last executing test programs: 39m47.389708818s ago: executing program 32 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) 39m6.269650138s ago: executing program 33 (id=190): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 38m56.318093815s ago: executing program 34 (id=205): sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="000425bd7000fbdbdf254300000008000300b5c3b00fa69a9a4260733f7ee9629021fd76fa9d21a58b969654780b7f3e7d67a8e53b7a8effb0ad2289f1e880cbb8765de1552250b7dc", @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x4040800}, 0x24000000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x49800, 0xfffffffd}}, 0x2e) syz_open_dev$MSR(&(0x7f0000000080), 0xffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/key-users\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="79061103a1d01a0eec214ded12d726841ca98b2047146a5b84fd8bdda3bcaac07c55af83f94721275fb810cc7582e0283ec1fba14edad253ec3fd91a67db7b30bc51633781eaaaa106f4c48e7b2bdf40de641cd8597f0752520d06c9f570b98b8e3f85aa0b92ca6139e979646eb48a0b12360db09c3af9c5cd", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16, @ANYBLOB="100050800400060005000200"], 0x2c}}, 0x80804) 33m58.920861851s ago: executing program 6 (id=594): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x1, 0x10001) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) preadv(r1, &(0x7f0000003300)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x3, 0x7fff) 33m58.664411789s ago: executing program 6 (id=595): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LOCAL_NAME={{0x7}, 0x9}}}, 0x5b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), 0x0, 0x1000000}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) tgkill(0x0, r2, 0x37) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="8cf364306e3ce59dbff2de112814d76bf45008063a359726dc0c5301388b034f263ecea0370accd51c7eadc58e8d6b2a5c77e61d2d67aec143e014dce23755c9e865235f3f5b290e18074646f24dd7c62fb265d925272f5d767b477649e4f58cbc2a2a7c59edb7c9b9843bcb5bd4159b6a8f2fa00208bc37dbb3e9c15620dd75684117b60300425fa85d", 0x8a}], 0x1, &(0x7f0000000500)}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 33m58.119417106s ago: executing program 6 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000005d40), 0x2, 0x100) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netfilter\x00') getdents(r3, &(0x7f00000001c0)=""/49, 0x31) 33m56.341728461s ago: executing program 6 (id=599): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 33m55.835814159s ago: executing program 6 (id=600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) msgget$private(0x0, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x6) accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d0027", 0x23}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1d, 0x5, 0x7ffffffc) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) 33m52.70256312s ago: executing program 6 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) 33m35.705261344s ago: executing program 35 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) 32m53.426279594s ago: executing program 7 (id=703): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) prlimit64(r0, 0xb, 0x0, &(0x7f0000001000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 32m52.092719791s ago: executing program 7 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(r0, &(0x7f00000001c0)) shutdown(0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xa08}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x44, 0x0, 0xf}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='vegas', 0xd) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x2, {{0x2, 0x4e21, @broadcast}}}, 0x88) 32m48.169090385s ago: executing program 7 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48}) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) 32m43.617884497s ago: executing program 7 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 32m41.189548539s ago: executing program 7 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, 0x0, 0x2062) 32m38.960776894s ago: executing program 7 (id=718): syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x494, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 32m23.669814232s ago: executing program 36 (id=718): syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x494, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 28m32.377010355s ago: executing program 5 (id=1059): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r0, 0xffffffffffffffff, 0x0) 28m30.050144367s ago: executing program 5 (id=1060): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000050605002cbd7000fedbdf251400c2a414006800f68000000000000000000000000000aaf1218b9c88429bbc985133e38f3e"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setxattr$trusted_overlay_upper(&(0x7f0000000900)='./file0\x00', &(0x7f0000000cc0), &(0x7f0000000d00)={0x0, 0xfb, 0x58, 0x1, 0x80, "0179b99ca82180a5b986c435f65916a9", "13fced30dbb6af92803aa20143812e1c1e8d915a06651c0ff44588b076885e84a05f014c5367aad749d7502fc7963eaa4d83b6cc2a363cd694030b120a4c976e31f533"}, 0x58, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) 28m28.613171288s ago: executing program 5 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x0, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 28m26.409940113s ago: executing program 5 (id=1064): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x11200, 0x0) 28m20.989427434s ago: executing program 5 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r3, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, 0x0, 0x0) 28m18.735481113s ago: executing program 5 (id=1075): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r5, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x36}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) 28m3.608766307s ago: executing program 37 (id=1075): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r5, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x36}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) 21m40.986731404s ago: executing program 1 (id=1578): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) 21m39.325487381s ago: executing program 1 (id=1581): syz_usb_connect(0x3, 0x36, 0x0, 0x0) 21m37.957500729s ago: executing program 1 (id=1584): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) msgget$private(0x0, 0x100) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000000c0)=0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9bec", 0xc}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) 21m37.820942252s ago: executing program 1 (id=1586): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r4, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x36}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) 21m35.833643762s ago: executing program 1 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m35.062217662s ago: executing program 1 (id=1588): syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) inotify_init() 21m19.476337267s ago: executing program 38 (id=1588): syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) inotify_init() 15m50.266172299s ago: executing program 3 (id=2018): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)='i', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 15m49.931940053s ago: executing program 3 (id=2019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000850}, 0x40804) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 15m49.862062225s ago: executing program 3 (id=2020): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x6}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000200)="88007bdb1189a20e", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 15m49.742094814s ago: executing program 3 (id=2021): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004011) 15m49.546049066s ago: executing program 3 (id=2024): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0xd7, 0x2}, @rr={0x7, 0x3, 0xe}]}}}], 0x18}, 0x0) 15m49.505153126s ago: executing program 3 (id=2025): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 15m33.886195622s ago: executing program 39 (id=2025): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 17.232782889s ago: executing program 4 (id=4327): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000000)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x40284504, 0x0) ioctl$I2C_FUNCS(r4, 0x705, &(0x7f0000000280)=0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 13.569545694s ago: executing program 9 (id=4334): socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 13.563149521s ago: executing program 4 (id=4335): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 12.407657475s ago: executing program 0 (id=4336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="070000006e6f3d7468051e5aa90ba7332b4d7c9b5e65a66264f075bcd0171f6de73f65eb8a483759c92553f816d0df29d8df7be614a37417bc93557bc65cfd6c2f69c588db55", @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989056, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 12.385984735s ago: executing program 4 (id=4337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) 11.238665177s ago: executing program 4 (id=4340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x14000}) 11.084837383s ago: executing program 0 (id=4341): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r0, 0x1, 0xfffffffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}]}, 0x24}}, 0x402) 10.706832403s ago: executing program 4 (id=4345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245", 0x5a}], 0x2}}], 0x2, 0x2090) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.802252154s ago: executing program 0 (id=4346): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x6, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x892031, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d756e69782c64697265b3e4a48132abc6fcb6b9ef8965523263762a95e57f74721474696f2c6163636573733d636c69656e742c7375626a5f726f6c653d9773476c74dde8a84d53700701323535e1c3d6", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,s']) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 7.919349756s ago: executing program 2 (id=4348): socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6.886362653s ago: executing program 0 (id=4349): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 6.581493524s ago: executing program 2 (id=4351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="070000006e6f3d7468051e5aa90ba7332b4d7c9b5e65a66264f075bcd0171f6de73f65eb8a483759c92553f816d0df29d8df7be614a37417bc93557bc65cfd6c2f69c588db55", @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989056, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 6.503858651s ago: executing program 9 (id=4352): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.339855483s ago: executing program 0 (id=4353): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x2, 0x4, {r0}, {0xee00}, 0x2, 0x8}) prlimit64(r1, 0x7, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r5, 0xfffffffffffffffe, 0x39) 5.505465815s ago: executing program 8 (id=4354): fsopen(&(0x7f00000002c0)='ceph\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 5.375246625s ago: executing program 8 (id=4355): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000800000004000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000880)="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", &(0x7f0000000240)=@buf="1c64c1bd329c6e08162f071580d941058e207bc90a448d422ca6", 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$qrtrtun(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 5.277839813s ago: executing program 2 (id=4356): ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000003200)=[{&(0x7f0000003280)="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", 0x8d2}, {0x0}, {0x0}], 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0) 3.741801573s ago: executing program 8 (id=4357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) 3.225735105s ago: executing program 2 (id=4358): socket$inet(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 2.432030907s ago: executing program 8 (id=4359): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x6, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x892031, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d756e69782c64697265b3e4a48132abc6fcb6b9ef8965523263762a95e57f74721474696f2c6163636573733d636c69656e742c7375626a5f726f6c653d9773476c74dde8a84d53700701323535e1c3d6", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,s']) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.750828553s ago: executing program 9 (id=4360): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.621452831s ago: executing program 2 (id=4361): socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 726.143364ms ago: executing program 8 (id=4362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x40000102, 0x0) 602.940272ms ago: executing program 2 (id=4363): socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 508.974213ms ago: executing program 4 (id=4364): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 508.051521ms ago: executing program 9 (id=4365): fsopen(&(0x7f00000002c0)='ceph\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 445.35475ms ago: executing program 0 (id=4366): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e40", 0xac0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000300)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r9 = memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r10}, {r13}, 0x8000, 0x8004}) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cc2074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950dc6d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb08000000eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a070094709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab506c000000000000876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2a5f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfdd21d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73fdecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f65665a750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649495e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f0870300000011041df8f518dd33203377b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4000000000010001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0xfffffffd, 