last executing test programs: 50m49.971345601s ago: executing program 32 (id=9): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080080003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000540)=0x1) 50m20.868609675s ago: executing program 33 (id=23): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @local}, 0x2}}, 0x2e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/132], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) close_range(r1, 0xffffffffffffffff, 0x0) 49m54.742842824s ago: executing program 34 (id=50): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x2b00, 0x12) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = syz_io_uring_setup(0x39, 0x0, &(0x7f0000000240), &(0x7f0000001880)) mremap(&(0x7f0000bc8000/0x4000)=nil, 0x4000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 46m24.778730204s ago: executing program 35 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a393110000000000000000000800010002000000"], 0x20}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea15"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000080)=0xffdffffe, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000200000004000000ffa93f5cf7bf2d0514c0de6e8851e9f0cd90e1ca4f050ff06a8eebb7639dc7b3d8464f36a654c3e8e5c40235c4f2e1dea05fa2b6121be3b92e3147702a2df422977e8c32a92414a745b18963d0aa79533a6c07febed0ea7e5482b33dd26673174572d22660e2d0566a2a341e5e7b8d2490b202f5df9edda70efbc40f849dfb43fb66f5045efb1bd4e3abc8a7d05e2db035387ca32c785ca85ed1ffb787d9f5bc10f3031dff90b33d5e520bc49c8ef70a09eeba6d95956a07c171c83fa16aa79434a54904"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 42m39.294594s ago: executing program 4 (id=311): syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x4, "f492c9", 0xffff, 0xb0, "e0d2390f577cb1b6abe858b316f559b55e759a2e33e786e6c3ea1ba90389817c419a0ca276fc9523e1ec89f2495fa501840ece6c894b91d0075215ddac8aab2b11e779b625d4a145c075564ba06e48ed757e1bf27492da2ea1ab06df7e886d1bc99096b2f540ba19db3c1fddc4ea84492b54f0619308b55148818aaa8f1f447ee79e27fdc9fd75da342dd86e62f3604abff391122c29feafe613b5f7496a0e818dd21e7b24f99f1bf23725989ec4bc09d79f3be49273bcfe0039a246b141f714d28be72cb1f9de4a9fcadc98eea0331106fd5704e4f801aa8b11bd8a62e0c6a4eaa1d775a56414f69f5d964923bafa79"}, {@any, 0xeb, 0x1, "7c2fc8", 0xb2, 0xff, "1f9a8655457aabdb3ecb0ebdc940bbe61a5647dbd23fe7be2d04bf8d22ddbb4edea02f2d6853fbb661c9b9d4a62a9d219ecfdb89a38343add0a66e1b3f1845d4750a6d2939972ea2a1033e42daa1813e8b8ff5240d34ee82415745222f94c26c6058779b485410c6f7e7d550e85fc82db310431288efce0646024c381172a32ac2a9c4c4c907865ab00120362beed710fe1e5965035e0e8cb32988ea57fdd0ff1d1fcfc2df785bb178031bb333de13a1aba7a06473ca73b6a38c1968fa8edf4ed584b0c2b6924d43e2432d36004716a61b0cd530db56d0c8052afcd289cda1d100"}]}}}, 0x200) io_uring_setup(0x2c49, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x38) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) keyctl$get_persistent(0x16, 0x0, 0xffffffffffffffff) 42m33.155552079s ago: executing program 4 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x402300, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a320000"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 42m27.857713371s ago: executing program 4 (id=319): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x8000, 0x0) 42m9.973802417s ago: executing program 36 (id=319): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x8000, 0x0) 38m13.225462004s ago: executing program 37 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0x0, 0x1f5, 0x3, 0x9, 0x7, 0x4, 0x8, 0x3, 0x8, 0x1, 0x0, 0x6, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x0, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x401, 0x8000000000000001, 0xfe, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x7, 0xc, 0x2, 0x8, 0x36, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x5, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x7fffffff, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/10, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r4, r4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 35m0.155340989s ago: executing program 38 (id=658): sendmsg(0xffffffffffffffff, 0x0, 0x4000880) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r5, 0x0, 0xffffffff004) 34m58.141303402s ago: executing program 39 (id=662): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r5, &(0x7f00000016c0)={0x2020}, 0xfffffce3) 34m57.169138279s ago: executing program 40 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2ee, 0x4000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80, "904772f5"}}}}}}, 0x0) r5 = openat$drirender128(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) 28m50.701314152s ago: executing program 41 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newtclass={0x6c, 0x28, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0x8, 0xe}, {0x5, 0xc}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008010) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000002380)=""/185) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140100002e00010000000000000000000401ff800c0000000800000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823"], 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x4) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\''], 0xb8) r6 = fcntl$getown(r1, 0x9) prlimit64(r6, 0x8, &(0x7f0000000040)={0x4, 0x3dc2ec8c}, &(0x7f0000000080)) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card3/oss_mixer\x00', 0x10200, 0x0) r8 = dup3(r7, r3, 0x0) r9 = syz_open_procfs$userns(r6, &(0x7f0000000100)) syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, 0x1411, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000680)={0x8, 0x6, {0x0, @usage=0x622, 0x0, 0x10001, 0x7fffffff, 0x1, 0xfe0000000000, 0x1, 0xc0, @struct={0xfffffffa, 0xe214}, 0x5, 0x64, [0xa, 0x3ce, 0x8, 0x1, 0x6, 0x6]}, {0x634, @struct={0x7ff, 0x10001}, 0x0, 0x80, 0xb96, 0x1, 0xcbf5, 0x8, 0x12, @struct={0x7, 0x6}, 0x52, 0x6, [0x4, 0x4, 0xd92a, 0x5e80, 0x1, 0x2]}, {0x7, @struct={0x80000000, 0x228d}, 0x0, 0x4, 0x80000001, 0x5, 0x0, 0x2, 0x0, @usage=0x3ff, 0x1, 0x9, [0x6, 0x7, 0x9, 0x0, 0xc, 0xd11e]}, {0x6, 0x8, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000a80)={0x0, 0x8000000000000001, 0x1, [0x6e50, 0x8, 0x7, 0x5, 0x94b], [0x200, 0x8822, 0x1, 0x8000, 0xfffffffffffff2f2, 0x1, 0xffff, 0x7730, 0x401, 0x7, 0x3000000000000000, 0x200, 0x2, 0x51c, 0x6e0, 0x17ad, 0x1, 0xff, 0x27f7a6a6, 0x3, 0x8, 0xfff, 0xbe4a, 0x1, 0x7ff, 0x634, 0x1, 0xfffffffffffffff8, 0x4, 0x2, 0x2, 0x3, 0xa, 0x3, 0x7, 0x9, 0x9, 0x1, 0x2, 0xfffffffffffffffd, 0x2, 0x3, 0x9, 0x8, 0x81, 0x80, 0x3, 0x2, 0x454, 0x3, 0x85224d0, 0x4, 0x8001, 0x80000000, 0x280000000000000, 0xffffffffffffffff, 0x2, 0xd97, 0x2, 0x7, 0x7, 0xfffffffffffffff7, 0xb, 0x665a, 0x8, 0x6, 0x6, 0x10000, 0xbc1, 0xa, 0x5613, 0x73, 0x1, 0xffffffffffff8001, 0x7fffffffffffffff, 0x8, 0x3, 0x2, 0x40c, 0x543e6faf, 0x100000000000000, 0x4, 0xc, 0x0, 0x0, 0x80, 0x8, 0x6, 0x6, 0x8, 0x5, 0x2, 0xffffffffffffffff, 0xd, 0x7fffffff, 0x3, 0x1f, 0xc27e, 0x9, 0x1, 0xe9, 0x3, 0x4, 0x4, 0x80000001, 0xa10, 0xffffffffffffffff, 0x8000, 0xff, 0x0, 0x0, 0x7f, 0x7, 0x3, 0x8000, 0x7, 0x8, 0xfffffffeffffffff, 0x6, 0x4, 0x7]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000ec0)={0x0, 0x6, 0x0, [0x6, 0x10001, 0x6e3, 0x8], [0x4, 0x4, 0xd7, 0x9, 0x5, 0x813f, 0x0, 0x2, 0x6, 0xffffffff, 0x101, 0x3d, 0x7fff, 0xffffffff81893960, 0xfffffffffffffffb, 0x7, 0x4, 0xffffffffffffffff, 0x1, 0x8, 0x9, 0xd, 0x3, 0x6, 0x81, 0x0, 0x44a7, 0x6, 0x5, 0x85, 0x2, 0x7fff, 0x1, 0xd, 0x7, 0x46, 0xeea4, 0x0, 0x3, 0x6, 0x2, 0x4, 0xfff, 0x8, 0x3, 0xd, 0x4, 0x9, 0x2, 0xb0, 0x101, 0x9, 0x5, 0xfffffffffffff36e, 0x101, 0x1, 0x3, 0x40, 0x0, 0x8, 0xf8e, 0x1, 0x5, 0x9b, 0x1, 0x2, 0x3, 0x7fffffffffffffff, 0x7, 0x2, 0x9, 0x9, 0x2, 0x4, 0x7ff, 0x6, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0x9, 0x3, 0x4e, 0x7, 0x1, 0x4, 0xe, 0x2, 0x800, 0x4e725e91, 0x2, 0xf, 0x1, 0x2, 0x9, 0x1, 0x4, 0x1, 0x3, 0x4, 0x8, 0x637a, 0x1, 0x7f35, 0x9, 0xb, 0x7, 0x7, 0x9, 0x56a6ceb4, 0x7, 0x6, 0xa, 0x4, 0x7f, 0x0, 0x10, 0x80000001, 0x0, 0x1, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001300)={0x12, 0x2, {0x5, @usage=0xfff, r10, 0x1, 0x9, 0x7, 0x0, 0x8, 0x62, @usage, 0x6, 0x7, [0x4, 0x7, 0x24eb, 0x8, 0x0, 0x1]}, {0x5, @struct={0xa0000000, 0x6}, r11, 0x554, 0xc, 0x2a1, 0x8001, 0x1, 0x1, @struct={0x4, 0x7fff}, 0xc, 0x2732f9fb, [0x2645, 0x89, 0x400, 0x3, 0x3, 0x1c]}, {0xc40, @usage=0x9, r12, 0x2d7f9810, 0x0, 0x8, 0xbf, 0x1, 0x98, @usage=0x6, 0x8, 0xe440, [0x3, 0x2, 0xffffffff, 0x3ff, 0x81, 0x6]}, {0xc92e, 0x7, 0x100000000}}) 28m25.010916s ago: executing program 7 (id=956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000380)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) 27m19.640830992s ago: executing program 7 (id=967): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4) keyctl$invalidate(0x15, r5) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0xff, 0x3}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42}) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0x9c7}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r8}) 27m16.78723313s ago: executing program 7 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r5], 0x24}}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r9, r9, 0x998d, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6(0xa, 0x1, 0x8010000000000084) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 27m15.01939425s ago: executing program 7 (id=962): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000003140)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1}, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffdff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) 27m10.826426201s ago: executing program 7 (id=965): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) sendmsg$nl_route(r3, 0x0, 0x40c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 27m5.118891481s ago: executing program 7 (id=972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000140)={0x9}) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb080045000024000000000011907800000000e00000014e240e22001090780201000080000000ef501340d1bb804977438bb9cf903e9ad6ca7ef9f50180f20c120699c7a842e7df77abf50ae329bab965f5c5dfdd6541194c68df"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd", @ANYRES64=0x0], 0x10) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x23f, &(0x7f0000000100)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1a24080, &(0x7f0000000600)=ANY=[]) 27m0.122039815s ago: executing program 4 (id=934): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) sendmsg$nl_route(r3, 0x0, 0x40c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 26m58.802731398s ago: executing program 4 (id=980): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='cachefiles_ondemand_fd_write\x00', r4, 0x0, 0x6}, 0x18) fsopen(0x0, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000240)=0x13) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r7 = fanotify_init(0x0, 0x80000) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r7, 0x1, 0x40001019, r8, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getdents(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$FUSE_LSEEK(r6, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x61c}}, 0x18) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000280)={&(0x7f000009b000/0x2000)=nil, 0x2000}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 26m53.670218291s ago: executing program 4 (id=981): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x5) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) shutdown(r5, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0x1}}}, 0x90) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 26m48.987304617s ago: executing program 42 (id=972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000140)={0x9}) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb080045000024000000000011907800000000e00000014e240e22001090780201000080000000ef501340d1bb804977438bb9cf903e9ad6ca7ef9f50180f20c120699c7a842e7df77abf50ae329bab965f5c5dfdd6541194c68df"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd", @ANYRES64=0x0], 0x10) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x23f, &(0x7f0000000100)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1a24080, &(0x7f0000000600)=ANY=[]) 26m36.824518532s ago: executing program 43 (id=981): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x5) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) shutdown(r5, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0x1}}}, 0x90) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 21m5.582576334s ago: executing program 1 (id=1286): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) socket$alg(0x26, 0x5, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0xff, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) listen(r0, 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) 20m59.176728461s ago: executing program 1 (id=1294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x4, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00010029bd7000fbdbfd8c428f", @ANYRES32, @ANYBLOB="040025090800"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2040010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 20m56.079507839s ago: executing program 1 (id=1298): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0009070000ffffffff000000000000000000010000000000000000190000000000368ba4088582"], 0x38}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0128200702ffffffffffff1089a2ebc30b2850b4ae8c1ede6c3095c50167de2a395e7a8683366a2f68d49841c935bea4c878dd02aeb346"], 0xb) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) 20m52.396907674s ago: executing program 1 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 20m48.683465265s ago: executing program 1 (id=1305): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup2(r5, r5) read$FUSE(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 20m46.027329425s ago: executing program 1 (id=1308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000001845996d2bc93f92e0943355ceb81360a0c46f1d3a955891051b14354a3493ef7197320aef9f516dbed04dff7eb0ed97c14c77be10f022ab945ee0c71ecc8d68e92bc1610588bf38035cc68cb5f26af29924b56814dd0f363c71c3f95560f4f06e9d1745306ff92cdb8ec606f4b554fe286c47fd6892c05481273e2fa42982"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 20m29.656570426s ago: executing program 44 (id=1308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000001845996d2bc93f92e0943355ceb81360a0c46f1d3a955891051b14354a3493ef7197320aef9f516dbed04dff7eb0ed97c14c77be10f022ab945ee0c71ecc8d68e92bc1610588bf38035cc68cb5f26af29924b56814dd0f363c71c3f95560f4f06e9d1745306ff92cdb8ec606f4b554fe286c47fd6892c05481273e2fa42982"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 13m0.134889935s ago: executing program 2 (id=1660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf2, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 12m58.027828296s ago: executing program 2 (id=1662): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 12m55.486240435s ago: executing program 2 (id=1668): r0 = openat$urandom(0xffffff9c, &(0x7f00000000c0), 0x4002, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000100)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000200)=0xfffffffd, 0x4) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000640)={0x0, 0x2, 0x200, 0x7, 'syz1\x00', 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000024000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10000120}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r3}, 0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) 12m47.772474667s ago: executing program 2 (id=1672): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000a7d265994c071986001863a1c675ed00ce0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8, 0x3, r8}]}, 0x34}}, 0x0) 12m44.839191844s ago: executing program 2 (id=1674): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000855) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) symlink(0x0, &(0x7f00000008c0)='./file0\x00') ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x200000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x69) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m42.97579217s ago: executing program 2 (id=1677): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f80)=""/4103, 0x1007) syz_open_dev$loop(0x0, 0x7, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x3, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x180000}, 0x20) landlock_restrict_self(r7, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000b40)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FICLONE(r7, 0x40049409, r8) 12m27.717255791s ago: executing program 45 (id=1677): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f80)=""/4103, 0x1007) syz_open_dev$loop(0x0, 0x7, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x3, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x180000}, 0x20) landlock_restrict_self(r7, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000b40)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FICLONE(r7, 0x40049409, r8) 9m21.650922752s ago: executing program 6 (id=2067): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xcb3e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r7, r7, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 9m20.138224442s ago: executing program 6 (id=2069): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_cmd={0x27, 0x100, 0x3, 0x5, 0x6, 0x4, 0x9, 0x1, 0x6, 0x3, 0x5, 0xd7, 0x1ff, 0x0, 0x8, 0x7, [0x62e5, 0x3]}}) 9m19.743828052s ago: executing program 6 (id=2073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@delpolicy={0x50, 0x14, 0x50b, 0x70bd28, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x6, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x1}, 0x6e6bbc, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) 9m19.4434142s ago: executing program 6 (id=2077): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 9m18.094383046s ago: executing program 6 (id=2081): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b7f"], 0x14) 9m16.591026671s ago: executing program 6 (id=2084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 9m0.752302471s ago: executing program 46 (id=2084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 14.734222683s ago: executing program 