last executing test programs: 29m40.127266474s ago: executing program 2 (id=3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='Midi1\n', 0x6) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x9) iopl(0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @win={{0x3, 0x4, 0x5, 0xffffffff}, 0x4, 0xb20c, &(0x7f0000000400)={{0xffff, 0xfffffffa, 0x2, 0x8}, &(0x7f0000000380)={{0x100, 0x5d10, 0x10001, 0x5}, &(0x7f0000000340)={{0x5, 0x8, 0x1b81}, &(0x7f00000002c0)={{0x8f9, 0x1, 0xd, 0x5186}}}}}, 0x9cae, &(0x7f0000000440)="a4516135389658b5d2fb5869b232130d7709ebb4783078", 0xe5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8080) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x24004010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) 29m37.876755672s ago: executing program 2 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd79, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd43, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x17c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x7]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x1}}, @generic={0x8a, 0xba5, "02dfc379e54dd6b7d4e5ee76890022c796909b70400fa6afa8550fe41c03806ddeac86b77c358c7b0e05b788f3f500caf1ce28106e0a06aedd03d01442011649e53abff0acb8901bfc927776884100350d65ce5bb6ee9217f4561ae0fc8f0ef9ab1a58ff875308bc1b46a8e3d1666f947bf9b9f2acdd0d47abd4c39c66242ba5a60ad9b54cb7484c1567d291d5bfc701e8e2ab8507665597e469b757832ddedb820e1b2f5a8834250fbdc43937299136e7675103f9e613faef663d22cce61c765ffd3c43c3ef4c8110cc354b8129edecbd21b4fdb5e49e7e3f398baab79240d069c3f1141976a597671ccfbdd0a88d34cbde188c5351a167558b5140aa71d53ed67b3af40a7d11a9e3f8b51587f94173fa43ee7def4e78dd184591a72073c253eec922578f9a6d27b6df197b81127b527292eae1292ba93599c3c66868be2f62c7508f543aa0c00666dcb53605d7b539297d77ea2b1bde43ce6f80a1d4c4d3ee2c96b2bfce54b382f3c85383e8631c87a13a6196a3378dddb6ee0734b9fd0d13860ed94d4a16d988f959466a8b3aa052573538a6cf7ab51b7e21a46c8d24812bebec95032c59d15ab9fdc263f679655d451eb191748537918966946788c89678123a805b174e9e9c9586fc33e36a3b96457b3699461321b23758beda25dacb68788ed08bcb0911e17022896f3effb6b6481e5ece5adc28f5ec0d7dc11df7a936c5c778429e03deb858d3e6ae42bfe792f5328baaa6bbf5dd8e854c2041737f183b2e5a674616e7fe50659b9190b91b8290c52ebbc09dde748a451297fcd7be5f31fc29663d842887550a55bffaf96e189260c24d7dfa96fb355945e8abcaa6b719ecf65c3702d3b229bce50aa1f78b697ec707f3cf75045bd802ac708668d1fb3427f2decc30b39ce36d77fb2abac8ffe1af1f475850c4b68cc96d886ca183858c1625e45f6096b1aef6972cad8e5a8e91ba474bf2bf71c5b1d4ddbff3057211789e1e39e57c4253d7324965cdf75c1171cc2c2d3924964a71592362570e0fe2a01f3082518e6036190aea949aeddbb34a2314d7f120a0f64b27790d9c1cda39c5644db8568e0238b3b046b5ebae2e909e16cb7229b2fdcd1e95f6b3945f35469032764e99f23d05aac3d1cd4a2e5f3c39f02c0f4ce4952637dc105224d089854682da4732653446915902e240890c893e49887db8deeb7e13a74aff31d0384493cd55cdca8fa479f3ea6fcce2ed3da0fb086ae6abafdfebf8ba63067d644a7933a11f978d3c9dba3bf17e2e8302bb448e1f091c0a76664c5faad5e0b95a1c8f5071035ae818572b934200726021dbad03040051003da464212e976cf1807c8625447916a0a541648e0557c623108d134cd935c271735af841de670363db0ae3204b1a764312ad8fa3b7c4af9cf8616617d8c600fd06a9df57be7678b91b19c7a0df274131c37b5af30e8b70860279205777f6c23e8e1f8c9e4817ce7d812740ca1f71e2c0c84e93541ac9da1dd0f57bc1c6cbbc62baa5755e699df7a81697d8cb097bf7195ec60548c14b4e52da87d2a4a45034235b5b21530f1b20dae9bfd151b68c278196974452fa558dbe18632e771e77fb89c06d32ff3f0ab040610578cf556fb0fc93ad2f51934cf4bf99e6db3e615ddf356cb127004e897a064162ec40b88646a133fdbc56b569d0da2772aff012be81557e148c85d82aac3d07d9f599f9613753d4f0cd21063839637ceafb4e2d37498ba4011a673b75de2ff40cc13b3eb701f2240f3d65b9d991bd2bdaec92409372c708c83a5910403050207dee7d3dbd256093b858d6efeb230613aaaa81e72b1900a2892c2fd1cd7f75f813f1bf75b0db3e80e1f7bee7ade5c6d992980df74cab065612c0ed787d21e82db2959bf1491c4ac2f1bf7f49fe38e484cae2fcdfe16c17b954112dc2cee86b2d144d37f15da7c326930fd29ac406ce087a5ee81c29b5d97e64b5d948adeaecf45ef360ed6d11edc6c617f6d10d54df9f9e3f68fb65bc9592b9e50c61e671c5491e2d5d18a990456ab243810330c90312cba036c8363f258db11163a1b59aa0126c067c45e08910f9f80777f4a50d997aa7d4fd04e00ce733bfe888850cb69daef51e9d6dc5c586285f3d0ce669f8e1ea389ae1445bc17858706fe83b9993ebd9ba2b5d959a7b8b1f345b7c5a83a1522cce80f27d8ebe6304f8d9876d5cdca4839ad0effbfdccbf410717318798f090020c60cbf437224f997823d525eb11c0d0bcb3e3276e90bdb3e6b578b12719194a94c96e62f14623f4a1487df5c1b753fd4b6ac12420133092144820b93255ebe44d6bc42db49c35e2b23157ea694187f649457d5afee97d2812b9d0a222cbbae17020b92ca9cfcc923c258094c8b56b76786a49e4f37e1a5b9702a657b0384c4d1bc2d1ad4dcceba08b05529c230ab3c3e41c57c2f0b7d5bcd1040bb92e74b30341e324f440694a7d2bf74782a4e56e9ff2762a6db4dda09463117cd579cc4f8489347ffb4dfa3137505f8b95606f3a43d77952688bfcf47614c725510b73bb5e88ab3e1c17eff99fabb934a706c0a82c22687a54b4e19253d21adfc0a7bf588f7ee8fd27448870c15c6f53a765c7e59cc4479e83f62a465fd7dedcafb7a83c9bbc4ef37799359985ed40c6b8e2783a963811062b8752dadb4c78386819c8cbfea8cd51ed3d20b6b9bf4319ed38a74effd60de17509f31d17da711905cf2f1a1a8e563cca05054090e8ff314dc30bf86c770b110248f492bd52bb6e7eccad39355875492b510b386f6dc5c475401b65609a53b42f5510f37faf5da016a3f2122d22cd398078c9353a72aa4db9a31b6911f6a2d192052e30119522c854d783850dde5b72902a496f59796f7362463f156db1e64d298b9265e37bd163bb5f648206e40d4289a7b089a6877768daecac86276405f01ea627e8f1a623aed9b4a03a50011f6c5a619b14513c5a9fec76446e4ead1c56c3eccab1d0fe6855bda047b21e36a68cfa446e82b7cebf197642a382f7c61ae48ef22454cde16a9a495a35a408172b8e95eaeb57d3b4d3e59444be4b65ce98c84fb9fd62bed1f1cab1dec8a95a5fa2011997598c963aaf9604169000d7ce727eaa5ac2b9264561b05867dc568c36e66d03496be83406cfb12f3620ab859f1a996a3f819e4db78d7ef6ca2b00b3cb5f8169cc8af3a5b0064709582be85c729f27376af6f248f3424d6f845dfdd932afce7a62d2c16c3615b7910942fafe77283f650e44a4075c20c7239a928c313083949af57732f1e9ce6e87c6122867233cd032407d6d5aaa9330974fa0afc80b89fa3088f0a514e9eda553bf233f2dc72c8d203701307763b82f19b9c5c9f7832d17a3be1e0201308afdb52cdb8a8997890e17f739e4967ff41124eafe010aa20436fb7decc300871511a10a0261c670917f43767c3f29ed94938c549d4eca4eccbf0dd82abfbe2d25983079c4646ea2fe25f743deb86374175f4ead532cbc26c2e917e0f347a7660c1993d0a2738e9d3d12f556244635ac3f37cbf7011f5452f007d78bf53a5d90d17bb69e182ad7c0add48b5ce9a2cd16ca0b1739734677b3af6a2c3daa86db472590107b7dca74e543b2176ff48f1328a494843e43775273c153907047b412cc2095073f00f22784e5b2e9abe9f6e24f8ae41179d93f4a345cbc48fc76b7df05f84cd4b2b8b2a66adc1b005fb8013a37b2427dd745301e8939bcb76aa75baae6d61b7558ce337aded056a23523027ed293465d1aafe16f96d912b5c881e06c0ee8cffdd1702565109323dc2366de6a2435efc541455362e6dcece1df8bce7b848d810ad1c3ebfce6a48facd789fabd2682e238772be29b142ef86a66c59687238e8da2f22f4af2d60b50dc3b35c12911015574c875aa8bba2cd2fce0adf7fb0991d37c8a4367edec1a40c1d4eeb30c4e5b83597f48738979c1c66ce4e880dc7dadcf22a7394a14e9315ac4eef6d0cc3cf87ef8edd109005b5347fb82582895e2dad4caa4e9c8166c0c2c92120e946c9f4a1760333fb3be86064e7e749e8fa6e897943d3d6235b2ea5b94263feebeab225268d032af91e45638577ed220253850ee434cbfd143a846c89fcbfc0faeb7cbadfab608e50063fe736b4c196815eb4c411a0c6f421704ab660c523335db8bff3f7f1e9d803930ef0bc4abccc87bc858ca88afe881721a8f74fd24e20f02"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) 29m36.532538617s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) 29m33.97926269s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x8) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x5, 0x6, @value=0x101}) 29m27.36506232s ago: executing program 2 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf21f1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1234 1111 ffffffff ffffffff 0 0', 0x1f) 29m18.721590092s ago: executing program 0 (id=28): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="5d3891b07c7292e40b4d055d967760c954fb957bc5f2317eb87d2e99f5896b49bc4188de137c95bcdaa7b21441eba7df9d73a5195652f401397887d9ac09e8383d47a8d060854a6013735f06c329631012285ac663bf716694b34eb0b5f29d27e9c856a824bfbef2437c3d8e421221bfcc4b93253a04f942c93fca48d25dfd34079e1957498258fb4fe1f9272008c8826ec96b21d0b90b5480cdbd30ede1b7ecd49377a91d482beed8f93bbfae63868a3fcc4cbe4d6973de2770fe5182c41f01f442394416137e1f30479014435f428bc6c2325bdb93e748e6cdba68d4f5a1", @ANYRESHEX=r0, @ANYRES64=r1]) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 29m16.664448046s ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) ioctl$MEMSETBADBLOCK(r2, 0x40084d0c, &(0x7f0000000040)=0x6) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 29m8.63612782s ago: executing program 32 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf21f1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1234 1111 ffffffff ffffffff 0 0', 0x1f) 29m8.40739905s ago: executing program 0 (id=38): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0xfff, 0x28, 0x84000005, 0x2}) 29m7.014645252s ago: executing program 0 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x800, 0x40, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioperm(0x3, 0x1, 0xfffffffffffffe01) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 29m4.450281152s ago: executing program 0 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x8) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x5, 0x6, @value=0x101}) 29m1.600384247s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) ioctl$MEMSETBADBLOCK(r2, 0x40084d0c, &(0x7f0000000040)=0x6) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 28m45.15622587s ago: executing program 33 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) ioctl$MEMSETBADBLOCK(r2, 0x40084d0c, &(0x7f0000000040)=0x6) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 15m51.279399234s ago: executing program 5 (id=3322): syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "695d4769caf5dbf8"}}}, 0x11) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r1, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5a8c86d7a1533"], 0x70}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 15m49.890304073s ago: executing program 5 (id=3327): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffffe0000001000000003c0000000200000000000000000000000000ffffac1e0101060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/147, 0x93}], 0x1, &(0x7f00000006c0)=""/151, 0x97}, 0x40000140) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 15m46.441085201s ago: executing program 5 (id=3332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc4", 0x83}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e7408cbb5fc7a467db67cf69e4d0ca224168a742027b22d028398e2081f5073b0de5fe30bed50bf", 0x3f}], 0x2}}], 0x2, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x598, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0xa4, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x2, 0x14, 0xff, 0x6, 0xc48b, 0x5, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0x40c, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x6, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x598}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a", 0x4a}], 0x1}}], 0x1, 0x4000900) 15m45.956389341s ago: executing program 5 (id=3334): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$nl_generic(r0, 0x0, 0xc000) 15m44.316998945s ago: executing program 5 (id=3340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x3, 0x4) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x5, 0x6, @value=0x101}) 15m42.304396541s ago: executing program 5 (id=3341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @private0, 0x206}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1) 15m24.419935566s ago: executing program 34 (id=3341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @private0, 0x206}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1) 16.133771328s ago: executing program 1 (id=5647): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7, 0x58, "d5f3091a136d71efe80cba74b0dda988a05a82f22f1d7a9d6cae80555eef043620389d638120f278927cd11b7d29b7d82a1df971a25368f1647be9b4df57babe1dee177e4e81443a63983053b328d2cebc256be083086e3d"}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x0, 0x94, 0xd}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x3, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b19c9000700b3fd0f34416c"], 0xe) socket$netlink(0x10, 0x3, 0x4) 15.939818399s ago: executing program 4 (id=5648): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7, 0x58, "d5f3091a136d71efe80cba74b0dda988a05a82f22f1d7a9d6cae80555eef043620389d638120f278927cd11b7d29b7d82a1df971a25368f1647be9b4df57babe1dee177e4e81443a63983053b328d2cebc256be083086e3d"}}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r5, r6, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b19c9000700b3fd0f34416c"], 0xe) socket$netlink(0x10, 0x3, 0x4) 13.023914504s ago: executing program 3 (id=5651): r0 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) 12.475091692s ago: executing program 7 (id=5653): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 12.44584961s ago: executing program 3 (id=5654): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x5) userfaultfd(0x80001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(0x0, 0x80000) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x6, 0x4}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mknod$loop(0x0, 0x8, 0x1) 11.9761297s ago: executing program 7 (id=5655): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x4, 0xf, 0x9, 0x27, @private1, @private0, 0x80, 0x1, 0x0, 0x3}}) 11.396822991s ago: executing program 7 (id=5656): r0 = syz_usb_connect$uac1(0x1, 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000086307802040000102030109027e0003018160030904000000010100000a24010900280002"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x81, 0x1, 'j'}, 0x0, 0x0, 0x0, 0x0}) 11.22638699s ago: executing program 6 (id=5657): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) socket$inet(0x2, 0x2, 0x1) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11.120255389s ago: executing program 3 (id=5658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 10.920960749s ago: executing program 3 (id=5659): read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) 10.526457854s ago: executing program 1 (id=5660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) r4 = syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 10.467961591s ago: executing program 4 (id=5661): unshare(0x2040400) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) 9.92231702s ago: executing program 3 (id=5662): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r3, 0x26}, 0x20) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) 9.920544508s ago: executing program 1 (id=5663): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a00"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f000000000800040001000000", 0x24) 9.779857992s ago: executing program 6 (id=5664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd66", 0xc9}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b8", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.046138072s ago: executing program 4 (id=5665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) listen(0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) r3 = syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 7.821371489s ago: executing program 7 (id=5666): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4000000000000009, 0x0) 7.063899535s ago: executing program 4 (id=5667): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.559741289s ago: executing program 7 (id=5668): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.51003508s ago: executing program 1 (id=5669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884", 0x45}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.359206922s ago: executing program 4 (id=5670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731a97fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.197806786s ago: executing program 6 (id=5671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a", 0xd5}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884", 0x45}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.095790485s ago: executing program 7 (id=5672): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7, 0x58, "d5f3091a136d71efe80cba74b0dda988a05a82f22f1d7a9d6cae80555eef043620389d638120f278927cd11b7d29b7d82a1df971a25368f1647be9b4df57babe1dee177e4e81443a63983053b328d2cebc256be083086e3d"}}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x0, 0x94, 0xd}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r5, r6, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b19c9000700b3fd0f34416c"], 