last executing test programs: 14m55.335214856s ago: executing program 0 (id=447): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, 0x0) write(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 14m54.310080883s ago: executing program 0 (id=448): epoll_create1(0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000880)="50985cd3baad0be6a3f42c443af29c8238500bfcee38ff73921861daa76438cab539db44cba23aa57a8164325d30be2564c6ebd5c1f37a4f5474c7ca2ec0984f28dce4dc83fdee987b0d06e40ddf2288fba3bd7bc22cc4f30c3f7a7a4ca1f05310abdcea6b9951d381bbfb4617abbd701a4f8d64564fbe", 0x77) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 14m52.82650069s ago: executing program 0 (id=452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040aa5503a10000000000010902200001010080320904000002080650000705010200020007058202000200"], 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x282790d7, 0xf307, 0x100000000, 0x1}) 14m47.966852944s ago: executing program 0 (id=456): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r2, 0x0) 14m43.031303579s ago: executing program 0 (id=464): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) syz_io_uring_setup(0x38, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 14m28.150341998s ago: executing program 0 (id=479): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000380), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='4', 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 14m12.614011843s ago: executing program 32 (id=479): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000380), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='4', 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 2m7.384271091s ago: executing program 5 (id=2031): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x3, 0x1, 0x0, 'queue0\x00', 0x7}) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x93) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) eventfd2(0x1, 0x9605782d338da745) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x100, 0x1f, 0x1, 0x200, 0x7, 0xfd, 0x3, 0x20000000, 0xa, 0xf7f8, 0x2, 0xb51, 0x10001, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x28000009, 0x3, 0x7, 0x2, 0x48, 0x0, 0x8, 0x423b, 0x2, 0x7, 0x9]}) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="130100004cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2m3.043869772s ago: executing program 5 (id=2035): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', 0x0, 0x0, 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus'}, 0x9) copy_file_range(r5, &(0x7f00000008c0)=0x4, r4, 0x0, 0x8, 0x0) 2m1.734330655s ago: executing program 5 (id=2038): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 1m57.408280785s ago: executing program 5 (id=2046): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 1m51.064387006s ago: executing program 5 (id=2056): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 1m49.032583828s ago: executing program 5 (id=2058): socket$inet6(0xa, 0x80002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) syz_open_pts(r1, 0x80) read(0xffffffffffffffff, 0x0, 0x0) 1m33.826525815s ago: executing program 33 (id=2058): socket$inet6(0xa, 0x80002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) syz_open_pts(r1, 0x80) read(0xffffffffffffffff, 0x0, 0x0) 46.153802837s ago: executing program 4 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x6, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x6, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0xa}, [@nested={0xb8, 0xcb, 0x0, 0x1, [@typed={0xb2, 0x116, 0x0, 0x0, @binary="2d4d722edee2c9db5923c370caad5bf62af504c2e32f31002fd335fc60ad413ace8e6c7d1d6444351642bfb2296c9ef5f0bbe46c5078ab3699debb7a023d3d69072c68cdcfa50a78bb18c284808835dd676e2f788db55858c1ac943752688d368099d7c5422b42f85a963e6af18e0af100e74194df60f85c38ce32b4c93843aeec0c05ab6cd3a32e7dc32938886bcd4dc59b19e27ab9d6c4691312d7311fc427e141f5bc97835e59af3ab4ed5950"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 41.247426821s ago: executing program 4 (id=2185): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x3, 0x1, 0x0, 'queue0\x00', 0x7}) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x93) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x1, 0x9605782d338da745) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x100, 0x1f, 0x1, 0x200, 0x7, 0xfd, 0x3, 0x20000000, 0xa, 0xf7f8, 0x2, 0xb51, 0x10001, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x28000009, 0x3, 0x7, 0x2, 0x48, 0x0, 0x8, 0x423b, 0x2, 0x7, 0x9]}) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="130100004cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 38.122831291s ago: executing program 4 (id=2186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe7da}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(0x0, 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x7, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0x31, 0x7, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0xf, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x6, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff0000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) 36.439191103s ago: executing program 4 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff85000000040000001811", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 35.366942631s ago: executing program 4 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x2000001}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x80940, 0xd2) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f00000374c0), 0x0, 0x2001, &(0x7f0000037680)={0x0, 0x989680}) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000140)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYBLOB], 0x10e0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 34.160096721s ago: executing program 4 (id=2195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000473000/0x3000)=nil, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xffffffffffffff82, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2581, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffd, 0x6, 0xc, 0x1000000, 0x7, 0x5, 0x5, 0x1, 0x8000009655, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x20000000000ffff, 0x8, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) 26.916304956s ago: executing program 2 (id=2208): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 22.875742468s ago: executing program 2 (id=2212): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 19.556664292s ago: executing program 6 (id=2221): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) listen(r1, 0x7) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0x6021}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x2102, r5}, 0x1) landlock_restrict_self(r6, 0x5) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./security/ima/policy\x00') 18.426570401s ago: executing program 34 (id=2195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000473000/0x3000)=nil, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xffffffffffffff82, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2581, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffd, 0x6, 0xc, 0x1000000, 0x7, 0x5, 0x5, 0x1, 0x8000009655, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x20000000000ffff, 0x8, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) 17.446015566s ago: executing program 6 (id=2225): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000900", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdb036199122bd7242b23cd71ba0c521ba608220da7460f8021686de3882227cbb7314eab187b7d8ec1d2fa0d8a7bd6eb377fa6d0008c0925c2af5e0f4410af6d2fb0df1302894ed1e1b726e9d75c6cbf8be002a0bcaea476464fa96985e83450b6e10"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r1, 0x4}, 0x38) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100", @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae1ab42a83945264b1eba9e2a7274d9a86197a663b5dc0c78b5539fa3115cc2e56095d923d8e2634d9a53a0711cf638a8fe0778ca53e689d5766cd971047"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.916869826s ago: executing program 2 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,fscontext=system']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, 0x0}, 0x44000) 13.846782378s ago: executing program 1 (id=2233): modify_ldt$write2(0x11, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) close(0x3) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x25044800, &(0x7f00000005c0)="d1eb3edf36e67c2163dcc760e4ff99469a6a260fef28cf517384d914e5fe9af6a54439760ea123d9414f7e2d25aa3a833ffaacdcc98c84c3b16c5af26946a9f92ff9228ddb54764abdeb", 0x4a, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0xffffffffffffffff) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x20000000006, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) 12.505821072s ago: executing program 6 (id=2235): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.79359253s ago: executing program 2 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x6, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x6, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0xa}, [@nested={0xb8, 0xcb, 0x0, 0x1, [@typed={0xb2, 0x116, 0x0, 0x0, @binary="2d4d722edee2c9db5923c370caad5bf62af504c2e32f31002fd335fc60ad413ace8e6c7d1d6444351642bfb2296c9ef5f0bbe46c5078ab3699debb7a023d3d69072c68cdcfa50a78bb18c284808835dd676e2f788db55858c1ac943752688d368099d7c5422b42f85a963e6af18e0af100e74194df60f85c38ce32b4c93843aeec0c05ab6cd3a32e7dc32938886bcd4dc59b19e27ab9d6c4691312d7311fc427e141f5bc97835e59af3ab4ed5950"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.755872001s ago: executing program 1 (id=2237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "f1d401a75435cf85", "0ec1a3bc3fc63cc5b119c2d368cf2658", "e1d2f91b", "e12427414f2be693"}, 0x28) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x81, 0x40, 0x9}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 10.564329241s ago: executing program 6 (id=2239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80), 0x0, 0x8040) 8.200886521s ago: executing program 1 (id=2241): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.492301799s ago: executing program 6 (id=2242): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 5.708277285s ago: executing program 1 (id=2245): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000900", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdb036199122bd7242b23cd71ba0c521ba608220da7460f8021686de3882227cbb7314eab187b7d8ec1d2fa0d8a7bd6eb377fa6d0008c0925c2af5e0f4410af6d2fb0df1302894ed1e1b726e9d75c6cbf8be002a0bcaea476464fa96985e83450b6e10"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r1, 0x4}, 0x38) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100", @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae1ab42a83945264b1eba9e2a7274d9a86197a663b5dc0c78b5539fa3115cc2e56095d923d8e2634d9a53a0711cf638a8fe0778ca53e689d5766cd971047"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.447843591s ago: executing program 2 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200000002900000032008000fe80643213", @ANYRES32=0x0], 0x20}}], 0x1, 0x1000) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r8 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 3.687070426s ago: executing program 3 (id=2249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b6e"], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdb"], 0x50}}, 0x840) 3.097314291s ago: executing program 3 (id=2250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)=""/33, 0x21}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) times(0xfffffffffffffffc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$netlink(0x10, 0x3, 0x6) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 1.904305882s ago: executing program 3 (id=2251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80), 0x0, 0x8040) 1.730037746s ago: executing program 3 (id=2252): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x200, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x600) 1.440741663s ago: executing program 1 (id=2253): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x174, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x40010) syz_open_procfs(r2, &(0x7f0000000080)='gid_map\x00') r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(r1, 0x0, 0x0) 292.287702ms ago: executing program 3 (id=2254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45", 0x80}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c84", 0x17}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a", 0x49}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0x115}], 0x1}}], 0x2, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 280.945943ms ago: executing program 6 (id=2255): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0), 0x0, 0x2, 0x0, 0x0, r4}) 271.336093ms ago: executing program 2 (id=2256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f5}]}) 90.983257ms ago: executing program 1 (id=2257): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) unshare(0x6020400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) 0s ago: executing program 3 (id=2258): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) kernel console output (not intermixed with test programs): 3.072743][ T4318] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 583.320814][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 583.333597][ T4318] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 583.438628][ T4318] usb 2-1: config 0 has no interface number 0 [ 583.561133][ T4318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 583.629198][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.659702][ T4318] usb 2-1: Product: syz [ 583.680731][ T4318] usb 2-1: Manufacturer: syz [ 583.695091][ T4318] usb 2-1: SerialNumber: syz [ 583.732316][ T5937] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 583.736055][ T4318] usb 2-1: config 0 descriptor?? [ 583.740416][ T5937] usb 4-1: config 0 has no interface number 0 [ 583.740456][ T5937] usb 4-1: config 0 interface 41 has no altsetting 0 [ 583.761122][ T5937] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 583.770185][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.789359][ T4318] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 583.801299][ T5937] usb 4-1: Product: syz [ 583.805501][ T5937] usb 4-1: Manufacturer: syz [ 583.810261][ T5937] usb 4-1: SerialNumber: syz [ 583.832355][ T5937] usb 4-1: config 0 descriptor?? [ 584.032321][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 584.097848][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 584.840787][ T5937] CoreChips: probe of 4-1:0.41 failed with error -32 [ 585.040067][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 585.086229][ T9103] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 585.103205][ T5563] usb 2-1: USB disconnect, device number 15 [ 585.119780][ T5563] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 585.138560][ T5563] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 585.159074][ T5563] quatech2 2-1:0.51: device disconnected [ 585.419046][ T9105] dlm: no local IP address has been set [ 585.429164][ T9105] dlm: cannot start dlm midcomms -107 [ 586.563737][ T9112] input: syz0 as /devices/virtual/input/input60 [ 586.663768][ T5937] usb 4-1: USB disconnect, device number 10 [ 587.968551][ T9119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1086'. [ 589.490122][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 589.499164][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 589.508113][ T9140] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 589.626337][ T9142] o2cb: This node has not been configured. [ 589.697151][ T9142] o2cb: Cluster check failed. Fix errors before retrying. [ 589.766982][ T9142] (syz.3.1089,9142,0):user_dlm_register:674 ERROR: