last executing test programs: 5m45.626046025s ago: executing program 2 (id=2373): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000ffdbdf252100000008000300", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 5m43.85239703s ago: executing program 2 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49', 0xb) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x54) 5m43.220470499s ago: executing program 2 (id=2378): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000ffdbdf252100000008000300", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 5m41.731217762s ago: executing program 2 (id=2380): syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) read(r3, &(0x7f0000000100)=""/4, 0x4) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, r0, 0x4003) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) 5m39.517648703s ago: executing program 2 (id=2383): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, 0x0, 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000ffdbdf252100000008000300", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 5m36.110160134s ago: executing program 2 (id=2389): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x2a90, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) syz_usb_disconnect(r1) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x24, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "f3a651"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "08de"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1c000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5m35.997430607s ago: executing program 32 (id=2389): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x2a90, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) syz_usb_disconnect(r1) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x24, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "f3a651"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "08de"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1c000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5m35.92151954s ago: executing program 0 (id=2392): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 5m29.731508995s ago: executing program 0 (id=2398): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) syz_usb_disconnect(r1) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x24, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "f3a651"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "08de"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1c000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5m28.488889089s ago: executing program 0 (id=2400): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 5m27.148203239s ago: executing program 0 (id=2402): syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) read(r3, &(0x7f0000000100)=""/4, 0x4) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, r0, 0x4003) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) 5m23.703523133s ago: executing program 0 (id=2407): mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x121c060, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x10, 0x1, 0x4f, 0x3}}], 0x10}, 0x8040) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000004380)=""/4096, 0x1000}, 0x40000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x80000000}}, 0x4, 0x4, 0xf, 0xe, 0x1}, &(0x7f0000001640)=0x98) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x1) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x208b) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004a40)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={r5, 0x58, &(0x7f0000001480)}, 0x10) mount(&(0x7f0000000100)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='minix\x00', 0x3020, &(0x7f0000000280)='{-\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 5m20.83448169s ago: executing program 0 (id=2418): r0 = socket$unix(0x1, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000100), 0x12) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0xd, 0x8, 0x6, 0xb}) listen(r6, 0x1) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r7, 0x0, 0x0, 0x804, &(0x7f00000002c0)={0x2, 0x4e26, @multicast1}, 0x10) read(r7, &(0x7f0000000040)=""/58, 0x3a) 5m20.834177611s ago: executing program 33 (id=2418): r0 = socket$unix(0x1, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000100), 0x12) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0xd, 0x8, 0x6, 0xb}) listen(r6, 0x1) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r7, 0x0, 0x0, 0x804, &(0x7f00000002c0)={0x2, 0x4e26, @multicast1}, 0x10) read(r7, &(0x7f0000000040)=""/58, 0x3a) 5m9.191238712s ago: executing program 4 (id=2430): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) r7 = openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 5m7.991221138s ago: executing program 4 (id=2432): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1, &(0x7f0000006680)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, r5, 0x0, 0x4ff9c, 0x0) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, 0x0, &(0x7f0000000000)=0x42) 5m6.710429682s ago: executing program 4 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) r7 = openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 5m3.813876351s ago: executing program 4 (id=2440): syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) read(r3, &(0x7f0000000100)=""/4, 0x4) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, r0, 0x4003) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) 5m1.224282497s ago: executing program 4 (id=2445): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x2a90, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) syz_usb_disconnect(r1) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x24, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "f3a651"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "08de"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1c000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.016502081s ago: executing program 4 (id=2446): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 5m0.811946628s ago: executing program 34 (id=2446): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267f5"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 22.520682847s ago: executing program 3 (id=3015): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000ffdbdf252100000008000300", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 21.094299984s ago: executing program 3 (id=3017): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0) fstatfs(r1, &(0x7f00000000c0)=""/124) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb4060"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x2000000, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) syz_usb_disconnect(r0) 13.969738438s ago: executing program 3 (id=3032): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 13.924872517s ago: executing program 5 (id=3033): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5eabc", 0xc0}, {0x0}, {0x0}], 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0xabed2e56, 0x3]}, 0x8) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x100019000, 0x1000000}) r3 = io_uring_setup(0x963, &(0x7f00000000c0)={0x0, 0x41f09, 0x1, 0x2, 0x80000253}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xfffdffff, 0x88a82) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000001c0)=0xcb) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x11) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32000000001400"], 0xa4}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 5.888531362s ago: executing program 6 (id=3035): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)={0x1c, 0x41, 0x1, 0x5fffc, 0x4, {0x3}, [@generic="e64c304a45"]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x2000c844) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000f) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xec6, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(0x0, 0xaec9, &(0x7f00000000c0)=0x6, &(0x7f0000000300)=0x5) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) r12 = dup(r10) syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ac5, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) 5.851418515s ago: executing program 5 (id=3036): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r1 = socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x57e6, 0x880, 0x0, 0x148}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6956, 0x4, 0x2, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ef1, 0x80000, 0x1, 0x1c3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70f9, 0x20, 0x0, 0x1c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf834, 0x4000, 0x1, 0x1b2}}], 0x4, &(0x7f0000002340)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x74}, 0x0, 0x0, '\x00', {0x0, 0xbeb, 0x0, &(0x7f0000001340)=@buf_1k="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"}}, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x1bc, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x2b, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x8a, 0x48}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10c, 0x134, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x1, 0x2e, 0x0, 0x4, 0x2, 0x8000, 0x8}}, @common=@inet=@udp={{0x2c}, {[0x4e21, 0x4e21], [0x4e20, 0x4e20], 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2e, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=@delqdisc={0xd4, 0x25, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {0x10, 0x14}, {0xffe0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff8000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4e, 0x2, 0x8, 0x100, 0x1, 0xba, 0x4, 0x7}}, {0x12, 0x2, [0x8, 0x81, 0x100, 0xff12, 0x7c4, 0x3, 0x3]}}, {{0x1c, 0x1, {0x0, 0xf, 0x6, 0x0, 0x1, 0x1, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x9489]}}, {{0x1c, 0x1, {0xfb, 0x0, 0x89f, 0x3, 0x2, 0x0, 0xffff, 0x7}}, {0x12, 0x2, [0x9, 0x1ff, 0x1, 0x8, 0x5, 0x2df6, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x22, 0x9}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x45}, 0x10) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x44) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r6, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.822740508s ago: executing program 1 (id=3037): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 5.822432435s ago: executing program 3 (id=3038): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) tkill(r3, 0xb) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x8}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) accept4(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x40000) fgetxattr(r1, &(0x7f0000000240)=@random={'osx.', '-(,&/\x00'}, &(0x7f00000003c0)=""/180, 0xb4) 5.75887534s ago: executing program 5 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930000000000000000000004433836e3f12c647b8b3a5389c4d9bc67cf712874ee61df0a3f11f3d1c173ab0062c018ce436b70f7a68f74faa94499fd72c8158071a5c96d3c1f12ba0abe3b795a299c6a3724a72b26b3885a1e918639ed797f87326831f51e299d2fb11f5854ae3"], 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4048011}, 0x40d0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40046607, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x7478b000) socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) 5.721744151s ago: executing program 5 (id=3040): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0x0) r3 = open(0x0, 0x400001, 0x100) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000800)=0x7, 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xa) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0186405, &(0x7f0000000180)={0x7ffffffc, 0x401, {}, {0xee00}, 0x6, 0x2}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x1}]}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@rnullb, r6, &(0x7f00000001c0)={0x1, 0xffffffff, 0x6, 0x6c360bc3, 0x800, 0xfff, 0xffffffffffff1b82, 0x4527, 0x3}) write(r5, &(0x7f0000000000)="bc5154f23facdd5dd02bc92c72", 0xd) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 5.599340299s ago: executing program 6 (id=3041): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 4.323995525s ago: executing program 5 (id=3042): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xfffffffffdffffff, 0x4, 0x7f}, {0x0, 0xffffffffffffffff, 0x3}, {0xf6, 0x4, 0xa}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0x4000003}]}, 0x144}}, 0x804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r8 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r5}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x2000400c) 4.323660753s ago: executing program 1 (id=3043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x67c842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r8, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x2, 0x2}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000003c0)=0xfffffcfc) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)=0x4}) 4.323444323s ago: executing program 6 (id=3044): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r3, 0x40000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r5, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc0002009}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x0, 0x1}) r9 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r9, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x400442) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) 4.32324148s ago: executing program 3 (id=3045): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$cgroup_devices(r0, 0x0, 0xfffffeff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {&(0x7f0000000140)="a977bafc4f6278aec04d577d5186f189906610537e7c310fb7d17e12402a3cba6a7bce519e026aded4fdc1746b347b1233adc9193f266fba3c7c662ff743e49cc8fd4e1ee6279827252ef95a1c74d41d9060cd984989ff", 0x57}], 0x2}, 0x20048000) write(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.950203775s ago: executing program 5 (id=3046): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 3.478974564s ago: executing program 6 (id=3047): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000ffdbdf252100000008000300", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) getgid() ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002206010200000000000000e192c000000000e71400078005034a000700040008001240410500000900020073797a320000000005000100070d9008e46ef6861ccbdb00000011000300686173683a6e65742c6ee57400000000050005ee4cd20ecff5e764df1ecd7a69cce7d60f1f48da0c3c087a9e2e39df91d7a5ac9726fbd25ecb64ed7d89a387cc3a92d8c708e6765e4c1b7a5c47c5bf4a858bf6db116b049f1ce259b6b2cfb2adb9b87e3213fbf40669dbce94d042112c466b675970b6b82c22d267"], 0x60}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) 3.426347411s ago: executing program 3 (id=3048): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 3.41613996s ago: executing program 1 (id=3049): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r1 = socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x57e6, 0x880, 0x0, 0x148}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6956, 0x4, 0x2, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ef1, 0x80000, 0x1, 0x1c3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70f9, 0x20, 0x0, 0x1c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf834, 0x4000, 0x1, 0x1b2}}], 0x4, &(0x7f0000002340)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x74}, 0x0, 0x0, '\x00', {0x0, 0xbeb, 0x0, &(0x7f0000001340)=@buf_1k="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"}}, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x1bc, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x2b, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x8a, 0x48}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10c, 0x134, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x1, 0x2e, 0x0, 0x4, 0x2, 0x8000, 0x8}}, @common=@inet=@udp={{0x2c}, {[0x4e21, 0x4e21], [0x4e20, 0x4e20], 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2e, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=@delqdisc={0xd4, 0x25, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {0x10, 0x14}, {0xffe0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff8000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4e, 0x2, 0x8, 0x100, 0x1, 0xba, 0x4, 0x7}}, {0x12, 0x2, [0x8, 0x81, 0x100, 0xff12, 0x7c4, 0x3, 0x3]}}, {{0x1c, 0x1, {0x0, 0xf, 0x6, 0x0, 0x1, 0x1, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x9489]}}, {{0x1c, 0x1, {0xfb, 0x0, 0x89f, 0x3, 0x2, 0x0, 0xffff, 0x7}}, {0x12, 0x2, [0x9, 0x1ff, 0x1, 0x8, 0x5, 0x2df6, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x22, 0x9}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x45}, 0x10) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x44) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) writev(r6, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.344161713s ago: executing program 6 (id=3050): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r3, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.987737405s ago: executing program 1 (id=3051): socket(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) syz_clone(0x3091a00, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x100001, 0x4) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0xa4b, 0x4, 0x0, 0x1bd}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000002, 0x13, r2, 0xa7bfa000) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x800, 