0xe) socket$netlink(0x10, 0x3, 0x4) 4.552470286s ago: executing program 6 (id=5673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6", 0x34}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.20677031s ago: executing program 1 (id=5674): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000002) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c0007800800124000000005050005000200000005000400010000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffffe0000001000000003c0000000200000000000000000000000000ffffac1e0101060000000403000001"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) recvmsg$can_raw(r4, &(0x7f0000000800)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/147, 0x93}], 0x1, &(0x7f00000006c0)=""/151, 0x97}, 0x40000140) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xffd8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f000000000800040001000000", 0x24) 767.276176ms ago: executing program 1 (id=5675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6", 0x34}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 544.217248ms ago: executing program 6 (id=5676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) 423.701122ms ago: executing program 4 (id=5677): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000000140), 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b7b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x40080) 109.707051ms ago: executing program 6 (id=5678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}, {}, {0x6, 0x0, 0x80, 0x7fff0000}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 3 (id=5679): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a00"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f000000000800040001000000", 0x24) kernel console output (not intermixed with test programs): attributes in process `syz.3.4727'. [ 1455.372003][T21181] qrtr: Invalid version 0 [ 1456.233990][T21183] syzkaller1: entered promiscuous mode [ 1456.234019][T21183] syzkaller1: entered allmulticast mode [ 1458.840471][T21212] FAT-fs (nbd1): unable to read boot sector [ 1459.557232][ T1531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.557256][ T1531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.396073][T21231] FAT-fs (nbd6): unable to read boot sector [ 1461.954854][ T5952] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1463.338393][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4354'. [ 1463.449619][ T5952] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1463.449650][ T5952] usb 4-1: config 0 has no interface number 0 [ 1463.449715][ T5952] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.616931][ T5952] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1463.616965][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.617153][ T5952] usb 4-1: Product: syz [ 1463.617170][ T5952] usb 4-1: Manufacturer: syz [ 1463.617186][ T5952] usb 4-1: SerialNumber: syz [ 1464.000163][ T5952] usb 4-1: config 0 descriptor?? [ 1464.092014][ T5952] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1464.472016][ T5952] usb 4-1: USB disconnect, device number 64 [ 1464.498083][ T5952] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1465.742356][T17140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1465.779987][T17140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1465.801548][T17140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1465.802791][T17140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1465.804439][T17140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1468.948654][T21284] FAT-fs (nbd4): unable to read boot sector [ 1469.024902][ T59] Bluetooth: hci5: command tx timeout [ 1469.057050][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1469.057120][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1469.057706][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1471.006090][T21307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.112885][ T59] Bluetooth: hci5: command tx timeout [ 1472.426420][T21309] Process accounting resumed [ 1472.592328][T12884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.660121][T21317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1472.737721][ T5781] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1472.813546][T12060] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1472.928571][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1472.928612][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.928719][ T5781] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1472.928768][ T5781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.996923][T12060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1472.996971][T12060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.997051][T12060] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1472.997115][T12060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.241987][ T59] Bluetooth: hci5: command tx timeout [ 1473.402975][T12060] usb 5-1: config 0 descriptor?? [ 1473.489452][ T5781] usb 8-1: config 0 descriptor?? [ 1475.343572][ T59] Bluetooth: hci5: command tx timeout [ 1476.585334][T12060] usbhid 5-1:0.0: can't add hid device: -71 [ 1476.585457][T12060] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1476.638445][T12060] usb 5-1: USB disconnect, device number 78 [ 1476.908619][ T5781] usb 8-1: string descriptor 0 read error: -71 [ 1476.909922][ T5781] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71 [ 1476.910024][ T5781] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 1476.910097][ T5781] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71 [ 1476.910234][ T5781] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 1476.910556][ T5781] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 1477.260284][ T5781] usb 8-1: USB disconnect, device number 17 [ 1478.938779][T12884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.973186][T21338] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1478.973230][T21338] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1478.973251][T21338] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1479.682767][T12884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.359874][T21367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4767'. [ 1481.433610][T12876] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1481.691982][T12876] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1482.133583][T12876] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1482.670414][T12876] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1482.670446][T12876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.670465][T12876] usb 7-1: Product: syz [ 1482.670481][T12876] usb 7-1: Manufacturer: syz [ 1482.670496][T12876] usb 7-1: SerialNumber: syz [ 1484.569349][T12884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.601959][T12876] usb 7-1: can't set config #2, error -71 [ 1485.605766][T12876] usb 7-1: USB disconnect, device number 20 [ 1485.819154][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1485.987745][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1485.987770][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.987785][ T9] usb 5-1: Product: syz [ 1485.987795][ T9] usb 5-1: Manufacturer: syz [ 1485.987806][ T9] usb 5-1: SerialNumber: syz [ 1485.996436][T12876] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1486.180353][T12876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1486.180380][T12876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.180450][T12876] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1486.180469][T12876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.186494][ T5952] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1486.269158][T12876] usb 7-1: config 0 descriptor?? [ 1486.351680][T21259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.351892][T21259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.352353][T21259] bridge_slave_0: entered allmulticast mode [ 1486.381044][T21259] bridge_slave_0: entered promiscuous mode [ 1486.397798][ T5952] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1486.397831][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.397854][ T5952] usb 2-1: Product: syz [ 1486.397870][ T5952] usb 2-1: Manufacturer: syz [ 1486.397886][ T5952] usb 2-1: SerialNumber: syz [ 1486.521921][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1486.521995][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1486.581628][T21259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.582859][T21259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.590759][T21259] bridge_slave_1: entered allmulticast mode [ 1486.640296][T21259] bridge_slave_1: entered promiscuous mode [ 1486.964701][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1486.964834][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1486.985287][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1487.023769][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1487.023833][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1487.161593][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1487.415690][T12876] usbhid 7-1:0.0: can't add hid device: -71 [ 1487.415825][T12876] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1487.442312][T21259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.484304][T21259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.523277][T12876] usb 7-1: USB disconnect, device number 21 [ 1487.635822][T21374] IPVS: stopping backup sync thread 19363 ... [ 1487.791936][T21390] IPVS: stopping backup sync thread 19258 ... [ 1487.857152][T17114] usb 5-1: USB disconnect, device number 79 [ 1488.142143][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1488.142205][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1488.143100][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1488.176227][T21259] team0: Port device team_slave_0 added [ 1488.194599][ T5952] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1488.217581][ T5952] usb 2-1: USB disconnect, device number 17 [ 1488.769516][T21259] team0: Port device team_slave_1 added [ 1488.900926][ T37] audit: type=1326 audit(1785772270.469:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21394 comm="syz.6.4773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x0 [ 1489.102492][T21401] qrtr: Invalid version 0 [ 1489.350113][T21259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.350132][T21259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.350161][T21259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.370287][T21259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.381466][T21259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.381560][T21259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.991871][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.991948][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.091281][ T37] audit: type=1326 audit(1785772271.659:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21416 comm="syz.6.4777" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x0 [ 1490.463569][ T5952] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1490.574907][T12884] bridge_slave_1: left allmulticast mode [ 1490.574945][T12884] bridge_slave_1: left promiscuous mode [ 1490.575206][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.603743][T11001] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1490.626940][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.626977][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.627017][ T5952] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1490.627043][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.676259][ T5952] usb 5-1: config 0 descriptor?? [ 1490.766669][T21430] Bluetooth: MGMT ver 1.23 [ 1490.766709][T21430] Bluetooth: hci0: unsupported parameter 255 [ 1490.766730][T21430] Bluetooth: hci0: unsupported parameter 255 [ 1490.770069][T12884] bridge_slave_0: left allmulticast mode [ 1490.770104][T12884] bridge_slave_0: left promiscuous mode [ 1490.770490][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.770705][T11001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.770737][T11001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.770789][T11001] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1490.771036][T11001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.862918][T11001] usb 2-1: config 0 descriptor?? [ 1491.341429][ T5952] usbhid 5-1:0.0: can't add hid device: -71 [ 1491.341548][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1491.388415][ T5952] usb 5-1: USB disconnect, device number 80 [ 1491.733910][T11001] usb 2-1: language id specifier not provided by device, defaulting to English [ 1491.987204][T11001] uclogic 0003:256C:006D.0029: failed retrieving Huion firmware version: -71 [ 1491.987247][T11001] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 1491.987379][T11001] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 1492.029339][T11001] usb 2-1: USB disconnect, device number 18 [ 1492.948375][T12884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.095897][T12884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.137790][T12884] bond0 (unregistering): Released all slaves [ 1494.159536][T12884] bond1 (unregistering): Released all slaves [ 1494.277633][T12884] bond2 (unregistering): Released all slaves [ 1494.364675][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1494.502715][T21259] hsr_slave_0: entered promiscuous mode [ 1494.549195][T21259] hsr_slave_1: entered promiscuous mode [ 1494.549961][T21259] debugfs: 'hsr0' already exists in 'hsr' [ 1494.549979][T21259] Cannot create hsr debugfs directory [ 1494.881679][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4791'. [ 1496.513018][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1496.710617][T21496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.151538][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1498.235877][T21502] Process accounting resumed [ 1499.911069][ T37] audit: type=1326 audit(1785772281.479:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.1.4802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d4c3e019 code=0x0 [ 1503.495594][T12884] hsr_slave_0: left promiscuous mode [ 1503.536332][T12884] hsr_slave_1: left promiscuous mode [ 1503.537187][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.537206][T12884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.596263][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.596292][T12884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.708319][T12884] veth1_macvtap: left promiscuous mode [ 1503.708397][T12884] veth0_macvtap: left promiscuous mode [ 1503.718605][T12884] veth1_vlan: left promiscuous mode [ 1503.719157][T12884] veth0_vlan: left promiscuous mode [ 1503.815230][T21575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1503.833695][T11001] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1504.044609][T11001] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.044638][T11001] usb 7-1: config 0 has no interfaces? [ 1504.093089][T11001] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1504.093121][T11001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.093143][T11001] usb 7-1: Product: syz [ 1504.093158][T11001] usb 7-1: Manufacturer: syz [ 1504.093173][T11001] usb 7-1: SerialNumber: syz [ 1504.785306][T11001] usb 7-1: config 0 descriptor?? [ 1505.010717][T21577] Process accounting resumed [ 1505.014898][T19802] usb 7-1: USB disconnect, device number 22 [ 1505.089497][T21579] qrtr: Invalid version 0 [ 1506.194205][T12884] team0 (unregistering): Port device team_slave_1 removed [ 1506.495305][T12884] team0 (unregistering): Port device team_slave_0 removed [ 1507.056000][T21585] netlink: 'syz.7.4816': attribute type 12 has an invalid length. [ 1507.058136][T21583] syzkaller1: entered promiscuous mode [ 1507.058155][T21583] syzkaller1: entered allmulticast mode [ 1507.703585][T12876] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1507.879690][T12876] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.879777][T12876] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1507.879818][T12876] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1507.879853][T12876] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1507.886937][T12876] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.887012][T12876] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1507.887040][T12876] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1507.887068][T12876] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1507.951955][T12876] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1507.952000][T12876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.952025][T12876] usb 