3 (id=3775): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r10 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.69750633s ago: executing program 0 (id=3781): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000495"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x5, 0x0, 0xe7}}}}}}, 0x0) 11.802639857s ago: executing program 0 (id=3785): socket$nl_route(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.308273379s ago: executing program 3 (id=3787): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="202001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x14, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0x6, 0x15, "d0e3af242186286cb4e37c2643bf1e61f0739f1aca"}, 0x0, 0x0, 0x0, 0x0}) 10.663642342s ago: executing program 0 (id=3790): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.0013316s ago: executing program 5 (id=3794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x14080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.619518713s ago: executing program 3 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 8.433983666s ago: executing program 5 (id=3798): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r10 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.311448812s ago: executing program 0 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x1001900, 0x5cd, 0x8, 0x3ff, 0x2, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 5.738302872s ago: executing program 3 (id=3802): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xd}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) epoll_pwait2(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 5.507509064s ago: executing program 9 (id=3805): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x226) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040), &(0x7f0000000a40)=ANY=[], 0x17, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000c40)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483613dfd44fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000600)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0xfffffffc, 0xffffffff920188b1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000007c0)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x2b, 0x8, 0x300900, 0x0, 0x3, 0x5, 0xc, 0x0, 0x0, 0x10, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.468804686s ago: executing program 3 (id=3806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xb9, @empty}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x2, 0xc, 0x8, 0x0, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000280)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.458821351s ago: executing program 0 (id=3807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4000001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)=ANY=[], 0x8) 5.218932783s ago: executing program 9 (id=3808): pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0x800, 0x0, 0x100000, 0x8000000}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000008000000000000000100008406"], 0x0, 0x42, 0x0, 0x2}, 0x28) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.771789424s ago: executing program 8 (id=3810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 4.599444842s ago: executing program 8 (id=3811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r0, 0x1) 4.491450783s ago: executing program 8 (id=3812): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.441369204s ago: executing program 3 (id=3813): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.380886737s ago: executing program 0 (id=3814): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 4.331323696s ago: executing program 5 (id=3815): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="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", 0x114}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="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", 0x309}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$FUSE(r3, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000240)) 4.014529903s ago: executing program 8 (id=3816): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 3.914227729s ago: executing program 9 (id=3817): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 2.972932374s ago: executing program 5 (id=3818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.840801752s ago: executing program 8 (id=3819): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) syz_emit_ethernet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) 2.760386526s ago: executing program 9 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xc, 0x3}, {0xb}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 931.953554ms ago: executing program 5 (id=3821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4000, 0x3000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x77}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xb8, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0xeeee2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x20, 0x0, 0xb5, 0x0, 0x1a, 0x0, 0xfc, 0x86, 0xfe}, {0x1000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff}, {0x0, 0x80a0000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe, 0x0, 0x0, 0x0, 0x10}, {0x6000, 0x9}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)=ANY=[]) 479.296008ms ago: executing program 8 (id=3822): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 254.746421ms ago: executing program 9 (id=3823): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1) 123.560494ms ago: executing program 5 (id=3824): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 0s ago: executing program 9 (id=3825): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r10 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): ] usb 9-1: Using ep0 maxpacket: 32 [ 2947.952628][T12737] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 2947.952672][T12737] usb 9-1: config 0 has no interface number 0 [ 2947.962011][T11162] DVB: Unable to find symbol dib7000p_attach() [ 2947.962030][T11162] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 2947.993591][T12737] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2947.993628][T12737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.012976][T12737] usb 9-1: Product: syz [ 2948.013001][T12737] usb 9-1: Manufacturer: syz [ 2948.013017][T12737] usb 9-1: SerialNumber: syz [ 2948.045572][T12737] usb 9-1: config 0 descriptor?? [ 2948.054620][T11162] rc_core: IR keymap rc-dib0700-rc5 not found [ 2948.054645][T11162] Registered IR keymap rc-empty [ 2948.055003][T11162] dvb-usb: could not initialize remote control. [ 2948.055014][T11162] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 2948.064686][T11162] dib0700: There's no endpoint for remote controller [ 2948.072538][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036fbf400: rx timeout, send abort [ 2948.110603][T12737] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2948.129923][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2948.131563][T11162] usb 10-1: USB disconnect, device number 51 [ 2948.149660][T11162] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2948.161511][T11162] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2948.162264][T11162] quatech2 10-1:0.51: device disconnected [ 2948.264591][ T990] usb 1-1: USB disconnect, device number 68 [ 2948.377354][ T990] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 2948.408775][T12737] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2948.438116][T12737] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2948.572624][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036fbf400: abort rx timeout. Force session deactivation [ 2948.792339][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2948.794131][ T990] usb 9-1: USB disconnect, device number 41 [ 2948.848315][ T990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2948.881016][ T990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2948.881821][ T990] quatech2 9-1:0.51: device disconnected [ 2949.144689][ T8042] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2949.234812][T11162] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2949.297829][ T8042] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.297867][ T8042] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2949.297910][ T8042] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2949.297935][ T8042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.365545][ T8042] usb 10-1: config 0 descriptor?? [ 2949.439206][T11162] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2949.439238][T11162] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2949.440047][T11162] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.498325][T11162] usb 4-1: config 220 has no interface number 2 [ 2949.499748][T11162] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2949.499786][T11162] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2949.499806][T11162] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2949.501264][T11162] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2949.574998][T11162] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2949.575271][T11162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.575294][T11162] usb 4-1: Product: syz [ 2949.575309][T11162] usb 4-1: Manufacturer: syz [ 2949.575324][T11162] usb 4-1: SerialNumber: syz [ 2949.774603][T14604] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2949.906652][T14604] usb 6-1: device descriptor read/64, error -71 [ 2949.992592][ T8042] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 2950.007688][T11162] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2950.007724][T11162] usb 4-1: No valid video chain found. [ 2950.007836][T11162] usb 4-1: selecting invalid altsetting 0 [ 2950.044025][ T8042] usb 10-1: USB disconnect, device number 52 [ 2950.058208][T11162] usb 4-1: selecting invalid altsetting 0 [ 2950.058256][T11162] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2950.084598][T11162] usb 4-1: USB disconnect, device number 37 [ 2950.175545][T14604] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2950.304439][T14604] usb 6-1: device descriptor read/64, error -71 [ 2950.415167][T14604] usb usb6-port1: attempt power cycle [ 2951.224498][T14604] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2951.245461][T14604] usb 6-1: device descriptor read/8, error -71 [ 2951.483008][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2959'. [ 2951.494393][T14604] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2951.522961][T14604] usb 6-1: device descriptor read/8, error -71 [ 2951.625001][T14604] usb usb6-port1: unable to enumerate USB device [ 2951.817960][T19951] netlink: 'syz.9.2961': attribute type 29 has an invalid length. [ 2951.820380][T19951] netlink: 'syz.9.2961': attribute type 29 has an invalid length. [ 2951.826269][T19951] netlink: 'syz.9.2961': attribute type 29 has an invalid length. [ 2952.954559][T11162] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2953.074468][T14604] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2953.134483][T11162] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2953.134519][T11162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.134539][T11162] usb 6-1: Product: syz [ 2953.134554][T11162] usb 6-1: Manufacturer: syz [ 2953.134567][T11162] usb 6-1: SerialNumber: syz [ 2953.178589][T11162] usb 6-1: config 0 descriptor?? [ 2953.550982][T14604] usb 4-1: Using ep0 maxpacket: 8 [ 2953.552219][T11162] usb 6-1: ignoring: probably an ADSL modem [ 2953.553516][T14604] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2953.553539][T14604] usb 4-1: config 0 has no interface number 0 [ 2953.553588][T14604] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2953.553630][T14604] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2953.553654][T14604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.683224][T19972] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2969'. [ 2953.898579][T14604] usb 4-1: config 0 descriptor?? [ 2954.299002][T14604] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2954.499742][ T990] usb 4-1: USB disconnect, device number 38 [ 2954.527817][T11162] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2954.772271][ T990] usb 6-1: USB disconnect, device number 10 [ 2955.854455][ T990] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2956.084396][ T990] usb 10-1: Using ep0 maxpacket: 8 [ 2956.087512][ T990] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2956.091374][ T990] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2956.091407][ T990] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2956.091427][ T990] usb 10-1: Product: syz [ 2956.091442][ T990] usb 10-1: Manufacturer: syz [ 2956.091458][ T990] usb 10-1: SerialNumber: syz [ 2956.458055][ T990] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 2956.458084][ T990] usb 10-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 2956.458104][ T990] usb 10-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 2956.458124][ T990] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2956.662912][ T990] usb 10-1: palm_os_3_probe - error -71 getting bytes available request [ 2956.663012][ T990] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 2956.695730][ T990] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2956.730073][ T990] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2956.733552][ T990] usb 10-1: USB disconnect, device number 53 [ 2956.767970][ T990] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2956.774523][T11162] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2956.807056][ T990] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2956.807701][ T990] visor 10-1:1.0: device disconnected [ 2956.925346][T11162] usb 4-1: device descriptor read/64, error -71 [ 2957.205741][T19308] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2957.416735][T11162] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2957.585025][T11162] usb 4-1: device descriptor read/64, error -71 [ 2957.588462][T19308] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2957.588571][T19308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.707561][T11162] usb usb4-port1: attempt power cycle [ 2957.791245][T19308] usb 9-1: config 0 descriptor?? [ 2957.996601][ T990] kernel write not supported for file /snd/seq (pid: 990 comm: kworker/0:2) [ 2958.037355][T19308] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2958.134469][T11162] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2958.155444][T11162] usb 4-1: device descriptor read/8, error -71 [ 2958.365105][T19308] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 2958.365137][T19308] [drm] Initialized udl on minor 2 [ 2958.453703][T19308] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2958.454112][T19308] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2958.795396][T20014] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2981'. [ 2958.977771][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ceff000: rx timeout, send abort [ 2959.477854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ceff000: abort rx timeout. Force session deactivation [ 2959.507936][T15001] usb 9-1: USB disconnect, device number 42 [ 2959.519157][T12575] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2959.519760][T12575] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2961.836654][T20040] batadv_slave_1: entered promiscuous mode [ 2961.901801][T20040] batman_adv: batadv0: Adding interface: macsec1 [ 2961.901826][T20040] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2961.901860][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2961.901878][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2961.901895][T20040] batman_adv: batadv0: Interface activated: macsec1 [ 2962.298274][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803968dc00: rx timeout, send abort [ 2962.798434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803968dc00: abort rx timeout. Force session deactivation [ 2964.984719][T11162] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2965.142949][T11162] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2965.142988][T11162] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2965.143032][T11162] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2965.143057][T11162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2965.199449][T20064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2965.221479][T11162] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2965.570074][T11162] usb 9-1: USB disconnect, device number 43 [ 2965.584512][T20075] program syz.0.3006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2967.288318][T11162] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2967.437835][T11162] usb 4-1: Using ep0 maxpacket: 8 [ 2967.449775][T11162] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2967.449814][T11162] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2967.449839][T11162] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2967.449863][T11162] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2967.449909][T11162] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2967.449932][T11162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.748795][T11162] usb 4-1: GET_CAPABILITIES returned 0 [ 2967.748852][T11162] usbtmc 4-1:16.0: can't read capabilities [ 2967.908804][T20115] block nbd9: NBD_DISCONNECT [ 2967.962205][T11162] usb 4-1: USB disconnect, device number 43 [ 2968.565628][ T5919] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2969.139377][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2969.368123][ T5919] usb 9-1: Using ep0 maxpacket: 16 [ 2969.411943][ T5919] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2969.411982][ T5919] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2969.412020][ T5919] usb 9-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2969.412045][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.509004][ T5919] usb 9-1: config 0 descriptor?? [ 2970.556067][ T5919] usbhid 9-1:0.0: can't add hid device: -71 [ 2970.556207][ T5919] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2970.604762][ T5919] usb 9-1: USB disconnect, device number 44 [ 