0x4, 0xa}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:1f.3/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='0000:00:1f.3', 0xc) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000080)=[0xffffffff, 0x200, 0x9, 0xff, 0x1000, 0x4df], &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x2000001}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000380)={0x3a, @broadcast, 0x4e22, 0x3, 'wlc\x00', 0x20, 0x9, 0x53}, 0x2c) 1.83970393s ago: executing program 1 (id=3052): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 810.490979ms ago: executing program 6 (id=3053): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x7e4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x7b4, 0x8, 0x0, 0x1, [{0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x468, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)) 0s ago: executing program 1 (id=3054): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x80000000, 0x101, 0xf00, 0x5, 0x3, "70cfe2cba58eb4ec58131b9fbbab602f757cb9", 0x3, 0x101}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x7, 0x8000, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x68, 0x0, 0xfe, 0x4, 0x0, @broadcast, @private=0xa010102, {[@noop]}}}}}) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) eventfd2(0xaf9e, 0x80800) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x4000921, 0x12) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.1.2819'. [ 1156.589918][ T24] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1156.601650][ T24] usb 8-1: selecting invalid altsetting 1 [ 1156.603747][ T24] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1156.630517][ T24] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1156.645722][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1156.648938][ T24] usb 8-1: media controller created [ 1156.726270][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1156.762811][T23128] lo speed is unknown, defaulting to 1000 [ 1156.850405][T23128] lo speed is unknown, defaulting to 1000 [ 1157.421811][ T5806] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1157.424321][ T5806] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1157.458477][T23133] netlink: 'syz.1.2820': attribute type 10 has an invalid length. [ 1157.525755][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1157.529372][ T24] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1157.537041][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1157.544580][ T24] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1157.607272][ T5806] usb 10-1: USB disconnect, device number 39 [ 1157.715463][ T24] usb 8-1: USB disconnect, device number 20 [ 1158.260730][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 1158.418063][T23143] lo speed is unknown, defaulting to 1000 [ 1158.658884][T23156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1158.721390][ T5878] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1158.773414][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2823'. [ 1158.891423][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 1158.904004][ T5878] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1158.923257][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.965150][ T5878] usb 8-1: config 0 descriptor?? [ 1159.028520][ T5878] as10x_usb: device has been detected [ 1159.041344][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1159.096937][ T5878] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1159.126150][ T5878] as10x_usb: error during firmware upload part1 [ 1159.139998][ T5878] Registered device nBox DVB-T Dongle [ 1159.305533][ T5837] usb 8-1: USB disconnect, device number 21 [ 1159.318779][ T5837] Unregistered device nBox DVB-T Dongle [ 1159.319576][ T5837] as10x_usb: device has been disconnected [ 1159.320814][T23143] lo speed is unknown, defaulting to 1000 [ 1159.864461][T23169] lo speed is unknown, defaulting to 1000 [ 1159.918553][T23173] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2825'. [ 1160.283106][T23177] mmap: syz.1.2826 (23177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1160.290478][ T42] audit: type=1800 audit(1786445711.277:1380): pid=23177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2826" name="zone_size" dev="configfs" ino=88368 res=0 errno=0 [ 1160.470295][T23169] lo speed is unknown, defaulting to 1000 [ 1160.651485][T21239] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1160.718324][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 1160.794257][T23185] lo speed is unknown, defaulting to 1000 [ 1160.801379][T21239] usb 6-1: Using ep0 maxpacket: 32 [ 1160.804329][T21239] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1160.808994][T21239] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1160.813264][T21239] usb 6-1: config 0 has no interface number 0 [ 1160.817603][T21239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.820852][T21239] usb 6-1: Product: syz [ 1160.824148][T21239] usb 6-1: Manufacturer: syz [ 1160.825782][T21239] usb 6-1: SerialNumber: syz [ 1160.829885][T21239] usb 6-1: config 0 descriptor?? [ 1160.833511][T21239] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1160.836400][T21239] usb 6-1: selecting invalid altsetting 1 [ 1160.838265][T21239] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1160.842997][T21239] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1160.846443][T21239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1160.849031][T21239] usb 6-1: media controller created [ 1160.856927][T21239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.019750][T23185] lo speed is unknown, defaulting to 1000 [ 1161.271152][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2829'. [ 1161.621438][ T5878] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1161.689752][T23190] lo speed is unknown, defaulting to 1000 [ 1161.771512][ T5837] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1161.781989][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 1161.785210][ T5878] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1161.790114][ T5878] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.793832][ T5878] usb 10-1: config 0 has no interface number 0 [ 1161.798608][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.802131][ T5878] usb 10-1: Product: syz [ 1161.803839][ T5878] usb 10-1: Manufacturer: syz [ 1161.805996][ T5878] usb 10-1: SerialNumber: syz [ 1161.810299][ T5878] usb 10-1: config 0 descriptor?? [ 1161.816134][ T5878] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1161.820341][ T5878] usb 10-1: selecting invalid altsetting 1 [ 1161.823200][ T5878] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1161.828577][ T5878] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1161.833210][ T5878] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1161.836679][ T5878] usb 10-1: media controller created [ 1161.846179][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.904100][T21239] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1161.906431][T21239] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1161.908965][ C3] raw-gadget.0 gadget.1: ignoring, device is not running [ 1161.921375][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1161.931405][ T5837] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1161.932274][T21239] usb 6-1: USB disconnect, device number 12 [ 1161.937446][ T5837] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.944459][ T5837] usb 8-1: config 0 has no interface number 0 [ 1161.958041][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.968855][ T5837] usb 8-1: Product: syz [ 1161.970759][ T5837] usb 8-1: Manufacturer: syz [ 1161.977569][ T5837] usb 8-1: SerialNumber: syz [ 1161.988957][ T5837] usb 8-1: config 0 descriptor?? [ 1162.003562][ T5837] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1162.011335][ T5837] usb 8-1: selecting invalid altsetting 1 [ 1162.018717][ T5837] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1162.033239][ T5837] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1162.043383][ T5837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1162.048423][ T5837] usb 8-1: media controller created [ 1162.059529][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.062702][T23190] lo speed is unknown, defaulting to 1000 [ 1162.193427][ T5878] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1162.196533][ T5878] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1162.199435][ T5878] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1162.214445][ T5878] usb 10-1: USB disconnect, device number 40 [ 1162.766612][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1162.939456][T23204] lo speed is unknown, defaulting to 1000 [ 1163.020059][T23204] lo speed is unknown, defaulting to 1000 [ 1163.044555][T23211] Cannot find set identified by id 2 to match [ 1163.193244][T21239] libceph: connect (1)[c::]:6789 error -101 [ 1163.196030][T21239] libceph: mon0 (1)[c::]:6789 connect error [ 1163.200936][T23211] ceph: No mds server is up or the cluster is laggy [ 1163.251475][ T5837] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1163.350086][ T5837] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1163.448385][T23218] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2834'. [ 1163.451873][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1163.455619][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1163.724007][ T5837] usb 8-1: USB disconnect, device number 22 [ 1164.135469][T23232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1164.242518][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1165.049534][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1165.296893][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 1165.450145][T23266] lo speed is unknown, defaulting to 1000 [ 1165.805144][T23266] lo speed is unknown, defaulting to 1000 [ 1166.202065][T23275] lo speed is unknown, defaulting to 1000 [ 1166.251405][ T5878] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 1166.371574][T20800] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1166.411494][ T5878] usb 11-1: Using ep0 maxpacket: 32 [ 1166.420932][ T5878] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1166.440182][ T5878] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1166.450445][ T5878] usb 11-1: config 0 has no interface number 0 [ 1166.463974][T23275] lo speed is unknown, defaulting to 1000 [ 1166.485294][ T5878] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.491409][ T5878] usb 11-1: Product: syz [ 1166.495259][ T5878] usb 11-1: Manufacturer: syz [ 1166.497352][ T5878] usb 11-1: SerialNumber: syz [ 1166.531391][T20800] usb 10-1: Using ep0 maxpacket: 32 [ 1166.538678][T20800] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1166.543640][ T5878] usb 11-1: config 0 descriptor?? [ 1166.556292][T20800] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1166.569452][ T5878] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1166.575322][T20800] usb 10-1: config 0 has no interface number 0 [ 1166.583247][ T5878] usb 11-1: selecting invalid altsetting 1 [ 1166.586541][T20800] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.596578][T20800] usb 10-1: Product: syz [ 1166.597998][T20800] usb 10-1: Manufacturer: syz [ 1166.599992][ T5878] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1166.616959][T20800] usb 10-1: SerialNumber: syz [ 1166.644983][ T5878] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1166.651769][ T5878] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1166.667716][ T5878] usb 11-1: media controller created [ 1166.682645][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1166.693864][T20800] usb 10-1: config 0 descriptor?? [ 1166.706101][T20800] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1166.710868][T20800] usb 10-1: selecting invalid altsetting 1 [ 1166.720041][T20800] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1166.767910][T20800] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1166.829367][T20800] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1166.838556][T20800] usb 10-1: media controller created [ 1166.902571][T20800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.037604][ T5878] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1167.051438][ T5878] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1167.061552][ T5878] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1167.206752][T20800] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1167.209102][T20800] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1167.217566][ T5878] usb 11-1: USB disconnect, device number 32 [ 1167.226399][T20800] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1167.335661][T20800] usb 10-1: USB disconnect, device number 41 [ 1167.681344][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1167.832342][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 1167.838422][ T34] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1167.844614][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.849265][ T34] usb 6-1: config 0 descriptor?? [ 1167.859035][ T34] as10x_usb: device has been detected [ 1167.861722][ T34] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1167.880031][ T34] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1167.888093][ T34] as10x_usb: error during firmware upload part1 [ 1167.890457][ T34] Registered device nBox DVB-T Dongle [ 1167.975194][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1168.021516][ T5806] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1168.086726][ T34] usb 6-1: USB disconnect, device number 13 [ 1168.097889][ T34] Unregistered device nBox DVB-T Dongle [ 1168.099261][ T34] as10x_usb: device has been disconnected [ 1168.136968][T23290] lo speed is unknown, defaulting to 1000 [ 1168.171456][ T5806] usb 10-1: Using ep0 maxpacket: 32 [ 1168.174421][ T5806] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1168.178411][ T5806] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.181017][ T5806] usb 10-1: config 0 has no interface number 0 [ 1168.185042][ T5806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.187915][ T5806] usb 10-1: Product: syz [ 1168.189378][ T5806] usb 10-1: Manufacturer: syz [ 1168.190919][ T5806] usb 10-1: SerialNumber: syz [ 1168.194998][ T5806] usb 10-1: config 0 descriptor?? [ 1168.198903][ T5806] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1168.201968][ T5806] usb 10-1: selecting invalid altsetting 1 [ 1168.203832][ T5806] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1168.207362][ T5806] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1168.211466][ T5806] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1168.214141][ T5806] usb 10-1: media controller created [ 1168.220345][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.271178][T23290] lo speed is unknown, defaulting to 1000 [ 1168.577016][T23288] kvm: apic: phys broadcast and lowest prio [ 1168.581114][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1168.860927][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1168.868574][ T5806] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1168.870920][ T5806] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1168.873562][ T5806] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1168.874292][ T24] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1168.884389][ T24] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.888290][ T24] usb 8-1: config 0 has no interface number 0 [ 1168.899362][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.905422][ T24] usb 8-1: Product: syz [ 1168.907034][ T24] usb 8-1: Manufacturer: syz [ 1168.910047][ T24] usb 8-1: SerialNumber: syz [ 1168.917539][ T5806] usb 10-1: USB disconnect, device number 42 [ 1169.031552][ T24] usb 8-1: config 0 descriptor?? [ 1169.077662][ T24] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1169.091523][ T24] usb 8-1: selecting invalid altsetting 1 [ 1169.093620][ T24] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1169.166367][ T24] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1169.257560][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1169.329093][ T24] usb 8-1: media controller created [ 1169.428712][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.502671][ T24] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1169.505231][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1169.508608][ T24] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1169.645807][ T24] usb 8-1: USB disconnect, device number 23 [ 1176.863324][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.524379][T23328] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1181.621351][ T5837] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1181.661763][T20800] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1181.748289][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2848'. [ 1181.803481][ T5837] usb 10-1: Using ep0 maxpacket: 32 [ 1181.812802][T23334] overlay: Unknown parameter '/' [ 1181.821575][T20800] usb 6-1: Using ep0 maxpacket: 32 [ 1181.828261][T20800] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1181.832949][T23334] netlink: zone id is out of range [ 1181.834645][T23334] netlink: zone id is out of range [ 1181.836706][T23334] netlink: zone id is out of range [ 1181.838436][T23334] netlink: zone id is out of range [ 1181.849629][T20800] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1181.852835][T20800] usb 6-1: config 0 has no interface number 0 [ 1181.860697][T20800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.872663][T23333] input: syz0 as /devices/virtual/input/input28 [ 1181.876305][T20800] usb 6-1: Product: syz [ 1181.878196][T20800] usb 6-1: Manufacturer: syz [ 1181.888420][T20800] usb 6-1: SerialNumber: syz [ 1181.930731][T20800] usb 6-1: config 0 descriptor?? [ 1181.997345][T20800] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1182.007247][T20800] usb 6-1: selecting invalid altsetting 1 [ 1182.015881][T20800] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1182.055736][T20800] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1182.073819][T20800] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1182.082975][T20800] usb 6-1: media controller created [ 1182.172337][T20800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1182.175991][ T5837] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1182.177108][T23320] kvm: apic: phys broadcast and lowest prio [ 1182.299474][T23332] lo speed is unknown, defaulting to 1000 [ 1182.525459][T23332] lo speed is unknown, defaulting to 1000 [ 1183.104658][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1183.106753][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.117835][ T5837] usb 10-1: config 0 descriptor?? [ 1183.136006][ T5837] as10x_usb: device has been detected [ 1183.138626][ T5837] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1183.154815][ T5837] usb 10-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1183.159561][ T5837] as10x_usb: error during firmware upload part1 [ 1183.162146][ T5837] Registered device nBox DVB-T Dongle [ 1183.232781][T20800] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1183.245852][T20800] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1183.252971][T20800] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1183.302604][T20800] usb 6-1: USB disconnect, device number 14 [ 1183.350290][ T5878] usb 10-1: USB disconnect, device number 43 [ 1183.403885][ T5878] Unregistered device nBox DVB-T Dongle [ 1183.413509][ T5878] as10x_usb: device has been disconnected [ 1183.521530][ T5837] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1183.572663][T23339] lo speed is unknown, defaulting to 1000 [ 1183.650297][T23339] lo speed is unknown, defaulting to 1000 [ 1183.696451][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1183.710781][ T5837] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1183.723422][ T5837] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1183.728109][ T5837] usb 8-1: config 0 has no interface number 0 [ 1183.740140][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.743667][ T5837] usb 8-1: Product: syz [ 1183.745504][ T5837] usb 8-1: Manufacturer: syz [ 1183.748205][ T5837] usb 8-1: SerialNumber: syz [ 1183.769381][ T5837] usb 8-1: config 0 descriptor?? [ 1183.817660][ T5837] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1183.824233][ T5837] usb 8-1: selecting invalid altsetting 1 [ 1183.830309][ T5837] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1183.858679][ T5837] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1183.870114][ T5837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1183.875294][ T5837] usb 8-1: media controller created [ 1183.883879][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.170503][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 1184.335792][T23365] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1184.339149][T23365] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1184.348712][T23362] lo speed is unknown, defaulting to 1000 [ 1184.369125][T23365] bond17: entered promiscuous mode [ 1184.631878][T23369] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2855'. [ 1185.209005][ T5837] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1185.211398][ T5837] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1185.328877][ T5837] usb 8-1: USB disconnect, device number 24 [ 1185.389597][T23362] lo speed is unknown, defaulting to 1000 [ 1185.531993][T21239] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 1185.591347][ T5806] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1185.683719][T21239] usb 11-1: Using ep0 maxpacket: 32 [ 1185.686836][T21239] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1185.698703][T21239] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1185.703822][T21239] usb 11-1: config 0 has no interface number 0 [ 1185.711358][T21239] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.713921][T21239] usb 11-1: Product: syz [ 1185.715281][T21239] usb 11-1: Manufacturer: syz [ 1185.716777][T21239] usb 11-1: SerialNumber: syz [ 1185.720764][T21239] usb 11-1: config 0 descriptor?? [ 1185.731889][T21239] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1185.734828][T21239] usb 11-1: selecting invalid altsetting 1 [ 1185.736678][T21239] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1185.740693][T21239] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1185.744157][ T5806] usb 10-1: Using ep0 maxpacket: 32 [ 1185.746156][T21239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1185.748752][T21239] usb 11-1: media controller created [ 1185.750504][ T5806] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1185.758016][T21239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.762865][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.767678][ T5806] usb 10-1: config 0 descriptor?? [ 1185.794959][ T5806] as10x_usb: device has been detected [ 1185.797887][ T5806] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1185.812333][ T5806] usb 10-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1185.830733][ T5806] as10x_usb: error during firmware upload part1 [ 1185.834508][ T5806] Registered device nBox DVB-T Dongle [ 1186.059079][ T24] usb 10-1: USB disconnect, device number 44 [ 1186.178323][ T24] Unregistered device nBox DVB-T Dongle [ 1186.182371][ T24] as10x_usb: device has been disconnected [ 1186.702172][ T5806] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1186.705346][T23390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 1186.861445][T21239] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1186.863762][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 1186.866300][T21239] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1186.871346][ T5806] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1186.879789][ T5806] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.885396][ T5806] usb 8-1: config 0 has no interface number 0 [ 1186.894596][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.897334][ T5806] usb 8-1: Product: syz [ 1186.898777][ T5806] usb 8-1: Manufacturer: syz [ 1186.900410][ T5806] usb 8-1: SerialNumber: syz [ 1186.905082][ T5806] usb 8-1: config 0 descriptor?? [ 1186.906095][T23390] lo speed is unknown, defaulting to 1000 [ 1186.908519][ T5806] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1186.911443][ T5806] usb 8-1: selecting invalid altsetting 1 [ 1186.913214][ T5806] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1186.919890][ T5806] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1186.923809][ T5806] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1186.926438][ T5806] usb 8-1: media controller created [ 1186.932673][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1186.946251][T21239] usb 11-1: USB disconnect, device number 33 [ 1187.087351][T23390] lo speed is unknown, defaulting to 1000 [ 1187.244748][ T5806] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1187.247233][ T5806] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1187.249800][ T5806] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1187.267289][ T5806] usb 8-1: USB disconnect, device number 25 [ 1187.512096][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2861'. [ 1187.934576][T23396] lo speed is unknown, defaulting to 1000 [ 1188.009158][T23400] input: syz1 as /devices/virtual/input/input29 [ 1188.663592][T23412] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1188.667485][T23412] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1188.673396][T23412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2865'. [ 1188.783297][T23415] overlay: Unknown parameter '/' [ 1189.137269][T23415] netlink: zone id is out of range [ 1189.141196][T23415] netlink: zone id is out of range [ 1189.146900][T23415] netlink: zone id is out of range [ 1189.150207][T23415] netlink: zone id is out of range [ 1189.438136][T23396] lo speed is unknown, defaulting to 1000 [ 1189.819746][T23411] input: syz0 as /devices/virtual/input/input30 [ 1190.381356][T14655] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1190.794929][T14655] usb 10-1: Using ep0 maxpacket: 32 [ 1190.872598][T14655] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1190.944561][T14655] usb 10-1: config index 0 descriptor too short (expected 12827, got 27) [ 1190.951350][T14655] usb 10-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 1190.958629][T14655] usb 10-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 1190.969267][T14655] usb 10-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 1191.006842][T14655] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1191.009734][T14655] usb 10-1: Product: syz [ 1191.021418][T14655] usb 10-1: Manufacturer: syz [ 1191.023038][T14655] usb 10-1: SerialNumber: syz [ 1191.715435][T23458] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2868'. [ 1191.980152][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1192.026241][T14655] usb 10-1: USB disconnect, device number 45 [ 1192.816020][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1193.252715][T23473] lo speed is unknown, defaulting to 1000 [ 1193.262031][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1193.399371][T23480] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1193.402732][T23480] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1193.405951][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1193.423320][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1193.437218][ T24] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1193.500656][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.558654][ T24] usb 6-1: config 0 descriptor?? [ 1193.659818][ T24] as10x_usb: device has been detected [ 1193.687047][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1193.736298][ T24] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1193.774177][ T24] as10x_usb: error during firmware upload part1 [ 1193.783618][ T24] Registered device nBox DVB-T Dongle [ 1193.819002][ T5806] usb 6-1: USB disconnect, device number 15 [ 1193.866606][ T5806] Unregistered device nBox DVB-T Dongle [ 1193.894307][ T5806] as10x_usb: device has been disconnected [ 1194.964813][T23485] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 1194.967483][T23485] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2877'. [ 1195.402176][T23494] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2878'. [ 1195.596389][T23473] lo speed is unknown, defaulting to 1000 [ 1196.762879][T23506] netlink: zone id is out of range [ 1196.764677][T23506] netlink: zone id is out of range [ 1196.766647][T23506] netlink: zone id is out of range [ 1196.770364][T23506] netlink: zone id is out of range [ 1196.773523][T23506] netlink: zone id is out of range [ 1196.775474][T23506] netlink: zone id is out of range [ 1196.777123][T23506] netlink: zone id is out of range [ 1196.778927][T23506] netlink: zone id is out of range [ 1196.780613][T23506] netlink: zone id is out of range [ 1196.782997][T23506] netlink: zone id is out of range [ 1197.150308][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1197.351863][T23511] lo speed is unknown, defaulting to 1000 [ 1197.537336][T23511] lo speed is unknown, defaulting to 1000 [ 1197.691189][T23518] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1197.704754][T23518] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1197.731133][T23518] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2884'. [ 1198.111569][T14655] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1198.271354][T14655] usb 10-1: Using ep0 maxpacket: 32 [ 1198.274350][T14655] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1198.281806][T14655] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.291775][T14655] usb 10-1: config 0 descriptor?? [ 1198.305135][T14655] as10x_usb: device has been detected [ 1198.308081][T14655] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1198.408185][T14655] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1198.556880][T14655] as10x_usb: error during firmware upload part1 [ 1198.572816][T14655] Registered device nBox DVB-T Dongle [ 1198.632085][T14655] usb 10-1: USB disconnect, device number 46 [ 1198.701090][T14655] Unregistered device nBox DVB-T Dongle [ 1198.720634][T14655] as10x_usb: device has been disconnected [ 1198.976554][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1199.673175][T20800] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 1199.837294][T20800] usb 11-1: Using ep0 maxpacket: 32 [ 1199.844643][T20800] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1199.854195][T20800] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.860250][T20800] usb 11-1: config 0 descriptor?? [ 1199.870044][T20800] as10x_usb: device has been detected [ 1199.872050][T20800] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1199.883091][T20800] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1199.892991][T20800] as10x_usb: error during firmware upload part1 [ 1199.896145][T20800] Registered device nBox DVB-T Dongle [ 1200.069105][T21239] usb 11-1: USB disconnect, device number 34 [ 1200.082811][T21239] Unregistered device nBox DVB-T Dongle [ 1200.088879][T21239] as10x_usb: device has been disconnected [ 1200.092944][ T5806] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1200.241362][ T5806] usb 6-1: Using ep0 maxpacket: 32 [ 1200.244015][ T5806] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1200.248681][ T5806] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.255374][ T5806] usb 6-1: config 0 has no interface number 0 [ 1200.261136][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.264172][ T5806] usb 6-1: Product: syz [ 1200.268056][ T5806] usb 6-1: Manufacturer: syz [ 1200.271603][ T5806] usb 6-1: SerialNumber: syz [ 1200.282196][ T5806] usb 6-1: config 0 descriptor?? [ 1200.538649][ T5806] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1200.924888][ T5806] usb 6-1: selecting invalid altsetting 1 [ 1200.926800][ T5806] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1200.940020][ T5806] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1200.945588][ T5806] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1200.948175][ T5806] usb 6-1: media controller created [ 1200.954797][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.000075][T23560] kvm: apic: phys broadcast and lowest prio [ 1201.214716][ T5806] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1201.218637][ T5806] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1201.221579][ T5806] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1201.249867][ T5806] usb 6-1: USB disconnect, device number 16 [ 1201.472304][ T24] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1201.587731][ T42] audit: type=1326 audit(1786445752.577:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.600399][ T42] audit: type=1326 audit(1786445752.577:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.611390][ T42] audit: type=1326 audit(1786445752.577:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.618480][ T42] audit: type=1326 audit(1786445752.577:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.627336][ T42] audit: type=1326 audit(1786445752.577:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.634650][ T42] audit: type=1326 audit(1786445752.577:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.642635][ T42] audit: type=1326 audit(1786445752.577:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.643918][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1201.651367][ T42] audit: type=1326 audit(1786445752.577:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.659646][ T42] audit: type=1326 audit(1786445752.577:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.669413][ T24] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1201.674294][ T42] audit: type=1326 audit(1786445752.577:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.3.