status = -22 [ 589.780992][ T9142] (syz.3.1089,9142,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 589.790864][ T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 589.971088][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 589.980059][ T26] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 590.001510][ T26] usb 6-1: config 0 has no interface number 0 [ 590.007797][ T26] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 590.103435][ T26] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 590.200167][ T26] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.273227][ T26] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 590.307502][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.347870][ T26] usb 6-1: config 0 descriptor?? [ 590.377212][ T26] ldusb 6-1:0.55: Interrupt in endpoint not found [ 590.920172][ T9152] input: syz0 as /devices/virtual/input/input61 [ 593.000505][ T26] usb 6-1: USB disconnect, device number 8 [ 595.688029][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 595.697011][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 595.705952][ T9190] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 596.160522][ T9195] input: syz0 as /devices/virtual/input/input62 [ 598.482346][ T9210] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 601.111709][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 601.120737][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 601.129620][ T9236] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 602.186363][ T9242] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 603.840671][ T9259] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 604.116677][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1130'. [ 604.524227][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 604.533253][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 604.542166][ T9273] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 604.938110][ T9276] Line length is too long: Should be less than 4094 [ 606.879473][ T9300] Line length is too long: Should be less than 4094 [ 606.898249][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1144'. [ 607.385000][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 607.393953][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 607.402925][ T9312] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 608.428296][ T9327] [U]  [ 608.868541][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.876094][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.688178][ T9341] Line length is too long: Should be less than 4094 [ 609.700666][ T5937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 609.992135][ T5937] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 610.003303][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.014322][ T5937] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.027648][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.799340][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.835065][ T5937] usb 3-1: invalid MIDI out EP 0 [ 610.881974][ T5937] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 610.946736][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 610.956130][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 610.965643][ T9361] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 610.973426][ T9360] udevd[9360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.035248][ T4343] usb 3-1: USB disconnect, device number 14 [ 611.249114][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.300383][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.857195][ T9320] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.870420][ T9320] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.884146][ T9320] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.893289][ T9320] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.065214][ T9371] device syzkaller0 entered promiscuous mode [ 612.125565][ T9378] Line length is too long: Should be less than 4094 [ 615.078890][ T9407] [U]  [ 615.288738][ T9414] input: syz0 as /devices/virtual/input/input63 [ 617.010661][ T4343] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 617.307524][ T4343] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 617.451139][ T4343] usb 4-1: config 0 has no interface number 0 [ 617.541559][ T4343] usb 4-1: config 0 interface 41 has no altsetting 0 [ 617.686834][ T4343] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 617.898927][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.978330][ T4343] usb 4-1: Product: syz [ 617.982926][ T4343] usb 4-1: Manufacturer: syz [ 617.987833][ T4343] usb 4-1: SerialNumber: syz [ 618.013582][ T4343] usb 4-1: config 0 descriptor?? [ 618.124663][ T9430] o2cb: This node has not been configured. [ 618.130663][ T9430] o2cb: Cluster check failed. Fix errors before retrying. [ 618.137824][ T9430] (syz.5.1182,9430,1):user_dlm_register:674 ERROR: status = -22 [ 618.145588][ T9430] (syz.5.1182,9430,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 618.300971][ T4318] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 618.480702][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 618.488346][ T4318] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 618.505348][ T4318] usb 2-1: config 0 has no interface number 0 [ 618.519491][ T4318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 618.535783][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.544541][ T4318] usb 2-1: Product: syz [ 618.548845][ T4318] usb 2-1: Manufacturer: syz [ 618.561115][ T4318] usb 2-1: SerialNumber: syz [ 618.588545][ T4318] usb 2-1: config 0 descriptor?? [ 618.610305][ T4318] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 618.815357][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 618.829409][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 618.840054][ T4343] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 619.218222][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 619.221855][ T127] usb 2-1: USB disconnect, device number 16 [ 619.241085][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 619.258496][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 619.275716][ T127] quatech2 2-1:0.51: device disconnected [ 619.723058][ T9441] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 620.094715][ T4343] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 620.532029][ T4343] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 620.543154][ T4343] CoreChips: probe of 4-1:0.41 failed with error -71 [ 620.553433][ T4343] usb 4-1: USB disconnect, device number 11 [ 622.804905][ T9460] [U]  [ 623.069228][ T9466] IPVS: stopping backup sync thread 9441 ... [ 623.302208][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.309545][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.776996][ T9471] o2cb: This node has not been configured. [ 623.783014][ T9471] o2cb: Cluster check failed. Fix errors before retrying. [ 623.790218][ T9471] (syz.3.1199,9471,1):user_dlm_register:674 ERROR: status = -22 [ 623.798015][ T9471] (syz.3.1199,9471,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 624.043792][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.050283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.069179][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1201'. [ 624.804008][ T9445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.118844][ T9445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.206615][ T9505] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1207'. [ 626.840659][ T4318] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 627.049235][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.084938][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 627.135696][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 627.218021][ T4318] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 627.271832][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 627.304737][ T4318] usb 3-1: Product: syz [ 627.320786][ T4318] usb 3-1: Manufacturer: syz [ 627.337862][ T4318] usb 3-1: SerialNumber: syz [ 627.407743][ T4318] usb 3-1: config 0 descriptor?? [ 627.450802][ T4318] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 627.478566][ T4318] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 627.514895][ T4318] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 629.812077][ T9445] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.826566][ T9445] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.837768][ T9445] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.852105][ T9445] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.848587][ T9480] usb 3-1: USB disconnect, device number 15 [ 635.787240][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1222'. [ 636.773484][ T9562] [U]  [ 642.252071][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 643.231437][ T9609] Line length is too long: Should be less than 4094 [ 645.222854][ T9627] Cannot find add_set index 0 as target [ 645.526422][ T9632] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 647.005346][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 648.025075][ T9654] Line length is too long: Should be less than 4094 [ 648.249262][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 648.258242][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 648.267342][ T9665] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 648.689391][ T9671] Cannot find add_set index 0 as target [ 651.870620][ T4318] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 651.949848][ T9685] dlm: no local IP address has been set [ 651.956036][ T9685] dlm: cannot start dlm midcomms -107 [ 652.060630][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 652.070456][ T4318] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 652.352267][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.387208][ T4318] usb 3-1: config 0 descriptor?? [ 652.828337][ T4318] usbhid 3-1:0.0: can't add hid device: -71 [ 652.840961][ T4318] usbhid: probe of 3-1:0.0 failed with error -71 [ 652.953190][ T4318] usb 3-1: USB disconnect, device number 16 [ 653.510282][ T9706] Line length is too long: Should be less than 4094 [ 653.616754][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 653.625795][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 653.634773][ T9708] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 654.271256][ T4343] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 654.471738][ T4343] usb 2-1: Using ep0 maxpacket: 32 [ 654.518543][ T4318] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 654.532917][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.544815][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.557418][ T4343] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 654.567465][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.586165][ T4343] usb 2-1: config 0 descriptor?? [ 654.602473][ T4343] hub 2-1:0.0: USB hub found [ 654.720676][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 654.734587][ T4318] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 654.744230][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.844013][ T4318] usb 4-1: config 0 descriptor?? [ 654.890682][ T4343] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 656.001817][ T4318] usbhid 4-1:0.0: can't add hid device: -71 [ 656.064585][ T4343] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 656.083041][ T4318] usbhid: probe of 4-1:0.0 failed with error -71 [ 656.120069][ T4343] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 656.155567][ T4318] usb 4-1: USB disconnect, device number 12 [ 656.620690][ T9481] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 657.061061][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 657.104478][ T4343] usb 2-1: USB disconnect, device number 17 [ 657.133575][ T9481] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 657.142487][ T9481] usb 3-1: config 0 has no interface number 0 [ 657.148687][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 657.227343][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 657.239634][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 657.255916][ T9481] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 657.275591][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.293431][ T9481] usb 3-1: config 0 descriptor?? [ 657.306834][ T9481] ldusb 3-1:0.55: Interrupt in endpoint not found [ 657.385659][ T9750] Line length is too long: Should be less than 4094 [ 659.425102][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'. [ 659.434570][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'. [ 659.443553][ T9770] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 660.800453][ T9783] input: syz0 as /devices/virtual/input/input64 [ 661.150659][ T9481] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 661.244069][ T4343] usb 3-1: USB disconnect, device number 17 [ 661.335513][ T9481] usb 6-1: Using ep0 maxpacket: 8 [ 661.343610][ T9793] Line length is too long: Should be less than 4094 [ 661.346509][ T9481] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 661.389878][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.423752][ T9481] usb 6-1: config 0 descriptor?? [ 662.545799][ T9481] usbhid 6-1:0.0: can't add hid device: -71 [ 662.601590][ T9481] usbhid: probe of 6-1:0.0 failed with error -71 [ 663.231903][ T9481] usb 6-1: USB disconnect, device number 9 [ 663.244752][ T9797] input: syz0 as /devices/virtual/input/input66 [ 663.782893][ T9819] Cannot find add_set index 0 as target [ 665.352982][ T9832] Line length is too long: Should be less than 4094 [ 669.050692][ T9853] input: syz0 as /devices/virtual/input/input67 [ 670.549295][ T9864] Line length is too long: Should be less than 4094 [ 670.755934][ T9867] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1317'. [ 677.393086][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1327'. [ 678.590751][ T9477] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 679.400768][ T9477] usb 6-1: Using ep0 maxpacket: 8 [ 679.408006][ T9477] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 679.570196][ T9477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.742021][ T9477] usb 6-1: config 0 descriptor?? [ 680.142944][ T9921] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1334'. [ 680.155345][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1335'. [ 680.484009][ T9477] usbhid 6-1:0.0: can't add hid device: -71 [ 680.490138][ T9477] usbhid: probe of 6-1:0.0 failed with error -71 [ 680.972927][ T9477] usb 6-1: USB disconnect, device number 10 [ 681.150449][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 681.159539][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 681.168466][ T9932] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 683.763359][ T9945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1339'. [ 683.858465][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1342'. [ 685.121756][ T9961] o2cb: This node has not been configured. [ 685.127742][ T9961] o2cb: Cluster check failed. Fix errors before retrying. [ 685.135319][ T9961] (syz.5.1345,9961,1):user_dlm_register:674 ERROR: status = -22 [ 685.143031][ T9961] (syz.5.1345,9961,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 685.491966][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.498586][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.577548][ T9968] [U]  [ 685.600430][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1347'. [ 685.657295][ T9971] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1348'. [ 686.071071][ T4318] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 686.286718][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.331645][ T4318] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 686.402532][ T4318] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 686.460335][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.715321][ T4318] usb 2-1: USB disconnect, device number 18 [ 686.757561][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.764944][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.086470][ T9980] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 687.093311][ T9980] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 687.101769][ T9980] vhci_hcd vhci_hcd.0: Device attached [ 687.690908][ T26] usb 42-1: SetAddress Request (2) to port 0 [ 687.704245][ T26] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 687.797260][ T9981] vhci_hcd: connection closed [ 687.801086][ T5352] vhci_hcd: stop threads [ 687.835324][ T5352] vhci_hcd: release socket [ 687.916875][ T5352] vhci_hcd: disconnect device [ 688.320440][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 688.329687][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 688.338694][ T9987] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 688.491915][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.526262][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.086099][ T9992] dlm: no local IP address has been set [ 689.092066][ T9992] dlm: cannot start dlm midcomms -107 [ 689.099931][ T9960] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.109476][ T9960] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.118461][ T9960] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.127490][ T9960] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.326332][ T9960] device syzkaller0 left promiscuous mode [ 689.590711][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1350'. [ 689.937951][ T9980] netlink: 'syz.4.1350': attribute type 12 has an invalid length. [ 691.979419][T10003] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1353'. [ 692.840919][ T26] usb 42-1: device descriptor read/8, error -110 [ 693.266848][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 694.541175][ T26] usb usb42-port1: attempt power cycle [ 695.181468][ T26] usb usb42-port1: unable to enumerate USB device [ 695.224731][T10022] o2cb: This node has not been configured. [ 695.230827][T10022] o2cb: Cluster check failed. Fix errors before retrying. [ 695.237970][T10022] (syz.4.1359,10022,1):user_dlm_register:674 ERROR: status = -22 [ 695.245841][T10022] (syz.4.1359,10022,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 695.775355][T10031] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1364'. [ 695.809619][T10034] device syzkaller0 left promiscuous mode [ 695.822617][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1363'. [ 695.856759][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 695.866033][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 695.875103][T10040] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 695.970598][ T26] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 696.652687][T10034] [U]  [ 696.699711][T10044] dlm: no local IP address has been set [ 696.710205][T10044] dlm: cannot start dlm midcomms -107 [ 696.858120][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.554100][ T26] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 697.564770][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.578045][ T26] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 697.587567][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.600395][ T26] ums-sddr55 3-1:1.0: USB Mass Storage device detected [ 697.647179][ T26] ums-sddr55 3-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 697.647179][ T26] Please send a copy of this message to and [ 698.772754][T10059] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 698.993527][ T26] usb 3-1: USB disconnect, device number 18 [ 699.723049][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 699.867436][T10065] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1368'. [ 700.776076][T10078] lo speed is unknown, defaulting to 1000 [ 700.783410][T10078] lo speed is unknown, defaulting to 1000 [ 700.789704][T10078] lo speed is unknown, defaulting to 1000 [ 700.837430][T10079] o2cb: This node has not been configured. [ 700.843394][T10079] o2cb: Cluster check failed. Fix errors before retrying. [ 700.850658][T10079] (syz.2.1373,10079,1):user_dlm_register:674 ERROR: status = -22 [ 700.858446][T10079] (syz.2.1373,10079,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 700.890840][T10078] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 700.959020][T10080] lo speed is unknown, defaulting to 1000 [ 701.265447][T10078] lo speed is unknown, defaulting to 1000 [ 701.297253][T10078] lo speed is unknown, defaulting to 1000 [ 701.373299][T10078] lo speed is unknown, defaulting to 1000 [ 701.413799][T10078] lo speed is unknown, defaulting to 1000 [ 701.448900][T10078] lo speed is unknown, defaulting to 1000 [ 701.509597][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 701.518561][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 701.527486][T10088] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 701.674917][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 701.788455][T10092] dlm: no local IP address has been set [ 701.801157][T10094] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1379'. [ 701.840998][T10092] dlm: cannot start dlm midcomms -107 [ 704.982462][T10120] o2cb: This node has not been configured. [ 704.988382][T10120] o2cb: Cluster check failed. Fix errors before retrying. [ 704.995689][T10120] (syz.1.1388,10120,1):user_dlm_register:674 ERROR: status = -22 [ 705.003484][T10120] (syz.1.1388,10120,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 705.184690][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 705.193669][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 705.202643][T10129] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 707.526508][T10141] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1392'. [ 707.598987][T10142] dlm: no local IP address has been set [ 707.688503][T10142] dlm: cannot start dlm midcomms -107 [ 709.521073][ T9480] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 709.940564][ T9480] usb 4-1: Using ep0 maxpacket: 8 [ 710.760689][ T9480] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 710.795660][ T9480] usb 4-1: config 0 has no interface number 0 [ 710.802006][ T9480] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 710.812912][ T9480] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 710.823651][ T9480] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.836874][ T9480] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 710.846099][ T9480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.855957][ T9480] usb 4-1: config 0 descriptor?? [ 710.872353][ T9480] ldusb 4-1:0.55: Interrupt in endpoint not found [ 711.271589][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 711.286918][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 711.326628][T10177] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 711.370394][T10179] o2cb: This node has not been configured. [ 711.376449][T10179] o2cb: Cluster check failed. Fix errors before retrying. [ 711.383683][T10179] (syz.5.1404,10179,1):user_dlm_register:674 ERROR: status = -22 [ 711.391548][T10179] (syz.5.1404,10179,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 711.620631][ T26] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 711.813230][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.830543][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 711.852960][ T26] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 711.866237][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.874932][ T26] usb 3-1: Product: syz [ 711.879239][ T26] usb 3-1: Manufacturer: syz [ 711.884256][ T26] usb 3-1: SerialNumber: syz [ 711.910006][ T26] usb 3-1: config 0 descriptor?? [ 712.107445][T10191] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1409'. [ 713.245913][ T4321] usb 4-1: USB disconnect, device number 13 [ 714.654374][T10216] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 715.228942][ T9480] usb 3-1: USB disconnect, device number 19 [ 715.562019][T10226] o2cb: This node has not been configured. [ 715.567898][T10226] o2cb: Cluster check failed. Fix errors before retrying. [ 715.575368][T10226] (syz.3.1419,10226,0):user_dlm_register:674 ERROR: status = -22 [ 715.583139][T10226] (syz.3.1419,10226,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 715.686450][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 715.697893][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 715.707729][T10232] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 715.772515][T10236] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1420'. [ 715.823653][ T9480] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 716.010608][ T9480] usb 2-1: Using ep0 maxpacket: 8 [ 716.022134][ T9480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.070879][ T9477] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 716.080621][ T4321] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 716.170115][ T9480] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 716.268606][ T9480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.283674][ T9477] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.337376][ T9477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 716.431412][ T9480] usb 2-1: config 0 descriptor?? [ 716.488764][ T9477] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.580879][T10236] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1420'. [ 716.655546][ T9477] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 716.717159][ T9480] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 716.755427][ T9477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.782114][ T9477] usb 6-1: config 0 descriptor?? [ 716.840808][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 716.861165][ T4321] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 716.889915][ T4321] usb 4-1: config 0 has no interface number 0 [ 716.918173][ T4321] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 717.003642][ T9477] ath6kl: Failed to submit usb control message: -71 [ 717.078536][ T9477] ath6kl: unable to send the bmi data to the device: -71 [ 717.318035][ T9477] ath6kl: Unable to send get target info: -71 [ 717.807703][ T4321] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 717.818589][ T4321] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 717.831893][ T4321] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 717.841261][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.853561][ T4321] usb 4-1: config 0 descriptor?? [ 717.865206][ T4321] ldusb 4-1:0.55: Interrupt in endpoint not found [ 718.302662][ T4321] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 719.196559][ T26] usb 2-1: USB disconnect, device number 19 [ 719.370867][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 719.388348][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 719.521286][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 719.638010][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 719.779398][ T4321] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 719.877921][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 719.986089][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 720.055307][ T9477] ath6kl: Failed to init ath6kl core: -71 [ 720.077183][ T4321] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 720.142930][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.201343][ T4321] usb 3-1: Product: syz [ 720.231276][ T4321] usb 3-1: Manufacturer: syz [ 720.264331][ T4321] usb 3-1: SerialNumber: syz [ 720.331553][ T4321] usb 3-1: config 0 descriptor?? [ 721.861156][ T9477] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 721.886982][ T9477] usb 6-1: USB disconnect, device number 11 [ 721.942731][T10265] udevd[10265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.997377][ T9480] usb 3-1: USB disconnect, device number 20 [ 722.049661][ T9481] usb 4-1: USB disconnect, device number 14 [ 723.359548][T10275] input: syz0 as /devices/virtual/input/input68 [ 723.397593][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 723.446054][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 723.461952][T10288] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1434'. [ 723.475555][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 724.309031][T10289] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 724.697177][T10302] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 727.430591][ T9481] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 727.440746][ T4321] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 727.640671][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 727.649301][ T9481] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 727.657600][ T9481] usb 3-1: config 0 has no interface number 0 [ 727.663976][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 727.675254][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 727.686561][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 727.699804][ T9481] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 727.704799][ T4321] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.709188][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.729626][ T4321] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 727.741143][ T9481] usb 3-1: config 0 descriptor?? [ 727.750672][ T4321] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 727.759875][ T9481] ldusb 3-1:0.55: Interrupt in endpoint not found [ 727.759884][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.781189][ T4321] ums-sddr55 6-1:1.0: USB Mass Storage device detected [ 727.796463][ T4321] ums-sddr55 6-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 727.796463][ T4321] Please send a copy of this message to and [ 727.982838][ T4321] usb 6-1: USB disconnect, device number 12 [ 728.169582][T10336] input: syz0 as /devices/virtual/input/input69 [ 729.590843][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 729.596207][T10348] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1447'. [ 730.850947][T10364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1451'. [ 733.488663][ T9481] usb 3-1: USB disconnect, device number 21 [ 733.616132][T10377] Bluetooth: MGMT ver 1.22 [ 734.140917][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1455'. [ 735.933133][T10400] input: syz0 as /devices/virtual/input/input70 [ 736.943159][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 738.275357][T10429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1469'. [ 738.982960][T10432] device syzkaller0 entered promiscuous mode [ 739.420602][ T9481] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 739.691589][ T9481] usb 6-1: Using ep0 maxpacket: 8 [ 739.741116][ T9477] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 739.833246][ T9481] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 740.308167][ T9481] usb 6-1: config 0 has no interface number 0 [ 740.335316][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 740.369518][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 740.695664][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 740.713309][ T9481] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 740.730705][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.748535][ T9481] usb 6-1: config 0 descriptor?? [ 740.804749][ T9481] usb 6-1: can't set config #0, error -71 [ 740.832245][ T9481] usb 6-1: USB disconnect, device number 13 [ 740.886813][ T9477] usb 3-1: device descriptor read/all, error -71 [ 740.943600][T10446] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1473'. [ 