2970.724883][T11162] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2970.887924][T11162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2970.887963][T11162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2970.888006][T11162] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 2970.888031][T11162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2970.937151][T11162] usb 4-1: config 0 descriptor?? [ 2971.404972][T11162] aquacomputer_d5next 0003:0C70:F011.001F: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 2971.788162][ C1] vkms_vblank_simulate: vblank timer overrun [ 2971.798733][T12737] usb 4-1: USB disconnect, device number 44 [ 2971.947459][ C1] vkms_vblank_simulate: vblank timer overrun [ 2972.721264][T19308] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2972.960872][T19308] usb 6-1: device descriptor read/64, error -71 [ 2973.133467][T20175] 9pnet_fd: Insufficient options for proto=fd [ 2975.064337][T19308] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2975.775226][T20196] erspan0: entered promiscuous mode [ 2976.174713][T20206] libceph: resolve '0..' (ret=-3): failed [ 2976.348061][T15001] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2977.027480][T15001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2977.027520][T15001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2977.027562][T15001] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 2977.027586][T15001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.037725][T15001] usb 9-1: config 0 descriptor?? [ 2978.089945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024425c00: rx timeout, send abort [ 2978.090328][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024425c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2978.231988][T16552] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2978.794151][T16552] usb 10-1: device descriptor read/64, error -71 [ 2980.261021][T15001] hid_parser_main: 839 callbacks suppressed [ 2980.261048][T15001] hid-led 0003:1D34:0004.0020: unknown main item tag 0x0 [ 2980.294681][T15001] hid-led 0003:1D34:0004.0020: probe with driver hid-led failed with error -71 [ 2980.304831][T15001] usb 9-1: USB disconnect, device number 45 [ 2980.334390][T16552] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2980.774387][T16552] usb 10-1: device descriptor read/64, error -71 [ 2980.865148][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2980.884890][T16552] usb usb10-port1: attempt power cycle [ 2981.014438][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 2981.017560][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2981.017595][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2981.020988][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2981.021017][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.021038][ T31] usb 1-1: Product: syz [ 2981.021053][ T31] usb 1-1: Manufacturer: syz [ 2981.021068][ T31] usb 1-1: SerialNumber: syz [ 2981.034409][T15001] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2981.036436][ T31] usb 1-1: config 0 descriptor?? [ 2981.046873][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2981.046905][ T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2981.154717][T15001] usb 6-1: device descriptor read/64, error -71 [ 2981.224386][T16552] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2981.255655][T16552] usb 10-1: Using ep0 maxpacket: 16 [ 2981.279286][T16552] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2981.279391][T16552] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2981.279431][T16552] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2981.279455][T16552] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2981.331174][T16552] usb 10-1: config 0 descriptor?? [ 2981.394440][T15001] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2981.524437][T15001] usb 6-1: device descriptor read/64, error -71 [ 2981.689196][T15001] usb usb6-port1: attempt power cycle [ 2981.728418][ T31] em28xx 1-1:0.0: chip ID is em2710 [ 2981.887402][T16552] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 2981.929861][ T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2981.948283][ T31] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 2981.948309][ T31] em28xx 1-1:0.0: No AC97 audio processor [ 2982.038123][ T31] usb 1-1: USB disconnect, device number 69 [ 2982.064439][T15001] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2982.065645][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 2982.089107][T15001] usb 6-1: device descriptor read/8, error -71 [ 2982.123112][T20260] netlink: 'syz.3.3071': attribute type 25 has an invalid length. [ 2982.123133][T20260] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 2982.131122][T20260] bridge0: port 1(bridge_slave_0) entered learning state [ 2982.209009][T16552] usb 10-1: USB disconnect, device number 56 [ 2982.227129][ T31] em28xx 1-1:0.0: Freeing device [ 2982.320982][T20263] QAT: failed to copy from user cfg_data. [ 2983.360849][T15001] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2983.423516][T15001] usb 6-1: device descriptor read/8, error -71 [ 2983.735919][T15001] usb usb6-port1: unable to enumerate USB device [ 2985.255212][T15001] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2985.606230][T15001] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2985.606262][T15001] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2985.606274][T15001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2985.611488][T15001] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2985.611508][T15001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.611519][T15001] usb 6-1: Product: syz [ 2985.611528][T15001] usb 6-1: Manufacturer: syz [ 2985.611536][T15001] usb 6-1: SerialNumber: syz [ 2985.814486][T19308] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2985.974355][T19308] usb 4-1: Using ep0 maxpacket: 16 [ 2985.974478][T19992] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2985.981232][T19308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2985.981337][T19308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2985.981363][T19308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2985.981404][T19308] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2985.981428][T19308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2986.052664][T19308] usb 4-1: config 0 descriptor?? [ 2986.129388][T19992] usb 9-1: Using ep0 maxpacket: 8 [ 2986.133213][T19992] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2986.137209][T19992] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2986.149979][T19992] usb 9-1: string descriptor 0 read error: -22 [ 2986.150153][T19992] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2986.150176][T19992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.179191][T19992] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2986.205355][T19992] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2986.205756][T19992] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2986.205814][T19992] usb 9-1: media controller created [ 2986.290621][T19992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2986.323097][T15001] usb 6-1: 0:2 : does not exist [ 2986.374495][ T31] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2986.492199][T19308] cougar 0003:060B:500A.0022: unexpected long global item [ 2986.493141][T19308] cougar 0003:060B:500A.0022: parse failed [ 2986.493268][T19308] cougar 0003:060B:500A.0022: probe with driver cougar failed with error -22 [ 2986.545922][T19308] usb 6-1: USB disconnect, device number 17 [ 2986.560501][ T31] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2986.560535][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2986.596424][ T31] usb 10-1: config 0 descriptor?? [ 2986.603499][ T31] cp210x 10-1:0.0: cp210x converter detected [ 2986.792630][ T5919] usb 4-1: USB disconnect, device number 45 [ 2987.245416][ T31] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2987.245480][ T31] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 2987.284636][ T31] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2987.290276][ T31] usb 10-1: USB disconnect, device number 57 [ 2987.312432][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2987.313008][ T31] cp210x 10-1:0.0: device disconnected [ 2987.433038][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3085'. [ 2987.514469][T19992] usb 9-1: USB disconnect, device number 46 [ 2987.714348][T19308] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2987.784440][ T5919] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2987.866987][T19308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2987.867025][T19308] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2987.867068][T19308] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2987.867092][T19308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2987.931853][T20298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2987.934432][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 2987.938795][ T5919] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2987.938835][ T5919] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2987.938875][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2987.938901][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2987.938933][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2987.938957][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2987.938981][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2987.939020][ T5919] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2987.940894][ T5919] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2987.940933][ T5919] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2987.940971][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2987.940996][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2987.941019][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2987.941042][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2987.941065][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2987.941104][ T5919] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2987.943255][ T5919] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2987.943291][ T5919] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2987.943329][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2987.943353][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2987.943376][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2987.943399][ T5919] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2987.943424][ T5919] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2987.943448][ T5919] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2987.968166][ T5919] usb 6-1: string descriptor 0 read error: -22 [ 2987.968347][ T5919] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2987.968377][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.006017][ T5919] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2988.177227][T19308] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2988.333613][ T9484] usb 6-1: USB disconnect, device number 18 [ 2988.363379][T20313] netlink: 'syz.8.3092': attribute type 2 has an invalid length. [ 2988.672906][T19308] usb 1-1: USB disconnect, device number 70 [ 2989.947944][T17388] Bluetooth: hci3: link tx timeout [ 2989.948353][T17388] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2991.354375][ T5919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2991.479336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c276800: rx timeout, send abort [ 2991.494362][T19308] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2991.522380][ T5919] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2991.522421][ T5919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2991.522466][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2991.522490][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2991.597571][T20352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2991.639549][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2991.653194][T19308] usb 1-1: Using ep0 maxpacket: 8 [ 2991.666774][T19308] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2991.666806][T19308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.666826][T19308] usb 1-1: Product: syz [ 2991.666840][T19308] usb 1-1: Manufacturer: syz [ 2991.666854][T19308] usb 1-1: SerialNumber: syz [ 2991.732263][T19308] usb 1-1: config 0 descriptor?? [ 2991.765389][T19308] gspca_main: se401-2.14.0 probing 047d:5003 [ 2991.982798][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c276800: abort rx timeout. Force session deactivation [ 2992.054760][T20338] Bluetooth: hci3: command 0x0405 tx timeout [ 2992.072852][ T5919] usb 4-1: USB disconnect, device number 46 [ 2992.162467][T19308] gspca_se401: ExtraFeatures: 24 [ 2992.436341][T19308] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 2992.502066][T19308] usb 1-1: USB disconnect, device number 71 [ 2992.878934][T20370] netlink: 642 bytes leftover after parsing attributes in process `syz.9.3115'. [ 2993.068934][T20372] loop8: detected capacity change from 0 to 1 [ 2993.104787][T20372] Dev loop8: unable to read RDB block 1 [ 2993.104841][T20372] loop8: unable to read partition table [ 2993.105132][T20372] loop8: partition table beyond EOD, truncated [ 2993.105153][T20372] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2993.427143][ T31] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2993.574427][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 2993.578630][ T31] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2993.578659][ T31] usb 10-1: config 0 has no interface number 0 [ 2993.578715][ T31] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2993.584021][ T31] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2993.584055][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.584076][ T31] usb 10-1: Product: syz [ 2993.584091][ T31] usb 10-1: Manufacturer: syz [ 2993.584106][ T31] usb 10-1: SerialNumber: syz [ 2993.617435][ T31] usb 10-1: config 0 descriptor?? [ 2993.622193][ T31] smsc75xx v1.0.0 [ 2994.495408][T20396] random: crng reseeded on system resumption [ 2994.510934][ T31] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2994.510967][ T31] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2994.510986][ T31] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2994.511445][ T31] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 2994.566293][ T31] usb 10-1: USB disconnect, device number 58 [ 2995.166921][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c8bb800: rx timeout, send abort [ 2995.514386][ T9484] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2995.664378][ T9484] usb 9-1: Using ep0 maxpacket: 8 [ 2995.666914][ T9484] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2995.666997][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c8bb800: abort rx timeout. Force session deactivation [ 2995.668778][ T9484] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2995.668803][ T9484] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2995.668828][ T9484] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2995.668852][ T9484] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2995.668895][ T9484] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2995.668917][ T9484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.749880][ T9484] usb 9-1: GET_CAPABILITIES returned 0 [ 2996.750059][ T9484] usbtmc 9-1:16.0: can't read capabilities [ 2996.923730][T20436] input: syz1 as /devices/virtual/input/input38 [ 2996.944496][ T31] usb 9-1: USB disconnect, device number 47 [ 2996.994454][T19308] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2997.154446][T19308] usb 10-1: Using ep0 maxpacket: 16 [ 2997.188839][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2997.188876][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2997.188920][T19308] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2997.188944][T19308] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.245190][T19308] usb 10-1: config 0 descriptor?? [ 2997.246314][T20442] netlink: 'syz.5.3142': attribute type 1 has an invalid length. [ 2997.246337][T20442] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3142'. [ 2997.422274][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4fc400: rx timeout, send abort [ 2997.474163][T20431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2997.481495][T20431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.634997][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2997.699365][T19308] hid (null): unknown global tag 0xc [ 2997.699411][T19308] hid (null): invalid report_count 47589 [ 2997.794657][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 2997.811478][ T31] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2997.811510][ T31] usb 6-1: config 0 has no interface number 0 [ 2997.834907][ T31] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2997.834941][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2997.835218][ T31] usb 6-1: Product: syz [ 2997.835235][ T31] usb 6-1: Manufacturer: syz [ 2997.835250][ T31] usb 6-1: SerialNumber: syz [ 2997.886867][ T31] usb 6-1: config 0 descriptor?? [ 2997.902597][T19308] usb 10-1: string descriptor 0 read error: -71 [ 2997.922368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4fc400: abort rx timeout. Force session deactivation [ 2997.936086][T19308] usb 10-1: Max retries (5) exceeded reading string descriptor 200 [ 2997.936638][T19308] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -32 [ 2997.983897][T19308] usb 10-1: USB disconnect, device number 59 [ 2998.135191][ T31] radio-si470x 6-1:0.35: this is not a si470x device. [ 2998.167137][ T31] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 2998.431162][ T31] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 2999.027791][ T31] usb 6-1: USB disconnect, device number 19 [ 2999.030663][ T31] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 2999.474335][T19308] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2999.924331][T19308] usb 1-1: Using ep0 maxpacket: 32 [ 2999.927276][T19308] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2999.927305][T19308] usb 1-1: config 0 has no interface number 0 [ 2999.931033][T19308] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2999.931062][T19308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2999.931082][T19308] usb 