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 1201.683045][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.726171][ T24] usb 10-1: config 0 descriptor?? [ 1201.803240][ T24] as10x_usb: device has been detected [ 1201.842205][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1201.881355][ T5806] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 1202.003066][ T24] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1202.032375][ T5806] usb 11-1: Using ep0 maxpacket: 32 [ 1202.041023][ T5806] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1202.045993][ T24] as10x_usb: error during firmware upload part1 [ 1202.056874][ T24] Registered device nBox DVB-T Dongle [ 1202.058565][ T5806] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.084304][ T5806] usb 11-1: config 0 descriptor?? [ 1202.119712][ T5806] as10x_usb: device has been detected [ 1202.123211][ T5806] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1202.131849][ T5806] usb 11-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1202.147206][ T5806] as10x_usb: error during firmware upload part1 [ 1202.152254][ T5806] Registered device nBox DVB-T Dongle [ 1202.204625][T20800] usb 10-1: USB disconnect, device number 47 [ 1202.303753][T23572] as102_open: can't find device for minor 0 [ 1202.316107][ T24] usb 11-1: USB disconnect, device number 35 [ 1202.341509][T21239] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1202.348868][T20800] Unregistered device nBox DVB-T Dongle [ 1202.454334][T20800] as10x_usb: device has been disconnected [ 1202.511421][T21239] usb 6-1: Using ep0 maxpacket: 32 [ 1202.513573][T21239] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1202.517422][T21239] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1202.520016][T21239] usb 6-1: config 0 has no interface number 0 [ 1202.524067][T21239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.524061][ T24] Unregistered device nBox DVB-T Dongle [ 1202.526746][T21239] usb 6-1: Product: syz [ 1202.530119][T21239] usb 6-1: Manufacturer: syz [ 1202.531937][T21239] usb 6-1: SerialNumber: syz [ 1202.549318][T21239] usb 6-1: config 0 descriptor?? [ 1202.561578][ T24] as10x_usb: device has been disconnected [ 1202.562860][T21239] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1202.567020][T21239] usb 6-1: selecting invalid altsetting 1 [ 1202.569341][T21239] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1202.578873][T21239] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1202.585927][T21239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1202.606218][T21239] usb 6-1: media controller created [ 1203.209953][T21239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1204.324945][T23600] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1204.354490][T23600] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1204.361626][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2897'. [ 1204.668209][T23602] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2896'. [ 1205.393227][T21239] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1205.395483][T21239] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1205.398528][T21239] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1205.420602][T21239] usb 6-1: USB disconnect, device number 17 [ 1205.515815][ T5806] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 1205.624479][T23608] file system registered [ 1205.626268][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1205.691350][ T5806] usb 11-1: Using ep0 maxpacket: 32 [ 1205.693972][ T5806] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1205.697626][ T5806] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1205.700278][ T5806] usb 11-1: config 0 has no interface number 0 [ 1205.704344][ T5806] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.706906][ T5806] usb 11-1: Product: syz [ 1205.708251][ T5806] usb 11-1: Manufacturer: syz [ 1205.709770][ T5806] usb 11-1: SerialNumber: syz [ 1205.712827][ T5806] usb 11-1: config 0 descriptor?? [ 1205.717022][ T5806] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1205.719940][ T5806] usb 11-1: selecting invalid altsetting 1 [ 1205.722373][ T5806] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1205.726384][ T5806] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1205.729785][ T5806] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1205.732576][ T5806] usb 11-1: media controller created [ 1205.739056][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1206.666873][T23617] kvm: apic: phys broadcast and lowest prio [ 1206.791648][ T5806] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1206.798617][ T5806] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1206.941541][T20799] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1207.005340][ T5806] usb 11-1: USB disconnect, device number 36 [ 1207.091962][T20799] usb 8-1: Using ep0 maxpacket: 32 [ 1207.095232][T20799] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1207.100510][T20799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.107592][T20799] usb 8-1: config 0 descriptor?? [ 1207.125442][T20799] as10x_usb: device has been detected [ 1207.128525][T20799] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1207.136538][T20799] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1207.145098][T20799] as10x_usb: error during firmware upload part1 [ 1207.148268][T20799] Registered device nBox DVB-T Dongle [ 1207.181411][T14655] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1207.293308][ T5837] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1207.327237][ T24] usb 8-1: USB disconnect, device number 26 [ 1207.361381][T14655] usb 10-1: Using ep0 maxpacket: 32 [ 1207.363699][T14655] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1207.367466][T14655] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1207.369979][T14655] usb 10-1: config 0 has no interface number 0 [ 1207.373867][T14655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.376413][T14655] usb 10-1: Product: syz [ 1207.377755][T14655] usb 10-1: Manufacturer: syz [ 1207.379265][T14655] usb 10-1: SerialNumber: syz [ 1207.385058][T14655] usb 10-1: config 0 descriptor?? [ 1207.389177][T14655] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1207.392239][T14655] usb 10-1: selecting invalid altsetting 1 [ 1207.394490][T14655] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1207.395560][ T24] Unregistered device nBox DVB-T Dongle [ 1207.398489][T14655] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1207.403662][T14655] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1207.406463][T14655] usb 10-1: media controller created [ 1207.410279][ T24] as10x_usb: device has been disconnected [ 1207.413329][T14655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1207.441428][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 1207.444663][ T5837] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1207.449681][ T5837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1207.453449][ T5837] usb 6-1: config 0 has no interface number 0 [ 1207.458502][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.462144][ T5837] usb 6-1: Product: syz [ 1207.463991][ T5837] usb 6-1: Manufacturer: syz [ 1207.466047][ T5837] usb 6-1: SerialNumber: syz [ 1207.470449][ T5837] usb 6-1: config 0 descriptor?? [ 1207.479428][ T5837] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1207.483409][ T5837] usb 6-1: selecting invalid altsetting 1 [ 1207.485930][ T5837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1207.491390][ T5837] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1207.496162][ T5837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1207.499751][ T5837] usb 6-1: media controller created [ 1207.511755][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1207.570974][T23635] qrtr: Invalid version 0 [ 1207.763234][T23635] syzkaller1: entered promiscuous mode [ 1207.787282][T23635] syzkaller1: entered allmulticast mode [ 1208.271366][T20800] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 1208.421359][T20800] usb 11-1: Using ep0 maxpacket: 32 [ 1208.424673][T20800] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1208.428454][T20800] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.433046][T20800] usb 11-1: config 0 descriptor?? [ 1208.440135][T20800] as10x_usb: device has been detected [ 1208.444092][T20800] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1208.461799][T14655] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1208.464508][T14655] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1208.475404][T20800] usb 11-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1208.514727][T20800] as10x_usb: error during firmware upload part1 [ 1208.527447][T20800] Registered device nBox DVB-T Dongle [ 1208.677476][T23646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2907'. [ 1208.683335][ T5837] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1208.685886][ T5837] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1208.705440][ T24] usb 11-1: USB disconnect, device number 37 [ 1208.820338][ T5837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1208.824658][T14655] usb 10-1: USB disconnect, device number 48 [ 1208.909853][ T24] Unregistered device nBox DVB-T Dongle [ 1208.926757][ T24] as10x_usb: device has been disconnected [ 1209.186118][T23656] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1209.191596][ T5837] usb 6-1: USB disconnect, device number 18 [ 1209.295445][T23657] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1209.298433][T23657] 0ªî{X¹¦: renamed from gretap0 [ 1209.317796][T23657] 0ªî{X¹¦: entered allmulticast mode [ 1209.320783][T23657] net_ratelimit: 9 callbacks suppressed [ 1209.320796][T23657] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1209.561757][T20799] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1209.617134][T23666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2910'. [ 1209.731643][T20799] usb 10-1: Using ep0 maxpacket: 32 [ 1209.747223][T20799] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1209.839144][T20799] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1209.852016][T20799] usb 10-1: config 0 has no interface number 0 [ 1209.871497][T20799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.884532][T20799] usb 10-1: Product: syz [ 1209.892742][T20799] usb 10-1: Manufacturer: syz [ 1209.898865][T20799] usb 10-1: SerialNumber: syz [ 1209.940817][T20799] usb 10-1: config 0 descriptor?? [ 1209.991316][T20799] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1210.006711][T20799] usb 10-1: selecting invalid altsetting 1 [ 1210.010212][T20799] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1210.060805][T20799] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1210.068125][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1210.071205][T20799] usb 10-1: media controller created [ 1210.156616][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1210.994542][T23675] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1211.002582][T23675] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1211.008546][T23675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1211.152076][T23678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1211.154221][T23678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1211.164296][T23678] vhci_hcd vhci_hcd.0: Device attached [ 1211.262476][T20799] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1211.269022][T20799] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1211.374126][T20799] usb 10-1: USB disconnect, device number 49 [ 1211.496767][T14655] usb 44-1: SetAddress Request (23) to port 0 [ 1211.502611][T14655] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1211.534266][ T5806] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 1211.604461][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1211.677818][T23680] vhci_hcd: connection reset by peer [ 1211.680187][T12228] vhci_hcd vhci_hcd.3: stop threads [ 1211.682738][ T5806] usb 11-1: Using ep0 maxpacket: 32 [ 1211.685019][T12228] vhci_hcd vhci_hcd.3: release socket [ 1211.687356][T12228] vhci_hcd vhci_hcd.3: disconnect device [ 1211.689969][ T5806] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1211.695280][ T5806] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1211.698475][ T5806] usb 11-1: config 0 has no interface number 0 [ 1211.703453][ T5806] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.706726][ T5806] usb 11-1: Product: syz [ 1211.708494][ T5806] usb 11-1: Manufacturer: syz [ 1211.710392][ T5806] usb 11-1: SerialNumber: syz [ 1211.717458][ T5806] usb 11-1: config 0 descriptor?? [ 1211.722726][ T5806] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1211.726753][ T5806] usb 11-1: selecting invalid altsetting 1 [ 1211.729203][ T5806] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1211.738816][ T5806] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1211.747966][ T5806] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1211.755437][ T5806] usb 11-1: media controller created [ 1211.766227][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1211.766251][T23690] lo speed is unknown, defaulting to 1000 [ 1211.860233][T23690] lo speed is unknown, defaulting to 1000 [ 1212.017726][T23692] kvm: apic: phys broadcast and lowest prio [ 1212.146172][T23695] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1212.161424][T23695] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1212.551015][T23704] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1212.559482][T23704] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1212.570092][T23704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1212.761157][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1212.861715][ T5806] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1212.864278][ T5806] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1213.058497][T23706] lo speed is unknown, defaulting to 1000 [ 1213.179333][T23706] lo speed is unknown, defaulting to 1000 [ 1213.391721][T20799] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1213.402877][ T24] usb 11-1: USB disconnect, device number 38 [ 1213.561312][T20799] usb 6-1: Using ep0 maxpacket: 16 [ 1213.573884][T20799] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1213.577881][T20799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.581540][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1213.585145][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1213.594521][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1213.597667][T20799] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1213.602123][T20799] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.609379][T20799] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1213.612818][T20799] usb 6-1: Manufacturer: syz [ 1213.652821][T20799] usb 6-1: config 0 descriptor?? [ 1213.887378][T23717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1213.919368][T23713] lo speed is unknown, defaulting to 1000 [ 1214.084107][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1214.100164][T23697] bond99: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1214.401747][T20799] rc_core: IR keymap rc-hauppauge not found [ 1214.403995][T20799] Registered IR keymap rc-empty [ 1214.407392][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1214.431609][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1214.453156][T20799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 1214.465794][T20799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 1214.480602][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1214.512628][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1214.522427][ T24] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 1214.558921][T23727] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1214.562180][T23727] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1214.566418][T23727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1214.594616][T23697] bond99 (unregistering): Released all slaves [ 1214.701645][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 1214.717077][ T24] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1214.732743][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.755813][ T24] usb 11-1: config 0 descriptor?? [ 1214.796051][ T24] as10x_usb: device has been detected [ 1214.808044][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1214.853786][ T24] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1214.883803][ T24] as10x_usb: error during firmware upload part1 [ 1214.890524][ T24] Registered device nBox DVB-T Dongle [ 1214.972165][ T5806] usb 11-1: USB disconnect, device number 39 [ 1214.986234][ T5806] Unregistered device nBox DVB-T Dongle [ 1214.993197][ T5806] as10x_usb: device has been disconnected [ 1215.349854][T23713] lo speed is unknown, defaulting to 1000 [ 1215.370304][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.391733][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.430643][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.452260][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.471697][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.492536][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.532549][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.552294][T20799] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1215.723997][T20799] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1215.727136][T20799] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.755865][T20799] usb 6-1: USB disconnect, device number 19 [ 1215.922371][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'. [ 1215.938522][T23736] siw: device registration error -23 [ 1216.631507][T14655] usb 44-1: device descriptor read/8, error -110 [ 