8-1: Product: syz [ 1507.952042][T12876] usb 8-1: Manufacturer: syz [ 1507.952059][T12876] usb 8-1: SerialNumber: syz [ 1508.044296][T12876] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 1508.070901][T12876] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1508.165328][T12876] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1508.379470][T21604] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1508.433840][T17114] usb 8-1: USB disconnect, device number 18 [ 1508.481614][T17114] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1508.579987][T17114] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1508.594116][T17114] ti_usb_3410_5052 8-1:2.0: device disconnected [ 1509.933460][ T5781] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1510.112230][ T5781] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1510.112266][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.112298][ T5781] usb 2-1: Product: syz [ 1510.112313][ T5781] usb 2-1: Manufacturer: syz [ 1510.112329][ T5781] usb 2-1: SerialNumber: syz [ 1510.487681][T12884] IPVS: stop unused estimator thread 0... [ 1510.581888][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1510.581960][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1510.623552][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1510.718682][T21259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1510.791684][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.791722][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.791762][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1510.791787][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.843104][ T9] usb 5-1: config 0 descriptor?? [ 1510.855019][T21259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1510.894135][T21259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1511.311334][T21665] FAT-fs (nbd6): unable to read boot sector [ 1511.462443][T21665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1511.462477][T21665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1511.462950][T21665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1511.756439][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 1511.995663][ T9] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71 [ 1511.995739][ T9] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 1511.995870][ T9] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 1512.076354][ T9] usb 5-1: USB disconnect, device number 81 [ 1512.192347][T21259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1512.218323][T21664] IPVS: stopping backup sync thread 21670 ... [ 1512.242510][T21259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1512.395747][T21259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1512.477424][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1512.477491][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1512.478445][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1512.532258][T21259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1512.578417][ T5781] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1512.620716][ T5781] usb 2-1: USB disconnect, device number 19 [ 1512.695991][T21259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.092522][T21684] FAT-fs (nbd4): unable to read boot sector [ 1513.374904][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1514.184013][T21259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.261481][T21259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.282952][T12884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.283101][T12884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.375277][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.377385][T17773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.833492][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1514.988991][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.989021][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1514.992068][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1514.992099][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.992122][ T9] usb 7-1: Product: syz [ 1514.992137][ T9] usb 7-1: Manufacturer: syz [ 1514.992154][ T9] usb 7-1: SerialNumber: syz [ 1515.058477][ T9] usb 7-1: config 0 descriptor?? [ 1515.288131][ T9] usb 7-1: USB disconnect, device number 23 [ 1515.682672][T21259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.814896][T21259] veth0_vlan: entered promiscuous mode [ 1515.893485][T21259] veth1_vlan: entered promiscuous mode [ 1515.946578][T21740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1515.996605][T21259] veth0_macvtap: entered promiscuous mode [ 1516.084289][T21259] veth1_macvtap: entered promiscuous mode [ 1517.234506][T21259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.692445][T21259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.404397][T11159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.436384][ T5887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.785655][T11996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.785676][T11996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.946256][T20773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.946279][T20773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.963594][T20773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.963645][T20773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.555901][T17140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.624626][T17140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.625972][T17140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1523.652330][T17140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1523.655950][T17140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1525.605371][T19802] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1525.730594][T11159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.764902][T19802] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1525.764936][T19802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.764958][T19802] usb 8-1: Product: syz [ 1525.764974][T19802] usb 8-1: Manufacturer: syz [ 1525.764989][T19802] usb 8-1: SerialNumber: syz [ 1525.829307][T17140] Bluetooth: hci4: command tx timeout [ 1526.289636][T19802] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1526.289700][T19802] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1526.345623][T11159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.887251][T11159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.995589][T21825] 8021q: VLANs not supported on ip6gre0 [ 1527.162023][T21836] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1527.232691][T19802] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1527.232750][T19802] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1527.272544][T19802] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1527.306818][T19802] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1527.332727][T19802] usb 8-1: USB disconnect, device number 19 [ 1527.511913][T11159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.700441][T21778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.700598][T21778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.700740][T21778] bridge_slave_0: entered allmulticast mode [ 1527.702821][T21778] bridge_slave_0: entered promiscuous mode [ 1527.713075][T21778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.714212][T21778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.714673][T21778] bridge_slave_1: entered allmulticast mode [ 1527.722944][T21778] bridge_slave_1: entered promiscuous mode [ 1527.909442][T21778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.913523][T17140] Bluetooth: hci0: command 0x0406 tx timeout [ 1527.913560][T17140] Bluetooth: hci4: command tx timeout [ 1527.952544][T21778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.148405][ T37] audit: type=1326 audit(1785772309.719:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21845 comm="syz.3.4867" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb871ae019 code=0x0 [ 1528.216301][T21778] team0: Port device team_slave_0 added [ 1528.247046][T21778] team0: Port device team_slave_1 added [ 1528.899734][T21778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.899754][T21778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.899786][T21778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.961628][T21778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.961645][T21778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.961676][T21778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.321000][T21778] hsr_slave_0: entered promiscuous mode [ 1529.329871][T21778] hsr_slave_1: entered promiscuous mode [ 1529.351629][T21778] debugfs: 'hsr0' already exists in 'hsr' [ 1529.351732][T21778] Cannot create hsr debugfs directory [ 1529.929478][T11159] bridge_slave_1: left allmulticast mode [ 1529.929515][T11159] bridge_slave_1: left promiscuous mode [ 1529.929806][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.983645][ T59] Bluetooth: hci4: command tx timeout [ 1530.105205][T11159] bridge_slave_0: left allmulticast mode [ 1530.105232][T11159] bridge_slave_0: left promiscuous mode [ 1530.107950][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.403515][T12876] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1531.556204][T12876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1531.556230][T12876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.556257][T12876] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1531.556275][T12876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.092693][ T59] Bluetooth: hci4: command tx timeout [ 1532.568606][T12876] usb 2-1: config 0 descriptor?? [ 1532.944307][T11159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.989533][T11159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.033622][T11159] bond0 (unregistering): Released all slaves [ 1533.075373][T21896] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1533.075404][T21896] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1533.075419][T21896] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1533.324450][T12876] usbhid 2-1:0.0: can't add hid device: -71 [ 1533.324580][T12876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1533.353592][T12876] usb 2-1: USB disconnect, device number 20 [ 1533.357414][T21902] qrtr: Invalid version 0 [ 1533.726380][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1533.863994][T11001] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1533.930397][T21904] syzkaller1: entered promiscuous mode [ 1533.930417][T21904] syzkaller1: entered allmulticast mode [ 1534.015391][T11001] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1534.015417][T11001] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1534.016411][T11001] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1534.016434][T11001] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1534.018557][T11001] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1534.018622][T11001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.018638][T11001] usb 7-1: Product: syz [ 1534.018649][T11001] usb 7-1: Manufacturer: syz [ 1534.018660][T11001] usb 7-1: SerialNumber: syz [ 1534.106054][T11001] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1534.143028][T11001] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1534.166249][T11001] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1534.361953][T21905] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 1534.378205][T11001] usb 7-1: USB disconnect, device number 24 [ 1534.421496][T11001] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1534.431977][T11001] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1534.458848][T11001] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1535.020609][T21911] syzkaller1: entered promiscuous mode [ 1535.020637][T21911] syzkaller1: entered allmulticast mode [ 1535.691861][T21931] qrtr: Invalid version 0 [ 1536.021999][T21932] syzkaller1: entered promiscuous mode [ 1536.022029][T21932] syzkaller1: entered allmulticast mode [ 1536.425371][T21938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4885'. [ 1537.943579][T11159] hsr_slave_0: left promiscuous mode [ 1537.964075][T11159] hsr_slave_1: left promiscuous mode [ 1537.964848][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.964890][T11159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.049877][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.049899][T11159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.098026][T11159] veth1_macvtap: left promiscuous mode [ 1538.098102][T11159] veth0_macvtap: left promiscuous mode [ 1538.098288][T11159] veth1_vlan: left promiscuous mode [ 1538.098461][T11159] veth0_vlan: left promiscuous mode [ 1538.833458][T11159] team0 (unregistering): Port device team_slave_1 removed [ 1539.114485][T11159] team0 (unregistering): Port device team_slave_0 removed [ 1539.396310][T21942] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1539.396357][T21942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1539.396381][T21942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1540.640060][T21986] netlink: 'syz.6.4897': attribute type 1 has an invalid length. [ 1540.793787][ T5797] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1540.977489][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1540.977526][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.977567][ T5797] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1540.977594][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.980710][T21986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1541.001024][ T5797] usb 4-1: config 0 descriptor?? [ 1541.189181][T21995] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1541.445772][ T5797] usbhid 4-1:0.0: can't add hid device: -71 [ 1541.445887][ T5797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1541.475816][ T5797] usb 4-1: USB disconnect, device number 65 [ 1542.599414][T11159] IPVS: stop unused estimator thread 0... [ 1543.229060][T22037] netlink: 'syz.7.4904': attribute type 1 has an invalid length. [ 1543.638584][T22037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1544.479433][T21778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1544.567665][T21778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.674537][T21778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1544.722154][T21778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.735251][T21778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1544.843018][T21778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1544.854111][T21778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1544.942592][T21778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1545.115973][ T37] audit: type=1326 audit(1785772326.679:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22083 comm="syz.1.4910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d4c3e019 code=0x0 [ 1545.304334][T21778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.390076][T21778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.524782][T20773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.524927][T20773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.552151][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.552334][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.693453][T19802] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1545.846434][T19802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1545.846470][T19802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.846509][T19802] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1545.846533][T19802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.902069][T19802] usb 4-1: config 0 descriptor?? [ 1546.328431][T19802] usbhid 4-1:0.0: can't add hid device: -71 [ 1546.328569][T19802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1546.362837][T19802] usb 4-1: USB disconnect, device number 66 [ 1546.796454][T21778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.745869][T22144] FAT-fs (nbd7): unable to read boot sector [ 1549.679494][T21778] veth0_vlan: entered promiscuous mode [ 1549.697232][T21778] veth1_vlan: entered promiscuous mode [ 1549.791244][T21778] veth0_macvtap: entered promiscuous mode [ 1549.848023][T21778] veth1_macvtap: entered promiscuous mode [ 1549.928197][T21778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.968367][T21778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.990752][T20773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.991159][T20773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.991217][T20773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.991257][T20773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.168164][T22156] syzkaller1: entered promiscuous mode [ 1550.168192][T22156] syzkaller1: entered allmulticast mode [ 1551.295736][ T37] audit: type=1326 audit(1785772332.859:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22169 comm="syz.3.4928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb871ae019 code=0x0 [ 1551.351646][ T5887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.351669][ T5887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.426790][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.426864][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.574114][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.574137][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.320807][T22189] kvm: kvm [22188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a000000292c [ 1553.336859][T22189] kvm: kvm [22188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc90000004900 [ 1553.615050][T22197] 8021q: VLANs not supported on gre0 [ 1558.541072][T22243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1560.184087][T22244] Process accounting resumed [ 1560.593600][T12060] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1560.744084][T12060] usb 4-1: Using ep0 maxpacket: 32 [ 1560.747093][T12060] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1560.747115][T12060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.752433][T12060] usb 4-1: config 0 descriptor?? [ 1561.001478][T22259] netlink: 'syz.3.4951': attribute type 2 has an invalid length. [ 1561.227534][ T37] audit: type=1326 audit(1785772342.799:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22268 comm="syz.1.4955" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d4c3e019 code=0x0 [ 1562.993663][T12060] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1562.995337][T12060] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1562.995475][T12060] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1563.240956][T22294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4962'. [ 1566.931131][T22317] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4968'. [ 1573.227767][T22342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1574.868298][T22343] Process accounting resumed [ 1575.980338][T22385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.551365][T22385] Process accounting resumed [ 1581.033618][T12876] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1581.183495][T12876] usb 7-1: Using ep0 maxpacket: 32 [ 1581.188643][T12876] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1581.188674][T12876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.207611][T12876] usb 7-1: config 0 descriptor?? [ 1581.429908][T12876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1581.439105][T12876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1581.442168][T12876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1581.442229][T12876] usb 7-1: media controller created [ 1581.486859][T12876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1581.666147][T22417] netlink: 'syz.6.4995': attribute type 2 has an invalid length. [ 1582.111202][T22440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1583.506883][T22450] syz.4.5003 (22450): drop_caches: 0 [ 1583.632774][T22442] Process accounting resumed [ 1583.633499][T12876] az6027: usb out operation failed. (-110) [ 1583.635278][T12876] az6027: usb out operation failed. (-32) [ 1583.635337][T12876] stb0899_attach: Driver disabled by Kconfig [ 1583.635367][T12876] az6027: no front-end attached [ 1583.635367][T12876] [ 1583.644221][T12876] az6027: usb out operation failed. (-32) [ 1583.644287][T12876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1583.768348][T12876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input46 [ 1583.794975][T12876] dvb-usb: schedule remote query interval to 400 msecs. [ 1583.794998][T12876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1583.883433][T12876] usb 7-1: USB disconnect, device number 25 [ 1584.851776][T12876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1585.470699][T22466] FAT-fs (nbd6): unable to read boot sector [ 1586.122053][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5008'. [ 1589.315480][T22488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.400600][T22491] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1589.584068][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 1591.027961][T22494] Process accounting resumed [ 1591.637306][T22500] Process accounting resumed [ 1592.924455][T22513] syzkaller1: entered promiscuous mode [ 1592.924495][T22513] syzkaller1: entered allmulticast mode [ 1594.557323][T22529] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1594.557386][T22529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1594.557429][T22529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1595.115722][ T37] audit: type=1326 audit(1785772376.689:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22542 comm="syz.7.5028" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1595.323506][ T198] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1595.463858][ T198] usb 7-1: device descriptor read/64, error -71 [ 1595.715940][ T198] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1595.853572][ T198] usb 7-1: device descriptor read/64, error -71 [ 1595.947949][T22565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5035'. [ 1595.970173][ T198] usb usb7-port1: attempt power cycle [ 1596.365537][ T198] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1596.386046][ T198] usb 7-1: device descriptor read/8, error -71 [ 1596.633487][ T198] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1596.657806][ T198] usb 7-1: device descriptor read/8, error -71 [ 1596.765394][ T198] usb usb7-port1: unable to enumerate USB device [ 1597.393482][T11001] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1597.543445][T11001] usb 8-1: Using ep0 maxpacket: 32 [ 1597.546292][T11001] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1597.546322][T11001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.583163][T11001] usb 8-1: config 0 descriptor?? [ 1597.807047][T11001] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1597.838725][T11001] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1597.840242][T11001] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1597.840307][T11001] usb 8-1: media controller created [ 1597.882042][T11001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1599.121422][T11001] az6027: usb out operation failed. (-71) [ 1599.122691][T11001] az6027: usb out operation failed. (-71) [ 1599.122708][T11001] stb0899_attach: Driver disabled by Kconfig [ 1599.122719][T11001] az6027: no front-end attached [ 1599.122719][T11001] [ 1599.153932][T11001] az6027: usb out operation failed. (-71) [ 1599.153950][T11001] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1599.185791][T11001] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input47 [ 1599.241151][T11001] dvb-usb: schedule remote query interval to 400 msecs. [ 1599.241175][T11001] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1599.271719][T11001] usb 8-1: USB disconnect, device number 20 [ 1599.416692][T22606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1599.478373][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1599.514499][T11001] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1599.699510][T22617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1601.997576][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5054'. [ 1602.243478][ T5781] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1602.373535][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1602.613627][ T5781] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1602.658553][T22648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.984473][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1603.782492][ T5781] usb usb2-port1: attempt power cycle [ 1603.861546][T22650] Process accounting resumed [ 1604.125155][ T5781] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1604.183175][ T5781] usb 2-1: device descriptor read/8, error -71 [ 1604.423477][ T5781] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1604.465817][ T5781] usb 2-1: device descriptor read/8, error -71 [ 1604.600876][ T5781] usb usb2-port1: unable to enumerate USB device [ 1604.864803][ T37] audit: type=1326 audit(1785772386.429:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22664 comm="syz.7.5062" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1605.225628][ T37] audit: type=1326 audit(1785772386.779:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22672 comm="syz.4.5065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec821be019 code=0x0 [ 1606.623541][T22694] netlink: 'syz.6.5069': attribute type 5 has an invalid length. [ 1606.623565][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5069'. [ 1606.630908][T22694] netlink: 'syz.6.5069': attribute type 5 has an invalid length. [ 1606.630923][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5069'. [ 1606.688898][ T37] audit: type=1326 audit(1785772388.249:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22691 comm="syz.7.5068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1607.498587][T22714] FAT-fs (nbd3): unable to read boot sector [ 1607.717976][T22714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1607.718250][T22714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1607.719097][T22714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1608.823877][ T37] audit: type=1326 audit(1785772390.399:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22716 comm="syz.7.5074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1608.892974][T22724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1613.674536][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.674611][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.960342][T22777] syzkaller1: entered promiscuous mode [ 1613.960362][T22777] syzkaller1: entered allmulticast mode [ 1614.144222][ T198] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1614.303679][ T198] usb 8-1: Using ep0 maxpacket: 32 [ 1614.306507][ T198] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1614.306543][ T198] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.356246][ T198] usb 8-1: config 0 descriptor?? [ 1614.580178][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5089'. [ 1614.580291][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5089'. [ 1614.776178][ T1531] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.778122][ T1531] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.778171][ T1531] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.778214][ T1531] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.241718][T22797] netlink: 'syz.6.5095': attribute type 1 has an invalid length. [ 1615.389222][T22797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1615.496456][ T198] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1616.085058][ T5781] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1616.213379][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1616.326618][T22812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5099'. [ 1616.480246][ T5781] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1616.652881][T17114] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1616.963766][T17114] usb 7-1: Using ep0 maxpacket: 32 [ 1617.004340][T17114] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1617.004409][T17114] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.239907][T17114] usb 7-1: config 0 descriptor?? [ 1620.576260][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1620.632505][T17114] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1620.684184][ T5781] usb usb2-port1: attempt power cycle [ 1627.303470][ T5781] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1627.366210][T22870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1627.433608][ T5781] usb 5-1: device descriptor read/64, error -71 [ 1627.803991][ T5781] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1627.988618][ T5781] usb 5-1: device descriptor read/64, error -71 [ 1628.245836][ T5781] usb usb5-port1: attempt power cycle [ 1628.406715][ T198] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1628.406794][ T198] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1628.410488][ T198] usb 8-1: USB disconnect, device number 21 [ 1628.412839][T17114] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1628.412907][T17114] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1628.593532][T17114] usb 7-1: USB disconnect, device number 30 [ 1628.783690][ T5781] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1628.808443][ T5781] usb 5-1: device descriptor read/8, error -71 [ 1629.069834][T12060] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1629.070355][T12060] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1629.283896][ T5781] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1629.327173][ T5781] usb 5-1: device descriptor read/8, error -71 [ 1629.437294][ T5781] usb usb5-port1: unable to enumerate USB device [ 1630.471564][T12060] usb 4-1: USB disconnect, device number 67 [ 1630.695521][T22872] Process accounting resumed [ 1630.953883][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1631.114627][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1631.116956][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1631.116976][ T9] usb 8-1: config 0 has no interface number 0 [ 1631.119773][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1631.119803][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.119826][ T9] usb 8-1: Product: syz [ 1631.119851][ T9] usb 8-1: Manufacturer: syz [ 1631.119863][ T9] usb 8-1: SerialNumber: syz [ 1631.180969][ T9] usb 8-1: config 0 descriptor?? [ 1631.210157][ T9] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1631.210188][ T9] usb 8-1: selecting invalid altsetting 1 [ 1631.210211][ T9] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1631.252102][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1631.252387][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1631.277031][ T9] usb 8-1: media controller created [ 1631.330859][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1632.055104][T22895] syzkaller1: entered promiscuous mode [ 1632.055134][T22895] syzkaller1: entered allmulticast mode [ 1632.471238][ T9] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1632.471328][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1632.509445][T22875] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1632.648639][ T9] usb 8-1: USB disconnect, device number 22 [ 1633.342140][T22914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1634.500179][T22916] Process accounting resumed [ 1634.594035][ T5781] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1634.621511][T22924] syz.7.5130 (22924): drop_caches: 0 [ 1634.746055][ T5781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.746086][ T5781] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1634.746126][ T5781] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1634.746152][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.795254][ T5781] usb 5-1: config 0 descriptor?? [ 1637.781499][T22965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.749006][ T5781] usb 5-1: USB disconnect, device number 86 [ 1639.042971][T22966] Process accounting resumed [ 1639.163102][T22977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1639.262041][T22977] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1639.286221][T22977] bond1 (unregistering): Released all slaves [ 