1-1: Product: syz [ 2999.931097][T19308] usb 1-1: Manufacturer: syz [ 2999.931112][T19308] usb 1-1: SerialNumber: syz [ 2999.995452][T19308] usb 1-1: config 0 descriptor?? [ 3000.018162][T19308] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3000.440046][ C0] vkms_vblank_simulate: vblank timer overrun [ 3000.995174][T19308] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3001.034569][T19308] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3001.233573][ C0] vkms_vblank_simulate: vblank timer overrun [ 3001.391337][ C0] vkms_vblank_simulate: vblank timer overrun [ 3001.600969][ C0] vkms_vblank_simulate: vblank timer overrun [ 3001.790462][ C0] vkms_vblank_simulate: vblank timer overrun [ 3001.796351][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c78c00: rx timeout, send abort [ 3001.954562][ C0] vkms_vblank_simulate: vblank timer overrun [ 3002.014984][ C0] vkms_vblank_simulate: vblank timer overrun [ 3002.296503][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c78c00: abort rx timeout. Force session deactivation [ 3002.340200][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3002.342610][T19308] usb 1-1: USB disconnect, device number 72 [ 3002.371284][T19308] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3002.392216][T19308] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3002.393001][T19308] quatech2 1-1:0.51: device disconnected [ 3002.734710][ T990] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3002.895503][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 3002.901600][ T990] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3002.901633][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3002.901660][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3002.901684][ T990] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3002.901732][ T990] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3002.901756][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.035954][ C0] vkms_vblank_simulate: vblank timer overrun [ 3003.798884][ C0] vkms_vblank_simulate: vblank timer overrun [ 3004.518623][ C0] vkms_vblank_simulate: vblank timer overrun [ 3004.520240][ T990] usb 4-1: GET_CAPABILITIES returned 0 [ 3004.520295][ T990] usbtmc 4-1:16.0: can't read capabilities [ 3005.201138][T12575] usb 4-1: USB disconnect, device number 47 [ 3005.544425][ T990] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3005.836380][ T990] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3005.836517][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3006.051818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7dc000: rx timeout, send abort [ 3006.552072][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7dc000: abort rx timeout. Force session deactivation [ 3006.897920][ T990] usb 1-1: config 0 descriptor?? [ 3006.963471][ T990] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3008.073816][T20538] sp0: Synchronizing with TNC [ 3008.669704][ T990] usb 1-1: USB disconnect, device number 73 [ 3009.040170][T20557] sctp: [Deprecated]: syz.9.3183 (pid 20557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3009.040170][T20557] Use struct sctp_sack_info instead [ 3009.908484][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804abecc00: rx timeout, send abort [ 3010.887925][T20568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3187'. [ 3010.958788][ T37] audit: type=1326 audit(1758243243.411:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20571 comm="syz.0.3190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd013feba9 code=0x0 [ 3011.568744][T11162] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 3011.954663][T11162] usb 9-1: Using ep0 maxpacket: 16 [ 3011.958489][T11162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3011.958523][T11162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3011.958565][T11162] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 3011.958590][T11162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3011.965175][T11162] usb 9-1: config 0 descriptor?? [ 3012.154608][T15001] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3012.324362][T12575] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 3012.324564][T15001] usb 6-1: Using ep0 maxpacket: 16 [ 3012.329029][T15001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3012.329074][T15001] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3012.329099][T15001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.385382][T15001] usb 6-1: config 0 descriptor?? [ 3012.433429][T11162] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 3012.433469][T11162] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 3012.433515][T11162] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 3012.433541][T11162] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 3012.433566][T11162] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 3012.440336][T11162] corsair 0003:1B1C:1B02.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 3012.499488][T12575] usb 10-1: Using ep0 maxpacket: 16 [ 3012.518136][T12575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3012.518175][T12575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3012.518198][T12575] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3012.518318][T12575] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3012.518343][T12575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.607299][T12575] usb 10-1: config 0 descriptor?? [ 3012.622034][T11162] corsair 0003:1B1C:1B02.0024: Read invalid backlight brightness: ce. [ 3012.849103][ T990] usb 9-1: USB disconnect, device number 48 [ 3012.869648][T15001] hid (null): nested delimiters [ 3013.051430][T12575] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 3013.051467][T12575] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 3013.084374][T19992] usb 6-1: USB disconnect, device number 20 [ 3013.155007][T11162] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3013.261795][T12575] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 3013.261830][T12575] microsoft 0003:045E:07DA.0026: no inputs found [ 3013.261842][T12575] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 3013.307632][T11162] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3013.307713][T11162] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3013.307762][T11162] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 3013.307786][T11162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.314076][T11162] usb 1-1: config 0 descriptor?? [ 3013.544999][T15001] usb 10-1: USB disconnect, device number 60 [ 3014.677572][T11162] kye 0003:0458:0138.0027: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 3015.055500][T11162] usb 1-1: USB disconnect, device number 74 [ 3016.108683][T12575] kernel write not supported for file /sg0 (pid: 12575 comm: kworker/1:6) [ 3016.125167][ T990] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3016.151374][T11162] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 3016.663488][T11162] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3016.663523][T11162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3016.676932][T11162] usb 10-1: config 0 descriptor?? [ 3016.686210][T11162] cp210x 10-1:0.0: cp210x converter detected [ 3016.740419][ T990] usb 6-1: config 0 has no interfaces? [ 3016.742331][ T990] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3016.742352][ T990] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3016.742364][ T990] usb 6-1: Product: syz [ 3016.742372][ T990] usb 6-1: Manufacturer: syz [ 3016.760967][ T990] usb 6-1: config 0 descriptor?? [ 3016.829415][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b3d3400: rx timeout, send abort [ 3017.065881][ T990] usb 6-1: USB disconnect, device number 21 [ 3017.145489][T11162] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3017.150060][T11162] usb 10-1: cp210x converter now attached to ttyUSB0 [ 3017.367723][T19992] usb 10-1: USB disconnect, device number 61 [ 3017.388510][T19992] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3017.484547][ T990] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 3017.505149][T19992] cp210x 10-1:0.0: device disconnected [ 3017.634831][ T990] usb 9-1: Using ep0 maxpacket: 8 [ 3017.640990][ T990] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3017.662100][ T990] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 3017.662135][ T990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.662157][ T990] usb 9-1: Product: syz [ 3017.662173][ T990] usb 9-1: Manufacturer: syz [ 3017.662189][ T990] usb 9-1: SerialNumber: syz [ 3017.686306][ T990] usb 9-1: config 0 descriptor?? [ 3017.719861][ T990] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 3017.943378][ T990] snd_usb_toneport 9-1:0.0: set_interface failed [ 3017.943739][ T990] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 3017.943996][ T990] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 3017.947621][ T990] usb 9-1: USB disconnect, device number 49 [ 3018.666166][T19992] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3018.854077][T20653] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 3018.864057][T12575] IPVS: starting estimator thread 0... [ 3018.867473][T19992] usb 6-1: Using ep0 maxpacket: 8 [ 3018.870517][T19992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3018.870549][T19992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3018.870572][T19992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3018.870606][T19992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3018.870647][T19992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3018.870668][T19992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.034951][T20659] IPVS: using max 5 ests per chain, 12000 per kthread [ 3019.124672][T11162] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3019.127908][T19992] usb 6-1: GET_CAPABILITIES returned 0 [ 3019.127962][T19992] usbtmc 6-1:16.0: can't read capabilities [ 3019.224850][T19992] kernel write not supported for file /2170/attr/exec (pid: 19992 comm: kworker/0:0) [ 3019.295132][T11162] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3019.295172][T11162] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3019.295218][T11162] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3019.295243][T11162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.332268][T20657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3019.344901][T11162] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3019.466139][T19992] usb 6-1: USB disconnect, device number 22 [ 3019.600931][T12575] usb 4-1: USB disconnect, device number 48 [ 3019.784682][T14604] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3020.154691][T14604] usb 1-1: Using ep0 maxpacket: 8 [ 3020.162528][T14604] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 3020.162561][T14604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.162581][T14604] usb 1-1: Product: syz [ 3020.162589][T14604] usb 1-1: Manufacturer: syz [ 3020.162597][T14604] usb 1-1: SerialNumber: syz [ 3020.795711][T14604] usb 1-1: config 0 descriptor?? [ 3020.967287][T14604] gspca_main: sq930x-2.14.0 probing 2770:930c [ 3021.015104][ C1] vkms_vblank_simulate: vblank timer overrun [ 3021.226502][ C1] vkms_vblank_simulate: vblank timer overrun [ 3021.324438][T20338] Bluetooth: hci1: command 0x1003 tx timeout [ 3021.333747][T17388] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3021.497331][ C1] vkms_vblank_simulate: vblank timer overrun [ 3021.783037][ C1] vkms_vblank_simulate: vblank timer overrun [ 3022.084526][T14604] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 3022.084650][T14604] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 3022.127327][T14604] usb 1-1: USB disconnect, device number 75 [ 3022.337048][T19308] kernel write not supported for file /285/coredump_filter (pid: 19308 comm: kworker/1:8) [ 3022.738271][T20710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3023.003689][T19308] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 3023.913881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805caa0800: rx timeout, send abort [ 3024.377426][T19308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 3024.377766][T19308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3024.379214][T19308] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3024.379564][T19308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.413994][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805caa0800: abort rx timeout. Force session deactivation [ 3024.741122][T19308] usb 1-1: config 0 descriptor?? [ 3024.742083][T20708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3025.272242][T19308] lenovo 0003:17EF:60EE.0028: hidraw0: USB HID v1.01 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 3025.895026][T14604] usb 1-1: USB disconnect, device number 76 [ 3027.765186][T15001] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 3028.196455][T15001] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3028.196492][T15001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3028.196520][T15001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3028.196544][T15001] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3028.196591][T15001] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3028.196615][T15001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.279901][T15001] usb 9-1: config 0 descriptor?? [ 3028.743966][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744003][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744029][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744056][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744082][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744107][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.744132][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.814345][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.814382][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.814418][T15001] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 3028.854500][T14604] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3028.872467][T15001] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 3029.025301][T14604] usb 6-1: Using ep0 maxpacket: 16 [ 3029.028859][T14604] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3029.028887][T14604] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.028908][T14604] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3029.063134][T14604] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3029.063165][T14604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.063184][T14604] usb 6-1: Product: syz [ 3029.063197][T14604] usb 6-1: Manufacturer: syz [ 3029.063210][T14604] usb 6-1: SerialNumber: syz [ 3029.518748][T19308] usb 9-1: USB disconnect, device number 50 [ 3030.234766][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3030.296300][T14604] usb 6-1: 0:2 : does not exist [ 3031.725715][T14604] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 3031.903271][T14604] usb 6-1: USB disconnect, device number 23 [ 3032.139274][T19992] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3032.517578][T19992] usb 4-1: Using ep0 maxpacket: 8 [ 3032.544715][T19992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3032.544769][T19992] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3032.544792][T19992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3032.646754][T19992] usb 4-1: config 0 descriptor?? [ 3032.939981][T19992] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3033.028534][T20800] input: syz1 as /devices/virtual/input/input39 [ 3034.066226][T19308] usb 4-1: USB disconnect, device number 49 [ 3034.735816][T20812] overlayfs: workdir and upperdir must reside under the same mount [ 3037.117065][T19992] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3037.274326][T19992] usb 4-1: Using ep0 maxpacket: 8 [ 3037.283314][T19992] usb 4-1: config 0 has no interfaces? [ 3038.004782][T19992] usb 4-1: New USB device found, idVendor=6933, idProduct=5001, bcdDevice=45.02 [ 3038.004819][T19992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.004842][T19992] usb 4-1: Product: syz [ 3038.004856][T19992] usb 4-1: Manufacturer: syz [ 3038.004871][T19992] usb 4-1: SerialNumber: syz [ 3038.020886][T19992] usb 4-1: config 0 descriptor?? [ 3038.282387][T19992] usb 4-1: USB disconnect, device number 50 [ 3039.460033][ C1] vkms_vblank_simulate: vblank timer overrun [ 3039.831529][ C1] vkms_vblank_simulate: vblank timer overrun [ 3040.504656][ C1] vkms_vblank_simulate: vblank timer overrun [ 3040.589377][ C1] vkms_vblank_simulate: vblank timer overrun [ 3040.800751][ C1] vkms_vblank_simulate: vblank timer overrun [ 3041.925672][ C1] vkms_vblank_simulate: vblank timer overrun [ 3042.678012][ C1] vkms_vblank_simulate: vblank timer overrun [ 3043.210717][T20907] netlink: 'syz.9.3307': attribute type 1 has an invalid length. [ 3043.210782][T20907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3043.211161][T20907] IPv6: NLM_F_CREATE should be set when creating new route [ 3043.211211][T20907] IPv6: NLM_F_CREATE should be set when creating new route [ 3043.224002][T20907] netlink: 'syz.9.3307': attribute type 1 has an invalid length. [ 3043.224062][T20907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3043.255336][T19992] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 3044.110904][T19992] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 3044.110935][T19992] usb 9-1: config 0 has no interface number 0 [ 3044.211063][T20912] vxcan0: tx address claim with different name [ 3044.239816][T19992] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3044.239850][T19992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.239871][T19992] usb 9-1: Product: syz [ 3044.239886][T19992] usb 9-1: Manufacturer: syz [ 3044.239901][T19992] usb 9-1: SerialNumber: syz [ 3044.282894][T19992] usb 9-1: config 0 descriptor?? [ 3044.291511][T19992] hub 9-1:0.217: bad descriptor, ignoring hub [ 3044.291556][T19992] hub 9-1:0.217: probe with driver hub failed with error -5 [ 3044.507527][T19992] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 3044.533451][T19992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3044.545951][T19992] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 