1216.689999][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1216.801548][T20799] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1216.848904][T23750] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1216.852798][T23750] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1216.857291][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2926'. [ 1216.962860][T20799] usb 6-1: Using ep0 maxpacket: 32 [ 1216.967442][T20799] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1216.976016][T20799] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1216.978851][T20799] usb 6-1: config 0 has no interface number 0 [ 1216.987621][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.992223][T20799] usb 6-1: Product: syz [ 1216.993715][T20799] usb 6-1: Manufacturer: syz [ 1216.995453][T20799] usb 6-1: SerialNumber: syz [ 1217.014326][T20799] usb 6-1: config 0 descriptor?? [ 1217.022368][T14655] usb usb44-port1: attempt power cycle [ 1217.048181][T23751] lo speed is unknown, defaulting to 1000 [ 1217.064031][T20799] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1217.078067][T20799] usb 6-1: selecting invalid altsetting 1 [ 1217.085090][T20799] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1217.113784][T20799] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1217.126087][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1217.130284][T20799] usb 6-1: media controller created [ 1217.210195][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1217.688529][T20799] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1217.690736][T20799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1217.695101][T20799] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1217.696378][T23751] lo speed is unknown, defaulting to 1000 [ 1217.716807][T20799] usb 6-1: USB disconnect, device number 20 [ 1217.902251][T14655] usb usb44-port1: unable to enumerate USB device [ 1218.061364][ T9] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1218.211343][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1218.214504][ T9] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1218.219241][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.222564][ T9] usb 10-1: config 0 has no interface number 0 [ 1218.227322][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.230671][ T9] usb 10-1: Product: syz [ 1218.232475][ T9] usb 10-1: Manufacturer: syz [ 1218.234461][ T9] usb 10-1: SerialNumber: syz [ 1218.253004][ T9] usb 10-1: config 0 descriptor?? [ 1218.277212][ T9] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1218.281136][ T9] usb 10-1: selecting invalid altsetting 1 [ 1218.283792][ T9] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1218.289457][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1218.296347][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1218.299802][ T9] usb 10-1: media controller created [ 1218.311135][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.539601][T23770] kvm: apic: phys broadcast and lowest prio [ 1218.543788][T23769] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2930'. [ 1218.722164][T20799] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1219.161377][T20799] usb 6-1: Using ep0 maxpacket: 32 [ 1219.165115][T20799] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1219.169650][T20799] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1219.173675][T20799] usb 6-1: config 0 has no interface number 0 [ 1219.183180][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.186627][T20799] usb 6-1: Product: syz [ 1219.188189][T20799] usb 6-1: Manufacturer: syz [ 1219.192263][T20799] usb 6-1: SerialNumber: syz [ 1219.200330][T20799] usb 6-1: config 0 descriptor?? [ 1219.218180][T20799] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1219.225338][T20799] usb 6-1: selecting invalid altsetting 1 [ 1219.229885][T20799] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1219.241658][T20799] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1219.247994][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1219.256024][T20799] usb 6-1: media controller created [ 1219.273181][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1219.316278][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 1219.431951][ T9] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1219.434220][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1219.523367][T20799] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1219.530443][T20799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1219.535545][T20799] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1219.547963][ T9] usb 10-1: USB disconnect, device number 50 [ 1219.578706][T20799] usb 6-1: USB disconnect, device number 21 [ 1219.645846][T23782] lo speed is unknown, defaulting to 1000 [ 1219.925879][T23782] lo speed is unknown, defaulting to 1000 [ 1220.391421][T14655] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1220.520813][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 1220.542001][T14655] usb 6-1: Using ep0 maxpacket: 32 [ 1220.545685][T14655] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1220.551782][T14655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.558197][T14655] usb 6-1: config 0 descriptor?? [ 1220.577606][T14655] as10x_usb: device has been detected [ 1220.584045][T14655] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1220.597840][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 1220.613348][T14655] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1220.630817][T14655] as10x_usb: error during firmware upload part1 [ 1220.637841][T14655] Registered device nBox DVB-T Dongle [ 1220.736916][T23796] lo speed is unknown, defaulting to 1000 [ 1220.768783][T14655] usb 6-1: USB disconnect, device number 22 [ 1220.785024][T14655] Unregistered device nBox DVB-T Dongle [ 1220.787730][T14655] as10x_usb: device has been disconnected [ 1220.963885][T21239] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1221.085974][T23801] lo speed is unknown, defaulting to 1000 [ 1221.123268][T21239] usb 8-1: Using ep0 maxpacket: 8 [ 1221.131803][T21239] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1221.151865][T21239] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.156927][T21239] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.164229][T21239] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1221.168782][T21239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.178379][T21239] usb 8-1: config 0 descriptor?? [ 1221.220688][T23796] lo speed is unknown, defaulting to 1000 [ 1221.227420][T23801] lo speed is unknown, defaulting to 1000 [ 1221.600224][T21239] hid_parser_main: 12 callbacks suppressed [ 1221.600239][T21239] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 1221.604339][T21239] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 1221.606512][T21239] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 1221.609036][T21239] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 1221.611334][T21239] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 1221.613910][T21239] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1221.921175][ T850] usb 8-1: USB disconnect, device number 27 [ 1222.070275][T23809] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2938'. [ 1222.211971][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1222.381774][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1222.386625][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1222.395246][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.398355][ T24] usb 6-1: config 0 has no interface number 0 [ 1222.410743][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.413890][ T24] usb 6-1: Product: syz [ 1222.418801][ T24] usb 6-1: Manufacturer: syz [ 1222.420705][ T24] usb 6-1: SerialNumber: syz [ 1222.929312][ T24] usb 6-1: config 0 descriptor?? [ 1222.946328][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1222.981742][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1222.985480][ T24] usb 6-1: selecting invalid altsetting 1 [ 1222.987673][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1223.025577][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1223.029045][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1223.031748][ T24] usb 6-1: media controller created [ 1223.038311][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1223.089273][T23813] lo speed is unknown, defaulting to 1000 [ 1223.131348][ T34] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 1223.198415][T23805] kvm: apic: phys broadcast and lowest prio [ 1223.265033][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1223.274075][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1223.283053][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1223.291365][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 1223.294475][ T34] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1223.299727][ T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1223.303250][ T34] usb 11-1: config 0 has no interface number 0 [ 1223.308156][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.311676][ T34] usb 11-1: Product: syz [ 1223.313470][ T34] usb 11-1: Manufacturer: syz [ 1223.315396][ T34] usb 11-1: SerialNumber: syz [ 1223.325652][ T34] usb 11-1: config 0 descriptor?? [ 1223.340978][ T34] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1223.346503][ T34] usb 11-1: selecting invalid altsetting 1 [ 1223.349120][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1223.358576][ T34] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1223.363135][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1223.366721][ T34] usb 11-1: media controller created [ 1223.390407][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1223.549673][T23815] kvm: apic: phys broadcast and lowest prio [ 1223.596362][ T24] usb 6-1: USB disconnect, device number 23 [ 1223.656473][ T34] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1223.659741][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1223.682744][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1223.691213][T23813] lo speed is unknown, defaulting to 1000 [ 1223.755907][ T34] usb 11-1: USB disconnect, device number 40 [ 1223.897596][T23826] pim6reg: entered allmulticast mode [ 1224.034502][T23820] pim6reg: left allmulticast mode [ 1224.161474][T20799] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1224.183550][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'. [ 1224.311219][T23835] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1224.315221][T23835] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1224.319506][T20799] usb 6-1: Using ep0 maxpacket: 32 [ 1224.323489][T23835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2945'. [ 1224.331005][T20799] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1224.340707][T20799] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1224.345775][T20799] usb 6-1: config 0 has no interface number 0 [ 1224.355504][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.360113][T20799] usb 6-1: Product: syz [ 1224.362003][T20799] usb 6-1: Manufacturer: syz [ 1224.365554][T20799] usb 6-1: SerialNumber: syz [ 1224.377157][T20799] usb 6-1: config 0 descriptor?? [ 1224.389361][T20799] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1224.392944][T20799] usb 6-1: selecting invalid altsetting 1 [ 1224.394865][T20799] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1224.405189][T20799] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1224.409682][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1224.412509][T20799] usb 6-1: media controller created [ 1224.547410][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.277899][T23850] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1225.282946][T23848] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1225.382105][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2946'. [ 1225.395589][T23853] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1225.400059][T23853] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1225.404734][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2955'. [ 1225.666083][T20799] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1225.686020][T20799] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1226.118424][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1226.196862][T20799] usb 6-1: USB disconnect, device number 24 [ 1226.254033][T23861] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1226.352659][T23861] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1226.467490][T23859] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1228.300562][T23887] __nla_validate_parse: 1 callbacks suppressed [ 1228.300578][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1228.329196][T23879] lo speed is unknown, defaulting to 1000 [ 1228.765340][T23887] lo speed is unknown, defaulting to 1000 [ 1228.767672][T23879] lo speed is unknown, defaulting to 1000 [ 1228.955994][T23887] lo speed is unknown, defaulting to 1000 [ 1228.970259][ T34] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 1229.691355][ T6836] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1229.751336][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 1229.769919][ T34] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1229.774979][ T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1229.778205][ T34] usb 11-1: config 0 has no interface number 0 [ 1229.783204][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.786487][ T34] usb 11-1: Product: syz [ 1229.788187][ T34] usb 11-1: Manufacturer: syz [ 1229.790101][ T34] usb 11-1: SerialNumber: syz [ 1229.794389][ T34] usb 11-1: config 0 descriptor?? [ 1229.806759][ T34] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1229.810455][ T34] usb 11-1: selecting invalid altsetting 1 [ 1229.814691][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1229.843348][ T6836] usb 6-1: Using ep0 maxpacket: 32 [ 1229.845622][ T34] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1229.846031][ T6836] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1229.855267][ T6836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.860436][ T6836] usb 6-1: config 0 descriptor?? [ 1229.868029][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1229.871912][ T6836] as10x_usb: device has been detected [ 1229.882464][ T34] usb 11-1: media controller created [ 1229.884135][ T6836] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1229.886732][T23904] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1229.891387][T23904] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1229.896620][T23904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1229.898937][ T6836] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1229.911004][ T6836] as10x_usb: error during firmware upload part1 [ 1229.915711][ T6836] Registered device nBox DVB-T Dongle [ 1229.960051][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1230.008295][ T42] kauditd_printk_skb: 546 callbacks suppressed [ 1230.008308][ T42] audit: type=1326 audit(1786445780.997:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.018275][ T42] audit: type=1326 audit(1786445781.007:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.026803][ T42] audit: type=1326 audit(1786445781.007:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.035116][ T42] audit: type=1326 audit(1786445781.007:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.042930][ T42] audit: type=1326 audit(1786445781.017:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.049950][ T42] audit: type=1326 audit(1786445781.017:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.056698][ T42] audit: type=1326 audit(1786445781.017:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.078731][T21239] usb 6-1: USB disconnect, device number 25 [ 1230.086787][ T42] audit: type=1326 audit(1786445781.017:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.102714][ T42] audit: type=1326 audit(1786445781.017:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.125934][ T42] audit: type=1326 audit(1786445781.027:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.5.2958" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 1230.139165][T21239] Unregistered device nBox DVB-T Dongle [ 1230.143702][T21239] as10x_usb: device has been disconnected [ 1230.188033][T23909] kvm: apic: phys broadcast and lowest prio [ 1230.857723][ T34] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1230.863962][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1230.871660][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1230.909791][ T34] usb 11-1: USB disconnect, device number 41 [ 1231.162855][ T5815] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1231.246290][T23922] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1231.249308][T23922] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1231.252671][T23922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2960'. [ 1231.491655][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 1231.496213][ T5815] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1231.501704][T23925] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2961'. [ 1231.504665][ T5815] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1231.508698][ T5815] usb 8-1: config 0 has no interface number 0 [ 