743.082055][T10449] [U]  [ 745.370619][ T9477] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 745.570616][ T9477] usb 4-1: Using ep0 maxpacket: 8 [ 745.583175][ T9477] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 745.627377][ T9477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.743921][ T9477] usb 4-1: config 0 descriptor?? [ 746.201329][ T9477] hid (null): unknown global tag 0xd [ 746.208917][ T9477] macally 0003:060B:0001.0008: unknown global tag 0xd [ 746.237206][ T9477] macally 0003:060B:0001.0008: item 0 0 1 13 parsing failed [ 746.257872][ T9477] macally: probe of 0003:060B:0001.0008 failed with error -22 [ 746.530659][ T4321] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 746.595819][ T9477] usb 4-1: USB disconnect, device number 15 [ 746.743944][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 746.796514][ T4321] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 746.810234][ T4321] usb 3-1: config 0 has no interface number 0 [ 746.832321][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 747.029080][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 747.029841][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.040055][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.059418][ T4321] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 747.527958][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.542439][ T4321] usb 3-1: config 0 descriptor?? [ 747.550617][ T4321] ldusb 3-1:0.55: Interrupt in endpoint not found [ 747.854680][T10487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1486'. [ 749.631104][T10488] input: syz0 as /devices/virtual/input/input71 [ 749.975310][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 750.072839][T10496] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1487'. [ 750.800781][ T9481] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 752.685943][ T9481] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.754170][ T9481] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 752.897367][ T9481] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 752.968881][ T9481] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 752.990433][ T9481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 753.009823][ T9481] usb 6-1: Product: syz [ 753.015433][ T9481] usb 6-1: Manufacturer: syz [ 753.020073][ T9481] usb 6-1: SerialNumber: syz [ 753.048963][ T9481] usb 6-1: config 0 descriptor?? [ 753.069762][ T9477] usb 3-1: USB disconnect, device number 24 [ 753.091995][ T9481] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 753.099476][ T9481] radio-si470x: probe of 6-1:0.0 failed with error -5 [ 754.889376][ T9481] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 754.905039][T10514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 755.685268][T10514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 755.704392][T10514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 755.768078][ T9481] usb 6-1: USB disconnect, device number 14 [ 755.777367][T10514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 757.902593][T10532] input: syz0 as /devices/virtual/input/input72 [ 758.143021][T10532] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1496'. [ 759.492328][T10546] input: syz0 as /devices/virtual/input/input73 [ 759.602489][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1501'. [ 760.838970][ T4321] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 762.210548][ T4321] usb 2-1: Using ep0 maxpacket: 8 [ 762.896630][ T4321] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 762.991538][ T4321] usb 2-1: config 0 has no interface number 0 [ 763.033925][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 763.136633][T10564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'. [ 763.217878][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 763.406696][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.639939][ T4321] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.830066][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.148228][ T4321] usb 2-1: config 0 descriptor?? [ 764.465150][ T4321] usb 2-1: can't set config #0, error -71 [ 765.033786][ T4343] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 765.105769][ T4321] usb 2-1: USB disconnect, device number 20 [ 765.253191][ T4343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.348202][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 765.621292][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 765.884084][ T4343] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 766.014525][ T4343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 766.206684][ T4343] usb 3-1: Product: syz [ 766.290934][ T4343] usb 3-1: Manufacturer: syz [ 766.334912][T10577] input: syz0 as /devices/virtual/input/input74 [ 766.407229][ T4343] usb 3-1: SerialNumber: syz [ 766.450522][T10577] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1511'. [ 766.598758][ T4343] usb 3-1: config 0 descriptor?? [ 766.691002][ T4343] usb 3-1: can't set config #0, error -71 [ 766.781131][ T4343] usb 3-1: USB disconnect, device number 25 [ 767.013878][T10587] [U]  [ 767.362649][T10597] input: syz0 as /devices/virtual/input/input75 [ 767.480432][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 771.698677][ T4321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 772.382782][ T4321] usb 2-1: Using ep0 maxpacket: 8 [ 772.433895][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1524'. [ 773.898201][ T4321] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 774.344384][ T4321] usb 2-1: config 0 has no interface number 0 [ 774.350850][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 774.385290][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 774.411675][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 774.431784][ T4321] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 774.446786][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.462307][ T4321] usb 2-1: config 0 descriptor?? [ 774.469196][ T4321] usb 2-1: can't set config #0, error -71 [ 774.479725][ T4321] usb 2-1: USB disconnect, device number 21 [ 774.667220][T10639] input: syz0 as /devices/virtual/input/input76 [ 774.793815][T10639] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1525'. [ 775.247983][T10641] [U]  [ 778.353140][T10656] input: syz0 as /devices/virtual/input/input77 [ 778.660652][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 780.978424][T10687] [U]  [ 781.035362][ T9477] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 781.094177][T10690] input: syz0 as /devices/virtual/input/input78 [ 781.287032][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 781.296597][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 781.612882][ T9477] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 781.631127][ T9477] usb 2-1: config 0 has no interface number 0 [ 781.677955][ T9477] usb 2-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 783.363652][ T9477] usb 2-1: config 0 interface 41 has no altsetting 0 [ 783.469668][ T9477] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 783.604880][ T9477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.738412][ T9477] usb 2-1: Product: syz [ 783.784673][ T9477] usb 2-1: Manufacturer: syz [ 783.798154][ T9477] usb 2-1: SerialNumber: syz [ 783.891495][ T9477] usb 2-1: config 0 descriptor?? [ 784.691324][ T9477] usb 2-1: can't set config #0, error -71 [ 784.736228][ T9477] usb 2-1: USB disconnect, device number 22 [ 785.377814][T10721] input: syz0 as /devices/virtual/input/input79 [ 787.425385][T10734] input: syz0 as /devices/virtual/input/input80 [ 787.547552][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1556'. [ 787.558885][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1556'. [ 787.622871][T10737] [U]  [ 788.103065][T10741] IPVS: stopping backup sync thread 10302 ... [ 788.260649][ T4343] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 788.442098][ T4343] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 788.455435][ T4343] usb 3-1: config 0 has no interface number 0 [ 788.463902][ T4343] usb 3-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 788.490715][ T4343] usb 3-1: config 0 interface 41 has no altsetting 0 [ 788.504867][ T4343] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 788.520235][ T4343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.529992][ T4343] usb 3-1: Product: syz [ 788.582850][ T4343] usb 3-1: Manufacturer: syz [ 788.594864][ T4343] usb 3-1: SerialNumber: syz [ 788.613762][ T4343] usb 3-1: config 0 descriptor?? [ 788.631915][ T4343] CoreChips: probe of 3-1:0.41 failed with error -22 [ 792.522839][ T9477] usb 3-1: USB disconnect, device number 26 [ 792.811815][T10785] [U]  [ 793.085247][T10792] input: syz0 as /devices/virtual/input/input81 [ 794.634839][T10799] input: syz0 as /devices/virtual/input/input82 [ 794.917579][T10808] IPVS: stopping backup sync thread 10059 ... [ 795.075801][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 795.085827][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 795.260807][ T9481] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 795.540936][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 795.564295][ T9481] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.840571][ T9481] usb 3-1: config 0 has no interface number 0 [ 795.863278][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 795.929718][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 795.973138][ T9481] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.006763][ T9481] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 796.026209][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.067626][ T9481] usb 3-1: config 0 descriptor?? [ 796.090906][ T9481] ldusb 3-1:0.55: Interrupt in endpoint not found [ 796.220645][ T4343] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 797.128254][T10830] [U]  [ 797.232434][ T4343] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 797.250661][ T4343] usb 6-1: config 0 has no interface number 0 [ 797.414827][ T4343] usb 6-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 797.588416][ T4343] usb 6-1: config 0 interface 41 has no altsetting 0 [ 797.610094][ T4343] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 798.004592][ T4343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.013983][ T4343] usb 6-1: Product: syz [ 798.018296][ T4343] usb 6-1: Manufacturer: syz [ 798.024703][ T4343] usb 6-1: SerialNumber: syz [ 798.039225][ T4343] usb 6-1: config 0 descriptor?? [ 798.055348][ T4343] CoreChips: probe of 6-1:0.41 failed with error -22 [ 798.447766][T10844] input: syz0 as /devices/virtual/input/input83 [ 799.983177][ T9481] usb 6-1: USB disconnect, device number 15 [ 800.104337][T10855] IPVS: stopping backup sync thread 9632 ... [ 800.127732][ T4343] usb 3-1: USB disconnect, device number 27 [ 801.564716][T10864] input: syz0 as /devices/virtual/input/input84 [ 802.305044][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 802.314031][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 802.329544][T10870] [U]  [ 804.585164][T10890] input: syz0 as /devices/virtual/input/input85 [ 806.558761][T10914] [U]  [ 808.370482][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.537455][T10941] input: syz0 as /devices/virtual/input/input86 [ 814.898820][T10994] input: syz0 as /devices/virtual/input/input87 [ 818.265299][T11013] [U]  [ 820.572204][T11035] input: syz0 as /devices/virtual/input/input88 [ 820.723192][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1640'. [ 821.163661][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'. [ 821.676557][T11051] [U]  [ 824.790642][ T26] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 825.002149][ T26] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 825.019020][ T26] usb 6-1: config 0 has no interface number 0 [ 825.114481][ T26] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.178704][ T26] usb 6-1: config 0 interface 41 has no altsetting 0 [ 825.225524][ T26] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 825.235032][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.243405][ T26] usb 6-1: Product: syz [ 825.248109][ T26] usb 6-1: Manufacturer: syz [ 825.252958][ T26] usb 6-1: SerialNumber: syz [ 825.265798][ T26] usb 6-1: config 0 descriptor?? [ 825.367189][ T26] CoreChips: probe of 6-1:0.41 failed with error -22 [ 826.239491][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'. [ 826.688883][ T9481] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 827.050728][ T9481] usb 4-1: Using ep0 maxpacket: 32 [ 827.294224][T11088] input: syz0 as /devices/virtual/input/input89 [ 827.332545][ T9481] usb 4-1: unable to get BOS descriptor or descriptor too short [ 827.340239][ T9481] usb 4-1: no configurations [ 827.367290][ T9481] usb 4-1: can't read configurations, error -22 [ 827.534620][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 827.762010][ T4321] usb 6-1: USB disconnect, device number 16 [ 827.833000][T11098] [U]  [ 828.988993][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 830.786319][T11137] dlm: no local IP address has been set [ 830.813685][T11137] dlm: cannot start dlm midcomms -107 [ 832.836895][T11149] input: syz0 as /devices/virtual/input/input90 [ 833.020756][T11146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 833.029779][T11146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 833.090560][T11146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 833.115039][T11146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 833.220704][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1672'. [ 833.277529][T11146] [U]  [ 834.539593][T11163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1678'. [ 837.244676][T11193] dlm: no local IP address has been set [ 837.280550][T11193] dlm: cannot start dlm midcomms -107 [ 838.161707][T11208] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1688'. [ 838.520837][ T26] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 839.984865][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.082515][ T26] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 840.984418][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 841.062679][T11215] input: syz0 as /devices/virtual/input/input91 [ 841.271234][T11215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 841.808462][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1692'. [ 841.826733][ T26] usb 2-1: string descriptor 0 read error: -71 [ 841.850597][ T26] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 841.890117][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 842.075429][ T26] usb 2-1: config 0 descriptor?? [ 842.086574][ T26] usb 2-1: can't set config #0, error -71 [ 842.275226][ T26] usb 2-1: USB disconnect, device number 23 [ 842.393496][T11234] device syzkaller1 entered promiscuous mode [ 842.430575][ T4343] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 844.103065][ T4343] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 845.012456][ T4343] usb 6-1: config 0 has no interface number 0 [ 845.018572][ T4343] usb 6-1: config 0 interface 41 has no altsetting 0 [ 845.558712][T11248] dlm: no local IP address has been set [ 845.656570][ T4343] usb 6-1: string descriptor 0 read error: -71 [ 845.664053][ T4343] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 845.674419][ T4343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.690718][ T4343] usb 6-1: config 0 descriptor?? [ 845.696658][ T4343] usb 6-1: can't set config #0, error -71 [ 845.711715][ T4343] usb 6-1: USB disconnect, device number 17 [ 845.747286][T11248] dlm: cannot start dlm midcomms -107 [ 846.690611][T11261] input: syz0 as /devices/virtual/input/input92 [ 847.000490][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1704'. [ 