3044.546022][T19992] usb 9-1: media controller created [ 3044.599350][T19992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3044.706754][T19992] DVB: Unable to find symbol dib7000p_attach() [ 3044.706779][T19992] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 3044.814394][ T31] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3044.869152][T19992] rc_core: IR keymap rc-dib0700-rc5 not found [ 3044.869178][T19992] Registered IR keymap rc-empty [ 3044.869549][T19992] dvb-usb: could not initialize remote control. [ 3044.869559][T19992] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 3044.989489][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 3045.740370][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3045.740409][ T31] usb 1-1: config 0 has no interface number 0 [ 3045.761569][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3045.761604][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3045.761623][ T31] usb 1-1: Product: syz [ 3045.761638][ T31] usb 1-1: Manufacturer: syz [ 3045.761651][ T31] usb 1-1: SerialNumber: syz [ 3045.769679][T19992] usb 9-1: USB disconnect, device number 51 [ 3045.861242][ T31] usb 1-1: config 0 descriptor?? [ 3045.867018][ T31] smsc95xx v2.0.0 [ 3045.926603][T19992] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 3046.826994][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 3047.031445][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3047.031802][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3047.082321][ T31] usb 1-1: USB disconnect, device number 77 [ 3048.585090][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3048.735183][ T31] usb 4-1: device descriptor read/64, error -71 [ 3049.044906][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3049.765660][ T31] usb 4-1: device descriptor read/64, error -71 [ 3049.912820][ T31] usb usb4-port1: attempt power cycle [ 3050.685060][ T31] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 3050.824362][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3050.858249][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 3050.953896][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3050.953917][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3051.006062][ T31] usb 4-1: config 0 descriptor?? [ 3051.339096][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3051.355347][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3051.360378][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3051.360443][ T31] usb 4-1: media controller created [ 3051.432487][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3051.549120][ T31] az6027: usb out operation failed. (-71) [ 3051.549741][ T31] az6027: usb out operation failed. (-71) [ 3051.549757][ T31] stb0899_attach: Driver disabled by Kconfig [ 3051.549768][ T31] az6027: no front-end attached [ 3051.549768][ T31] [ 3051.550230][ T31] az6027: usb out operation failed. (-71) [ 3051.550244][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3051.593268][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 3051.617593][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 3051.617619][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3051.620911][ T31] usb 4-1: USB disconnect, device number 54 [ 3051.943156][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3053.522811][T21019] loop2: detected capacity change from 0 to 7 [ 3053.543846][T21019] Dev loop2: unable to read RDB block 7 [ 3053.543885][T21019] loop2: AHDI p2 p3 [ 3053.543924][T21019] loop2: partition table partially beyond EOD, truncated [ 3053.546061][T21019] loop2: p2 start 13841266 is beyond EOD, truncated [ 3053.854594][T11162] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3053.897268][T21030] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 3053.903524][T19992] IPVS: starting estimator thread 0... [ 3054.004529][T21035] IPVS: using max 6 ests per chain, 14400 per kthread [ 3054.019323][T11162] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3054.019354][T11162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.019373][T11162] usb 6-1: Product: syz [ 3054.019386][T11162] usb 6-1: Manufacturer: syz [ 3054.019399][T11162] usb 6-1: SerialNumber: syz [ 3054.036544][T11162] usb 6-1: config 0 descriptor?? [ 3054.107628][T12575] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3054.262217][T11162] hso 6-1:0.0: Failed to find INT IN ep [ 3054.263490][T11162] usb-storage 6-1:0.0: USB Mass Storage device detected [ 3054.298838][T12575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3054.298877][T12575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3054.298901][T12575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3054.298949][T12575] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3054.298973][T12575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3054.360557][T12575] usb 4-1: config 0 descriptor?? [ 3054.479593][T19992] usb 6-1: USB disconnect, device number 24 [ 3055.359437][T12575] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 3055.438412][T12575] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3055.461764][T12575] usb 4-1: USB disconnect, device number 55 [ 3056.078316][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fadc400: rx timeout, send abort [ 3056.578401][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fadc400: abort rx timeout. Force session deactivation [ 3056.604434][T11162] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3056.724464][T19992] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3056.734804][T11162] usb 6-1: device descriptor read/64, error -71 [ 3056.975017][T11162] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3056.984823][T19992] usb 4-1: Using ep0 maxpacket: 8 [ 3057.006517][T19992] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3057.006554][T19992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3057.006579][T19992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3057.006604][T19992] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3057.006650][T19992] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3057.006674][T19992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3057.104599][T11162] usb 6-1: device descriptor read/64, error -71 [ 3057.234915][T21075] loop8: detected capacity change from 0 to 8 [ 3057.267130][T21075] Dev loop8: unable to read RDB block 8 [ 3057.267182][T21075] loop8: unable to read partition table [ 3057.267455][T21075] loop8: partition table beyond EOD, truncated [ 3057.267476][T21075] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 3057.286671][T11162] usb usb6-port1: attempt power cycle [ 3057.345618][T19992] usb 4-1: GET_CAPABILITIES returned 0 [ 3057.345675][T19992] usbtmc 4-1:16.0: can't read capabilities [ 3057.538875][T15001] usb 4-1: USB disconnect, device number 56 [ 3057.695089][T11162] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3057.731736][T11162] usb 6-1: device descriptor read/8, error -71 [ 3057.964557][T11162] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3057.985162][T11162] usb 6-1: device descriptor read/8, error -71 [ 3058.094842][T11162] usb usb6-port1: unable to enumerate USB device [ 3059.708430][T21105] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 3059.904044][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'. [ 3060.484268][T12575] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3060.648096][T12575] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3060.648128][T12575] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3060.649930][T12575] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3060.649960][T12575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3060.649980][T12575] usb 1-1: SerialNumber: syz [ 3060.909419][T12575] usb 1-1: 0:2 : does not exist [ 3061.024699][T12575] usb 1-1: USB disconnect, device number 78 [ 3061.274460][T16552] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3061.427125][T16552] usb 4-1: Using ep0 maxpacket: 8 [ 3061.431839][T16552] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 3061.431906][T16552] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3061.431928][T16552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3061.431954][T16552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3061.431979][T16552] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3061.432025][T16552] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3061.432050][T16552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.672530][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3395'. [ 3061.686532][T16552] usb 4-1: GET_CAPABILITIES returned 0 [ 3061.686587][T16552] usbtmc 4-1:16.0: can't read capabilities [ 3061.758487][T21141] bond_slave_0: entered promiscuous mode [ 3061.758584][T21141] bond_slave_1: entered promiscuous mode [ 3061.759072][T21141] macvlan2: entered promiscuous mode [ 3061.759087][T21141] bond0: entered promiscuous mode [ 3061.788808][T21141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3061.936252][T16552] usb 4-1: USB disconnect, device number 57 [ 3062.254403][T19308] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3062.414347][T19308] usb 1-1: Using ep0 maxpacket: 8 [ 3062.417130][T19308] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 3062.417202][T19308] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3062.417226][T19308] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3062.417252][T19308] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3062.417277][T19308] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3062.417324][T19308] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3062.417349][T19308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3062.547123][T21155] loop6: detected capacity change from 0 to 524287999 [ 3062.838126][T19992] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 3062.966849][T19992] usb 9-1: device descriptor read/64, error -71 [ 3063.042177][T19308] usb 1-1: usb_control_msg returned -32 [ 3063.042237][T19308] usbtmc 1-1:16.0: can't read capabilities [ 3063.234327][T19992] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 3063.326891][T21159] syzkaller1: entered promiscuous mode [ 3063.326924][T21159] syzkaller1: entered allmulticast mode [ 3063.364324][T19992] usb 9-1: device descriptor read/64, error -71 [ 3063.476315][T19992] usb usb9-port1: attempt power cycle [ 3063.835895][T19992] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 3063.857300][T19992] usb 9-1: device descriptor read/8, error -71 [ 3064.104446][T19992] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 3064.821839][T19992] usb 9-1: device descriptor read/8, error -71 [ 3064.926240][T19992] usb usb9-port1: unable to enumerate USB device [ 3065.055124][T16552] usb 1-1: USB disconnect, device number 79 [ 3066.334375][T19308] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3066.504806][T19308] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3066.504828][T19308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3066.512528][T19308] usb 6-1: config 0 descriptor?? [ 3066.531173][T19308] cp210x 6-1:0.0: cp210x converter detected [ 3067.538744][T19308] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 3067.538766][T19308] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 3067.550833][T19308] usb 6-1: cp210x converter now attached to ttyUSB0 [ 3067.574747][T19308] usb 6-1: USB disconnect, device number 29 [ 3067.627219][T19308] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3067.627742][T19308] cp210x 6-1:0.0: device disconnected [ 3067.893961][T21192] sctp: [Deprecated]: syz.0.3411 (pid 21192) Use of int in max_burst socket option deprecated. [ 3067.893961][T21192] Use struct sctp_assoc_value instead [ 3070.176038][T21225] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 3070.230880][T21226] No memory to map [ 3072.894915][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880324efc00: rx timeout, send abort [ 3073.395049][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880324efc00: abort rx timeout. Force session deactivation [ 3073.912978][T21256] tun0: tun_chr_ioctl cmd 1074025675 [ 3073.913004][T21256] tun0: persist enabled [ 3073.913603][T21256] tun0: tun_chr_ioctl cmd 1074025675 [ 3073.913622][T21256] tun0: persist disabled [ 3075.394762][T11162] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3075.562576][T11162] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3075.562614][T11162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3075.562640][T11162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3075.562663][T11162] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3075.562709][T11162] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3075.562734][T11162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3075.604285][T19992] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3075.654848][T11162] usb 6-1: config 0 descriptor?? [ 3075.760469][T19992] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3075.760571][T19992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3075.760599][T19992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3075.760622][T19992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3075.760730][T19992] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3075.760754][T19992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3076.172365][T19992] usb 4-1: config 0 descriptor?? [ 3076.518342][T11162] hid_parser_main: 5 callbacks suppressed [ 3076.518372][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.518812][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.518841][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.518868][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519336][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519367][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519393][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519420][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519857][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.519885][T11162] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 3076.718158][T11162] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3076.795079][T19992] plantronics 0003:047F:FFFF.002C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3076.800862][T19992] usb 6-1: USB disconnect, device number 30 [ 3076.879770][T11162] usb 4-1: USB disconnect, device number 58 [ 3079.180613][ C0] vkms_vblank_simulate: vblank timer overrun [ 3080.066181][ C0] vkms_vblank_simulate: vblank timer overrun [ 3080.354279][T16552] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 3080.555232][T16552] usb 9-1: Using ep0 maxpacket: 16 [ 3080.585491][T16552] usb 9-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 3080.585522][T16552] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3080.585533][T16552] usb 9-1: Product: syz [ 3080.585542][T16552] usb 9-1: Manufacturer: syz [ 3080.585550][T16552] usb 9-1: SerialNumber: syz [ 3080.633905][T16552] usb 9-1: config 0 descriptor?? [ 3080.662189][T16552] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 3080.804850][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 3080.869642][T16552] gp8psk: usb in 128 operation failed. [ 3081.024514][T16552] gp8psk: usb in 137 operation failed. [ 3081.024537][T16552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3081.025922][T16552] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 3081.025988][T16552] usb 9-1: media controller created [ 3081.120805][T21323] kvm: user requested TSC rate below hardware speed [ 3081.854744][T12575] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3081.888938][T16552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3081.974642][T16552] gp8psk_fe: Frontend revision 1 attached [ 3081.974726][T16552] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 3081.995992][T16552] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 3082.004292][T12575] usb 4-1: Using ep0 maxpacket: 16 [ 3082.006741][T12575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3082.006788][T12575] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 3082.006810][T12575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3082.022235][T12575] usb 4-1: config 0 descriptor?? [ 3082.221891][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.224094][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.224432][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.224586][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.224744][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.224892][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.225041][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.225191][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.225342][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.225485][T21334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 3082.386528][T16552] gp8psk: usb in 138 operation failed. [ 3082.386619][T16552] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 3082.386634][T16552] gp8psk: found Genpix USB device pID = 201 (hex) [ 3082.608823][T19992] usb 9-1: USB disconnect, device number 56 [ 3082.728780][T12575] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 3082.878311][T19992] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 3082.891106][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880369c1000: rx timeout, send abort [ 3083.210613][T12575] usb 4-1: USB disconnect, device number 59 [ 3083.391199][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880369c1000: abort rx timeout. Force session deactivation [ 3083.554385][T16552] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3083.704586][T16552] usb 1-1: Using ep0 maxpacket: 8 [ 3083.708782][T16552] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3083.710532][T16552] usb 1-1: config 6 has an invalid interface number: 207 but max is 0 [ 3083.710559][T16552] usb 1-1: config 6 has no interface number 0 [ 3083.710614][T16552] usb 1-1: config 6 interface 207 has no altsetting 0 [ 3083.714099][T16552] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a3a, bcdDevice=97.6f [ 3083.714291][T16552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3083.714314][T16552] usb 1-1: Product: syz [ 3083.714328][T16552] usb 1-1: Manufacturer: syz [ 3083.714343][T16552] usb 