1231.537305][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.540282][ T5815] usb 8-1: Product: syz [ 1231.555297][ T5815] usb 8-1: Manufacturer: syz [ 1231.567481][ T5815] usb 8-1: SerialNumber: syz [ 1231.635969][ T5815] usb 8-1: config 0 descriptor?? [ 1231.897305][ T5815] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1231.900446][ T5815] usb 8-1: selecting invalid altsetting 1 [ 1231.903498][ T5815] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1231.933874][ T5815] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1231.942555][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1231.945637][ T5815] usb 8-1: media controller created [ 1231.990468][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.373763][ T5815] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1232.377600][ T5815] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1232.402206][ T5815] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1232.565498][ T5815] usb 8-1: USB disconnect, device number 28 [ 1232.598271][T23934] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2962'. [ 1232.644403][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1232.661343][ T34] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1232.811420][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 1232.814864][ T34] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1232.820021][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1232.824190][ T34] usb 6-1: config 0 has no interface number 0 [ 1232.829601][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.833440][ T34] usb 6-1: Product: syz [ 1232.835558][ T34] usb 6-1: Manufacturer: syz [ 1232.837536][ T34] usb 6-1: SerialNumber: syz [ 1232.842254][ T34] usb 6-1: config 0 descriptor?? [ 1232.852755][ T34] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1232.856585][ T34] usb 6-1: selecting invalid altsetting 1 [ 1232.859372][ T34] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1232.867729][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1232.873422][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1232.876824][ T34] usb 6-1: media controller created [ 1232.889427][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.898519][T23943] lo speed is unknown, defaulting to 1000 [ 1233.073610][T23943] lo speed is unknown, defaulting to 1000 [ 1233.075519][T23945] lo speed is unknown, defaulting to 1000 [ 1233.368073][T23945] lo speed is unknown, defaulting to 1000 [ 1233.801055][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1234.053613][ T34] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1234.057304][T23962] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1234.130440][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1234.223958][T23961] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1234.240980][T23961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1234.339280][ T34] usb 6-1: USB disconnect, device number 26 [ 1234.445021][T23959] lo speed is unknown, defaulting to 1000 [ 1234.655180][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'. [ 1234.896250][T23959] lo speed is unknown, defaulting to 1000 [ 1234.899246][T23974] lo speed is unknown, defaulting to 1000 [ 1234.982576][ T9] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 1235.100837][T23974] lo speed is unknown, defaulting to 1000 [ 1235.141765][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 1235.146524][ T9] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1235.152028][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.159927][ T9] usb 11-1: config 0 descriptor?? [ 1235.182767][ T9] as10x_usb: device has been detected [ 1235.184738][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1235.189723][ T9] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1235.191639][ T5815] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1235.194151][ T9] as10x_usb: error during firmware upload part1 [ 1235.197023][ T9] Registered device nBox DVB-T Dongle [ 1235.356104][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 1235.363609][ T5815] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1235.372750][ T5815] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1235.375407][ T5815] usb 6-1: config 0 has no interface number 0 [ 1235.381658][T20799] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1235.388678][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.391429][ T5815] usb 6-1: Product: syz [ 1235.393031][ T5815] usb 6-1: Manufacturer: syz [ 1235.394670][ T5815] usb 6-1: SerialNumber: syz [ 1235.407825][ T9] usb 11-1: USB disconnect, device number 42 [ 1235.449480][ T9] Unregistered device nBox DVB-T Dongle [ 1235.451069][ T5815] usb 6-1: config 0 descriptor?? [ 1235.452776][ T9] as10x_usb: device has been disconnected [ 1235.531419][T20799] usb 10-1: Using ep0 maxpacket: 32 [ 1235.533867][T20799] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1235.537845][T20799] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1235.540380][T20799] usb 10-1: config 0 has no interface number 0 [ 1235.544872][T20799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.547403][T20799] usb 10-1: Product: syz [ 1235.548708][T20799] usb 10-1: Manufacturer: syz [ 1235.550236][T20799] usb 10-1: SerialNumber: syz [ 1235.553646][T20799] usb 10-1: config 0 descriptor?? [ 1235.557726][T20799] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1235.561020][T20799] usb 10-1: selecting invalid altsetting 1 [ 1235.562864][T20799] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1235.567877][T20799] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1235.570546][ T5815] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1235.571050][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1235.576597][T20799] usb 10-1: media controller created [ 1235.577688][ T5815] usb 6-1: selecting invalid altsetting 1 [ 1235.586081][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1235.641429][ T5815] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1235.700145][ T5815] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1235.801452][T23979] kvm: apic: phys broadcast and lowest prio [ 1235.890004][T23984] kvm: apic: phys broadcast and lowest prio [ 1235.929560][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1235.933170][ T5815] usb 6-1: media controller created [ 1235.976344][T20799] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1235.977540][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1235.979189][T20799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1235.984278][T20799] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1236.073745][ T5815] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1236.073960][T20799] usb 10-1: USB disconnect, device number 51 [ 1236.086036][ T5815] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1236.089537][ T5815] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1236.246704][ T5815] usb 6-1: USB disconnect, device number 27 [ 1236.861129][T23999] lo speed is unknown, defaulting to 1000 [ 1236.862291][ T34] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 1237.013507][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 1237.030967][ T34] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1237.032678][T23999] lo speed is unknown, defaulting to 1000 [ 1237.035805][ T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1237.051327][ T34] usb 11-1: config 0 has no interface number 0 [ 1237.057747][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.060724][ T34] usb 11-1: Product: syz [ 1237.062252][ T34] usb 11-1: Manufacturer: syz [ 1237.063737][ T34] usb 11-1: SerialNumber: syz [ 1237.071535][ T34] usb 11-1: config 0 descriptor?? [ 1237.086550][ T34] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1237.090798][ T34] usb 11-1: selecting invalid altsetting 1 [ 1237.093204][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1237.097063][ T34] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1237.100492][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1237.103442][ T34] usb 11-1: media controller created [ 1237.109913][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1237.317256][T24007] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1237.320815][T24007] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1237.324424][T24007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1237.847731][T24011] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1237.866435][T24011] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1237.913131][T24011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1238.231485][ T34] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1238.313374][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.496299][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1238.559270][T24028] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2977'. [ 1238.745265][ T34] usb 11-1: USB disconnect, device number 43 [ 1239.188431][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1239.501377][ T6836] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1239.631437][ T6836] usb 6-1: device descriptor read/64, error -71 [ 1239.759991][T24034] lo speed is unknown, defaulting to 1000 [ 1239.881875][ T6836] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1239.921345][ T5815] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1239.941438][T14655] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 1240.011418][ T6836] usb 6-1: device descriptor read/64, error -71 [ 1240.092125][T14655] usb 11-1: Using ep0 maxpacket: 32 [ 1240.095355][T14655] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1240.100515][T14655] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.116560][T14655] usb 11-1: config 0 descriptor?? [ 1240.125276][ T6836] usb usb6-port1: attempt power cycle [ 1240.142042][T14655] as10x_usb: device has been detected [ 1240.149787][T14655] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1240.162279][T14655] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1240.173159][T14655] as10x_usb: error during firmware upload part1 [ 1240.181522][T14655] Registered device nBox DVB-T Dongle [ 1240.365273][T20799] usb 11-1: USB disconnect, device number 44 [ 1240.380563][T20799] Unregistered device nBox DVB-T Dongle [ 1240.382533][T20799] as10x_usb: device has been disconnected [ 1240.383264][ T5815] usb 10-1: Using ep0 maxpacket: 8 [ 1240.402565][ T5815] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1240.459781][ T5815] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1240.469620][T24034] lo speed is unknown, defaulting to 1000 [ 1240.481427][ T6836] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1240.485364][ T5815] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1240.502107][ T6836] usb 6-1: device descriptor read/8, error -71 [ 1240.509745][ T5815] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1240.514206][ T5815] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1240.519544][ T5815] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.526072][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.094291][ T6836] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1241.112406][ T6836] usb 6-1: device descriptor read/8, error -71 [ 1241.222419][ T6836] usb usb6-port1: unable to enumerate USB device [ 1241.409387][ T5815] usb 10-1: usb_control_msg returned -32 [ 1241.420795][ T5815] usbtmc 10-1:16.0: can't read capabilities [ 1241.442589][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1241.601390][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 1241.603724][ T34] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1241.607585][ T34] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1241.610160][ T34] usb 8-1: config 0 has no interface number 0 [ 1241.614836][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.617415][ T34] usb 8-1: Product: syz [ 1241.618778][ T34] usb 8-1: Manufacturer: syz [ 1241.620484][ T34] usb 8-1: SerialNumber: syz [ 1241.624335][ T34] usb 8-1: config 0 descriptor?? [ 1241.628715][ T34] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1241.631589][ T34] usb 8-1: selecting invalid altsetting 1 [ 1241.633426][ T34] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1241.637513][ T34] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1241.640940][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1241.643748][ T34] usb 8-1: media controller created [ 1241.650302][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.943434][T24053] kvm: apic: phys broadcast and lowest prio [ 1242.144064][T24058] usbtmc 10-1:16.0: usb_clear_halt returned -32 [ 1242.150544][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1242.180900][T24061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2984'. [ 1242.301002][T24064] lo speed is unknown, defaulting to 1000 [ 1242.485333][T24064] lo speed is unknown, defaulting to 1000 [ 1242.551346][ T6836] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1242.701603][ T6836] usb 6-1: Using ep0 maxpacket: 32 [ 1242.701774][ T34] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1242.707655][ T6836] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1242.707909][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1242.712432][ T6836] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.716535][ T6836] usb 6-1: config 0 has no interface number 0 [ 1242.720764][ T6836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.723716][ T6836] usb 6-1: Product: syz [ 1242.725119][ T6836] usb 6-1: Manufacturer: syz [ 1242.726665][ T6836] usb 6-1: SerialNumber: syz [ 1242.729699][ T6836] usb 6-1: config 0 descriptor?? [ 1242.733173][ T6836] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1242.736379][ T6836] usb 6-1: selecting invalid altsetting 1 [ 1242.738747][ T6836] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1242.744704][ T6836] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1242.749046][ T6836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1242.751841][ T6836] usb 6-1: media controller created [ 1242.758488][ T6836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1242.866363][ T34] usb 8-1: USB disconnect, device number 29 [ 1243.025318][ T6836] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1243.057105][T24068] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1243.060843][T24068] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1243.064935][T24068] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1243.569504][ T6836] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1243.579463][ T6836] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1243.612760][ T5878] usb 10-1: USB disconnect, device number 52 [ 1243.629194][ T6836] usb 6-1: USB disconnect, device number 32 [ 1243.804675][T24072] kvm: apic: phys broadcast and lowest prio [ 1244.100674][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 1244.121402][ T5878] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1244.220327][T24085] lo speed is unknown, defaulting to 1000 [ 1244.271356][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 1244.273875][ T5878] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1244.280168][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.288501][ T5878] usb 10-1: config 0 descriptor?? [ 1244.307063][ T5878] as10x_usb: device has been detected [ 1244.309111][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1244.322954][ T5878] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1244.331208][ T5878] as10x_usb: error during firmware upload part1 [ 1244.338368][ T5878] Registered device nBox DVB-T Dongle [ 1244.471589][T24085] lo speed is unknown, defaulting to 1000 [ 1244.502208][T21239] usb 10-1: USB disconnect, device number 53 [ 1244.525730][T21239] Unregistered device nBox DVB-T Dongle [ 1244.527261][T21239] as10x_usb: device has been disconnected [ 1244.831432][T20799] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1244.991487][T20799] usb 8-1: Using ep0 maxpacket: 32 [ 1244.995318][T20799] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1244.999124][T20799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.003679][T20799] usb 8-1: config 0 descriptor?? [ 1245.009938][T20799] as10x_usb: device has been detected [ 1245.014366][T20799] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1245.022177][T20799] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1245.033368][T20799] as10x_usb: error during firmware upload part1 [ 1245.035836][T20799] Registered device nBox DVB-T Dongle [ 1245.131383][T21239] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1245.208579][T20799] usb 8-1: USB disconnect, device number 30 [ 1245.221895][T20799] Unregistered device nBox DVB-T Dongle [ 1245.223180][T20799] as10x_usb: device has been disconnected [ 1245.281358][T21239] usb 6-1: Using ep0 maxpacket: 16 [ 1245.294173][T24092] lo: entered allmulticast mode [ 1245.307911][T24092] dvmrp8: entered allmulticast mode [ 1245.362449][T21239] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1245.366082][T21239] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1245.370691][T21239] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1245.374072][T21239] usb 6-1: can't read configurations, error -71 [ 