1640.049646][T22991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1640.063718][T22991] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1643.768505][T23006] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 1643.885235][T23006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1644.099574][T23006] bond1: (slave geneve2): making interface the new active one [ 1644.124701][T23006] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1644.516539][T23017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1645.627281][T23019] Process accounting resumed [ 1645.695990][T23026] netlink: 'syz.6.5156': attribute type 1 has an invalid length. [ 1645.784671][T23034] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5158'. [ 1645.786655][T23034] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5158'. [ 1645.829877][T23026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1648.824947][T23047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5161'. [ 1649.790280][T23047] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1649.866403][T23047] bond4 (unregistering): Released all slaves [ 1649.998268][T23056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1650.761718][T23067] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1650.784812][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1653.168529][T23056] Process accounting resumed [ 1653.323564][T23075] Process accounting resumed [ 1653.406388][T23078] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5169'. [ 1653.451696][T23078] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1653.478946][T23078] bond5 (unregistering): Released all slaves [ 1655.233438][T11001] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1655.383767][T11001] usb 7-1: Using ep0 maxpacket: 8 [ 1655.386200][T11001] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1655.386240][T11001] usb 7-1: config 0 has no interface number 0 [ 1655.386286][T11001] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1655.386316][T11001] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1655.386341][T11001] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1655.389599][T11001] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1655.389630][T11001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.389653][T11001] usb 7-1: Product: syz [ 1655.389677][T11001] usb 7-1: Manufacturer: syz [ 1655.389695][T11001] usb 7-1: SerialNumber: syz [ 1655.487427][T11001] usb 7-1: config 0 descriptor?? [ 1656.653531][ T5781] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1656.803438][ T5781] usb 8-1: Using ep0 maxpacket: 8 [ 1656.807207][ T5781] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 1656.807236][ T5781] usb 8-1: config 0 has no interface number 0 [ 1656.807281][ T5781] usb 8-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1656.807367][ T5781] usb 8-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1656.807393][ T5781] usb 8-1: config 0 interface 200 has no altsetting 0 [ 1656.811069][ T5781] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1656.811098][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.811366][ T5781] usb 8-1: Product: syz [ 1656.811384][ T5781] usb 8-1: Manufacturer: syz [ 1656.811401][ T5781] usb 8-1: SerialNumber: syz [ 1656.906930][ T5781] usb 8-1: config 0 descriptor?? [ 1657.702371][T11001] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input48 [ 1657.780503][T11001] usb 7-1: USB disconnect, device number 31 [ 1658.952623][ T5781] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.200/input/input49 [ 1658.972793][ T5781] usb 8-1: USB disconnect, device number 23 [ 1659.083978][T23125] 9p: Could not find request transport: fd0x0000000000000005 [ 1659.197073][T23128] Process accounting resumed [ 1660.277160][T23146] syzkaller1: entered promiscuous mode [ 1660.277187][T23146] syzkaller1: entered allmulticast mode [ 1661.897568][T23150] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1661.897602][T23150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1661.897617][T23150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1662.205439][T23155] syz.7.5189 (23155): drop_caches: 0 [ 1662.440344][T23158] netlink: 'syz.6.5191': attribute type 1 has an invalid length. [ 1662.557133][T23158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1662.681388][T23165] netlink: 'syz.4.5193': attribute type 1 has an invalid length. [ 1662.838753][T23165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1662.932063][T23170] bond1: (slave geneve2): making interface the new active one [ 1663.020523][T23170] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1663.487325][T23181] netlink: 'syz.6.5197': attribute type 1 has an invalid length. [ 1663.529939][T23181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1663.724906][ T37] audit: type=1326 audit(1785772445.299:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.7.5198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1664.468915][T23200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5201'. [ 1670.189792][T23225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5207'. [ 1671.958259][T23236] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 1673.393539][T23236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1674.433660][T22876] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1674.663821][T22876] usb 5-1: Using ep0 maxpacket: 8 [ 1674.771726][T22876] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1674.775425][T22876] usb 5-1: config 0 has no interface number 0 [ 1674.775922][T22876] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1674.775999][T22876] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1674.776811][T22876] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1674.879365][T22876] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1674.879463][T22876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.879521][T22876] usb 5-1: Product: syz [ 1674.879672][T22876] usb 5-1: Manufacturer: syz [ 1674.879733][T22876] usb 5-1: SerialNumber: syz [ 1674.946472][T22876] usb 5-1: config 0 descriptor?? [ 1674.965667][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.965769][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.447967][T23269] netlink: 'syz.7.5217': attribute type 1 has an invalid length. [ 1676.558537][T23273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5218'. [ 1676.593171][T23269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1676.679907][T22876] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input50 [ 1676.737556][T22876] usb 5-1: USB disconnect, device number 87 [ 1677.126081][T23277] 9pnet_fd: Insufficient options for proto=fd [ 1681.521779][T23321] syzkaller1: entered promiscuous mode [ 1681.521808][T23321] syzkaller1: entered allmulticast mode [ 1686.012665][T23335] syzkaller1: entered promiscuous mode [ 1686.012685][T23335] syzkaller1: entered allmulticast mode [ 1688.164238][T23357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1688.586657][T22876] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1688.734181][T22876] usb 7-1: Using ep0 maxpacket: 32 [ 1688.740186][T22876] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1688.740215][T22876] usb 7-1: config 0 has no interface number 0 [ 1688.767921][T22876] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1688.767944][T22876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.767960][T22876] usb 7-1: Product: syz [ 1688.767971][T22876] usb 7-1: Manufacturer: syz [ 1688.767983][T22876] usb 7-1: SerialNumber: syz [ 1688.805563][T23356] Process accounting resumed [ 1688.818018][T22876] usb 7-1: config 0 descriptor?? [ 1688.834331][T22876] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1688.834352][T22876] usb 7-1: selecting invalid altsetting 1 [ 1688.834365][T22876] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1688.874278][T22876] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1688.874877][T22876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1688.874934][T22876] usb 7-1: media controller created [ 1688.916690][T22876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1689.983772][T22876] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1689.983852][T22876] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1690.011685][T23360] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1690.076639][T22876] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1690.312356][T22876] usb 7-1: USB disconnect, device number 32 [ 1691.922040][T22590] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1692.073502][T22590] usb 8-1: Using ep0 maxpacket: 8 [ 1692.075775][T22590] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 1692.075803][T22590] usb 8-1: config 0 has no interface number 0 [ 1692.075963][T22590] usb 8-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1692.076003][T22590] usb 8-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1692.076021][T22590] usb 8-1: config 0 interface 200 has no altsetting 0 [ 1692.080339][T22590] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1692.080359][T22590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.080374][T22590] usb 8-1: Product: syz [ 1692.080385][T22590] usb 8-1: Manufacturer: syz [ 1692.080396][T22590] usb 8-1: SerialNumber: syz [ 1692.090766][T22590] usb 8-1: config 0 descriptor?? [ 1693.123478][T17114] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1693.273846][T17114] usb 2-1: Using ep0 maxpacket: 32 [ 1693.277652][T17114] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1693.277684][T17114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.331555][T17114] usb 2-1: config 0 descriptor?? [ 1693.622471][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 1693.622517][T23412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5259'. [ 1694.133784][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.157226][T20773] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.158055][T12085] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.158168][T12085] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.222185][T17114] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1695.257107][T17114] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1695.257140][T17114] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1695.521701][T23425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5262'. [ 1699.720656][T22590] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.200/input/input51 [ 1700.276197][ T9] usb 8-1: USB disconnect, device number 24 [ 1705.706215][T23500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5282'. [ 1709.049672][T23520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5288'. [ 1712.357074][ T37] audit: type=1326 audit(1785772493.929:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23563 comm="syz.7.5299" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1716.850709][T23593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1721.533761][T12060] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1721.683498][ T198] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1721.703995][T12060] usb 7-1: Using ep0 maxpacket: 8 [ 1721.728342][T12060] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1721.728373][T12060] usb 7-1: config 0 has no interface number 0 [ 1721.728422][T12060] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1721.728452][T12060] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1721.728479][T12060] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1721.804508][T12060] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1721.804532][T12060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.804547][T12060] usb 7-1: Product: syz [ 1721.804559][T12060] usb 7-1: Manufacturer: syz [ 1721.804570][T12060] usb 7-1: SerialNumber: syz [ 1721.823672][T12060] usb 7-1: config 0 descriptor?? [ 1721.856025][ T198] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1721.857518][ T198] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1721.891990][ T198] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1721.892038][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.892062][ T198] usb 4-1: Product: syz [ 1721.892079][ T198] usb 4-1: Manufacturer: syz [ 1721.892095][ T198] usb 4-1: SerialNumber: syz [ 1721.976588][ T198] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1722.001220][ T198] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1722.020587][ T198] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1722.249490][ T198] usb 4-1: USB disconnect, device number 68 [ 1722.308875][ T198] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1722.329230][ T198] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1722.330484][ T198] ti_usb_3410_5052 4-1:2.0: device disconnected [ 1722.442932][ T37] audit: type=1326 audit(1785772504.009:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23629 comm="syz.4.5315" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec821be019 code=0x0 [ 1727.682179][T12060] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input52 [ 1728.993708][T12060] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1729.153419][T12060] usb 8-1: Using ep0 maxpacket: 8 [ 1729.155412][T12060] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 1729.155440][T12060] usb 8-1: config 0 has no interface number 0 [ 1729.155488][T12060] usb 8-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1729.155520][T12060] usb 8-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1729.155546][T12060] usb 8-1: config 0 interface 200 has no altsetting 0 [ 1729.159745][T12060] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1729.159777][T12060] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.159801][T12060] usb 8-1: Product: syz [ 1729.159818][T12060] usb 8-1: Manufacturer: syz [ 1729.159835][T12060] usb 8-1: SerialNumber: syz [ 1729.191989][T12060] usb 8-1: config 0 descriptor?? [ 1729.266012][ T198] usb 7-1: USB disconnect, device number 33 [ 1733.216127][T12060] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.200/input/input53 [ 1733.298814][T12060] usb 8-1: USB disconnect, device number 25 [ 1733.592237][T23691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1735.283886][T23704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5333'. [ 1735.814219][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.814294][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.987276][T23695] Process accounting resumed [ 1740.257132][T23725] kvm: kvm [23722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x950100007922 [ 1740.757107][ T37] audit: type=1326 audit(1785772522.329:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23739 comm="syz.7.5343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1742.841597][T23764] FAT-fs (nbd6): unable to read boot sector [ 1743.011888][T23765] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5347'. [ 1743.353648][ T198] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1743.514566][ T198] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1743.514639][ T198] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1743.527806][ T198] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1743.527849][ T198] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1743.545872][ T198] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1743.545952][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.546012][ T198] usb 5-1: Product: syz [ 1743.546069][ T198] usb 5-1: Manufacturer: syz [ 1743.546087][ T198] usb 5-1: SerialNumber: syz [ 1743.830608][ T198] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 1743.856640][T23769] netlink: 'syz.3.5349': attribute type 1 has an invalid length. [ 1743.902290][ T198] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1743.920321][ T198] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1744.095577][ T198] usb 5-1: USB disconnect, device number 88 [ 1744.115147][ T198] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1744.253764][ T198] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1744.258150][ T198] ti_usb_3410_5052 5-1:2.0: device disconnected [ 1744.329107][T23769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1746.045110][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1746.265473][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1746.414300][T19802] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1746.613364][T19802] usb 8-1: Using ep0 maxpacket: 32 [ 