1-1: SerialNumber: syz [ 3084.106600][T16552] usb 1-1: USB disconnect, device number 80 [ 3084.294304][T11162] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3084.447743][T11162] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 3084.447777][T11162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.464441][T12575] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 3084.495642][T11162] usb 4-1: config 0 descriptor?? [ 3084.502506][T11162] gspca_main: spca508-2.14.0 probing 8086:0110 [ 3084.616448][T12575] usb 9-1: Using ep0 maxpacket: 32 [ 3084.619185][T12575] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 3084.619215][T12575] usb 9-1: config 0 has no interface number 0 [ 3084.624458][T12575] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3084.624491][T12575] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3084.624510][T12575] usb 9-1: Product: syz [ 3084.624523][T12575] usb 9-1: Manufacturer: syz [ 3084.624538][T12575] usb 9-1: SerialNumber: syz [ 3084.646581][T12575] usb 9-1: config 0 descriptor?? [ 3084.662203][T12575] smsc95xx v2.0.0 [ 3084.728417][T11162] gspca_spca508: reg_read err -32 [ 3084.729499][T11162] gspca_spca508: reg_read err -32 [ 3084.730977][T11162] gspca_spca508: reg_read err -32 [ 3084.750271][ T9484] IPVS: starting estimator thread 0... [ 3084.874528][T21365] IPVS: using max 6 ests per chain, 14400 per kthread [ 3084.933972][T11162] gspca_spca508: reg_read err -71 [ 3084.940399][T11162] gspca_spca508: reg write: error -71 [ 3084.940509][T11162] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 3084.969675][T11162] usb 4-1: USB disconnect, device number 60 [ 3085.594341][T11162] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3085.751641][T11162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3085.751679][T11162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3085.751703][T11162] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3085.751752][T11162] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3085.751776][T11162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3085.825591][T11162] usb 6-1: config 0 descriptor?? [ 3085.848453][T12575] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 3085.848487][T12575] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 3085.849079][T12575] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3085.849542][T12575] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 3085.870156][T12575] usb 9-1: USB disconnect, device number 57 [ 3086.951653][T11162] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3087.159899][T11162] usb 6-1: USB disconnect, device number 31 [ 3088.040104][ T9484] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 3088.186269][ T9484] usb 9-1: Using ep0 maxpacket: 16 [ 3088.189032][ T9484] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3088.189066][ T9484] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3088.189109][ T9484] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 3088.189133][ T9484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.242529][ T9484] usb 9-1: config 0 descriptor?? [ 3088.758143][T21400] vxcan0: tx address claim with dlc 0 [ 3089.313173][ T9484] apple 0003:05AC:024B.002F: unknown global tag 0xe [ 3089.313200][ T9484] apple 0003:05AC:024B.002F: item 0 1 1 14 parsing failed [ 3089.338327][ T9484] apple 0003:05AC:024B.002F: parse failed [ 3089.338459][ T9484] apple 0003:05AC:024B.002F: probe with driver apple failed with error -22 [ 3089.520622][ T990] usb 9-1: USB disconnect, device number 58 [ 3091.552693][T21428] net_ratelimit: 3321 callbacks suppressed [ 3091.552718][T21428] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3091.552938][ T990] IPVS: starting estimator thread 0... [ 3091.573626][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3091.664431][T21430] IPVS: using max 6 ests per chain, 14400 per kthread [ 3092.948121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7dd000: rx timeout, send abort [ 3093.247759][T19308] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3093.324480][ T5919] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 3093.367132][T21444] block nbd3: Send control failed (result -22) [ 3093.367275][T21444] block nbd3: Request send failed, requeueing [ 3093.407652][T15638] block nbd3: Dead connection, failed to find a fallback [ 3093.407684][T15638] block nbd3: shutting down sockets [ 3093.407705][T15638] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 3093.411170][T21444] EXT4-fs (nbd3): unable to read superblock [ 3093.433251][T19308] usb 6-1: Using ep0 maxpacket: 8 [ 3093.448246][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7dd000: abort rx timeout. Force session deactivation [ 3093.474484][ T5919] usb 10-1: Using ep0 maxpacket: 32 [ 3093.477272][ T5919] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3093.482419][ T5919] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3093.482446][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.482464][ T5919] usb 10-1: Product: syz [ 3093.482479][ T5919] usb 10-1: Manufacturer: syz [ 3093.482506][ T5919] usb 10-1: SerialNumber: syz [ 3093.500944][ T5919] usb 10-1: config 0 descriptor?? [ 3093.647429][T19308] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 3093.647465][T19308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.647488][T19308] usb 6-1: Product: syz [ 3093.647502][T19308] usb 6-1: Manufacturer: syz [ 3093.647516][T19308] usb 6-1: SerialNumber: syz [ 3093.712708][T19308] usb 6-1: config 0 descriptor?? [ 3093.742181][T19308] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 3093.937419][ T5919] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 3094.440787][T21454] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3094.564988][ T5919] usb 10-1: USB disconnect, device number 62 [ 3094.859632][T19308] usb 6-1: USB disconnect, device number 32 [ 3095.313185][T21472] random: crng reseeded on system resumption [ 3095.626209][T21480] netlink: 'syz.5.3509': attribute type 33 has an invalid length. [ 3095.626237][T21480] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3509'. [ 3095.899471][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ab87400: rx timeout, send abort [ 3096.014287][T19308] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3096.164282][T19308] usb 6-1: Using ep0 maxpacket: 32 [ 3096.170036][T19308] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 3096.170137][T19308] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3096.170161][T19308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3096.170222][T19308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3096.170245][T19308] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3096.170269][T19308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3096.170292][T19308] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3096.170316][T19308] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3096.170362][T19308] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3096.170387][T19308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.174346][ T5919] usb 9-1: new low-speed USB device number 59 using dummy_hcd [ 3096.307688][T19308] usb 6-1: config 0 descriptor?? [ 3096.335224][ T5919] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 3096.335257][ T5919] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 3096.335278][ T5919] usb 9-1: config 0 has no interface number 0 [ 3096.335331][ T5919] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3096.335356][ T5919] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3096.335381][ T5919] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3096.335423][ T5919] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3096.335446][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.359573][ T5919] usb 9-1: config 0 descriptor?? [ 3096.370770][T21490] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3096.399546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ab87400: abort rx timeout. Force session deactivation [ 3096.601381][ T990] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3096.744845][T19308] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3096.827379][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 3096.832296][ T990] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 3096.832432][ T990] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3096.832457][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3096.832483][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3096.832576][ T990] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3096.832624][ T990] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3096.832657][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.161600][T16552] usb 6-1: USB disconnect, device number 33 [ 3097.254650][ T5919] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input46 [ 3097.286972][T16552] usblp0: removed [ 3098.744630][ T5919] usb 9-1: USB disconnect, device number 59 [ 3098.744742][ C0] keyspan_remote 9-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 3098.786908][ T990] usb 1-1: usb_control_msg returned -32 [ 3098.786965][ T990] usbtmc 1-1:16.0: can't read capabilities [ 3099.274980][T16552] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 3099.594001][T16552] usb 10-1: Using ep0 maxpacket: 32 [ 3099.702575][T16552] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3099.702788][T16552] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3099.817271][T16552] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 3099.817468][T16552] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 3099.817604][T16552] usb 10-1: Product: syz [ 3099.962099][T16552] usb 10-1: config 0 descriptor?? [ 3100.320705][T14604] usb 1-1: USB disconnect, device number 81 [ 3100.396687][T16552] hid_parser_main: 5 callbacks suppressed [ 3100.396706][T16552] waterforce 0003:1044:7A4D.0030: unknown main item tag 0x0 [ 3100.396725][T16552] waterforce 0003:1044:7A4D.0030: unknown main item tag 0x0 [ 3100.396740][T16552] waterforce 0003:1044:7A4D.0030: unknown main item tag 0x0 [ 3100.396754][T16552] waterforce 0003:1044:7A4D.0030: unknown main item tag 0x0 [ 3100.396768][T16552] waterforce 0003:1044:7A4D.0030: unknown main item tag 0x0 [ 3100.449538][T16552] waterforce 0003:1044:7A4D.0030: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.9-1/input0 [ 3100.516539][T16552] waterforce 0003:1044:7A4D.0030: fw version request failed with -38 [ 3100.791383][T16552] usb 10-1: USB disconnect, device number 63 [ 3101.848357][T21528] netlink: 'syz.5.3528': attribute type 1 has an invalid length. [ 3102.143965][T21531] input: syz1 as /devices/virtual/input/input47 [ 3103.230624][T21561] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3541'. [ 3103.381368][T14604] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3103.726877][T14604] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 3103.728225][T14604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3103.804327][T14604] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 3103.804364][T14604] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 3103.804395][T14604] usb 4-1: Manufacturer: syz [ 3103.843288][T14604] usb 4-1: config 0 descriptor?? [ 3103.976205][T14604] rc_core: IR keymap rc-hauppauge not found [ 3103.976230][T14604] Registered IR keymap rc-empty [ 3103.978208][T14604] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 3104.007871][T14604] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 3104.112186][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 3104.137322][T21571] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3543'. [ 3104.311470][T14604] usb 4-1: USB disconnect, device number 61 [ 3105.837065][T12737] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3105.995571][T12737] usb 4-1: Using ep0 maxpacket: 32 [ 3105.998712][T12737] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3105.998742][T12737] usb 4-1: config 0 has no interface number 0 [ 3105.998802][T12737] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3106.002470][T12737] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3106.002502][T12737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.002520][T12737] usb 4-1: Product: syz [ 3106.002535][T12737] usb 4-1: Manufacturer: syz [ 3106.002550][T12737] usb 4-1: SerialNumber: syz [ 3106.034355][T12737] usb 4-1: config 0 descriptor?? [ 3106.038805][T12737] smsc75xx v1.0.0 [ 3106.892000][T21610] usb usb8: usbfs: process 21610 (syz.5.3560) did not claim interface 0 before use [ 3107.849030][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3107.849064][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3108.090605][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3108.090682][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3108.090748][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 3108.090814][T12737] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3108.095009][T12737] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 3108.134071][T12737] usb 4-1: USB disconnect, device number 62 [ 3108.937311][ C1] vkms_vblank_simulate: vblank timer overrun [ 3109.415629][ C1] vkms_vblank_simulate: vblank timer overrun [ 3109.545444][T21640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'. [ 3110.148388][ C1] vkms_vblank_simulate: vblank timer overrun [ 3111.908591][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038b3f000: rx timeout, send abort [ 3112.200470][ C1] vkms_vblank_simulate: vblank timer overrun [ 3112.229457][ C1] vkms_vblank_simulate: vblank timer overrun [ 3112.482911][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038b3f000: abort rx timeout. Force session deactivation [ 3112.627048][ C1] vkms_vblank_simulate: vblank timer overrun [ 3112.936885][ C1] vkms_vblank_simulate: vblank timer overrun [ 3113.513146][T12575] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 3114.364579][T12575] usb 10-1: Using ep0 maxpacket: 16 [ 3114.367369][T12575] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3114.367403][T12575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3114.636870][T12575] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3114.636948][T12575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.637015][T12575] usb 10-1: Product: syz [ 3114.637078][T12575] usb 10-1: Manufacturer: syz [ 3114.637094][T12575] usb 10-1: SerialNumber: syz [ 3114.878887][T12575] usb 10-1: config 0 descriptor?? [ 3114.930762][T12575] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3114.930801][T12575] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 3115.474648][T14604] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3115.549708][T12575] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3115.551559][T12575] em28xx 10-1:0.0: Config register raw data: 0x56 [ 3115.624357][T14604] usb 6-1: Using ep0 maxpacket: 32 [ 3115.630793][T14604] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 3115.630825][T14604] usb 6-1: config 0 has no interface number 0 [ 3115.630878][T14604] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 3115.630905][T14604] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 3115.630930][T14604] usb 6-1: config 0 interface 126 has no altsetting 0 [ 3115.642628][T14604] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 3115.642659][T14604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.642677][T14604] usb 6-1: Product: syz [ 3115.642692][T14604] usb 6-1: Manufacturer: syz [ 3115.642708][T14604] usb 6-1: SerialNumber: syz [ 3115.662110][T14604] usb 6-1: config 0 descriptor?? [ 3115.663376][T21685] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3115.663574][T21685] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3115.762943][T12575] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 3115.762969][T12575] em28xx 10-1:0.0: No AC97 audio processor [ 3115.794916][T12575] usb 10-1: USB disconnect, device number 64 [ 3115.797549][T12575] em28xx 10-1:0.0: Disconnecting em28xx [ 3115.817610][T12575] em28xx 10-1:0.0: Freeing device [ 3116.259363][T14604] ir_usb 6-1:0.126: IR Dongle converter detected [ 3116.787371][ C1] vkms_vblank_simulate: vblank timer overrun [ 3117.518293][T14604] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 3117.562500][T14604] usb 6-1: USB disconnect, device number 34 [ 3117.883159][ C1] vkms_vblank_simulate: vblank timer overrun [ 3118.001336][ C1] vkms_vblank_simulate: vblank timer overrun [ 3118.038089][ C1] vkms_vblank_simulate: vblank timer overrun [ 3118.060378][T14604] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 3118.061180][T14604] ir_usb 6-1:0.126: device disconnected [ 3118.293632][ C1] vkms_vblank_simulate: vblank timer overrun [ 3118.458511][T21716] syzkaller1: entered promiscuous mode [ 3118.458547][T21716] syzkaller1: entered allmulticast mode [ 3118.784503][T14604] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 3118.937244][T14604] usb 9-1: Using ep0 maxpacket: 8 [ 3118.940298][T14604] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 3118.940370][T14604] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3118.940394][T14604] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3118.940419][T14604] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3118.940443][T14604] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3118.940488][T14604] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3118.940511][T14604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3119.220473][T14604] usb 9-1: usb_control_msg returned -32 [ 3119.220529][T14604] usbtmc 9-1:16.0: can't read capabilities [ 3120.026305][ C1] vkms_vblank_simulate: vblank timer overrun [ 3120.671670][ C1] vkms_vblank_simulate: vblank timer overrun [ 3122.047602][ C1] vkms_vblank_simulate: vblank timer overrun [ 3122.247883][ T9484] usb 9-1: USB disconnect, device number 60 [ 3122.307694][ C1] vkms_vblank_simulate: vblank timer overrun [ 3122.418496][T21758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3122.604388][T12737] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 3122.624287][T16552] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3122.780182][T12737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3122.780290][T12737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3122.780316][T12737] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3122.780363][T12737] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3122.780462][T12737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.834185][T16552] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 