1245.970936][T24103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1246.442639][T21239] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1246.521331][ T34] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1246.611340][T21239] usb 6-1: Using ep0 maxpacket: 32 [ 1246.617518][T21239] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1246.624200][T21239] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.628816][T21239] usb 6-1: config 0 has no interface number 0 [ 1246.665015][T21239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.669076][T21239] usb 6-1: Product: syz [ 1246.670474][T21239] usb 6-1: Manufacturer: syz [ 1246.675420][T21239] usb 6-1: SerialNumber: syz [ 1246.685814][T21239] usb 6-1: config 0 descriptor?? [ 1246.691315][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 1246.694472][T21239] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1246.700471][ T34] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1246.705594][T21239] usb 6-1: selecting invalid altsetting 1 [ 1246.709801][ T34] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.716489][T21239] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1246.719606][ T34] usb 10-1: config 0 has no interface number 0 [ 1246.726329][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.731187][ T34] usb 10-1: Product: syz [ 1246.733750][T21239] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1246.738497][ T34] usb 10-1: Manufacturer: syz [ 1246.740973][ T34] usb 10-1: SerialNumber: syz [ 1246.743530][T21239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1246.749778][ T34] usb 10-1: config 0 descriptor?? [ 1246.754456][T21239] usb 6-1: media controller created [ 1246.768529][ T34] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1246.772899][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1246.781902][ T34] usb 10-1: selecting invalid altsetting 1 [ 1246.790142][ T34] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1246.794352][T21239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.803927][ T34] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1246.813868][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1246.816490][ T34] usb 10-1: media controller created [ 1246.823146][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.988347][T24117] kvm: apic: phys broadcast and lowest prio [ 1247.045338][T24116] lo speed is unknown, defaulting to 1000 [ 1247.436538][T24116] lo speed is unknown, defaulting to 1000 [ 1247.751359][ T6836] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 1247.901597][T21239] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1247.902073][ T6836] usb 11-1: Using ep0 maxpacket: 32 [ 1247.905732][ T34] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1247.906708][ T6836] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1247.909044][T21239] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1247.912981][ T6836] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1247.915647][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1247.917654][ T6836] usb 11-1: config 0 has no interface number 0 [ 1247.925526][ T6836] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.929082][ T6836] usb 11-1: Product: syz [ 1247.930898][ T6836] usb 11-1: Manufacturer: syz [ 1247.932944][ T6836] usb 11-1: SerialNumber: syz [ 1247.938785][ T6836] usb 11-1: config 0 descriptor?? [ 1247.943916][ T6836] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1247.947708][ T6836] usb 11-1: selecting invalid altsetting 1 [ 1247.950202][ T6836] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1247.960187][ T6836] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1247.967060][ T6836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1247.973293][ T6836] usb 11-1: media controller created [ 1247.986048][ T6836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1248.063236][ T5878] usb 10-1: USB disconnect, device number 54 [ 1248.064752][T21239] usb 6-1: USB disconnect, device number 34 [ 1248.162992][T24121] kvm: apic: phys broadcast and lowest prio [ 1248.257381][ T6836] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1248.259683][ T6836] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1248.262651][ T6836] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1248.304616][T24129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1248.318844][ T6836] usb 11-1: USB disconnect, device number 45 [ 1248.450006][T24129] lo speed is unknown, defaulting to 1000 [ 1248.592727][T24129] lo speed is unknown, defaulting to 1000 [ 1248.758711][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 1248.929923][T24136] lo speed is unknown, defaulting to 1000 [ 1249.091363][T21239] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 1249.267054][T24136] lo speed is unknown, defaulting to 1000 [ 1249.273277][T21239] usb 11-1: Using ep0 maxpacket: 32 [ 1249.275661][T21239] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1249.556677][T24146] usb 1-1: USB disconnect, device number 3 [ 1249.794954][T21239] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.551388][ T6836] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1250.650932][T21239] usb 11-1: config 0 descriptor?? [ 1250.666310][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1250.711348][ T6836] usb 6-1: Using ep0 maxpacket: 32 [ 1250.720816][ T6836] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1250.728388][ T6836] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1250.733521][ T6836] usb 6-1: config 0 has no interface number 0 [ 1250.745077][T21239] as10x_usb: device has been detected [ 1250.745330][ T6836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.748900][T21239] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1250.758200][ T6836] usb 6-1: Product: syz [ 1250.760161][ T6836] usb 6-1: Manufacturer: syz [ 1250.769914][ T6836] usb 6-1: SerialNumber: syz [ 1250.781865][ T6836] usb 6-1: config 0 descriptor?? [ 1250.785552][T21239] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1250.799701][ T6836] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1250.805965][T21239] as10x_usb: error during firmware upload part1 [ 1250.810136][ T6836] usb 6-1: selecting invalid altsetting 1 [ 1250.812406][T21239] Registered device nBox DVB-T Dongle [ 1250.821321][ T6836] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1250.836126][ T6836] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1250.850961][ T6836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1250.854757][ T6836] usb 6-1: media controller created [ 1250.875818][ T6836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1250.942741][T21239] usb 11-1: USB disconnect, device number 46 [ 1250.975075][T21239] Unregistered device nBox DVB-T Dongle [ 1250.979560][T21239] as10x_usb: device has been disconnected [ 1251.982512][ T6836] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1252.000360][ T6836] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1252.227242][T24159] kvm: apic: phys broadcast and lowest prio [ 1253.171350][T21239] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 1253.343894][T21239] usb 11-1: Using ep0 maxpacket: 32 [ 1253.352392][T21239] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1253.373160][ T6836] usb 6-1: USB disconnect, device number 35 [ 1253.380306][T21239] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.391094][T21239] usb 11-1: config 0 has no interface number 0 [ 1253.411831][T21239] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.429111][T21239] usb 11-1: Product: syz [ 1253.434270][T21239] usb 11-1: Manufacturer: syz [ 1253.439763][T21239] usb 11-1: SerialNumber: syz [ 1253.452435][T21239] usb 11-1: config 0 descriptor?? [ 1253.462942][T21239] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1253.468586][T21239] usb 11-1: selecting invalid altsetting 1 [ 1253.470868][T21239] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1253.477276][T21239] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1253.483671][T21239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1253.492063][T21239] usb 11-1: media controller created [ 1253.513592][T24156] lo speed is unknown, defaulting to 1000 [ 1253.516880][T21239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1253.642077][T24156] lo speed is unknown, defaulting to 1000 [ 1253.712083][T20799] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1253.786172][T24168] kvm: apic: phys broadcast and lowest prio [ 1253.881558][T20799] usb 10-1: Using ep0 maxpacket: 32 [ 1253.891439][T20799] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1253.896325][T20799] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.901503][T20799] usb 10-1: config 0 has no interface number 0 [ 1253.917588][T20799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.931350][T20799] usb 10-1: Product: syz [ 1253.933213][T20799] usb 10-1: Manufacturer: syz [ 1253.935257][T20799] usb 10-1: SerialNumber: syz [ 1253.943049][T20799] usb 10-1: config 0 descriptor?? [ 1253.967028][ T5815] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1253.983114][T20799] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1253.991388][T20799] usb 10-1: selecting invalid altsetting 1 [ 1253.996038][T20799] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1254.013608][T20799] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1254.018056][T20799] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1254.021660][T20799] usb 10-1: media controller created [ 1254.032445][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.171601][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 1254.175409][ T5815] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1254.180978][ T5815] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.184452][ T5815] usb 6-1: config 0 has no interface number 0 [ 1254.194871][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.206830][ T5815] usb 6-1: Product: syz [ 1254.208864][ T5815] usb 6-1: Manufacturer: syz [ 1254.212723][ T5815] usb 6-1: SerialNumber: syz [ 1254.256505][T24178] kvm: apic: phys broadcast and lowest prio [ 1254.335020][ T5815] usb 6-1: config 0 descriptor?? [ 1254.453879][ T5815] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1254.457614][ T5815] usb 6-1: selecting invalid altsetting 1 [ 1254.460367][ T5815] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1254.509950][ T5815] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1254.517318][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1254.524008][ T5815] usb 6-1: media controller created [ 1254.621693][T21239] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1254.624751][T21239] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1254.717356][T20799] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1254.718115][T21239] usb 11-1: USB disconnect, device number 47 [ 1254.720422][T20799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1254.725975][T20799] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1254.751592][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1254.901436][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1254.903788][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1254.907696][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.910300][ T9] usb 8-1: config 0 has no interface number 0 [ 1254.914219][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.916783][ T9] usb 8-1: Product: syz [ 1254.918249][ T9] usb 8-1: Manufacturer: syz [ 1254.919814][ T9] usb 8-1: SerialNumber: syz [ 1254.922651][ T9] usb 8-1: config 0 descriptor?? [ 1254.927910][ T9] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1254.931142][ T9] usb 8-1: selecting invalid altsetting 1 [ 1254.933100][ T9] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1254.937465][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1255.142871][T24180] kvm: apic: phys broadcast and lowest prio [ 1255.696227][T24186] ubi16: attaching mtd0 [ 1255.711023][T24186] ubi16: scanning is finished [ 1255.715041][T24186] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1255.717186][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1255.759370][T24190] netlink: 'syz.5.3014': attribute type 21 has an invalid length. [ 1255.762867][T24190] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1255.766711][T24190] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1255.837251][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1255.864081][ T9] usb 8-1: media controller created [ 1255.880685][T20799] usb 10-1: USB disconnect, device number 55 [ 1255.974231][ T5815] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1255.976853][ T5815] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1255.980782][ T5815] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1256.026231][T24196] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3015'. [ 1256.034746][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3013'. [ 1256.351043][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.479214][ T9] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1256.492206][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1256.507250][ T9] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1256.531921][T24186] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1256.827799][ T9] usb 8-1: USB disconnect, device number 31 [ 1257.142831][ T5815] usb 6-1: USB disconnect, device number 36 [ 1257.520565][T24204] lo speed is unknown, defaulting to 1000 [ 1257.777834][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1257.824194][T24204] lo speed is unknown, defaulting to 1000 [ 1257.921370][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1257.927006][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1257.939206][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1257.952812][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1257.957691][ T9] usb 8-1: Product: syz [ 1257.962553][ T9] usb 8-1: Manufacturer: syz [ 1257.965684][ T9] usb 8-1: SerialNumber: syz [ 1257.973880][ T9] usb 8-1: config 0 descriptor?? [ 1257.977216][T24202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1257.982664][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 1257.985282][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1258.271686][ T9] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1258.421389][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1258.636763][T24202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.675280][T24202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.695212][T24213] syz_tun: entered allmulticast mode [ 1258.717353][T24213] dvmrp8: entered allmulticast mode [ 1258.813770][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1258.816269][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1258.820765][ T9] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1258.823383][ T9] usb 10-1: can't read configurations, error -71 [ 1259.536825][ T108] raw-gadget.0 gadget.3: failed to queue suspend event [ 1259.617780][T24219] raw-gadget.0 gadget.3: failed to queue resume event [ 1259.632244][ T42] kauditd_printk_skb: 338 callbacks suppressed [ 1259.632263][ T42] audit: type=1326 audit(1786445810.627:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.657978][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 1259.661756][ T42] audit: type=1326 audit(1786445810.627:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.680776][ T42] audit: type=1326 audit(1786445810.637:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.691679][ T42] audit: type=1326 audit(1786445810.637:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.701536][ T42] audit: type=1326 audit(1786445810.637:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.715672][ T42] audit: type=1326 audit(1786445810.647:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.725358][ T42] audit: type=1326 audit(1786445810.667:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.735420][ T42] audit: type=1326 audit(1786445810.667:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.745387][ T42] audit: type=1326 audit(1786445810.677:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.758542][ T42] audit: type=1326 audit(1786445810.677:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 1259.798336][T22571] raw-gadget.0 gadget.3: failed to queue suspend event [ 1259.861824][T24219] raw-gadget.0 gadget.3: failed to queue resume event [ 1259.882825][T22571] raw-gadget.0 gadget.3: failed to queue suspend event [ 1259.951488][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1259.973002][ T108] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.041448][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.065885][ T108] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.131476][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.156044][ T108] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.161378][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1260.221579][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.242414][T22571] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.321548][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.324606][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1260.333357][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1260.343334][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.351136][ T9] usb 6-1: config 