_SET_CONTEXT_MGR already set [ 479.138943][T10981] binder: 10980:10981 ioctl 4018620d 80000100 returned -16 [ 479.147124][T10981] binder: BINDER_SET_CONTEXT_MGR already set [ 479.149390][T10981] binder: 10980:10981 ioctl 4018620d 80004a80 returned -16 [ 479.498252][ T851] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 479.563417][T10999] futex_wake_op: syz.4.1357 tries to shift op by 144; fix this program [ 479.625801][T11000] autofs: Unknown parameter 'autofs' [ 479.658318][ T851] usb 5-1: Using ep0 maxpacket: 8 [ 479.660829][ T851] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 479.665246][ T851] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 479.669151][ T851] usb 5-1: config 179 has no interface number 0 [ 479.671608][ T851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 479.675407][ T851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 479.679776][ T851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.683682][ T851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 479.687615][ T851] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 479.692910][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.699270][T10989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 479.994246][T11005] FAULT_INJECTION: forcing a failure. [ 479.994246][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.000312][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.2.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.000341][T11005] Tainted: [L]=SOFTLOCKUP [ 480.000347][T11005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.000357][T11005] Call Trace: [ 480.000378][T11005] [ 480.000385][T11005] dump_stack_lvl+0x100/0x190 [ 480.000461][T11005] should_fail_ex.cold+0x5/0xa [ 480.000489][T11005] _copy_to_user+0x32/0xd0 [ 480.000531][T11005] simple_read_from_buffer+0xcb/0x170 [ 480.000587][T11005] proc_fail_nth_read+0x1af/0x230 [ 480.000621][T11005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.000644][T11005] ? rw_verify_area+0xce/0x6d0 [ 480.000671][T11005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.000692][T11005] vfs_read+0x1e4/0xb40 [ 480.000715][T11005] ? __pfx_vfs_read+0x10/0x10 [ 480.000734][T11005] ? find_held_lock+0x2b/0x80 [ 480.000767][T11005] ? __fget_files+0x215/0x3d0 [ 480.000794][T11005] ? __fget_files+0x21f/0x3d0 [ 480.000822][T11005] ksys_read+0x12a/0x250 [ 480.000843][T11005] ? __pfx_ksys_read+0x10/0x10 [ 480.000869][T11005] do_int80_emulation+0x166/0x650 [ 480.000947][T11005] asm_int80_emulation+0x1a/0x20 [ 480.000964][T11005] RIP: 0023:0xf71174eb [ 480.000979][T11005] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 480.000994][T11005] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 480.001022][T11005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 480.001033][T11005] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 480.001043][T11005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.001052][T11005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.001062][T11005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.001084][T11005] [ 480.100610][T11007] FAULT_INJECTION: forcing a failure. [ 480.100610][T11007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.105852][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.2.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.105880][T11007] Tainted: [L]=SOFTLOCKUP [ 480.105886][T11007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.105897][T11007] Call Trace: [ 480.105903][T11007] [ 480.105911][T11007] dump_stack_lvl+0x100/0x190 [ 480.105938][T11007] should_fail_ex.cold+0x5/0xa [ 480.105959][T11007] _copy_from_user+0x2e/0xd0 [ 480.105980][T11007] ctl_ioctl+0x289/0xcc0 [ 480.106063][T11007] ? __pfx_dev_status+0x10/0x10 [ 480.106098][T11007] ? __pfx_ctl_ioctl+0x10/0x10 [ 480.106142][T11007] ? __fget_files+0x21f/0x3d0 [ 480.106170][T11007] dm_compat_ctl_ioctl+0x23/0x30 [ 480.106195][T11007] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 480.106218][T11007] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 480.106242][T11007] __do_fast_syscall_32+0x13a/0x8b0 [ 480.106264][T11007] ? lockdep_hardirqs_on+0x7d/0x110 [ 480.106285][T11007] do_fast_syscall_32+0x32/0x70 [ 480.106305][T11007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.106326][T11007] RIP: 0023:0xf7f17fec [ 480.106347][T11007] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 480.106355][T11007] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 480.106373][T11007] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c138fd07 [ 480.106384][T11007] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.106393][T11007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.106404][T11007] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.106414][T11007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.106436][T11007] [ 480.286746][T11016] FAULT_INJECTION: forcing a failure. [ 480.286746][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 480.291086][T11016] CPU: 2 UID: 0 PID: 11016 Comm: syz.2.