1746.644710][T19802] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1746.644751][T19802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.733153][T19802] usb 8-1: config 0 descriptor?? [ 1746.806473][ T198] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1746.931062][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1746.931097][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.156826][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1747.156864][T23796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1747.180361][ T9] usb 7-1: config 0 descriptor?? [ 1747.354129][ T198] usb 5-1: Using ep0 maxpacket: 32 [ 1747.358497][ T198] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1747.358525][ T198] usb 5-1: config 0 has no interface number 0 [ 1747.386512][ T198] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1747.386998][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.387025][ T198] usb 5-1: Product: syz [ 1747.387041][ T198] usb 5-1: Manufacturer: syz [ 1747.387548][ T198] usb 5-1: SerialNumber: syz [ 1747.434196][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1747.485269][ T198] usb 5-1: config 0 descriptor?? [ 1747.540788][ T198] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1747.540819][ T198] usb 5-1: selecting invalid altsetting 1 [ 1747.540838][ T198] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1747.560231][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1747.562219][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1747.562335][ T9] usb 7-1: media controller created [ 1747.592718][ T198] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1747.666558][T19802] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1747.861916][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1750.256037][ T198] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1750.256113][ T198] usb 5-1: media controller created [ 1750.315803][ T198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1750.758469][T23814] netlink: 'syz.7.5362': attribute type 1 has an invalid length. [ 1750.841888][ T198] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1750.842010][ T198] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1750.845610][ T198] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1750.968964][T23820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.066733][ T198] usb 5-1: USB disconnect, device number 89 [ 1752.308376][ T9] az6027: usb out operation failed. (-110) [ 1752.308838][ T9] az6027: usb out operation failed. (-32) [ 1752.308855][ T9] stb0899_attach: Driver disabled by Kconfig [ 1752.308866][ T9] az6027: no front-end attached [ 1752.308866][ T9] [ 1752.309288][ T9] az6027: usb out operation failed. (-32) [ 1752.309304][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1752.330773][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 1752.357107][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1752.357132][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1752.490561][T23824] Process accounting resumed [ 1752.714751][T23814] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1752.816312][T22590] usb 7-1: USB disconnect, device number 34 [ 1753.037563][T22590] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1753.160469][ T37] audit: type=1326 audit(1785772534.729:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.6.5368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x0 [ 1756.417857][T19802] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1756.417941][T19802] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1758.152904][T17114] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1758.152986][T17114] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1758.153990][T19802] usb 8-1: USB disconnect, device number 26 [ 1758.250648][T17114] usb 2-1: USB disconnect, device number 28 [ 1758.383416][T12876] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1758.512671][T23887] netlink: 'syz.7.5381': attribute type 1 has an invalid length. [ 1759.482714][T12876] usb 7-1: Using ep0 maxpacket: 32 [ 1759.747681][T12876] usb 7-1: device descriptor read/all, error -71 [ 1759.786709][T23887] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1760.593986][T12876] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1760.743653][T12876] usb 7-1: Using ep0 maxpacket: 32 [ 1760.750903][T12876] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1760.750932][T12876] usb 7-1: config 0 has no interface number 0 [ 1760.776229][T12876] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1760.776261][T12876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.777235][T12876] usb 7-1: Product: syz [ 1760.777255][T12876] usb 7-1: Manufacturer: syz [ 1760.777278][T12876] usb 7-1: SerialNumber: syz [ 1760.851265][T12876] usb 7-1: config 0 descriptor?? [ 1760.880491][T12876] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1760.880522][T12876] usb 7-1: selecting invalid altsetting 1 [ 1760.880541][T12876] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1760.934584][T12876] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1760.936998][T12876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1760.991781][T12876] usb 7-1: media controller created [ 1761.109067][T12876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1762.147888][T23910] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1762.530144][T12876] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1762.530324][T12876] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1762.700600][T12876] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1762.948080][T12876] usb 7-1: USB disconnect, device number 36 [ 1766.845251][ T5781] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1766.945572][T23961] netlink: 'syz.6.5399': attribute type 1 has an invalid length. [ 1767.013483][ T5781] usb 5-1: Using ep0 maxpacket: 32 [ 1767.019427][ T5781] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1767.019458][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.060155][ T5781] usb 5-1: config 0 descriptor?? [ 1767.246999][T23961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1767.317769][ T5781] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1767.342861][ T5781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1767.353948][ T5781] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1767.354005][ T5781] usb 5-1: media controller created [ 1767.425461][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1767.456031][T12876] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1767.609442][T23952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1767.609490][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1767.645616][T12876] usb 4-1: Using ep0 maxpacket: 32 [ 1767.648950][T12876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1767.648970][T12876] usb 4-1: config 0 has no interface number 0 [ 1767.673807][T12876] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1767.673842][T12876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.673865][T12876] usb 4-1: Product: syz [ 1767.673882][T12876] usb 4-1: Manufacturer: syz [ 1767.673898][T12876] usb 4-1: SerialNumber: syz [ 1767.755036][T12876] usb 4-1: config 0 descriptor?? [ 1767.826262][T12876] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1767.826295][T12876] usb 4-1: selecting invalid altsetting 1 [ 1767.826308][T12876] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1767.952211][T12876] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1767.952597][T12876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1767.952650][T12876] usb 4-1: media controller created [ 1768.054486][ T68] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.056625][ T5781] az6027: usb out operation failed. (-71) [ 1768.057121][ T5781] az6027: usb out operation failed. (-71) [ 1768.057138][ T5781] stb0899_attach: Driver disabled by Kconfig [ 1768.057149][ T5781] az6027: no front-end attached [ 1768.057149][ T5781] [ 1768.059774][ T5781] az6027: usb out operation failed. (-71) [ 1768.059792][ T5781] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1768.063190][ T5781] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 1768.072130][ T5846] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.142001][ T5781] dvb-usb: schedule remote query interval to 400 msecs. [ 1768.142020][ T5781] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1768.160047][ T5781] usb 5-1: USB disconnect, device number 90 [ 1768.207493][T12876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1768.363440][T23646] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.375856][T23646] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.391778][T12876] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1768.391926][T12876] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1768.419424][T12876] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1768.551645][ T5781] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1768.691745][T12876] usb 4-1: USB disconnect, device number 69 [ 1769.929745][T23998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1769.932502][T23998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1773.021931][T24004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1773.105113][ T37] audit: type=1326 audit(1785772554.669:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24001 comm="syz.7.5411" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1775.734781][T24006] Process accounting resumed [ 1776.232395][T24040] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5422'. [ 1776.236284][T24040] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5422'. [ 1778.963434][ T5781] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1779.174096][ T5781] usb 5-1: Using ep0 maxpacket: 32 [ 1779.714575][ T5781] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1779.714663][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.909511][ T5781] usb 5-1: config 0 descriptor?? [ 1780.594469][ T5781] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1780.600011][ T5781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1780.601067][ T5781] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1780.601123][ T5781] usb 5-1: media controller created [ 1780.687096][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1780.821175][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1780.821629][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1780.859247][ T5781] az6027: usb out operation failed. (-71) [ 1780.860501][ T5781] az6027: usb out operation failed. (-71) [ 1780.860518][ T5781] stb0899_attach: Driver disabled by Kconfig [ 1780.860530][ T5781] az6027: no front-end attached [ 1780.860530][ T5781] [ 1780.860955][ T5781] az6027: usb out operation failed. (-71) [ 1780.860971][ T5781] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1780.907730][T24055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1780.909111][ T5781] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 1780.932374][ T5781] dvb-usb: schedule remote query interval to 400 msecs. [ 1780.932395][ T5781] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1780.952331][ T5781] usb 5-1: USB disconnect, device number 91 [ 1780.985960][T24057] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5427'. [ 1783.107219][T24062] Process accounting resumed [ 1785.348854][ T5781] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1786.021227][T24086] netlink: 'syz.1.5434': attribute type 1 has an invalid length. [ 1786.124069][T24086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1786.229103][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5436'. [ 1786.231036][T24094] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5436'. [ 1786.533382][ T5781] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1786.722158][ T5781] usb 8-1: Using ep0 maxpacket: 32 [ 1786.849409][ T5781] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1786.849442][ T5781] usb 8-1: config 0 has no interface number 0 [ 1787.919604][ T5781] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1787.920058][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.920149][ T5781] usb 8-1: Product: syz [ 1787.920194][ T5781] usb 8-1: Manufacturer: syz [ 1787.920268][ T5781] usb 8-1: SerialNumber: syz [ 1788.086456][ T5781] usb 8-1: config 0 descriptor?? [ 1789.628457][ T5781] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1789.628488][ T5781] usb 8-1: selecting invalid altsetting 1 [ 1789.628506][ T5781] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1789.650355][ T5781] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1789.651623][ T5781] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1789.652030][ T5781] usb 8-1: media controller created [ 1789.687702][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1789.767223][ T5781] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1789.767293][ T5781] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1789.767711][ T5781] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1789.838495][T11001] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1789.967747][ T5781] usb 8-1: USB disconnect, device number 27 [ 1790.045350][T24107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1791.785498][T19802] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1792.034165][T19802] usb 8-1: Using ep0 maxpacket: 32 [ 1792.038248][T19802] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1792.038277][T19802] usb 8-1: config 0 has no interface number 0 [ 1792.111074][T19802] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1792.111097][T19802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.111112][T19802] usb 8-1: Product: syz [ 1792.111123][T19802] usb 8-1: Manufacturer: syz [ 1792.111133][T19802] usb 8-1: SerialNumber: syz [ 1792.177205][T19802] usb 8-1: config 0 descriptor?? [ 1792.205662][T24109] Process accounting resumed [ 1792.206257][T19802] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1792.206283][T19802] usb 8-1: selecting invalid altsetting 1 [ 1792.206302][T19802] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1792.244010][T19802] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1792.244255][T19802] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1792.244291][T19802] usb 8-1: media controller created [ 1792.298128][T19802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1793.437634][T19802] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1793.437718][T19802] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1793.573790][T24112] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1794.684733][ T5781] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1794.776886][T19802] usb 8-1: USB disconnect, device number 28 [ 1794.843405][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 1794.852259][ T5781] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1794.852296][ T5781] usb 5-1: config 0 has no interface number 0 [ 1794.852339][ T5781] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1794.852368][ T5781] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1794.852393][ T5781] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1794.904672][ T5781] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1794.904704][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.904726][ T5781] usb 5-1: Product: syz [ 1794.904741][ T5781] usb 5-1: Manufacturer: syz [ 1794.904757][ T5781] usb 5-1: SerialNumber: syz [ 1794.910985][ T5781] usb 5-1: config 0 descriptor?? [ 1796.833343][T19802] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1796.852854][ T5781] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input58 [ 1796.911480][ T5781] usb 5-1: USB disconnect, device number 92 [ 1796.983355][T19802] usb 2-1: Using ep0 maxpacket: 8 [ 1796.987782][T19802] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 1796.987810][T19802] usb 2-1: config 0 has no interface number 0 [ 1796.987857][T19802] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1796.987887][T19802] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1796.987914][T19802] usb 2-1: config 0 interface 200 has no altsetting 0 [ 1796.992516][T19802] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1796.992539][T19802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.992555][T19802] usb 2-1: Product: syz [ 1796.992566][T19802] usb 2-1: Manufacturer: syz [ 1796.992606][T19802] usb 2-1: SerialNumber: syz [ 1797.094973][T19802] usb 2-1: config 0 