847.850254][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'. [ 847.892284][T11279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1705'. [ 848.116423][ T4370] kworker/dying (4370) used greatest stack depth: 20560 bytes left [ 848.282953][ T26] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 850.127287][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.180800][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 850.247793][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 850.315222][ T26] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 850.327551][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 850.356315][ T26] usb 3-1: Product: syz [ 850.360604][ T26] usb 3-1: Manufacturer: syz [ 850.365225][ T26] usb 3-1: SerialNumber: syz [ 850.427197][ T26] usb 3-1: config 0 descriptor?? [ 850.440712][ T9480] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 850.580545][ T9481] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 851.734918][ T26] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 851.771293][ T26] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 851.800963][ T26] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 851.870753][ T26] usb 3-1: USB disconnect, device number 28 [ 852.420594][ T9480] usb 4-1: Using ep0 maxpacket: 16 [ 852.427158][ T9481] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 852.785629][ T9481] usb 2-1: config 0 has no interface number 0 [ 852.792694][ T9481] usb 2-1: config 0 interface 41 has no altsetting 0 [ 852.800801][ T9480] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.811003][ T9481] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 852.820650][ T9480] usb 4-1: config 3 has an invalid interface number: 44 but max is 0 [ 852.828930][ T9480] usb 4-1: config 3 has no interface number 0 [ 852.835176][ T9481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.843456][ T9480] usb 4-1: config 3 interface 44 has no altsetting 0 [ 852.859125][ T9481] usb 2-1: Product: syz [ 852.865024][ T9480] usb 4-1: New USB device found, idVendor=06be, idProduct=8116, bcdDevice=ba.96 [ 852.875503][ T9481] usb 2-1: Manufacturer: syz [ 852.906287][ T9481] usb 2-1: SerialNumber: syz [ 852.911063][ T9480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.920711][ T9480] usb 4-1: Product: syz [ 852.925867][ T9481] usb 2-1: config 0 descriptor?? [ 852.931000][ T9480] usb 4-1: Manufacturer: syz [ 852.935679][ T9480] usb 4-1: SerialNumber: syz [ 853.599284][ T9481] CoreChips: probe of 2-1:0.41 failed with error -32 [ 853.868630][ T9480] usb 4-1: USB disconnect, device number 18 [ 854.007146][T11309] dlm: no local IP address has been set [ 854.078618][T11309] dlm: cannot start dlm midcomms -107 [ 854.360561][T11313] input: syz0 as /devices/virtual/input/input93 [ 854.753822][ T26] usb 2-1: USB disconnect, device number 24 [ 854.762146][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 856.289474][T11335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1723'. [ 857.075534][T11341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1724'. [ 857.410858][ T26] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 858.865127][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.923100][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 859.060526][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 859.219462][ T26] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 859.350169][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 861.460599][ T9480] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 861.460648][ T9481] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 861.471442][ T26] usb 3-1: Product: syz [ 861.480143][ T26] usb 3-1: Manufacturer: syz [ 861.660776][ T9480] usb 4-1: Using ep0 maxpacket: 8 [ 861.673498][ T9480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 861.704116][T11354] dlm: no local IP address has been set [ 861.741527][T11354] dlm: cannot start dlm midcomms -107 [ 861.760008][ T9480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.785773][ T9481] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 861.811026][ T9481] usb 2-1: config 0 has no interface number 0 [ 861.954543][ T9480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 861.996492][ T9481] usb 2-1: config 0 interface 41 has no altsetting 0 [ 862.479093][ T9481] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 862.655505][ T9480] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 862.734258][ T9481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.945329][ T9480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 862.955428][ T26] usb 3-1: SerialNumber: syz [ 862.962212][ T26] usb 3-1: config 0 descriptor?? [ 862.967959][ T26] usb 3-1: can't set config #0, error -71 [ 862.975445][ T26] usb 3-1: USB disconnect, device number 29 [ 862.986116][ T9481] usb 2-1: Product: syz [ 862.990293][ T9481] usb 2-1: Manufacturer: syz [ 863.006706][T11358] input: syz0 as /devices/virtual/input/input94 [ 863.188553][ T9480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 863.265523][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 863.400019][ T9481] usb 2-1: SerialNumber: syz [ 863.503794][T11367] input: syz0 as /devices/virtual/input/input95 [ 864.271390][ T9481] usb 2-1: config 0 descriptor?? [ 864.365639][ T9481] usb 2-1: can't set config #0, error -71 [ 864.467780][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 864.781859][ T9480] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 864.807527][ T9481] usb 2-1: USB disconnect, device number 25 [ 864.816094][ T9480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.830772][ T9480] usb 4-1: Product: syz [ 864.843355][ T9480] usb 4-1: config 0 descriptor?? [ 864.995479][ T9480] usb 4-1: can't set config #0, error -71 [ 865.427804][ T9480] usb 4-1: USB disconnect, device number 19 [ 865.657548][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 865.666556][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 865.675880][T11382] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 865.711547][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1735'. [ 868.200531][ T9480] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 868.303366][T11411] dlm: no local IP address has been set [ 868.309154][T11411] dlm: cannot start dlm midcomms -107 [ 868.396084][ T9480] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 868.444817][ T9480] usb 4-1: config 0 has no interface number 0 [ 868.475167][ T9480] usb 4-1: config 0 interface 41 has no altsetting 0 [ 868.506673][ T9480] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 868.890576][ T26] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 869.100838][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 869.111125][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 869.145454][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 869.170786][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 869.183303][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 869.194126][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 869.204755][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 869.236876][ T26] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 869.261771][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.270139][ T26] usb 2-1: Product: syz [ 869.276044][ T26] usb 2-1: Manufacturer: syz [ 869.317211][ T26] usb 2-1: SerialNumber: syz [ 869.409389][ T26] usb 2-1: config 0 descriptor?? [ 869.657662][T10265] udevd[10265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.803038][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.577238][ T9480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.889186][ T9480] usb 4-1: Product: syz [ 870.893477][ T9480] usb 4-1: Manufacturer: syz [ 870.898109][ T9480] usb 4-1: SerialNumber: syz [ 870.939531][ T9480] usb 4-1: config 0 descriptor?? [ 870.969630][ T9481] usb 2-1: USB disconnect, device number 26 [ 871.006480][ T9480] usb 4-1: can't set config #0, error -71 [ 871.017896][ T9480] usb 4-1: USB disconnect, device number 20 [ 871.581627][T11420] input: syz0 as /devices/virtual/input/input96 [ 871.667482][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 872.419274][T11427] input: syz0 as /devices/virtual/input/input97 [ 872.540713][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 873.246598][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 873.255963][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 873.264859][T11437] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 874.089952][T11444] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 877.554732][T11476] input: syz0 as /devices/virtual/input/input98 [ 877.677883][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1761'. [ 881.534268][ T26] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 881.723424][ T26] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 881.741382][ T26] usb 4-1: config 0 has no interface number 0 [ 881.761577][ T26] usb 4-1: config 0 interface 41 has no altsetting 0 [ 881.783901][ T26] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 881.807551][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.836507][ T26] usb 4-1: Product: syz [ 881.850538][ T26] usb 4-1: Manufacturer: syz [ 881.865378][ T26] usb 4-1: SerialNumber: syz [ 881.888487][ T26] usb 4-1: config 0 descriptor?? [ 882.355784][T11521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1774'. [ 882.422466][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 882.657699][ T26] CoreChips: probe of 4-1:0.41 failed with error -22 [ 883.842975][T11530] input: syz0 as /devices/virtual/input/input99 [ 884.533084][ T26] usb 4-1: USB disconnect, device number 21 [ 889.418358][T11579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1786'. [ 891.300537][ T9480] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 891.545834][ T9480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.570778][ T4343] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 891.689910][ T9480] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 891.703059][ T9480] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 891.772972][ T4343] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 891.809424][ T4343] usb 2-1: config 0 has no interface number 0 [ 891.835083][ T4343] usb 2-1: config 0 interface 41 has no altsetting 0 [ 891.863260][ T4343] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 891.872567][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.880742][ T4343] usb 2-1: Product: syz [ 891.885020][ T4343] usb 2-1: Manufacturer: syz [ 891.889710][ T4343] usb 2-1: SerialNumber: syz [ 891.900937][ T4343] usb 2-1: config 0 descriptor?? [ 892.457871][ T9480] usb 4-1: string descriptor 0 read error: -71 [ 892.469432][ T9480] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 892.508997][ T9480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 892.558296][ T9480] usb 4-1: config 0 descriptor?? [ 892.573822][ T9480] usb 4-1: can't set config #0, error -71 [ 892.596282][ T9480] usb 4-1: USB disconnect, device number 22 [ 892.647669][T11597] device syzkaller0 left promiscuous mode [ 892.673299][ T4343] CoreChips: probe of 2-1:0.41 failed with error -22 [ 894.451679][ T4343] usb 2-1: USB disconnect, device number 27 [ 894.628292][T11623] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 895.872835][T11628] input: syz0 as /devices/virtual/input/input100 [ 896.191901][ T9690] udevd[9690]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 899.469951][T11657] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 899.502553][T11657] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 899.557024][T11665] /dev/nullb0: Can't open blockdev [ 899.577940][T11667] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1814'. [ 903.692414][T11709] Cannot find add_set index 0 as target [ 904.321795][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 904.330768][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 904.339664][T11716] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 905.401563][T11719] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 905.557080][T11725] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1829'. [ 909.095339][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 909.104804][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 909.113739][T11758] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 910.057983][T11763] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 910.083004][T11763] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 910.146658][T11769] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1842'. [ 914.603242][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 914.612238][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 914.621822][T11807] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 915.522482][T11811] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 915.566583][T11817] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1855'. [ 920.707198][T11864] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1866'. [ 921.099738][T11864] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1866'. [ 921.268792][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 921.277825][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 921.286972][T11874] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 926.131724][ T5937] kworker/dying (5937) used greatest stack depth: 20352 bytes left [ 929.095556][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'. [ 929.104589][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'. [ 929.113531][T11935] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 929.942153][T11944] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1882'. [ 931.253229][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.217565][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 937.227555][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 937.236528][T11992] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 937.390469][ T26] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 937.580771][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 937.631383][ T26] usb 3-1: device descriptor read/all, error -71 [ 938.982806][T12007] input: syz0 as /devices/virtual/input/input101 [ 939.471762][T12013] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1898'. [ 939.534192][T12017] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.1898'. [ 941.333023][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1906'. [ 941.342043][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1906'. [ 941.350987][T12038] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 941.381239][ T26] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 942.130460][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 942.160029][ T26] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.340514][ T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.351588][ T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 942.362351][ T26] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.376062][ T26] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 942.386027][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.157433][ T26] usb 3-1: GET_CAPABILITIES returned 0 [ 944.653598][ T26] usbtmc 3-1:16.0: can't read capabilities [ 945.380332][ T26] usb 3-1: USB disconnect, device number 32 [ 946.668950][T12066] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 947.711458][T12082] o2cb: This node has not been configured. [ 947.717385][T12082] o2cb: Cluster check failed. Fix errors before retrying. [ 947.724805][T12082] (syz.2.1913,12082,0):user_dlm_register:674 ERROR: status = -22 [ 947.732637][T12082] (syz.2.1913,12082,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 