3122.834215][T16552] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3122.834234][T16552] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3122.834254][T16552] usb 1-1: config 220 has no interface number 2 [ 3122.834379][T16552] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3122.834409][T16552] usb 1-1: config 220 interface 0 has no altsetting 0 [ 3122.834427][T16552] usb 1-1: config 220 interface 76 has no altsetting 0 [ 3122.834446][T16552] usb 1-1: config 220 interface 1 has no altsetting 0 [ 3122.911538][T16552] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3122.911572][T16552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3122.911590][T16552] usb 1-1: Product: syz [ 3122.911599][T16552] usb 1-1: Manufacturer: syz [ 3122.911608][T16552] usb 1-1: SerialNumber: syz [ 3122.934834][ T9484] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3122.959842][T12737] usb 10-1: config 0 descriptor?? [ 3123.084609][ T9484] usb 4-1: Using ep0 maxpacket: 16 [ 3123.087568][ T9484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3123.087630][ T9484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3123.087659][ T9484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3123.087681][ T9484] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3123.087706][ T9484] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3123.092659][ T9484] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3123.092691][ T9484] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3123.092711][ T9484] usb 4-1: Manufacturer: syz [ 3123.112025][ T9484] usb 4-1: config 0 descriptor?? [ 3123.383019][T16552] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 3123.383054][T16552] usb 1-1: No valid video chain found. [ 3123.383183][T16552] usb 1-1: selecting invalid altsetting 0 [ 3123.497320][T16552] usb 1-1: selecting invalid altsetting 0 [ 3123.497432][T16552] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 3123.520191][T16552] usb 1-1: USB disconnect, device number 82 [ 3123.614606][ T9484] rc_core: IR keymap rc-hauppauge not found [ 3123.614629][ T9484] Registered IR keymap rc-empty [ 3123.614820][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.642619][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.654824][T12737] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 3123.660687][ T9484] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 3123.710659][ T9484] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 3123.795869][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.818594][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.845343][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.864644][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.885095][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.904612][T14604] usb 10-1: USB disconnect, device number 65 [ 3123.906944][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.922927][ C1] vkms_vblank_simulate: vblank timer overrun [ 3123.942712][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.954437][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.974764][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3123.994489][ T9484] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3124.078075][ T9484] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3124.078104][ T9484] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3124.139938][ C1] vkms_vblank_simulate: vblank timer overrun [ 3124.140902][ T9484] usb 4-1: USB disconnect, device number 63 [ 3124.785799][ C1] vkms_vblank_simulate: vblank timer overrun [ 3125.230125][ C1] vkms_vblank_simulate: vblank timer overrun [ 3126.545015][ C1] vkms_vblank_simulate: vblank timer overrun [ 3127.338345][ C1] vkms_vblank_simulate: vblank timer overrun [ 3127.421165][ C1] vkms_vblank_simulate: vblank timer overrun [ 3128.192792][T21803] sp0: Synchronizing with TNC [ 3128.248556][T21802] [U] è [ 3130.844483][T17388] Bluetooth: hci6: command 0x0406 tx timeout [ 3130.854169][T21812] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 3131.529800][T21812] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 3131.583648][T21812] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3131.583754][T21812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3131.782254][T21835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3131.928308][T21840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3131.964678][ T9484] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3131.975267][T14604] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 3132.127948][T14604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.127986][T14604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3132.128106][T14604] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3132.128165][T14604] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3132.128189][T14604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.176023][T14604] usb 1-1: config 0 descriptor?? [ 3132.634256][ T9484] usb 4-1: Using ep0 maxpacket: 32 [ 3132.639833][ T9484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.639867][ T9484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3132.639909][ T9484] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 3132.639934][ T9484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.663255][ T9484] usb 4-1: config 0 descriptor?? [ 3132.694372][T12575] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 3132.877193][T12575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.877331][T12575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3132.877371][T12575] usb 9-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 3132.877392][T12575] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.924260][T20338] Bluetooth: hci6: command 0x0406 tx timeout [ 3132.931303][T14604] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3132.954752][T12575] usb 9-1: config 0 descriptor?? [ 3133.018434][T14604] usb 1-1: USB disconnect, device number 83 [ 3133.271410][ T9484] pyra 0003:1E7D:2CF6.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 3133.399485][T12575] kye 0003:0458:0153.0034: unknown main item tag 0x3 [ 3133.416756][T12575] kye 0003:0458:0153.0034: hidraw1: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.8-1/input0 [ 3134.541412][T20338] Bluetooth: hci3: command 0x0405 tx timeout [ 3134.550968][ T9484] pyra 0003:1E7D:2CF6.0033: couldn't init struct pyra_device [ 3134.551034][ T9484] pyra 0003:1E7D:2CF6.0033: couldn't install mouse [ 3134.553023][T14604] usb 9-1: USB disconnect, device number 61 [ 3134.724427][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033fb6c00: rx timeout, send abort [ 3134.755964][ T9484] pyra 0003:1E7D:2CF6.0033: probe with driver pyra failed with error -71 [ 3134.791147][ T9484] usb 4-1: USB disconnect, device number 64 [ 3134.916065][T21863] serio: Serial port pty31 [ 3134.983583][T21868] netlink: 'syz.0.3650': attribute type 12 has an invalid length. [ 3134.983609][T21868] netlink: 'syz.0.3650': attribute type 29 has an invalid length. [ 3134.983624][T21868] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3650'. [ 3134.983656][T21868] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3650'. [ 3135.224516][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033fb6c00: abort rx timeout. Force session deactivation [ 3135.628328][T19308] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3135.959406][T19308] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 3135.959609][T19308] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3135.959640][T19308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3135.959666][T19308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3135.959694][T19308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3135.959740][T19308] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3135.959764][T19308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.609594][T20338] Bluetooth: hci3: command 0x0405 tx timeout [ 3136.702488][T19308] usb 1-1: config 0 descriptor?? [ 3136.703943][T21870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3137.014326][ T9484] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3137.034513][T14604] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3137.163141][T19308] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 3137.163182][T19308] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 3137.163207][T19308] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 3137.173628][ T9484] usb 4-1: Using ep0 maxpacket: 16 [ 3137.178977][ T9484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3137.179026][ T9484] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 3137.179049][ T9484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.184372][T14604] usb 6-1: Using ep0 maxpacket: 32 [ 3137.196421][ T9484] usb 4-1: config 0 descriptor?? [ 3137.196754][T14604] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 3137.196774][T14604] usb 6-1: config 0 has no interface number 0 [ 3137.197899][T14604] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3137.197926][T14604] usb 6-1: config 0 interface 85 has no altsetting 0 [ 3137.203069][T14604] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3137.203098][T14604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.203117][T14604] usb 6-1: Product: syz [ 3137.203131][T14604] usb 6-1: Manufacturer: syz [ 3137.203146][T14604] usb 6-1: SerialNumber: syz [ 3137.223939][T14604] usb 6-1: config 0 descriptor?? [ 3137.335738][T19308] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3137.803867][T19308] usb 1-1: USB disconnect, device number 84 [ 3138.488894][T14604] appletouch 6-1:0.85: Geyser mode initialized. [ 3138.726980][T14604] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input51 [ 3138.732411][ T9484] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 3138.826398][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 3138.849600][T14604] usb 6-1: USB disconnect, device number 35 [ 3138.891138][ T9484] usb 4-1: USB disconnect, device number 65 [ 3138.985843][T14604] appletouch 6-1:0.85: input: appletouch disconnected [ 3140.350636][T21897] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3140.504854][T21897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3140.582608][T21912] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 3140.582634][T21912] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3140.684782][T20338] Bluetooth: hci6: command 0x0406 tx timeout [ 3141.454344][T19308] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 3141.471234][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038b21000: rx timeout, send abort [ 3141.628087][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3141.628125][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3141.628149][T19308] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3141.628197][T19308] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3141.628222][T19308] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.776884][T19308] usb 10-1: config 0 descriptor?? [ 3141.971381][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038b21000: abort rx timeout. Force session deactivation [ 3142.328055][T19308] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 3142.479579][T21945] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3142.534377][T20338] Bluetooth: hci3: command 0x0405 tx timeout [ 3142.538735][T14604] usb 10-1: USB disconnect, device number 66 [ 3142.554296][ T9484] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 3142.722775][ T9484] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 3142.722808][ T9484] usb 1-1: config 0 has no interface number 0 [ 3142.754469][ T9484] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3142.754503][ T9484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3142.754524][ T9484] usb 1-1: Product: syz [ 3142.754539][ T9484] usb 1-1: Manufacturer: syz [ 3142.754554][ T9484] usb 1-1: SerialNumber: syz [ 3142.814431][ T9484] usb 1-1: config 0 descriptor?? [ 3143.435968][T21961] netlink: 'syz.9.3685': attribute type 1 has an invalid length. [ 3143.688564][ T9484] asix 1-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 3144.379685][T12937] usb 1-1: USB disconnect, device number 85 [ 3146.249897][ T9484] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 3146.432174][T21998] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 3146.450712][ T9484] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3146.450745][ T9484] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3146.450792][ T9484] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3146.450816][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3146.630958][T22003] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 3147.360393][ T9484] usb 1-1: usb_control_msg returned -32 [ 3147.360451][ T9484] usbtmc 1-1:16.0: can't read capabilities [ 3148.668357][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b582800: rx timeout, send abort [ 3149.168455][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b582800: abort rx timeout. Force session deactivation [ 3149.365462][ T9484] usb 1-1: USB disconnect, device number 86 [ 3149.779331][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b47000: rx timeout, send abort [ 3149.779486][T12575] kernel read not supported for file /dsp1 (pid: 12575 comm: kworker/1:6) [ 3150.279586][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b47000: abort rx timeout. Force session deactivation [ 3150.624292][T19308] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 3150.776898][T19308] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3150.776937][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3150.776965][T19308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3150.776987][T19308] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3150.777032][T19308] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3150.777057][T19308] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.879315][T19308] usb 10-1: config 0 descriptor?? [ 3151.396099][T19308] plantronics 0003:047F:FFFF.0038: ignoring exceeding usage max [ 3151.426283][T19308] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 3151.512617][T22065] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 3151.657043][T22066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3152.034361][T19308] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 3152.520458][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f617c00: rx timeout, send abort [ 3152.564825][T19308] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3152.564945][T19308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.564974][T19308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3152.565018][T19308] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 3152.565408][T19308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.994218][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.178166][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.221780][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.229854][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3153.412653][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f617c00: abort rx timeout. Force session deactivation [ 3153.592480][T19308] usb 6-1: config 0 descriptor?? [ 3154.048706][T12737] usb 10-1: reset high-speed USB device number 67 using dummy_hcd [ 3154.099966][T19308] sony 0003:054C:024B.0039: unexpected long global item [ 3154.100933][T19308] sony 0003:054C:024B.0039: parse failed [ 3154.101057][T19308] sony 0003:054C:024B.0039: probe with driver sony failed with error -22 [ 3154.335459][ T9484] usb 6-1: USB disconnect, device number 36 [ 3155.319100][T12575] usb 10-1: USB disconnect, device number 67 [ 3155.847790][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a99d800: rx timeout, send abort [ 3156.347873][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a99d800: abort rx timeout. Force session deactivation [ 3158.384213][T12575] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3158.594467][T12575] usb 1-1: Using ep0 maxpacket: 16 [ 3158.603846][T12575] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 3158.603882][T12575] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3158.603917][T12575] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3158.603939][T12575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3159.723604][T12575] usb 1-1: config 0 descriptor?? [ 3159.886012][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a7e6400: rx timeout, send abort [ 3159.886191][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a7e6400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 3160.177749][T12575] hid (null): global environment stack underflow [ 3160.177809][T12575] hid (null): unknown global tag 0xd [ 3160.177825][T12575] hid (null): unknown global tag 0x86 [ 3160.177885][T12575] hid (null): unknown global tag 0x90 [ 3160.178051][T12575] hid (null): report_id 4131346620 is invalid [ 3160.178068][T12575] hid (null): unknown global tag 0xe [ 3160.178092][T12575] hid (null): unknown global tag 0xd [ 3160.181492][T12575] hid (null): global environment stack overflow [ 3160.181505][T12575] hid (null): unknown global tag 0xe [ 3160.181772][T12575] hid (null): unknown global tag 0xd [ 3160.421799][T12575] usb 1-1: USB disconnect, device number 87 [ 3163.359895][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c8b8800: rx timeout, send abort [ 3163.860093][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c8b8800: abort rx timeout. Force session deactivation [ 3164.471167][T16552] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 3164.644565][T16552] usb 1-1: Using ep0 maxpacket: 16 [ 3164.648914][T16552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3164.648936][T16552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3164.648950][T16552] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3164.648976][T16552] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3164.648989][T16552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3164.795392][T16552] usb 