descriptor?? [ 1797.199109][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.199272][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.393481][ T5781] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1797.579509][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1797.579804][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.580187][ T5781] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1797.580219][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.655147][ T5781] usb 5-1: config 0 descriptor?? [ 1797.833485][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1797.983390][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1797.987333][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1797.987361][ T9] usb 7-1: config 0 has no interface number 0 [ 1797.990473][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1797.990503][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.990526][ T9] usb 7-1: Product: syz [ 1797.990542][ T9] usb 7-1: Manufacturer: syz [ 1797.990557][ T9] usb 7-1: SerialNumber: syz [ 1798.022648][ T9] usb 7-1: config 0 descriptor?? [ 1798.041259][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1798.041342][ T9] usb 7-1: selecting invalid altsetting 1 [ 1798.041375][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1798.052308][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1798.053020][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1798.053139][ T9] usb 7-1: media controller created [ 1798.053553][T17114] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1798.376546][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1798.443383][T17114] usb 4-1: Using ep0 maxpacket: 32 [ 1798.555310][T17114] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1798.555345][T17114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.586545][ T5781] usbhid 5-1:0.0: can't add hid device: -71 [ 1798.586669][ T5781] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1798.638171][ T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1798.638228][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1798.639598][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1798.750890][T19802] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input59 [ 1798.755973][ T5781] usb 5-1: USB disconnect, device number 93 [ 1798.803763][T17114] usb 4-1: config 0 descriptor?? [ 1798.873922][T19802] usb 2-1: USB disconnect, device number 30 [ 1798.978039][ T9] usb 7-1: USB disconnect, device number 37 [ 1799.026249][T17114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1799.065759][T17114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1799.084443][T17114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1799.084499][T17114] usb 4-1: media controller created [ 1799.117409][T17114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1799.282900][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1799.285078][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1799.563464][T23646] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.563522][T23646] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.563812][T23646] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.563859][T23646] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1800.063728][T17114] az6027: usb out operation failed. (-71) [ 1800.064986][T17114] az6027: usb out operation failed. (-71) [ 1800.065006][T17114] stb0899_attach: Driver disabled by Kconfig [ 1800.065020][T17114] az6027: no front-end attached [ 1800.065020][T17114] [ 1800.110572][T17114] az6027: usb out operation failed. (-71) [ 1800.110594][T17114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1800.130202][T17114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 1800.154393][T17114] dvb-usb: schedule remote query interval to 400 msecs. [ 1800.154419][T17114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1800.203364][T17114] usb 4-1: USB disconnect, device number 70 [ 1800.628547][T17114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1802.809562][T24253] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5482'. [ 1803.475434][ T5781] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1805.788110][ T5781] usb 7-1: Using ep0 maxpacket: 32 [ 1806.114794][T24258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1806.212067][ T5781] usb 7-1: device descriptor read/all, error -71 [ 1807.560463][T24258] Process accounting resumed [ 1808.617162][T24291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1810.068940][T24305] FAT-fs (nbd6): unable to read boot sector [ 1810.141289][T24294] Process accounting resumed [ 1812.365748][T24335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5502'. [ 1812.374796][T24335] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5502'. [ 1815.396787][ T5781] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1815.660380][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 1815.715399][ T5781] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1815.715430][ T5781] usb 2-1: config 0 has no interface number 0 [ 1815.801137][ T5781] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1815.801221][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.801245][ T5781] usb 2-1: Product: syz [ 1815.801261][ T5781] usb 2-1: Manufacturer: syz [ 1815.801333][ T5781] usb 2-1: SerialNumber: syz [ 1815.986896][ T5781] usb 2-1: config 0 descriptor?? [ 1816.012366][ T5781] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1816.012398][ T5781] usb 2-1: selecting invalid altsetting 1 [ 1816.018844][ T5781] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1816.049290][ T5781] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1816.049579][ T5781] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1816.049636][ T5781] usb 2-1: media controller created [ 1816.127859][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1817.163053][T24356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1817.264066][ T5781] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1817.264139][ T5781] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1817.332444][T24344] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1818.403408][ T5781] usb 2-1: USB disconnect, device number 31 [ 1818.762157][T24359] Process accounting resumed [ 1820.973520][T12876] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1821.124148][T12876] usb 4-1: Using ep0 maxpacket: 32 [ 1821.128270][T12876] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1821.128302][T12876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.176933][T12876] usb 4-1: config 0 descriptor?? [ 1821.415544][T12876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1821.440795][T12876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1821.457094][T12876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1821.457154][T12876] usb 4-1: media controller created [ 1821.553437][T12876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1821.665348][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5519'. [ 1821.665375][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 1822.289194][T12876] az6027: usb out operation failed. (-71) [ 1822.296866][T12876] az6027: usb out operation failed. (-71) [ 1822.296879][T12876] stb0899_attach: Driver disabled by Kconfig [ 1822.296887][T12876] az6027: no front-end attached [ 1822.296887][T12876] [ 1822.312358][T12876] az6027: usb out operation failed. (-71) [ 1822.312378][T12876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1822.355017][T12876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 1822.362044][T12876] dvb-usb: schedule remote query interval to 400 msecs. [ 1822.362061][T12876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1822.402422][T12876] usb 4-1: USB disconnect, device number 71 [ 1822.628233][T12876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1823.140932][T24435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.377163][T24436] Process accounting resumed [ 1824.504627][T24439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1825.490236][T24445] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5533'. [ 1827.595590][ T5781] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1827.921532][T24441] Process accounting resumed [ 1828.436248][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 1828.792213][ T5781] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1828.792324][ T5781] usb 5-1: can't read configurations, error -71 [ 1830.913401][ T5781] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1832.242002][ T5781] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1832.263629][ T5781] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1832.266370][ T5781] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1832.266398][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.266427][ T5781] usb 5-1: Product: syz [ 1832.266438][ T5781] usb 5-1: Manufacturer: syz [ 1832.266450][ T5781] usb 5-1: SerialNumber: syz [ 1832.337848][ T5781] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 1832.363720][ T5781] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1832.384902][ T5781] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1832.549804][T24463] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1832.563613][T12571] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1832.570213][ T5781] usb 5-1: USB disconnect, device number 95 [ 1832.643924][ T5781] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1832.679109][ T5781] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1832.682600][ T5781] ti_usb_3410_5052 5-1:2.0: device disconnected [ 1832.723390][T12571] usb 4-1: Using ep0 maxpacket: 8 [ 1832.726179][T12571] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1832.726207][T12571] usb 4-1: config 0 has no interface number 0 [ 1832.726256][T12571] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1832.726277][T12571] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1832.726295][T12571] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1832.731755][T12571] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1832.731785][T12571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.731809][T12571] usb 4-1: Product: syz [ 1832.731825][T12571] usb 4-1: Manufacturer: syz [ 1832.731849][T12571] usb 4-1: SerialNumber: syz [ 1832.772660][T12571] usb 4-1: config 0 descriptor?? [ 1833.020413][T24487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1834.017594][T24493] Process accounting resumed [ 1834.216457][T12571] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input62 [ 1834.296640][T12571] usb 4-1: USB disconnect, device number 72 [ 1834.473362][T17114] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1834.489558][T24504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1835.914103][T17114] usb 5-1: Using ep0 maxpacket: 32 [ 1835.931393][T17114] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1835.931488][T17114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.349266][T17114] usb 5-1: config 0 descriptor?? [ 1836.809696][T17114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1837.358668][T17114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1837.392735][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5546'. [ 1837.392769][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5546'. [ 1837.401874][T17114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1837.401925][T17114] usb 5-1: media controller created [ 1837.990691][T17114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1840.017237][T17114] az6027: usb out operation failed. (-71) [ 1840.017832][T17114] az6027: usb out operation failed. (-71) [ 1840.017846][T17114] stb0899_attach: Driver disabled by Kconfig [ 1840.017855][T17114] az6027: no front-end attached [ 1840.017855][T17114] [ 1840.018275][T17114] az6027: usb out operation failed. (-71) [ 1840.018288][T17114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1840.021353][T17114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 1840.087114][T17114] dvb-usb: schedule remote query interval to 400 msecs. [ 1840.087139][T17114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1840.090168][T17114] usb 5-1: USB disconnect, device number 96 [ 1840.253787][ T5812] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1840.288994][T17114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1840.404215][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 1840.406349][ T5812] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1840.406377][ T5812] usb 4-1: config 0 has no interface number 0 [ 1840.406424][ T5812] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1840.406453][ T5812] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1840.406486][ T5812] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1840.408297][ T37] audit: type=1326 audit(1785772621.979:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24523 comm="syz.7.5554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d41a2e019 code=0x0 [ 1840.416311][ T5812] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1840.416396][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.416452][ T5812] usb 4-1: Product: syz [ 1840.416495][ T5812] usb 4-1: Manufacturer: syz [ 1840.416544][ T5812] usb 4-1: SerialNumber: syz [ 1840.539427][ T5812] usb 4-1: config 0 descriptor?? [ 1841.423719][T17114] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1841.585037][T17114] usb 5-1: Using ep0 maxpacket: 32 [ 1841.590100][T17114] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1841.590131][T17114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.640632][T17114] usb 5-1: config 0 descriptor?? [ 1841.773435][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1841.847751][T17114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1841.914891][ T5812] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input64 [ 1841.948244][ T5812] usb 4-1: USB disconnect, device number 73 [ 1841.975280][T17114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1841.977736][T17114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1841.977793][T17114] usb 5-1: media controller created [ 1842.027121][T17114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1842.047085][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1842.050949][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1842.076756][ T9] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1842.076788][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.076810][ T9] usb 8-1: Product: syz [ 1842.076825][ T9] usb 8-1: Manufacturer: syz [ 1842.076842][ T9] usb 8-1: SerialNumber: syz [ 1842.147354][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1842.147381][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1842.200437][T17114] az6027: usb out operation failed. (-71) [ 1842.201553][T17114] az6027: usb out operation failed. (-71) [ 1842.201569][T17114] stb0899_attach: Driver disabled by Kconfig [ 1842.201581][T17114] az6027: no front-end attached [ 1842.201581][T17114] [ 1842.201960][T17114] az6027: usb out operation failed. (-71) [ 1842.201975][T17114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1842.257835][ T9] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 1842.281964][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1842.312070][T17114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 1842.339199][T24543] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1842.372026][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1842.372420][T17114] dvb-usb: schedule remote query interval to 400 msecs. [ 1842.372440][T17114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1842.417403][T17114] usb 5-1: USB disconnect, device number 97 [ 1842.449377][ T9] usb 8-1: USB disconnect, device number 29 [ 1842.542022][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1842.578636][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1842.581367][ T9] ti_usb_3410_5052 8-1:2.0: device disconnected [ 1842.657767][T17114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1844.224556][T24564] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1848.229228][T24578] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1853.265045][T12876] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1853.396003][T12876] usb 8-1: device descriptor read/64, error -71 [ 1853.643520][T12876] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1853.773806][T12876] usb 8-1: device