0 has no interface number 0 [ 1260.357087][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.362370][ T9] usb 6-1: Product: syz [ 1260.363447][ T1157] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.364683][ T9] usb 6-1: Manufacturer: syz [ 1260.371334][ T9] usb 6-1: SerialNumber: syz [ 1260.441531][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.483618][ T1157] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.551481][T24202] raw-gadget.0 gadget.3: failed to queue resume event [ 1260.631167][ T1157] raw-gadget.0 gadget.3: failed to queue suspend event [ 1260.649195][T24220] raw-gadget.0 gadget.3: failed to queue disconnect event [ 1260.686945][ T9] usb 6-1: config 0 descriptor?? [ 1260.706573][ T9] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1260.717961][ T9] usb 6-1: selecting invalid altsetting 1 [ 1260.722649][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1260.727710][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1260.733149][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1260.737250][ T9] usb 6-1: media controller created [ 1260.777311][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1261.083141][T24235] kvm: apic: phys broadcast and lowest prio [ 1261.155017][T24242] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1261.908772][ T9] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1261.930939][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1262.087853][ T5815] usb 6-1: USB disconnect, device number 37 [ 1262.331939][T24245] input: syz0 as /devices/virtual/input/input34 [ 1262.663524][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1262.674404][T24250] ªªªªªª: renamed from vlan0 [ 1263.099031][T24254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1263.102027][T24254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1263.104857][T24254] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1263.169426][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3028'. [ 1263.174560][ T5815] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1263.592309][T24253] lo speed is unknown, defaulting to 1000 [ 1263.682492][T24253] lo speed is unknown, defaulting to 1000 [ 1264.211435][ T9] usb 11-1: new high-speed USB device number 48 using dummy_hcd [ 1264.296247][ T5837] usb 8-1: USB disconnect, device number 32 [ 1264.363312][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 1264.386649][T24268] syz_tun: entered allmulticast mode [ 1264.435390][T24268] dvmrp8: entered allmulticast mode [ 1264.451126][ T9] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1264.468316][ T9] usb 11-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1264.486926][ T9] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 1264.499257][ T9] usb 11-1: can't read configurations, error -71 [ 1264.561973][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1264.621395][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1264.978371][T24284] lo speed is unknown, defaulting to 1000 [ 1265.264431][T24296] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3034'. [ 1265.832578][T24289] lo speed is unknown, defaulting to 1000 [ 1266.047868][T24305] ip6t_REJECT: ECHOREPLY is not supported [ 1266.084493][T24289] lo speed is unknown, defaulting to 1000 [ 1266.084942][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3035'. [ 1266.089036][T24308] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1266.146701][T24284] lo speed is unknown, defaulting to 1000 [ 1266.537928][T24305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1266.539967][T24305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1266.542186][T24305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1266.544161][T24305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1266.748948][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1267.013529][T24321] batman_adv: batadv0: Adding interface: dummy0 [ 1267.015836][T24321] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.029810][T24321] batman_adv: batadv0: Interface activated: dummy0 [ 1267.052782][T24321] batadv0: mtu less than device minimum [ 1267.056281][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.060339][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.065809][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.069672][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.073444][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.077086][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.083337][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.087075][T24321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.423774][T14655] IPVS: starting estimator thread 0... [ 1267.426815][T24319] lo speed is unknown, defaulting to 1000 [ 1267.522149][T24327] IPVS: using max 44 ests per chain, 105600 per kthread [ 1267.582878][T24319] lo speed is unknown, defaulting to 1000 [ 1268.050748][T24335] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 1268.365953][T21239] libceph: connect (1)[c::]:6789 error -99 [ 1268.368134][T21239] libceph: mon0 (1)[c::]:6789 connect error [ 1268.370459][T24333] ceph: No mds server is up or the cluster is laggy [ 1268.373894][T21239] libceph: connect (1)[c::]:6789 error -99 [ 1268.376220][T21239] libceph: mon0 (1)[c::]:6789 connect error [ 1268.381635][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 1268.541382][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 1268.622897][T15038] Bluetooth: hci3: command 0x0406 tx timeout [ 1268.625277][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 1268.784284][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3041'. [ 1269.044206][T24343] lo speed is unknown, defaulting to 1000 [ 1269.230706][T24343] lo speed is unknown, defaulting to 1000 [ 1272.417355][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3042'. [ 1274.368813][T24397] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3047'. [ 1274.923000][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 1275.000402][T24403] ip6t_REJECT: ECHOREPLY is not supported [ 1275.018671][T24404] lo speed is unknown, defaulting to 1000 [ 1275.085344][T24403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1275.087331][T24403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.134956][T24403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1275.145259][T24403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1275.227149][T24412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1275.304789][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1276.869547][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1277.101395][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.101749][T15038] Bluetooth: hci0: command 0x0406 tx timeout [ 1277.139917][T24417] lo speed is unknown, defaulting to 1000 [ 1277.192942][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 1277.193167][T15038] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.457755][T24417] lo speed is unknown, defaulting to 1000 [ 1277.486617][T24404] lo speed is unknown, defaulting to 1000 [ 1278.375186][T24436] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1278.621001][T24437] [ 1278.621014][T24437] ====================================================== [ 1278.621046][T24437] WARNING: possible circular locking dependency detected [ 1278.621057][T24437] syzkaller #0 Tainted: G L [ 1278.621071][T24437] ------------------------------------------------------ [ 1278.621078][T24437] syz.1.3054/24437 is trying to acquire lock: [ 1278.621091][T24437] ffff88804b43c138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 1278.635707][T24437] [ 1278.635707][T24437] but task is already holding lock: [ 1278.635718][T24437] ffff8880606d9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1278.641461][T24437] [ 1278.641461][T24437] which lock already depends on the new lock. [ 1278.641461][T24437] [ 1278.641471][T24437] [ 1278.641471][T24437] the existing dependency chain (in reverse order) is: [ 1278.641478][T24437] [ 1278.641478][T24437] -> #2 (&of->mutex){+.+.}-{4:4}: [ 1278.647975][T24437] lock_acquire+0x1b9/0x370 [ 1278.648000][T24437] __mutex_lock+0x1a4/0x1bd0 [ 1278.648034][T24437] kernfs_fop_write_iter+0x2c2/0x5f0 [ 1278.648059][T24437] iter_file_splice_write+0x830/0x10b0 [ 1278.648082][T24437] do_splice+0x109c/0x1f90 [ 1278.648101][T24437] __do_splice+0x33b/0x370 [ 1278.648120][T24437] __ia32_sys_splice+0x189/0x250 [ 1278.648142][T24437] __do_fast_syscall_32+0xe7/0x970 [ 1278.648171][T24437] do_fast_syscall_32+0x32/0x70 [ 1278.648198][T24437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.648224][T24437] [ 1278.648224][T24437] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1278.648251][T24437] lock_acquire+0x1b9/0x370 [ 1278.648266][T24437] __mutex_lock+0x1a4/0x1bd0 [ 1278.648290][T24437] anon_pipe_write+0x25e/0x1d90 [ 1278.648309][T24437] __kernel_write_iter+0x6bb/0x930 [ 1278.648329][T24437] __kernel_write+0xf6/0x140 [ 1278.648344][T24437] autofs_notify_daemon+0x50d/0xd90 [ 1278.648364][T24437] autofs_wait+0x10fd/0x1b50 [ 1278.648386][T24437] autofs_mount_wait+0x132/0x3b0 [ 1278.648402][T24437] autofs_d_automount+0x490/0x950 [ 1278.648419][T24437] __traverse_mounts+0x1b9/0x8a0 [ 1278.648440][T24437] step_into_slowpath+0xb7e/0xf90 [ 1278.648466][T24437] path_lookupat+0x58b/0xc40 [ 1278.648491][T24437] filename_lookup+0x202/0x590 [ 1278.648506][T24437] user_path_at+0x3c/0x60 [ 1278.648520][T24437] __ia32_sys_mount+0x1fb/0x310 [ 1278.648543][T24437] __do_fast_syscall_32+0xe7/0x970 [ 1278.648595][T24437] do_fast_syscall_32+0x32/0x70 [ 1278.706091][T24437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.706126][T24437] [ 1278.706126][T24437] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1278.706153][T24437] check_prev_add+0xeb/0xe60 [ 1278.706179][T24437] __lock_acquire+0x136c/0x1a40 [ 1278.706192][T24437] lock_acquire+0x1b9/0x370 [ 1278.706205][T24437] __mutex_lock+0x1a4/0x1bd0 [ 1278.706228][T24437] autofs_notify_daemon+0x4f8/0xd90 [ 1278.706244][T24437] autofs_wait+0x10fd/0x1b50 [ 1278.706258][T24437] autofs_mount_wait+0x132/0x3b0 [ 1278.706273][T24437] autofs_d_automount+0x490/0x950 [ 1278.706288][T24437] __traverse_mounts+0x1b9/0x8a0 [ 1278.706306][T24437] step_into_slowpath+0xb7e/0xf90 [ 1278.706325][T24437] path_lookupat+0x58b/0xc40 [ 1278.706345][T24437] filename_lookup+0x202/0x590 [ 1278.706356][T24437] kern_path+0x37/0x50 [ 1278.706367][T24437] lookup_bdev+0xd8/0x280 [ 1278.706424][T24437] resume_store+0x1d6/0x460 [ 1278.706442][T24437] kobj_attr_store+0x58/0x80 [ 1278.706457][T24437] sysfs_kf_write+0xf2/0x150 [ 1278.706478][T24437] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1278.706498][T24437] vfs_write+0x6ac/0x1050 [ 1278.706512][T24437] ksys_write+0x12a/0x250 [ 1278.706524][T24437] __do_fast_syscall_32+0xe7/0x970 [ 1278.706545][T24437] do_fast_syscall_32+0x32/0x70 [ 1278.706564][T24437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.706581][T24437] [ 1278.706581][T24437] other info that might help us debug this: [ 1278.706581][T24437] [ 1278.706586][T24437] Chain exists of: [ 1278.706586][T24437] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1278.706586][T24437] [ 1278.706610][T24437] Possible unsafe locking scenario: [ 1278.706610][T24437] [ 1278.706615][T24437] CPU0 CPU1 [ 1278.706619][T24437] ---- ---- [ 1278.706624][T24437] lock(&of->mutex); [ 1278.706633][T24437] lock(&pipe->mutex); [ 1278.706643][T24437] lock(&of->mutex); [ 1278.706653][T24437] lock(&sbi->pipe_mutex); [ 1278.706662][T24437] [ 1278.706662][T24437] *** DEADLOCK *** [ 1278.706662][T24437] [ 1278.706666][T24437] 4 locks held by syz.1.3054/24437: [ 1278.706675][T24437] #0: ffff888029508630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1278.706710][T24437] #1: ffff888021196450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1278.706745][T24437] #2: ffff8880606d9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1278.706781][T24437] #3: ffff88801d36d5a8 (kn->active#88){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1278.706820][T24437] [ 1278.706820][T24437] stack backtrace: [ 1278.706831][T24437] CPU: 1 UID: 0 PID: 24437 Comm: syz.1.3054 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.706852][T24437] Tainted: [L]=SOFTLOCKUP [ 1278.706857][T24437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1278.706866][T24437] Call Trace: [ 1278.706873][T24437] [ 1278.706880][T24437] dump_stack_lvl+0x100/0x190 [ 1278.706899][T24437] print_circular_bug.cold+0x178/0x1c7 [ 1278.706922][T24437] check_noncircular+0x146/0x160 [ 1278.706946][T24437] check_prev_add+0xeb/0xe60 [ 1278.706967][T24437] __lock_acquire+0x136c/0x1a40 [ 1278.706983][T24437] lock_acquire+0x1b9/0x370 [ 1278.706995][T24437] ? autofs_notify_daemon+0x4f8/0xd90 [ 1278.707011][T24437] ? __pfx___might_resched+0x10/0x10 [ 1278.707034][T24437] __mutex_lock+0x1a4/0x1bd0 [ 1278.707054][T24437] ? autofs_notify_daemon+0x4f8/0xd90 [ 1278.707068][T24437] ? autofs_notify_daemon+0x4f8/0xd90 [ 1278.707082][T24437] ? find_held_lock+0x2b/0x80 [ 1278.707099][T24437] ? autofs_notify_daemon+0x4a0/0xd90 [ 1278.707113][T24437] ? autofs_notify_daemon+0x4a0/0xd90 [ 1278.707128][T24437] ? __pfx___mutex_lock+0x10/0x10 [ 1278.707147][T24437] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1278.707168][T24437] ? from_kgid_munged+0xab/0x130 [ 1278.707190][T24437] ? __pfx_from_kgid_munged+0x10/0x10 [ 1278.707210][T24437] ? filename_lookup+0x202/0x590 [ 1278.707223][T24437] ? autofs_notify_daemon+0x4f8/0xd90 [ 1278.707238][T24437] autofs_notify_daemon+0x4f8/0xd90 [ 1278.707253][T24437] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1278.707275][T24437] ? lockdep_init_map_type+0x5c/0x250 [ 1278.707289][T24437] ? lockdep_init_map_type+0x5c/0x250 [ 1278.707303][T24437] autofs_wait+0x10fd/0x1b50 [ 1278.707319][T24437] ? __pfx_autofs_wait+0x10/0x10 [ 1278.707333][T24437] ? find_held_lock+0x2b/0x80 [ 1278.707350][T24437] ? path_has_submounts+0xcf/0x120 [ 1278.707369][T24437] ? do_raw_spin_unlock+0x145/0x1e0 [ 1278.707389][T24437] ? find_held_lock+0x2b/0x80 [ 1278.707407][T24437] autofs_mount_wait+0x132/0x3b0 [ 1278.707421][T24437] autofs_d_automount+0x490/0x950 [ 1278.707436][T24437] __traverse_mounts+0x1b9/0x8a0 [ 1278.707455][T24437] step_into_slowpath+0xb7e/0xf90 [ 1278.707475][T24437] ? rcu_is_watching+0x12/0xc0 [ 1278.707493][T24437] ? __pfx_step_into_slowpath+0x10/0x10 [ 1278.707513][T24437] ? lookup_slow+0x5b/0x70 [ 1278.707530][T24437] ? lookup_slow+0x5b/0x70 [ 1278.707549][T24437] path_lookupat+0x58b/0xc40 [ 1278.707571][T24437] filename_lookup+0x202/0x590 [ 1278.707584][T24437] ? __pfx_filename_lookup+0x10/0x10 [ 1278.707611][T24437] ? do_getname_kernel+0x5d/0x250 [ 1278.707627][T24437] ? __asan_memcpy+0x3c/0x60 [ 1278.707646][T24437] kern_path+0x37/0x50 [ 1278.707658][T24437] lookup_bdev+0xd8/0x280 [ 1278.707676][T24437] ? __pfx_lookup_bdev+0x10/0x10 [ 1278.707695][T24437] ? __asan_memcpy+0x3c/0x60 [ 1278.707710][T24437] resume_store+0x1d6/0x460 [ 1278.707726][T24437] ? __pfx_resume_store+0x10/0x10 [ 1278.707743][T24437] ? find_held_lock+0x2b/0x80 [ 1278.707760][T24437] ? sysfs_file_kobj+0xe4/0x290 [ 1278.707778][T24437] ? sysfs_file_kobj+0xe4/0x290 [ 1278.707797][T24437] ? __pfx_resume_store+0x10/0x10 [ 1278.707812][T24437] kobj_attr_store+0x58/0x80 [ 1278.707825][T24437] ? __pfx_kobj_attr_store+0x10/0x10 [ 1278.707837][T24437] sysfs_kf_write+0xf2/0x150 [ 1278.707857][T24437] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1278.707874][T24437] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1278.707894][T24437] vfs_write+0x6ac/0x1050 [ 1278.707908][T24437] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1278.707926][T24437] ? __pfx_vfs_write+0x10/0x10 [ 1278.707937][T24437] ? find_held_lock+0x2b/0x80 [ 1278.707959][T24437] ksys_write+0x12a/0x250 [ 1278.707972][T24437] ? __pfx_ksys_write+0x10/0x10 [ 1278.707987][T24437] __do_fast_syscall_32+0xe7/0x970 [ 1278.708008][T24437] do_fast_syscall_32+0x32/0x70 [ 1278.708028][T24437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.708046][T24437] RIP: 0023:0xf7fa2fec [ 1278.708066][T24437] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 1278.708074][T24437] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1278.708087][T24437] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000040 [ 1278.708096][T24437] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.708105][T24437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.708113][T24437] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1278.708122][T24437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.708134][T24437] [ 1278.758013][T15038] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 1278.763311][T24441] netlink: 'syz.6.3055': attribute type 1 has an invalid length. [ 1278.919498][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1278.940084][T24441] bond18: entered promiscuous mode [ 1278.942016][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1278.944760][T24441] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1279.054943][T24444] bond18: (slave bridge1): making interface the new active one [ 1279.054961][T24444] bridge1: entered promiscuous mode [ 1279.058313][T24444] bond18: (slave bridge1): Enslaving as an active interface with an up link [ 1279.379197][T24437] PM: Image not found (code -6)