951.269075][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 951.366547][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 951.376798][T12101] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 952.811932][T12117] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1912'. [ 952.864731][T12118] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.1912'. [ 953.758397][T12097] syz.4.1918 (12097): drop_caches: 2 [ 954.262735][T12131] o2cb: This node has not been configured. [ 954.268743][T12131] o2cb: Cluster check failed. Fix errors before retrying. [ 954.276069][T12131] (syz.1.1926,12131,1):user_dlm_register:674 ERROR: status = -22 [ 954.283931][T12131] (syz.1.1926,12131,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 962.283308][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 962.321381][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 962.360506][T12170] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 962.385081][T12172] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1935'. [ 962.438507][T12176] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.1935'. [ 971.693149][T12189] syz.4.1937 (12189): drop_caches: 2 [ 971.699418][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 971.740987][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 971.750019][T12235] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 972.494336][T12242] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1950'. [ 972.896639][T12250] o2cb: This node has not been configured. [ 972.902595][T12250] o2cb: Cluster check failed. Fix errors before retrying. [ 972.909823][T12250] (syz.3.1952,12250,0):user_dlm_register:674 ERROR: status = -22 [ 972.917655][T12250] (syz.3.1952,12250,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 979.625461][T12314] o2cb: This node has not been configured. [ 979.631495][T12314] o2cb: Cluster check failed. Fix errors before retrying. [ 979.638822][T12314] (syz.2.1965,12314,1):user_dlm_register:674 ERROR: status = -22 [ 979.646796][T12314] (syz.2.1965,12314,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 982.110097][T12317] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1966'. [ 984.072534][T12344] tmpfs: Unknown parameter 'grpquota' [ 990.658655][T12371] input: syz0 as /devices/virtual/input/input102 [ 990.874969][T12355] syz.4.1975 (12355): drop_caches: 2 [ 990.895590][T12375] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1979'. [ 992.143557][T12391] overlayfs: overlapping lowerdir path [ 992.870978][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.945676][ T9479] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 993.152726][ T9479] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.019920][ T9479] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 994.306172][ T9479] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 994.657161][ T9479] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 994.877674][ T9479] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 995.141707][ T9479] usb 6-1: Product: syz [ 995.145946][ T9479] usb 6-1: Manufacturer: syz [ 995.150818][ T9479] usb 6-1: SerialNumber: syz [ 995.162849][ T9479] usb 6-1: config 0 descriptor?? [ 995.168158][ T9479] usb 6-1: can't set config #0, error -71 [ 995.176520][ T9479] usb 6-1: USB disconnect, device number 18 [ 997.689140][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 998.872784][T12426] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1993'. [ 998.889354][T12436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1991'. [ 1001.879433][T12449] overlayfs: overlapping lowerdir path [ 1003.060553][ T4321] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1004.622723][ T4321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.712602][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1004.968508][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1005.156739][ T4321] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1005.489052][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1005.545256][ T4321] usb 6-1: Product: syz [ 1005.549665][ T4321] usb 6-1: Manufacturer: syz [ 1005.554810][ T4321] usb 6-1: SerialNumber: syz [ 1005.576383][ T4321] usb 6-1: config 0 descriptor?? [ 1005.599293][ T4321] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 1005.615483][ T4321] radio-si470x: probe of 6-1:0.0 failed with error -5 [ 1005.638329][ T4321] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1005.720109][T11921] usb 6-1: USB disconnect, device number 19 [ 1006.083704][T12473] o2cb: This node has not been configured. [ 1006.089704][T12473] o2cb: Cluster check failed. Fix errors before retrying. [ 1006.097021][T12473] (syz.5.2001,12473,1):user_dlm_register:674 ERROR: status = -22 [ 1006.104910][T12473] (syz.5.2001,12473,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1006.869508][T12475] input: syz0 as /devices/virtual/input/input103 [ 1007.053406][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2003'. [ 1007.950969][T12488] input: syz0 as /devices/virtual/input/input104 [ 1008.178643][T12488] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2006'. [ 1008.474571][T12491] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 1011.133581][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1011.140915][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1011.150174][T12513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.158489][T12513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.335382][T12515] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2012'. [ 1012.953649][T12513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1013.570476][ T9477] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1017.220476][ T9481] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1017.450513][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 1017.459358][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1017.682661][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1018.184634][T12540] input: syz0 as /devices/virtual/input/input105 [ 1018.308282][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1018.509586][ T9481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1018.653771][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1018.792878][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1018.950564][ T9481] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1019.389228][ T9481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.018277][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 1020.351464][ T9481] usb 3-1: Product: syz [ 1020.355787][ T9481] usb 3-1: Manufacturer: syz [ 1020.361050][ T9481] usb 3-1: SerialNumber: syz [ 1020.391731][ T9481] usb 3-1: config 0 descriptor?? [ 1020.609180][ T9481] usb 3-1: can't set config #0, error -71 [ 1020.656515][ T9481] usb 3-1: USB disconnect, device number 33 [ 1021.121060][T12561] input: syz0 as /devices/virtual/input/input106 [ 1021.478927][T12561] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2018'. [ 1024.208551][T12585] Config c/1 of g1 needs at least one function. [ 1024.215817][T12585] udc dummy_udc.0: failed to start g1: -22 [ 1024.221777][T12585] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1024.231839][T12585] UDC core: g1: couldn't find an available UDC or it's busy [ 1025.157785][T12588] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1025.450512][ T4318] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1026.940092][ T4318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.081499][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1029.071200][T12603] input: syz0 as /devices/virtual/input/input107 [ 1029.360223][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 1030.006223][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1030.293944][ T4318] usb 6-1: string descriptor 0 read error: -71 [ 1030.300410][ T4318] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1030.309931][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1030.322140][ T4318] usb 6-1: config 0 descriptor?? [ 1030.328042][ T4318] usb 6-1: can't set config #0, error -71 [ 1030.336012][ T4318] usb 6-1: USB disconnect, device number 21 [ 1031.150436][ T4318] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1032.240653][ T4318] usb 6-1: Using ep0 maxpacket: 8 [ 1032.248225][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1032.415413][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1032.523316][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1032.572057][T12615] tmpfs: Unknown parameter 'grpquota' [ 1032.641395][ T4318] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1036.080077][T12631] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2036'. [ 1036.116152][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1036.127006][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1036.144382][ T4318] usb 6-1: string descriptor 0 read error: -71 [ 1036.150878][ T4318] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1036.159958][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.172901][ T4318] usb 6-1: config 0 descriptor?? [ 1036.178217][ T4318] usb 6-1: can't set config #0, error -71 [ 1036.185631][ T4318] usb 6-1: USB disconnect, device number 22 [ 1036.762310][T12623] syz.2.2033 (12623): drop_caches: 2 [ 1036.770136][T12634] o2cb: This node has not been configured. [ 1036.776104][T12634] o2cb: Cluster check failed. Fix errors before retrying. [ 1036.783390][T12634] (syz.3.2037,12634,1):user_dlm_register:674 ERROR: status = -22 [ 1036.791228][T12634] (syz.3.2037,12634,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1038.084907][T12651] fuse: Bad value for 'fd' [ 1040.706396][T12670] input: syz0 as /devices/virtual/input/input108 [ 1040.730637][T12670] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1042.208092][ T9476] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1042.872584][ T9476] usb 4-1: Using ep0 maxpacket: 8 [ 1043.027237][ T9476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1043.240314][ T9476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1043.310033][ T9476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1043.330822][ T9476] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1043.350549][ T9476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1043.380529][ T9476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1043.462487][ T9476] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1043.490543][ T9476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.498588][ T9476] usb 4-1: Product: syz [ 1044.158244][ T9476] usb 4-1: Manufacturer: syz [ 1044.369132][ T9476] usb 4-1: SerialNumber: syz [ 1044.423778][ T9476] usb 4-1: config 0 descriptor?? [ 1044.595352][ T9476] usb 4-1: can't set config #0, error -71 [ 1044.610384][ T9476] usb 4-1: USB disconnect, device number 23 [ 1045.593066][T12693] fuse: Bad value for 'fd' [ 1045.676220][T12696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1053.660460][T12750] fuse: Bad value for 'fd' [ 1053.859866][T12755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1054.238424][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.601878][T12755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1056.402072][T12772] fuse: Bad value for 'fd' [ 1056.604065][T12778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2069'. [ 1056.910809][ T9477] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1057.113702][ T9477] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.203452][ T9477] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1058.348889][ T9477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1058.529613][ T9477] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1058.604877][ T9477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1058.700262][ T9477] usb 3-1: Product: syz [ 1059.561066][ T9477] usb 3-1: Manufacturer: syz [ 1059.565805][ T9477] usb 3-1: SerialNumber: syz [ 1059.587589][ T9477] usb 3-1: config 0 descriptor?? [ 1060.248220][ T9477] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1060.306980][ T9477] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1060.357136][ T9477] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1060.400553][ T9477] usb 3-1: USB disconnect, device number 34 [ 1062.578298][T12803] input: syz0 as /devices/virtual/input/input109 [ 1062.881050][T12803] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1063.448471][T12809] fuse: Bad value for 'fd' [ 1064.420605][T12820] tmpfs: Unknown parameter 'usrquota' [ 1066.292284][T12832] tmpfs: Unknown parameter 'grpquota' [ 1067.070507][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1067.130573][ T4343] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1068.721014][ T4343] usb 3-1: Using ep0 maxpacket: 8 [ 1068.757559][ T4343] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1068.867485][ T4343] usb 3-1: config 0 has no interface number 0 [ 1068.987022][ T4343] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1069.236969][ T4343] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1069.324005][ T4343] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1069.387962][ T4343] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1069.411321][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.457496][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 1069.469718][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.483981][ T4343] usb 3-1: config 0 descriptor?? [ 1069.493579][ T26] usb 4-1: config 0 has no interfaces? [ 1069.503399][ T4343] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1069.609778][T12466] usb 3-1: USB disconnect, device number 35 [ 1069.709187][ T26] usb 4-1: string descriptor 0 read error: -71 [ 1069.719517][ T26] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1069.755599][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.787842][ T26] usb 4-1: config 0 descriptor?? [ 1069.816595][T12865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1069.826405][T12865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1069.847982][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1069.862018][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1069.869731][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1069.877489][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1069.900380][ T26] usb 4-1: can't set config #0, error -71 [ 1069.942529][ T26] usb 4-1: USB disconnect, device number 24 [ 1069.950533][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1069.957747][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1069.968050][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1069.977346][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1069.984937][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1069.992571][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1070.148424][T12863] lo speed is unknown, defaulting to 1000 [ 1072.041718][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 1073.210277][T12895] tmpfs: Unknown parameter 'grpquota' [ 1073.459148][T12863] chnl_net:caif_netlink_parms(): no params data found [ 1073.560528][ T26] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1073.750681][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 1073.759496][ T26] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1073.843689][ T26] usb 3-1: config 0 has no interface number 0 [ 1073.877298][ T26] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1074.120512][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 1074.406859][ T26] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1074.457755][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.476061][ T26] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1074.485729][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.522864][T12863] device