descriptor read/64, error -71 [ 1853.794981][T24614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1855.300690][T12876] usb usb8-port1: attempt power cycle [ 1858.628671][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.628724][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.943443][T19802] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1860.100562][T19802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1860.100602][T19802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.100644][T19802] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1860.100670][T19802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.159564][T19802] usb 4-1: config 0 descriptor?? [ 1860.774665][T23681] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1860.811035][T19802] usb 4-1: string descriptor 0 read error: -71 [ 1860.811593][T19802] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #200: -71 [ 1860.811667][T19802] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 1860.811687][T19802] uclogic 0003:256C:006D.002B: failed probing pen v2 parameters: -71 [ 1860.811742][T19802] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 1860.811856][T19802] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 1860.883473][T19802] usb 4-1: USB disconnect, device number 74 [ 1860.953350][T23681] usb 7-1: Using ep0 maxpacket: 32 [ 1860.957876][T23681] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1860.957908][T23681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.996026][T23681] usb 7-1: config 0 descriptor?? [ 1861.221183][T23681] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1861.239113][T23681] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1861.240182][T23681] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1861.240232][T23681] usb 7-1: media controller created [ 1861.286552][T23681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1861.451205][T24664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5593'. [ 1861.451244][T24664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5593'. [ 1861.543485][ T5846] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.543654][ T5846] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.543802][ T5846] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.543945][ T5846] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.130307][T23681] az6027: usb out operation failed. (-71) [ 1862.130880][T23681] az6027: usb out operation failed. (-71) [ 1862.130897][T23681] stb0899_attach: Driver disabled by Kconfig [ 1862.130907][T23681] az6027: no front-end attached [ 1862.130907][T23681] [ 1862.131422][T23681] az6027: usb out operation failed. (-71) [ 1862.131439][T23681] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1862.192432][T23681] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 1862.209474][T23681] dvb-usb: schedule remote query interval to 400 msecs. [ 1862.209500][T23681] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1862.212664][T23681] usb 7-1: USB disconnect, device number 40 [ 1862.354220][T23681] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1866.716824][T24726] kvm: kvm [24723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000008b [ 1866.734433][T24726] kvm: kvm [24723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002785 [ 1866.753776][ T5812] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1866.781763][T24726] kvm: kvm [24723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x92f4 [ 1866.781893][T24726] kvm: kvm [24723]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1866.819786][T24726] kvm: kvm [24723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4740 [ 1866.895832][ T5812] usb 7-1: device descriptor read/64, error -71 [ 1867.029634][T24734] kvm: kvm [24732]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1867.072587][T24734] kvm: kvm [24732]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1867.121451][T24734] kvm: kvm [24732]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1867.136298][ T5812] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1867.182957][T24734] kvm: kvm [24732]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1867.227625][T24734] kvm: kvm [24732]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1867.273494][ T5812] usb 7-1: device descriptor read/64, error -71 [ 1867.383789][ T5812] usb usb7-port1: attempt power cycle [ 1867.725888][ T5812] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1867.744105][ T5812] usb 7-1: device descriptor read/8, error -71 [ 1867.983653][ T5812] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1868.004489][ T5812] usb 7-1: device descriptor read/8, error -71 [ 1868.114283][ T5812] usb usb7-port1: unable to enumerate USB device [ 1869.957505][T24769] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5620'. [ 1870.340261][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1870.866458][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1871.060788][ T9] usb 4-1: config 0 has no interfaces? [ 1871.136728][ T9] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1871.136763][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.136786][ T9] usb 4-1: Product: syz [ 1871.136802][ T9] usb 4-1: Manufacturer: syz [ 1871.136819][ T9] usb 4-1: SerialNumber: syz [ 1872.356267][ T9] usb 4-1: config 0 descriptor?? [ 1872.757418][ T9] usb 4-1: can't set config #0, error -71 [ 1874.233671][ T9] usb 4-1: USB disconnect, device number 75 [ 1874.583498][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1874.736646][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1874.738593][ T9] usb 4-1: config 0 has no interfaces? [ 1874.742705][ T9] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1874.742742][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.742764][ T9] usb 4-1: Product: syz [ 1874.742780][ T9] usb 4-1: Manufacturer: syz [ 1874.742796][ T9] usb 4-1: SerialNumber: syz [ 1874.810494][ T9] usb 4-1: config 0 descriptor?? [ 1876.389365][T19802] usb 4-1: USB disconnect, device number 76 [ 1880.673923][T17114] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1880.843571][T17114] usb 5-1: Using ep0 maxpacket: 8 [ 1880.846761][T17114] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1880.846792][T17114] usb 5-1: config 0 has no interface number 0 [ 1880.846843][T17114] usb 5-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.846877][T17114] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1880.852175][T17114] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1880.852223][T17114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.852248][T17114] usb 5-1: Product: syz [ 1880.852265][T17114] usb 5-1: Manufacturer: syz [ 1880.852283][T17114] usb 5-1: SerialNumber: syz [ 1880.959631][T17114] usb 5-1: config 0 descriptor?? [ 1882.451638][T17114] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 1882.483494][T17114] usb 5-1: USB disconnect, device number 98 [ 1883.133576][T24865] netlink: 'syz.7.5646': attribute type 1 has an invalid length. [ 1884.413722][ T5812] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1884.604063][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1884.797010][ T5812] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1884.797031][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.797046][ T5812] usb 7-1: config 0 has no interface number 0 [ 1884.797077][ T5812] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1884.797098][ T5812] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1884.850459][ T5812] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1884.850569][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.850668][ T5812] usb 7-1: Product: syz [ 1884.850714][ T5812] usb 7-1: Manufacturer: syz [ 1884.850794][ T5812] usb 7-1: SerialNumber: syz [ 1886.072063][ T5812] usb 7-1: config 0 descriptor?? [ 1886.082111][ T5812] usb 7-1: can't set config #0, error -71 [ 1886.109022][ T5812] usb 7-1: USB disconnect, device number 45 [ 1887.883387][ T9] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 1888.046752][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1888.048038][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.048058][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1888.051103][ T9] usb 8-1: string descriptor 0 read error: -22 [ 1888.051203][ T9] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1888.051221][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.852325][T24910] Bluetooth: MGMT ver 1.23 [ 1889.164825][T24918] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5663'. [ 1894.087640][ T9] usb 8-1: USB disconnect, device number 33 [ 1894.803037][T24968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1894.818546][T24968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1898.442754][ T37] audit: type=1326 audit(1785772680.009:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.442815][ T37] audit: type=1326 audit(1785772680.009:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.504788][ T37] audit: type=1326 audit(1785772680.069:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.504831][ T37] audit: type=1326 audit(1785772680.079:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.504865][ T37] audit: type=1326 audit(1785772680.079:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.511029][ T37] audit: type=1326 audit(1785772680.079:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.512565][ T37] audit: type=1326 audit(1785772680.079:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1898.554140][ T37] audit: type=1326 audit(1785772680.079:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.6.5676" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaba25e019 code=0x7ffc0000 [ 1899.110903][T24983] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1900.819681][T24986] process 'syz.4.5677' launched './file2' with NULL argv: empty string added [ 1900.856928][T24986] veth3: entered promiscuous mode [ 1900.856958][T24986] veth3: entered allmulticast mode [ 1902.083826][ T5812] ------------[ cut here ]------------ [ 1902.083844][ T5812] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1902.083870][ T5812] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:7/5812 [ 1902.084103][ T5812] Modules linked in: [ 1902.084143][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1902.084174][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1902.084190][ T5812] Workqueue: events drm_fb_helper_damage_work [ 1902.084288][ T5812] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1902.084319][ T5812] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1902.084339][ T5812] RSP: 0018:ffffc900053177e0 EFLAGS: 00010246 [ 1902.084360][ T5812] RAX: 1ffff11004bb7e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1902.084378][ T5812] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1902.084396][ T5812] RBP: ffffc900053178c8 R08: 0000000000000000 R09: 0000000000000000 [ 1902.084412][ T5812] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1902.084431][ T5812] R13: ffff888025dbf000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1902.084449][ T5812] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1902.084470][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1902.084486][ T5812] CR2: 0000001b2dafdff8 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1902.084508][ T5812] Call Trace: [ 1902.084517][ T5812] [ 1902.084534][ T5812] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1902.084594][ T5812] ? rt_spin_unlock+0x157/0x200 [ 1902.084694][ T5812] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1902.084812][ T5812] ? rt_spin_unlock+0x163/0x200 [ 1902.084841][ T5812] ? drm_vblank_get+0x147/0x280 [ 1902.084873][ T5812] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1902.084931][ T5812] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1902.084974][ T5812] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1902.085028][ T5812] ? process_scheduled_works+0xa20/0x14e0 [ 1902.085124][ T5812] ? rcu_is_watching+0x15/0xb0 [ 1902.085213][ T5812] ? process_scheduled_works+0xa20/0x14e0 [ 1902.085242][ T5812] process_scheduled_works+0xa8e/0x14e0 [ 1902.085303][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1902.085341][ T5812] ? assign_work+0x3cf/0x5d0 [ 1902.085376][ T5812] worker_thread+0xa47/0xfb0 [ 1902.085435][ T5812] kthread+0x388/0x470 [ 1902.085522][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 1902.085550][ T5812] ? __pfx_kthread+0x10/0x10 [ 1902.085588][ T5812] ret_from_fork+0x514/0xb70 [ 1902.085674][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 1902.085712][ T5812] ? __switch_to+0xc89/0x1420 [ 1902.085774][ T5812] ? __pfx_kthread+0x10/0x10 [ 1902.085811][ T5812] ret_from_fork_asm+0x1a/0x30 [ 1902.085895][ T5812] [ 1902.085914][ T5812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1902.085932][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1902.085958][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1902.085973][ T5812] Workqueue: events drm_fb_helper_damage_work [ 1902.086004][ T5812] Call Trace: [ 1902.086013][ T5812] [ 1902.086022][ T5812] vpanic+0x56c/0xa60 [ 1902.086054][ T5812] ? __pfx__printk+0x10/0x10 [ 1902.086082][ T5812] ? __pfx_vpanic+0x10/0x10 [ 1902.086103][ T5812] ? is_bpf_text_address+0x292/0x2b0 [ 1902.086196][ T5812] ? is_bpf_text_address+0x26/0x2b0 [ 1902.086234][ T5812] panic+0xc5/0xd0 [ 1902.086257][ T5812] ? __pfx_panic+0x10/0x10 [ 1902.086291][ T5812] ? ret_from_fork_asm+0x1a/0x30 [ 1902.086321][ T5812] __warn+0x315/0x4c0 [ 1902.086343][ T5812] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1902.086378][ T5812] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1902.086407][ T5812] __report_bug+0x276/0x570 [ 1902.086502][ T5812] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1902.086535][ T5812] ? __pfx___report_bug+0x10/0x10 [ 1902.086578][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1902.086610][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1902.086666][ T5812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1902.086702][ T5812] report_bug_entry+0x19a/0x290 [ 1902.086735][ T5812] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 1902.086763][ T5812] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 1902.086792][ T5812] handle_bug+0xce/0x200 [ 1902.086851][ T5812] exc_invalid_op+0x1a/0x50 [ 1902.086886][ T5812] asm_exc_invalid_op+0x1a/0x20 [ 1902.086937][ T5812] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1902.086967][ T5812] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1902.086987][ T5812] RSP: 0018:ffffc900053177e0 EFLAGS: 00010246 [ 1902.087006][ T5812] RAX: 1ffff11004bb7e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1902.087023][ T5812] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1902.087041][ T5812] RBP: ffffc900053178c8 R08: 0000000000000000 R09: 0000000000000000 [ 1902.087056][ T5812] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1902.087074][ T5812] R13: ffff888025dbf000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1902.087117][ T5812] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1902.087145][ T5812] ? rt_spin_unlock+0x157/0x200 [ 1902.087169][ T5812] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1902.087207][ T5812] ? rt_spin_unlock+0x163/0x200 [ 1902.087236][ T5812] ? drm_vblank_get+0x147/0x280 [ 1902.087267][ T5812] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1902.087296][ T5812] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1902.087338][ T5812] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1902.087391][ T5812] ? process_scheduled_works+0xa20/0x14e0 [ 1902.087427][ T5812] ? rcu_is_watching+0x15/0xb0 [ 1902.087459][ T5812] ? process_scheduled_works+0xa20/0x14e0 [ 1902.087488][ T5812] process_scheduled_works+0xa8e/0x14e0 [ 1902.087549][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1902.087586][ T5812] ? assign_work+0x3cf/0x5d0 [ 1902.087622][ T5812] worker_thread+0xa47/0xfb0 [ 1902.087682][ T5812] kthread+0x388/0x470 [ 1902.087717][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 1902.087744][ T5812] ? __pfx_kthread+0x10/0x10 [ 1902.087781][ T5812] ret_from_fork+0x514/0xb70 [ 1902.087820][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 1902.087858][ T5812] ? __switch_to+0xc89/0x1420 [ 1902.087893][ T5812] ? __pfx_kthread+0x10/0x10 [ 1902.087938][ T5812] ret_from_fork_asm+0x1a/0x30 [ 1902.087982][ T5812] [ 1902.088147][ T5812] Kernel Offset: disabled