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.291104][T11016] Tainted: [L]=SOFTLOCKUP [ 480.291120][T11016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.291127][T11016] Call Trace: [ 480.291131][T11016] [ 480.291136][T11016] dump_stack_lvl+0x100/0x190 [ 480.291161][T11016] should_fail_ex.cold+0x5/0xa [ 480.291176][T11016] should_failslab+0xc2/0x120 [ 480.291199][T11016] __kmalloc_noprof+0xfc/0x820 [ 480.291233][T11016] ? tomoyo_encode2+0xfb/0x3c0 [ 480.291259][T11016] tomoyo_encode2+0xfb/0x3c0 [ 480.291276][T11016] tomoyo_encode+0x29/0x50 [ 480.291291][T11016] tomoyo_realpath_from_path+0x18c/0x690 [ 480.291310][T11016] tomoyo_path_number_perm+0x23c/0x580 [ 480.291323][T11016] ? tomoyo_path_number_perm+0x22e/0x580 [ 480.291337][T11016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.291351][T11016] ? get_pid_task+0x106/0x250 [ 480.291379][T11016] ? find_held_lock+0x2b/0x80 [ 480.291395][T11016] ? __fget_files+0x215/0x3d0 [ 480.291410][T11016] ? hook_file_ioctl_common+0x140/0x440 [ 480.291424][T11016] ? __fget_files+0x215/0x3d0 [ 480.291441][T11016] ? __fget_files+0x21f/0x3d0 [ 480.291458][T11016] security_file_ioctl_compat+0xd3/0x230 [ 480.291481][T11016] __ia32_compat_sys_ioctl+0xc2/0x360 [ 480.291497][T11016] __do_fast_syscall_32+0x13a/0x8b0 [ 480.291511][T11016] ? lockdep_hardirqs_on+0x7d/0x110 [ 480.291525][T11016] do_fast_syscall_32+0x32/0x70 [ 480.291539][T11016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.291553][T11016] RIP: 0023:0xf7f17fec [ 480.291566][T11016] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 480.291572][T11016] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 480.291583][T11016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000127f [ 480.291590][T11016] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.291597][T11016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.291603][T11016] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.291610][T11016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.291623][T11016] [ 480.291699][T11016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.346572][T11017] syzkaller1: entered promiscuous mode [ 480.382525][T11017] syzkaller1: entered allmulticast mode [ 480.696043][T11033] lo: entered allmulticast mode [ 480.815222][T11036] ------------[ cut here ]------------ [ 480.817535][T11036] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 480.817547][T11036] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bc0, CPU#1: syz.4.1367/11036 [ 480.823831][T11036] Modules linked in: [ 480.825550][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.4.1367 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.829984][T11036] Tainted: [L]=SOFTLOCKUP [ 480.831730][T11036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.835768][T11036] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 480.837971][T11036] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 9d 7d 05 45 85 c0 75 13 48 8d 3d 9c a2 80 05 48 c7 c6 40 d2 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 480.845515][T11036] RSP: 0018:ffffc9000d0ff950 EFLAGS: 00010246 [ 480.847805][T11036] RAX: 0000000000000003 RBX: ffff888000181128 RCX: 1ffffffff228764c [ 480.851102][T11036] RDX: 0000000000000000 RSI: ffffffff8befd240 RDI: ffffffff9146b750 [ 480.854306][T11036] RBP: ffffc9000d0ffac0 R08: 0000000000000000 R09: 0000000000000000 [ 480.857497][T11036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 480.860710][T11036] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000 [ 480.863526][T11036] FS: 0000000000000000(0000) GS:ffff888096aa9000(0063) knlGS:00000000f5454b40 [ 480.867106][T11036] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 480.869967][T11036] CR2: 000000000c3d852b CR3: 000000004e7e0000 CR4: 0000000000352ef0 [ 480.873273][T11036] Call Trace: [ 480.874403][T11036] [ 480.875350][T11036] ? vidtv_start_feed+0x109/0x500 [ 480.876962][T11036] ? __pfx___mutex_lock+0x10/0x10 [ 480.878641][T11036] ? __mutex_lock+0x26c/0x1bc0 [ 480.880169][T11036] ? dmx_ts_feed_start_filtering+0x50/0x220 [ 480.882072][T11036] ? dmx_ts_feed_set+0x2bf/0x3e0 [ 480.883630][T11036] ? dmx_ts_feed_set+0x2bf/0x3e0 [ 480.885195][T11036] ? vidtv_start_feed+0x109/0x500 [ 480.886797][T11036] vidtv_start_feed+0x109/0x500 [ 480.888433][T11036] ? __pfx_vidtv_start_feed+0x10/0x10 [ 480.890143][T11036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 480.892090][T11036] ? mark_held_locks+0x40/0x70 [ 480.893640][T11036] ? __pfx_vidtv_start_feed+0x10/0x10 [ 480.895339][T11036] dmx_ts_feed_start_filtering+0xf6/0x220 [ 480.897333][T11036] dvb_dmxdev_start_feed+0x273/0x3f0 [ 480.899225][T11036] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 480.900958][T11036] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 480.902612][T11036] dvb_demux_do_ioctl+0xe64/0x1200 [ 480.904276][T11036] dvb_usercopy+0x167/0x340 [ 480.905738][T11036] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 480.907494][T11036] ? __pfx_dvb_usercopy+0x10/0x10 [ 480.909161][T11036] ? __fget_files+0x21f/0x3d0 [ 480.910702][T11036] dvb_demux_ioctl+0x29/0x40 [ 