bridge_slave_0 entered promiscuous mode [ 1074.551340][ T26] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1074.584182][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.611439][ T26] usb 3-1: config 0 descriptor?? [ 1074.629073][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.638276][ T26] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1074.642698][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.663131][T12863] device bridge_slave_1 entered promiscuous mode [ 1074.719775][ T27] audit: type=1800 audit(1785784827.135:4): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2108" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 1074.729529][T12911] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1074.800597][T12911] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1074.816691][T12911] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 1074.872260][T12863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.899423][T12863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.017776][T12911] syz.3.2108 (12911) used greatest stack depth: 18176 bytes left [ 1075.070257][T12863] team0: Port device team_slave_0 added [ 1075.127563][T12863] team0: Port device team_slave_1 added [ 1075.276090][T12863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.064680][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.142498][T12863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.201845][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 1076.262613][ T6279] IPVS: stopping backup sync thread 11623 ... [ 1076.729107][T12863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.840637][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.866619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.967019][T12863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.763894][T12466] usb 3-1: USB disconnect, device number 36 [ 1078.128418][T12958] tmpfs: Unknown parameter 'grpquota' [ 1078.280426][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 1078.703879][T12863] device hsr_slave_0 entered promiscuous mode [ 1078.710992][T12863] device hsr_slave_1 entered promiscuous mode [ 1078.717667][T12863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1078.726112][T12863] Cannot create hsr debugfs directory [ 1078.805620][ T6279] device hsr_slave_0 left promiscuous mode [ 1078.814561][ T6279] device hsr_slave_1 left promiscuous mode [ 1078.835408][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.856793][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.883451][ T6279] device bridge_slave_1 left promiscuous mode [ 1078.889687][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.939542][ T6279] device bridge_slave_0 left promiscuous mode [ 1078.956442][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.397504][ T6279] bond1 (unregistering): Released all slaves [ 1083.035955][ T6279] team0 (unregistering): Port device team_slave_1 removed [ 1083.533629][ T6279] team0 (unregistering): Port device team_slave_0 removed [ 1083.762348][ T6279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.803792][ T6279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.091681][ T6279] bond0 (unregistering): Released all slaves [ 1084.780430][T12466] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1084.868863][T12863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1084.942699][T12863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1084.990395][T12466] usb 4-1: Using ep0 maxpacket: 8 [ 1085.002824][T12466] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1085.033806][T12466] usb 4-1: config 0 has no interface number 0 [ 1085.040210][T12466] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1085.055847][T12466] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1085.068171][T12466] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1085.119832][T12466] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1085.130432][T12466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.164838][T12466] usb 4-1: config 0 descriptor?? [ 1085.186417][T12863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1085.239092][T12466] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1085.517641][T12863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1085.915089][T12863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.967428][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1085.977128][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1085.994393][T13027] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2132'. [ 1086.012641][T12863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.025039][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1086.046571][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.077796][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.084956][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.154535][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1086.190214][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1086.356823][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.511656][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.518870][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.813495][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1086.858750][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1086.890539][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1086.899767][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.941343][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1086.985850][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1087.033527][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1087.081018][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1087.103971][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1087.141663][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1087.173801][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1088.113209][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1088.696975][ T4343] usb 4-1: USB disconnect, device number 25 [ 1091.840444][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1091.847925][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1091.900643][T12863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.237272][T13089] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2142'. [ 1094.420672][ T4327] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1094.660429][ T4327] usb 4-1: Using ep0 maxpacket: 8 [ 1094.785136][ T4327] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1094.793640][ T4327] usb 4-1: config 0 has no interface number 0 [ 1094.800942][ T4327] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1094.861994][ T4327] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1094.895891][ T4327] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1094.954018][ T4327] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1094.963442][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.982122][ T4327] usb 4-1: config 0 descriptor?? [ 1094.999822][ T4327] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1096.113408][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.136405][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.236228][T12863] device veth0_vlan entered promiscuous mode [ 1098.534619][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1098.563320][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1098.628348][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1098.668090][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1098.710501][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 1098.738964][T13131] device macsec1 entered promiscuous mode [ 1098.754135][T13131] device dummy0 entered promiscuous mode [ 1098.822572][ T4343] usb 4-1: USB disconnect, device number 26 [ 1098.944328][T12863] device veth1_vlan entered promiscuous mode [ 1099.973666][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1100.006749][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.038571][T12863] device veth0_macvtap entered promiscuous mode [ 1100.081107][T12863] device veth1_macvtap entered promiscuous mode [ 1100.132494][T12863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.148995][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1100.168083][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1100.176372][T13146] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1100.204979][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1100.246491][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.894565][T12863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.133601][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1101.196112][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1101.242837][T12863] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.252209][T12863] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.270390][T12863] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.281037][T12863] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.372554][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 1102.598399][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.632858][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.651695][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1102.830638][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.844199][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.312428][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1103.575822][T13173] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.600746][T13181] fuse: Bad value for 'fd' [ 1103.605364][T13173] binder: 13169:13173 ioctl 4018620d 200000000100 returned -16 [ 1103.735304][T13173] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.049048][T13192] o2cb: This node has not been configured. [ 1104.055091][T13192] o2cb: Cluster check failed. Fix errors before retrying. [ 1104.062396][T13192] (syz.6.2081,13192,1):user_dlm_register:674 ERROR: status = -22 [ 1104.070215][T13192] (syz.6.2081,13192,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1106.032524][T13173] binder: 13169:13173 ioctl 4018620d 200000004a80 returned -16 [ 1106.207428][T13197] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2164'. [ 1106.570418][ T4343] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1109.953713][T13215] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2169'. [ 1110.130449][ T4343] usb 7-1: device not accepting address 2, error -71 [ 1111.770482][T13235] o2cb: This node has not been configured. [ 1111.776500][T13235] o2cb: Cluster check failed. Fix errors before retrying. [ 1111.783929][T13235] (syz.6.2174,13235,1):user_dlm_register:674 ERROR: status = -22 [ 1111.791812][T13235] (syz.6.2174,13235,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1113.469071][T13258] [U]  [ 1113.780475][T12536] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1114.590104][T12536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1114.735870][T12536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.760660][T12536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.774106][T12536] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.783454][T12536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.289310][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.306376][T12536] usb 4-1: config 0 descriptor?? [ 1116.722358][T12536] usbhid 4-1:0.0: can't add hid device: -71 [ 1116.728396][T12536] usbhid: probe of 4-1:0.0 failed with error -71 [ 1116.763932][T12536] usb 4-1: USB disconnect, device number 27 [ 1116.780111][T13272] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2183'. [ 1119.576213][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.583721][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.819933][T13287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2182'. [ 1120.280561][T12536] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1120.347819][T13292] input: syz0 as /devices/virtual/input/input110 [ 1120.711709][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.734256][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.756197][T12536] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.791960][T12536] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1120.802643][T12536] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1120.849061][T12536] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1120.859448][T12536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1120.872525][T12536] usb 3-1: Product: syz [ 1120.876729][T12536] usb 3-1: Manufacturer: syz [ 1120.883316][T12536] usb 3-1: SerialNumber: syz [ 1120.890484][T12536] usb 3-1: config 0 descriptor?? [ 1120.907293][T12536] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1120.914850][T12536] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1120.922070][T12536] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1121.309078][T13248] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.318312][T13248] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.331023][T13248] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.339936][T13248] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.494286][T13290] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2186'. [ 1121.610941][T12466] usb 3-1: USB disconnect, device number 37 [ 1121.936249][T13311] o2cb: This node has not been configured. [ 1121.942376][T13311] o2cb: Cluster check failed. Fix errors before retrying. [ 1121.950425][T13311] (syz.4.2188,13311,0):user_dlm_register:674 ERROR: status = -22 [ 1121.958231][T13311] (syz.4.2188,13311,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1123.281776][T13315] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2191'. [ 1124.560567][ T26] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1125.640550][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 1125.648664][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1125.779776][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1125.900281][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1126.035470][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1126.164380][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1126.297261][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1126.483695][ T26] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1126.603114][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.696610][ T26] usb 4-1: Product: syz [ 1126.750760][ T26] usb 4-1: Manufacturer: syz [ 1126.818794][ T26] usb 4-1: SerialNumber: syz [ 1126.917162][ T26] usb 4-1: config 0 descriptor?? [ 1127.426705][ T26] usb 4-1: USB disconnect, device number 28 [ 1127.442785][T13271] udevd[13271]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.593815][T13353] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2200'. [ 1128.529960][T13356] input: syz0 as /devices/virtual/input/input111 [ 1128.617338][T13360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2199'. [ 1130.814589][T13379] CacheFiles: No cache directory specified [ 1134.701192][ T26] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1135.170426][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 1135.180133][ T26] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1135.209386][T13409] [U]  [ 1135.212506][ T26] usb 2-1: config 0 has no interface number 0 [ 1135.228825][ T26] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1135.270123][ T26] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1135.305608][ T26] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.360474][ T26] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1135.407590][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.437240][ T26] usb 2-1: config 0 descriptor?? [ 1135.472320][ T26] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1135.707107][ T26] usb 2-1: USB disconnect, device number 28 [ 1136.062486][T13422] input: syz0 as /devices/virtual/input/input112 [ 1136.179218][T13424] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1136.335312][T13422] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2214'. [ 1136.525262][T13426] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1141.010516][T12466] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1141.200464][T12466] usb 7-1: Using ep0 maxpacket: 8 [ 1141.216069][T12466] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1141.260554][T12466] usb 7-1: config 0 has no interface number 0 [ 1141.293640][T12466] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1141.389720][T12466] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1141.420577][T12466] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1141.458518][T12466] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1141.492174][T12466] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.555702][T12466] usb 7-1: config 0 descriptor?? [ 1141.600232][T12466] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1141.786797][T13481] fuse: Bad value for 'fd' [ 1141.792295][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1141.802488][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1141.810372][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1141.819095][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1141.827346][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1141.854593][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1141.877128][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1141.891982][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1141.899419][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1141.910847][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1141.918492][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1141.926021][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1142.008175][T13484] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2229'. [ 1142.132413][T13490] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.2229'. [ 1142.990115][T13479] chnl_net:caif_netlink_parms(): no params data found [ 1143.960473][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 1144.137577][T13479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.152112][T13479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.160269][T13479] device bridge_slave_0 entered promiscuous mode [ 1144.189615][T13479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.100566][T13479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.167738][T13479] device bridge_slave_1 entered promiscuous mode [ 1145.241092][ T4327] usb 7-1: USB disconnect, device number 4 [ 1146.090372][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 1146.218104][T13479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.252338][T13479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.233125][T13342] Set syz1 is full, maxelem 65536 reached [ 1147.554734][T13479] team0: Port device team_slave_0 added [ 1147.911764][T13536] syz.1.2237 (13536): drop_caches: 2 [ 1148.120427][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 1149.816515][T13479] team0: Port device team_slave_1 added [ 1149.882667][T13479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.909020][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.940452][T13479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.151797][T13479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.164395][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.191764][T13479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.202800][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 1150.445195][T13479] device hsr_slave_0 entered promiscuous mode [ 1150.487150][T13479] device hsr_slave_1 entered promiscuous mode [ 1152.135435][T13479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1152.183677][T13479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1152.207349][T13479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1152.258824][T13479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1152.946426][T13479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.990744][ T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1153.060652][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1153.111096][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.150725][T13479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.213455][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 1153.221910][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.233397][ T26] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1153.248032][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.275207][ T26] usb 2-1: config 0 has no interface number 0 [ 1153.287487][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.294620][ T8312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.309368][ T26] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1153.511947][ T26] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1153.592196][ T26] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1153.607217][T13479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1153.617862][T13479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1153.628792][ T26] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1153.672208][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.932955][ T26] usb 2-1: config 0 descriptor?? [ 1154.123815][ T26] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1154.135189][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1154.169015][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1154.206394][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1154.278977][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.286109][ T8312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.308522][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1154.338858][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1154.401992][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1154.438685][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1154.510862][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1154.560227][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1154.610665][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1154.641109][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1154.681039][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1154.716071][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1154.764368][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1154.782188][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1156.528141][T12466] usb 2-1: USB disconnect, device number 29 [ 1157.870913][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1157.878421][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1157.935457][T13479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.922972][T13628] ------------[ cut here ]------------ [ 1158.928501][T13628] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3091 (size 64) [ 1158.941536][T13628] WARNING: CPU: 0 PID: 13628 at kernel/trace/trace.c:3091 __ftrace_trace_stack+0x3ce/0x530 [ 1158.951633][T13628] Modules linked in: [ 1158.955573][T13628] CPU: 0 PID: 13628 Comm: syz.2.2256 Not tainted syzkaller #0 [ 1158.963119][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.973238][T13628] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 1158.979236][T13628] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 1158.998929][T13628] RSP: 0018:ffffc900034278b8 EFLAGS: 00010246 [ 1159.005081][T13628] RAX: a17d1c14bb88fd00 RBX: ffff888077b43998 RCX: ffff88801c39bc00 [ 1159.013136][T13628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1159.021269][T13628] RBP: ffff888077b43988 R08: ffffc90003427547 R09: 1ffff92000684ea8 [ 1159.029253][T13628] R10: dffffc0000000000 R11: fffff52000684ea9 R12: ffff8880b8e2b5e0 [ 1159.037303][T13628] R13: 0000000000000080 R14: ffff888077b43978 R15: 000000000000353c [ 1159.045342][T13628] FS: 0000555593e04500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1159.054346][T13628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.060969][T13628] CR2: 0000200000006000 CR3: 000000005ca4e000 CR4: 00000000003526f0 [ 1159.068942][T13628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1159.077085][T13628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1159.085103][T13628] Call Trace: [ 1159.088393][T13628] [ 1159.091405][T13628] stacktrace_trigger+0xf0/0x140 [ 1159.096352][T13628] ? stacktrace_trigger_print+0xe0/0xe0 [ 1159.101971][T13628] ? trace_event_buffer_commit+0x236/0x780 [ 1159.107784][T13628] event_triggers_post_call+0xfd/0x180 [ 1159.113268][T13628] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 1159.120515][T13628] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 1159.127239][T13628] ? __timer_delete_sync+0x239/0x2e0 [ 1159.132571][T13628] ? timer_delete_sync+0x20/0x20 [ 1159.137519][T13628] stimer_cleanup+0x3a7/0x430 [ 1159.142229][T13628] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 1159.147085][T13628] kvm_arch_vcpu_destroy+0xba/0x270 [ 1159.152309][T13628] kvm_destroy_vcpus+0xdd/0x250 [ 1159.157177][T13628] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 1159.163151][T13628] ? xa_find_after+0xab/0x430 [ 1159.167849][T13628] ? kvm_ioapic_destroy+0xa8/0xc0 [ 1159.172950][T13628] kvm_arch_destroy_vm+0x31a/0x410 [ 1159.178096][T13628] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1159.183732][T13628] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 1159.189246][T13628] ? synchronize_srcu+0x18f/0x1b0 [ 1159.194367][T13628] ? mmu_notifier_unregister+0x302/0x390 [ 1159.200131][T13628] ? mmu_notifier_unregister+0xad/0x390 [ 1159.205825][T13628] kvm_put_kvm+0xdbb/0x1a10 [ 1159.210413][T13628] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 1159.215741][T13628] kvm_vm_release+0x42/0x50 [ 1159.220352][T13628] __fput+0x20a/0x8b0 [ 1159.224383][T13628] task_work_run+0x1d0/0x260 [ 1159.229023][T13628] ? task_work_cancel+0x220/0x220 [ 1159.234127][T13628] ? __close_range+0x20c/0x770 [ 1159.238957][T13628] ? exit_to_user_mode_loop+0x3b/0x110 [ 1159.244676][T13628] exit_to_user_mode_loop+0xe6/0x110 [ 1159.250023][T13628] exit_to_user_mode_prepare+0xee/0x180 [ 1159.255655][T13628] syscall_exit_to_user_mode+0x16/0x40 [ 1159.261211][T13628] do_syscall_64+0x58/0xa0 [ 1159.265672][T13628] ? clear_bhb_loop+0x60/0xb0 [ 1159.270429][T13628] ? clear_bhb_loop+0x60/0xb0 [ 1159.275157][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1159.281145][T13628] RIP: 0033:0x7fbf3bd9e019 [ 1159.285610][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.305292][T13628] RSP: 002b:00007fff6c5471b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1159.313785][T13628] RAX: 0000000000000000 RBX: 00007fff6c5472a0 RCX: 00007fbf3bd9e019 [ 1159.321936][T13628] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1159.329956][T13628] RBP: 000000000011aab5 R08: 0000000000000001 R09: 0000000000000000 [ 1159.338027][T13628] R10: 0000001b2ed20000 R11: 0000000000000246 R12: 00007fff6c5472e0 [ 1159.346081][T13628] R13: 00007fbf3c025fac R14: 000000000011abc4 R15: 00007fbf3c025fa0 [ 1159.354152][T13628] [ 1159.357225][T13628] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1159.364558][T13628] CPU: 0 PID: 13628 Comm: syz.2.2256 Not tainted syzkaller #0 [ 1159.372046][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.382108][T13628] Call Trace: [ 1159.385414][T13628] [ 1159.388357][T13628] dump_stack_lvl+0x188/0x24e [ 1159.393056][T13628] ? memcpy+0x3c/0x60 [ 1159.397056][T13628] ? show_regs_print_info+0x12/0x12 [ 1159.402276][T13628] ? load_image+0x410/0x410 [ 1159.406799][T13628] panic+0x2d3/0x710 [ 1159.410717][T13628] ? bpf_jit_dump+0xd0/0xd0 [ 1159.415256][T13628] __warn+0x2f8/0x4f0 [ 1159.419251][T13628] ? __ftrace_trace_stack+0x3ce/0x530 [ 1159.424643][T13628] ? __ftrace_trace_stack+0x3ce/0x530 [ 1159.430035][T13628] report_bug+0x2ba/0x4f0 [ 1159.434380][T13628] ? __ftrace_trace_stack+0x3ce/0x530 [ 1159.439764][T13628] handle_bug+0x3a/0x70 [ 1159.443934][T13628] exc_invalid_op+0x16/0x40 [ 1159.448449][T13628] asm_exc_invalid_op+0x16/0x20 [ 1159.453313][T13628] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 1159.459309][T13628] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 1159.478922][T13628] RSP: 0018:ffffc900034278b8 EFLAGS: 00010246 [ 1159.485001][T13628] RAX: a17d1c14bb88fd00 RBX: ffff888077b43998 RCX: ffff88801c39bc00 [ 1159.493003][T13628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1159.500983][T13628] RBP: ffff888077b43988 R08: ffffc90003427547 R09: 1ffff92000684ea8 [ 1159.508964][T13628] R10: dffffc0000000000 R11: fffff52000684ea9 R12: ffff8880b8e2b5e0 [ 1159.516976][T13628] R13: 0000000000000080 R14: ffff888077b43978 R15: 000000000000353c [ 1159.524969][T13628] ? __ftrace_trace_stack+0x3ce/0x530 [ 1159.530368][T13628] stacktrace_trigger+0xf0/0x140 [ 1159.535339][T13628] ? stacktrace_trigger_print+0xe0/0xe0 [ 1159.540897][T13628] ? trace_event_buffer_commit+0x236/0x780 [ 1159.546724][T13628] event_triggers_post_call+0xfd/0x180 [ 1159.552210][T13628] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 1159.559433][T13628] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 1159.566126][T13628] ? __timer_delete_sync+0x239/0x2e0 [ 1159.571444][T13628] ? timer_delete_sync+0x20/0x20 [ 1159.576397][T13628] stimer_cleanup+0x3a7/0x430 [ 1159.581095][T13628] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 1159.585965][T13628] kvm_arch_vcpu_destroy+0xba/0x270 [ 1159.591187][T13628] kvm_destroy_vcpus+0xdd/0x250 [ 1159.596055][T13628] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 1159.601969][T13628] ? xa_find_after+0xab/0x430 [ 1159.606682][T13628] ? kvm_ioapic_destroy+0xa8/0xc0 [ 1159.611729][T13628] kvm_arch_destroy_vm+0x31a/0x410 [ 1159.616865][T13628] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1159.622446][T13628] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 1159.627939][T13628] ? synchronize_srcu+0x18f/0x1b0 [ 1159.632990][T13628] ? mmu_notifier_unregister+0x302/0x390 [ 1159.638665][T13628] ? mmu_notifier_unregister+0xad/0x390 [ 1159.644225][T13628] kvm_put_kvm+0xdbb/0x1a10 [ 1159.648750][T13628] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 1159.654044][T13628] kvm_vm_release+0x42/0x50 [ 1159.658554][T13628] __fput+0x20a/0x8b0 [ 1159.662575][T13628] task_work_run+0x1d0/0x260 [ 1159.667190][T13628] ? task_work_cancel+0x220/0x220 [ 1159.672230][T13628] ? __close_range+0x20c/0x770 [ 1159.677016][T13628] ? exit_to_user_mode_loop+0x3b/0x110 [ 1159.682503][T13628] exit_to_user_mode_loop+0xe6/0x110 [ 1159.687805][T13628] exit_to_user_mode_prepare+0xee/0x180 [ 1159.693369][T13628] syscall_exit_to_user_mode+0x16/0x40 [ 1159.698846][T13628] do_syscall_64+0x58/0xa0 [ 1159.703307][T13628] ? clear_bhb_loop+0x60/0xb0 [ 1159.708007][T13628] ? clear_bhb_loop+0x60/0xb0 [ 1159.712703][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1159.718608][T13628] RIP: 0033:0x7fbf3bd9e019 [ 1159.723035][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.742658][T13628] RSP: 002b:00007fff6c5471b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1159.751168][T13628] RAX: 0000000000000000 RBX: 00007fff6c5472a0 RCX: 00007fbf3bd9e019 [ 1159.759144][T13628] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1159.767139][T13628] RBP: 000000000011aab5 R08: 0000000000000001 R09: 0000000000000000 [ 1159.775118][T13628] R10: 0000001b2ed20000 R11: 0000000000000246 R12: 00007fff6c5472e0 [ 1159.783099][T13628] R13: 00007fbf3c025fac R14: 000000000011abc4 R15: 00007fbf3c025fa0 [ 1159.791099][T13628] [ 1159.794747][T13628] Kernel Offset: disabled [ 1159.799076][T13628] Rebooting in 86400 seconds..