1-1: config 0 descriptor?? [ 3165.275650][T16552] HID 045e:07da: Invalid code 65791 type 1 [ 3165.311074][T16552] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003B/input/input52 [ 3165.373734][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880283c8000: rx timeout, send abort [ 3165.463067][T16552] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 3165.597084][T16552] usb 1-1: USB disconnect, device number 88 [ 3165.873889][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880283c8000: abort rx timeout. Force session deactivation [ 3165.951559][ T37] audit: type=1326 audit(1758243398.401:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22205 comm="syz.8.3772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b1f9eba9 code=0x0 [ 3168.087279][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066cff400: rx timeout, send abort [ 3168.592107][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066cff400: abort rx timeout. Force session deactivation [ 3169.225239][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880388bf800: rx timeout, send abort [ 3169.725438][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880388bf800: abort rx timeout. Force session deactivation [ 3169.778222][ C1] vkms_vblank_simulate: vblank timer overrun [ 3169.907759][ C1] vkms_vblank_simulate: vblank timer overrun [ 3170.221669][T22249] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3788'. [ 3170.221701][T22249] netlink: 'syz.9.3788': attribute type 3 has an invalid length. [ 3170.221716][T22249] netlink: 'syz.9.3788': attribute type 1 has an invalid length. [ 3170.221728][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3788'. [ 3170.276342][T22243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.384580][T19992] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3170.557827][T19992] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3170.557861][T19992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.557882][T19992] usb 4-1: Product: syz [ 3170.557896][T19992] usb 4-1: Manufacturer: syz [ 3170.557911][T19992] usb 4-1: SerialNumber: syz [ 3170.576959][T19992] usb 4-1: config 0 descriptor?? [ 3170.664465][T12937] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 3170.828798][T12937] usb 10-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 3170.828890][T12937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.923705][T12937] usb 10-1: config 0 descriptor?? [ 3171.013055][T12937] pwc: Creative Labs Webcam Pro Ex detected. [ 3171.340341][T12937] pwc: Failed to set LED on/off time (-71) [ 3171.341608][T12937] pwc: send_video_command error -71 [ 3171.341620][T12937] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 3171.342073][T12937] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 3171.362706][T12937] usb 10-1: USB disconnect, device number 68 [ 3171.929083][T19992] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 3172.111813][T19992] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 3172.119528][T19992] usb 4-1: USB disconnect, device number 66 [ 3172.153639][T19992] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 3172.291030][T19992] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 3172.505418][T22270] netlink: 'syz.5.3794': attribute type 12 has an invalid length. [ 3172.505462][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 3172.586053][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3e000: rx timeout, send abort [ 3172.648146][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ae2c00: rx timeout, send abort [ 3172.737904][T15737] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3172.738797][T15737] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3172.738843][T15737] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3172.738881][T15737] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3172.780577][T22270] netlink: 'syz.5.3794': attribute type 12 has an invalid length. [ 3172.780599][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 3173.086155][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3e000: abort rx timeout. Force session deactivation [ 3174.279731][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ae2c00: abort rx timeout. Force session deactivation [ 3176.245818][ C1] vkms_vblank_simulate: vblank timer overrun [ 3176.298942][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a64a400: rx timeout, send abort [ 3176.326933][T22312] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3808'. [ 3176.612020][T22317] macvlan2: entered promiscuous mode [ 3176.612054][T22317] macvlan2: entered allmulticast mode [ 3176.612810][T22317] syz_tun: entered promiscuous mode [ 3176.612834][T22317] syz_tun: entered allmulticast mode [ 3176.641854][T22317] team0: Port device macvlan2 added [ 3176.799081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a64a400: abort rx timeout. Force session deactivation [ 3176.957363][T22322] input: syz1 as /devices/virtual/input/input53 [ 3177.279775][ C1] vkms_vblank_simulate: vblank timer overrun [ 3177.967775][ C1] vkms_vblank_simulate: vblank timer overrun [ 3178.469933][ C1] vkms_vblank_simulate: vblank timer overrun [ 3178.617793][ C1] vkms_vblank_simulate: vblank timer overrun [ 3178.985928][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.183018][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.388368][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.554337][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3820'. [ 3180.642163][ C1] vkms_vblank_simulate: vblank timer overrun [ 3181.779439][ C1] vkms_vblank_simulate: vblank timer overrun [ 3182.024230][ C1] vkms_vblank_simulate: vblank timer overrun [ 3182.186698][T22367] [ 3182.186715][T22367] ====================================================== [ 3182.186729][T22367] WARNING: possible circular locking dependency detected [ 3182.186741][T22367] syzkaller #0 Not tainted [ 3182.186754][T22367] ------------------------------------------------------ [ 3182.186762][T22367] syz.5.3824/22367 is trying to acquire lock: [ 3182.186776][T22367] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 3182.186840][T22367] [ 3182.186840][T22367] but task is already holding lock: [ 3182.186848][T22367] ffff888142f043a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 3182.186901][T22367] [ 3182.186901][T22367] which lock already depends on the new lock. [ 3182.186901][T22367] [ 3182.186909][T22367] [ 3182.186909][T22367] the existing dependency chain (in reverse order) is: [ 3182.186918][T22367] [ 3182.186918][T22367] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 3182.186948][T22367] lock_acquire+0x120/0x360 [ 3182.186975][T22367] rt_spin_lock+0x88/0x2c0 [ 3182.186999][T22367] drm_crtc_vblank_on_config+0x2cd/0x860 [ 3182.187025][T22367] drm_crtc_vblank_on+0x88/0xc0 [ 3182.187050][T22367] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 3182.187077][T22367] vkms_atomic_commit_tail+0x69/0x210 [ 3182.187102][T22367] commit_tail+0x284/0x3a0 [ 3182.187127][T22367] drm_atomic_helper_commit+0xa6b/0xb10 [ 3182.187153][T22367] drm_atomic_commit+0x262/0x2c0 [ 3182.187175][T22367] drm_client_modeset_commit_atomic+0x620/0x760 [ 3182.187194][T22367] drm_client_modeset_commit_locked+0xce/0x4d0 [ 3182.187215][T22367] drm_client_modeset_commit+0x4a/0x70 [ 3182.187235][T22367] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 3182.187262][T22367] drm_fb_helper_set_par+0xaf/0x100 [ 3182.187287][T22367] fbcon_init+0x1255/0x2370 [ 3182.187315][T22367] visual_init+0x2ef/0x650 [ 3182.187341][T22367] do_bind_con_driver+0x890/0xf70 [ 3182.187370][T22367] do_take_over_console+0x899/0xa10 [ 3182.187399][T22367] do_fbcon_takeover+0x118/0x200 [ 3182.187427][T22367] fbcon_fb_registered+0x35e/0x610 [ 3182.187463][T22367] register_framebuffer+0x70f/0x890 [ 3182.187481][T22367] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 3182.187509][T22367] drm_fbdev_client_hotplug+0x16f/0x230 [ 3182.187536][T22367] drm_client_register+0x16f/0x210 [ 3182.187566][T22367] drm_fbdev_client_setup+0x19f/0x3f0 [ 3182.187592][T22367] drm_client_setup+0x10a/0x230 [ 3182.187618][T22367] vkms_init+0x3e0/0x4b0 [ 3182.187642][T22367] do_one_initcall+0x233/0x820 [ 3182.187660][T22367] do_initcall_level+0x104/0x190 [ 3182.187688][T22367] do_initcalls+0x59/0xa0 [ 3182.187713][T22367] kernel_init_freeable+0x334/0x4b0 [ 3182.187740][T22367] kernel_init+0x1d/0x1d0 [ 3182.187762][T22367] ret_from_fork+0x436/0x7d0 [ 3182.187787][T22367] ret_from_fork_asm+0x1a/0x30 [ 3182.187806][T22367] [ 3182.187806][T22367] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 3182.187835][T22367] lock_acquire+0x120/0x360 [ 3182.187860][T22367] rt_spin_lock+0x88/0x2c0 [ 3182.187883][T22367] vblank_disable_fn+0x72/0x190 [ 3182.187906][T22367] call_timer_fn+0x17e/0x5f0 [ 3182.187932][T22367] __run_timer_base+0x648/0x970 [ 3182.187954][T22367] run_timer_softirq+0xb7/0x180 [ 3182.187978][T22367] handle_softirqs+0x22f/0x710 [ 3182.188002][T22367] run_ktimerd+0xcf/0x190 [ 3182.188028][T22367] smpboot_thread_fn+0x53f/0xa60 [ 3182.188052][T22367] kthread+0x70e/0x8a0 [ 3182.188081][T22367] ret_from_fork+0x436/0x7d0 [ 3182.188104][T22367] ret_from_fork_asm+0x1a/0x30 [ 3182.188123][T22367] [ 3182.188123][T22367] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 3182.188152][T22367] lock_acquire+0x120/0x360 [ 3182.188177][T22367] call_timer_fn+0xdb/0x5f0 [ 3182.188199][T22367] __run_timer_base+0x648/0x970 [ 3182.188222][T22367] run_timer_softirq+0xb7/0x180 [ 3182.188245][T22367] handle_softirqs+0x22f/0x710 [ 3182.188269][T22367] run_ktimerd+0xcf/0x190 [ 3182.188295][T22367] smpboot_thread_fn+0x53f/0xa60 [ 3182.188319][T22367] kthread+0x70e/0x8a0 [ 3182.188346][T22367] ret_from_fork+0x436/0x7d0 [ 3182.188370][T22367] ret_from_fork_asm+0x1a/0x30 [ 3182.188389][T22367] [ 3182.188389][T22367] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 3182.188417][T22367] lock_acquire+0x120/0x360 [ 3182.188449][T22367] rt_spin_lock+0x88/0x2c0 [ 3182.188472][T22367] __run_timer_base+0x114/0x970 [ 3182.188495][T22367] run_timer_softirq+0x67/0x180 [ 3182.188518][T22367] handle_softirqs+0x22f/0x710 [ 3182.188541][T22367] run_ktimerd+0xcf/0x190 [ 3182.188567][T22367] smpboot_thread_fn+0x53f/0xa60 [ 3182.188591][T22367] kthread+0x70e/0x8a0 [ 3182.188619][T22367] ret_from_fork+0x436/0x7d0 [ 3182.188643][T22367] ret_from_fork_asm+0x1a/0x30 [ 3182.188662][T22367] [ 3182.188662][T22367] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 3182.188690][T22367] validate_chain+0xb9b/0x2140 [ 3182.188719][T22367] __lock_acquire+0xab9/0xd20 [ 3182.188744][T22367] reacquire_held_locks+0x127/0x1d0 [ 3182.188773][T22367] lock_release+0x1b4/0x3e0 [ 3182.188797][T22367] __local_bh_enable_ip+0x10c/0x270 [ 3182.188822][T22367] hrtimer_cancel+0x39/0x60 [ 3182.188849][T22367] drm_vblank_disable_and_save+0x1bf/0x380 [ 3182.188873][T22367] drm_crtc_vblank_off+0x22e/0x820 [ 3182.188898][T22367] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 3182.188926][T22367] vkms_atomic_commit_tail+0x51/0x210 [ 3182.188951][T22367] commit_tail+0x284/0x3a0 [ 3182.188975][T22367] drm_atomic_helper_commit+0xa6b/0xb10 [ 3182.189001][T22367] drm_atomic_commit+0x262/0x2c0 [ 3182.189023][T22367] drm_atomic_helper_set_config+0xe2/0x160 [ 3182.189050][T22367] drm_mode_setcrtc+0x9a7/0x1c50 [ 3182.189067][T22367] drm_ioctl_kernel+0x2cf/0x3a0 [ 3182.189096][T22367] drm_ioctl+0x685/0xb20 [ 3182.189124][T22367] __se_sys_ioctl+0xff/0x170 [ 3182.189145][T22367] do_syscall_64+0xfa/0x3b0 [ 3182.189163][T22367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.189183][T22367] [ 3182.189183][T22367] other info that might help us debug this: [ 3182.189183][T22367] [ 3182.189189][T22367] Chain exists of: [ 3182.189189][T22367] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 3182.189189][T22367] [ 3182.189224][T22367] Possible unsafe locking scenario: [ 3182.189224][T22367] [ 3182.189231][T22367] CPU0 CPU1 [ 3182.189238][T22367] ---- ---- [ 3182.189261][T22367] lock(&dev->vblank_time_lock); [ 3182.189278][T22367] lock(&dev->vbl_lock); [ 3182.189294][T22367] lock(&dev->vblank_time_lock); [ 3182.189310][T22367] lock((softirq_ctrl.lock)); [ 3182.189324][T22367] [ 3182.189324][T22367] *** DEADLOCK *** [ 3182.189324][T22367] [ 3182.189332][T22367] 8 locks held by syz.5.3824/22367: [ 3182.189345][T22367] #0: ffffc9000404fb20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 3182.189395][T22367] #1: ffffc9000404fb48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 3182.189451][T22367] #2: ffff888142f044b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 3182.189507][T22367] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 3182.189560][T22367] #4: ffff888142f04420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 3182.189614][T22367] #5: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 3182.189663][T22367] #6: ffff888142f043a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 3182.189716][T22367] #7: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 3182.189768][T22367] [ 3182.189768][T22367] stack backtrace: [ 3182.189782][T22367] CPU: 1 UID: 0 PID: 22367 Comm: syz.5.3824 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3182.189806][T22367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3182.189820][T22367] Call Trace: [ 3182.189830][T22367] [ 3182.189840][T22367] dump_stack_lvl+0x189/0x250 [ 3182.189874][T22367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3182.189905][T22367] ? __pfx__printk+0x10/0x10 [ 3182.189929][T22367] ? print_lock_name+0xde/0x100 [ 3182.189953][T22367] print_circular_bug+0x2ee/0x310 [ 3182.189977][T22367] check_noncircular+0x134/0x160 [ 3182.190014][T22367] validate_chain+0xb9b/0x2140 [ 3182.190047][T22367] ? preempt_schedule+0xae/0xc0 [ 3182.190075][T22367] ? preempt_schedule_common+0x83/0xd0 [ 3182.190106][T22367] ? preempt_schedule+0xae/0xc0 [ 3182.190135][T22367] ? __pfx_preempt_schedule+0x10/0x10 [ 3182.190166][T22367] __lock_acquire+0xab9/0xd20 [ 3182.190194][T22367] reacquire_held_locks+0x127/0x1d0 [ 3182.190226][T22367] ? __local_bh_disable_ip+0x264/0x400 [ 3182.190255][T22367] lock_release+0x1b4/0x3e0 [ 3182.190282][T22367] ? __local_bh_enable_ip+0x100/0x270 [ 3182.190311][T22367] __local_bh_enable_ip+0x10c/0x270 [ 3182.190337][T22367] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3182.190366][T22367] ? rt_spin_unlock+0x65/0x80 [ 3182.190393][T22367] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 3182.190424][T22367] ? hrtimer_cancel_wait_running+0x142/0x180 [ 3182.190463][T22367] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 3182.190493][T22367] hrtimer_cancel+0x39/0x60 [ 3182.190522][T22367] drm_vblank_disable_and_save+0x1bf/0x380 [ 3182.190551][T22367] drm_crtc_vblank_off+0x22e/0x820 [ 3182.190580][T22367] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 3182.190614][T22367] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 3182.190645][T22367] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 3182.190681][T22367] vkms_atomic_commit_tail+0x51/0x210 [ 3182.190708][T22367] ? read_tsc+0x9/0x20 [ 3182.190731][T22367] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 3182.190755][T22367] commit_tail+0x284/0x3a0 [ 3182.190786][T22367] drm_atomic_helper_commit+0xa6b/0xb10 [ 3182.190817][T22367] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3182.190845][T22367] drm_atomic_commit+0x262/0x2c0 [ 3182.190871][T22367] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3182.190893][T22367] ? __pfx___drm_printfn_info+0x10/0x10 [ 3182.190929][T22367] ? drm_atomic_state_init+0x231/0x310 [ 3182.190954][T22367] drm_atomic_helper_set_config+0xe2/0x160 [ 3182.190984][T22367] drm_mode_setcrtc+0x9a7/0x1c50 [ 3182.191016][T22367] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3182.191065][T22367] ? lockdep_hardirqs_on+0x9c/0x150 [ 3182.191100][T22367] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 3182.191132][T22367] ? rt_spin_unlock+0x65/0x80 [ 3182.191161][T22367] ? drm_is_current_master+0x1a2/0x210 [ 3182.191188][T22367] drm_ioctl_kernel+0x2cf/0x3a0 [ 3182.191220][T22367] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 3182.191239][T22367] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 3182.191275][T22367] drm_ioctl+0x685/0xb20 [ 3182.191305][T22367] ? smk_tskacc+0x2fc/0x370 [ 3182.191338][T22367] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 3182.191360][T22367] ? __pfx_drm_ioctl+0x10/0x10 [ 3182.191396][T22367] ? __fget_files+0x2a/0x420 [ 3182.191425][T22367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3182.191458][T22367] ? __pfx_drm_ioctl+0x10/0x10 [ 3182.191489][T22367] __se_sys_ioctl+0xff/0x170 [ 3182.191514][T22367] do_syscall_64+0xfa/0x3b0 [ 3182.191533][T22367] ? lockdep_hardirqs_on+0x9c/0x150 [ 3182.191565][T22367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.191586][T22367] ? clear_bhb_loop+0x60/0xb0 [ 3182.191611][T22367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.191633][T22367] RIP: 0033:0x7f3afc0eeba9 [ 3182.191653][T22367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3182.191672][T22367] RSP: 002b:00007f3af9ef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3182.191695][T22367] RAX: ffffffffffffffda RBX: 00007f3afc336270 RCX: 00007f3afc0eeba9 [ 3182.191711][T22367] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 3182.191726][T22367] RBP: 00007f3afc171e19 R08: 0000000000000000 R09: 0000000000000000 [ 3182.191741][T22367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3182.191754][T22367] R13: 00007f3afc336308 R14: 00007f3afc336270 R15: 00007ffd53a81588 [ 3182.191779][T22367] [ 3182.604649][T12575] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 3182.764807][T12575] usb 6-1: device descriptor read/64, error -71 [ 3183.195000][T12575] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 3183.454157][T12575] usb 6-1: device descriptor read/64, error -71 [ 3183.564355][T12575] usb usb6-port1: attempt power cycle [ 3183.904229][T12575] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3183.924743][T12575] usb 6-1: device descriptor read/8, error -71 [ 3184.164161][T12575] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3184.186250][T12575] usb 6-1: device descriptor read/8, error -71 [ 3184.294497][T12575] usb usb6-port1: unable to enumerate USB device