480.912188][T11036] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 480.913868][T11036] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 480.915601][T11036] __do_fast_syscall_32+0x13a/0x8b0 [ 480.917261][T11036] do_fast_syscall_32+0x32/0x70 [ 480.918919][T11036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.920931][T11036] RIP: 0023:0xf7fd7fec [ 480.922247][T11036] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 480.924344][T11036] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 480.926978][T11036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040146f2c [ 480.929571][T11036] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.932063][T11036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.934561][T11036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.937042][T11036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.939652][T11036] [ 480.940632][T11036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 480.942935][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.4.1367 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.946346][T11036] Tainted: [L]=SOFTLOCKUP [ 480.947721][T11036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.950898][T11036] Call Trace: [ 480.951982][T11036] [ 480.952935][T11036] dump_stack_lvl+0x100/0x190 [ 480.954451][T11036] vpanic+0x553/0x970 [ 480.955731][T11036] ? __pfx_vpanic+0x10/0x10 [ 480.957182][T11036] ? lock_release+0x24d/0x310 [ 480.958697][T11036] panic+0xd1/0xe0 [ 480.959893][T11036] ? __pfx_panic+0x10/0x10 [ 480.961336][T11036] check_panic_on_warn.cold+0x19/0x34 [ 480.963056][T11036] ? __mutex_lock+0x944/0x1bc0 [ 480.964586][T11036] __warn.cold+0x191/0x318 [ 480.966012][T11036] __report_bug+0x30f/0x440 [ 480.967468][T11036] ? __mutex_lock+0x944/0x1bc0 [ 480.968995][T11036] ? __pfx___report_bug+0x10/0x10 [ 480.970609][T11036] ? __mutex_lock+0x94b/0x1bc0 [ 480.972073][T11036] report_bug_entry+0xe2/0x290 [ 480.973608][T11036] ? __mutex_lock+0x94b/0x1bc0 [ 480.975133][T11036] handle_bug+0x1cd/0x2a0 [ 480.976513][T11036] exc_invalid_op+0x17/0x50 [ 480.977985][T11036] asm_exc_invalid_op+0x1a/0x20 [ 480.979546][T11036] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 480.981253][T11036] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 9d 7d 05 45 85 c0 75 13 48 8d 3d 9c a2 80 05 48 c7 c6 40 d2 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 480.987266][T11036] RSP: 0018:ffffc9000d0ff950 EFLAGS: 00010246 [ 480.989188][T11036] RAX: 0000000000000003 RBX: ffff888000181128 RCX: 1ffffffff228764c [ 480.991694][T11036] RDX: 0000000000000000 RSI: ffffffff8befd240 RDI: ffffffff9146b750 [ 480.994189][T11036] RBP: ffffc9000d0ffac0 R08: 0000000000000000 R09: 0000000000000000 [ 480.996692][T11036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 480.999176][T11036] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000 [ 481.001711][T11036] ? vidtv_start_feed+0x109/0x500 [ 481.003319][T11036] ? __pfx___mutex_lock+0x10/0x10 [ 481.004918][T11036] ? __mutex_lock+0x26c/0x1bc0 [ 481.006458][T11036] ? dmx_ts_feed_start_filtering+0x50/0x220 [ 481.008337][T11036] ? dmx_ts_feed_set+0x2bf/0x3e0 [ 481.009921][T11036] ? dmx_ts_feed_set+0x2bf/0x3e0 [ 481.011545][T11036] ? vidtv_start_feed+0x109/0x500 [ 481.013146][T11036] vidtv_start_feed+0x109/0x500 [ 481.014705][T11036] ? __pfx_vidtv_start_feed+0x10/0x10 [ 481.016409][T11036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 481.018320][T11036] ? mark_held_locks+0x40/0x70 [ 481.019846][T11036] ? __pfx_vidtv_start_feed+0x10/0x10 [ 481.021578][T11036] dmx_ts_feed_start_filtering+0xf6/0x220 [ 481.023387][T11036] dvb_dmxdev_start_feed+0x273/0x3f0 [ 481.025069][T11036] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 481.026802][T11036] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 481.028450][T11036] dvb_demux_do_ioctl+0xe64/0x1200 [ 481.030090][T11036] dvb_usercopy+0x167/0x340 [ 481.031562][T11036] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 481.033317][T11036] ? __pfx_dvb_usercopy+0x10/0x10 [ 481.034930][T11036] ? __fget_files+0x21f/0x3d0 [ 481.036431][T11036] dvb_demux_ioctl+0x29/0x40 [ 481.037879][T11036] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 481.039539][T11036] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 481.041274][T11036] __do_fast_syscall_32+0x13a/0x8b0 [ 481.042907][T11036] do_fast_syscall_32+0x32/0x70 [ 481.044422][T11036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.046379][T11036] RIP: 0023:0xf7fd7fec [ 481.047691][T11036] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 481.049749][T11036] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 481.052375][T11036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040146f2c [ 481.054848][T11036] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.057318][T11036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.059777][T11036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.062249][T11036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.064712][T11036] [ 481.066370][T11036] Kernel Offset: disabled [ 481.067728][T11036] Rebooting in 86400 seconds..