0x8000000000010000, 0x906, r15, r16, 0xc000, '\x00', 0x6, 0x27efc00800000, 0xc, 0x9, {0xa, 0x3fe}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0x800d, 0xfffffffe, 0x5}}}}) fchown(r7, r13, r16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flock(r7, 0x9) 362.971984ms ago: executing program 8 (id=4367): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x494200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) unshare(0x26020480) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x91) 348.447516ms ago: executing program 9 (id=4368): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 9 (id=4369): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x5, &(0x7f00000001c0)="afe5c64e4a", 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'}) kernel console output (not intermixed with test programs): ][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2324'. [ 1774.967144][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2324'. [ 1775.424876][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 1775.601997][T17485] Bluetooth: hci1: command tx timeout [ 1776.410892][T17724] openvswitch: netlink: Flow actions attr not present in new flow. [ 1777.042850][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.096431][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.715320][T17734] binder: BINDER_SET_CONTEXT_MGR already set [ 1777.715337][T17734] binder: 17733:17734 ioctl 4018620d 200000004a80 returned -16 [ 1777.857179][T17485] Bluetooth: hci1: command tx timeout [ 1777.983698][T17657] chnl_net:caif_netlink_parms(): no params data found [ 1778.751842][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 1779.192493][T17657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.192603][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.192784][T17657] bridge_slave_0: entered allmulticast mode [ 1779.199214][T17657] bridge_slave_0: entered promiscuous mode [ 1779.242015][T17657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.242133][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.242359][T17657] bridge_slave_1: entered allmulticast mode [ 1779.245783][T17657] bridge_slave_1: entered promiscuous mode [ 1779.266847][T17769] openvswitch: netlink: Flow actions attr not present in new flow. [ 1779.380159][ T5931] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.395730][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 1779.549333][T17657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.568036][T17657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.227393][T17781] ubi: mtd0 is already attached to ubi16 [ 1780.702601][T17485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1780.761518][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.762285][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.778511][T17657] team0: Port device team_slave_0 added [ 1780.788985][T17657] team0: Port device team_slave_1 added [ 1781.204121][ T5931] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.304435][T17657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.304451][T17657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.304475][T17657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.341303][T17657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.341321][T17657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.341347][T17657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.927356][T17485] Bluetooth: hci5: command 0x0406 tx timeout [ 1783.941467][T17817] openvswitch: netlink: Flow actions attr not present in new flow. [ 1784.014916][ T5931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.765946][T17657] hsr_slave_0: entered promiscuous mode [ 1784.773269][T17657] hsr_slave_1: entered promiscuous mode [ 1784.776603][T17657] debugfs: 'hsr0' already exists in 'hsr' [ 1784.776631][T17657] Cannot create hsr debugfs directory [ 1784.864448][ T5931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.031042][ T9853] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1785.173662][T17827] ubi: mtd0 is already attached to ubi16 [ 1785.537541][T10412] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1785.602831][ T9853] usb 1-1: Using ep0 maxpacket: 16 [ 1785.637120][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1785.776273][ T9853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.776514][ T9853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.776585][ T9853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1785.776657][ T9853] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1785.776725][ T9853] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.857487][ T9853] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1785.857570][ T9853] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1785.857647][ T9853] usb 1-1: Manufacturer: syz [ 1786.092291][T10412] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.092350][T10412] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1786.092374][T10412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.098388][ T9853] usb 1-1: config 0 descriptor?? [ 1786.152276][T10412] usb 10-1: config 0 descriptor?? [ 1786.173875][T10412] pwc: Askey VC010 type 2 USB webcam detected. [ 1786.531862][ T9853] rc_core: IR keymap rc-hauppauge not found [ 1786.531881][ T9853] Registered IR keymap rc-empty [ 1786.532071][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1786.563510][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1786.563666][T10412] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1786.566563][T10412] pwc: recv_control_msg error -32 req 02 val 2700 [ 1786.587978][T10412] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1786.607232][T10412] pwc: recv_control_msg error -32 req 04 val 1000 [ 1786.615003][T10412] pwc: recv_control_msg error -32 req 04 val 1300 [ 1786.616757][T10412] pwc: recv_control_msg error -32 req 04 val 1400 [ 1786.620661][T10412] pwc: recv_control_msg error -32 req 02 val 2000 [ 1786.641942][T10412] pwc: recv_control_msg error -32 req 02 val 2100 [ 1786.648147][T10412] pwc: recv_control_msg error -32 req 04 val 1500 [ 1786.856802][T10412] pwc: recv_control_msg error -71 req 02 val 2400 [ 1786.858182][T10412] pwc: recv_control_msg error -71 req 02 val 2600 [ 1786.858682][T10412] pwc: recv_control_msg error -71 req 02 val 2900 [ 1786.859137][T10412] pwc: recv_control_msg error -71 req 02 val 2800 [ 1786.859748][T10412] pwc: recv_control_msg error -71 req 04 val 1100 [ 1786.860204][T10412] pwc: recv_control_msg error -71 req 04 val 1200 [ 1789.516598][ T9853] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1790.615308][T10412] pwc: Registered as video103. [ 1790.754122][ T9853] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 1790.756050][T10412] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input43 [ 1790.805347][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.830660][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.841881][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.859882][T10412] usb 10-1: USB disconnect, device number 6 [ 1790.862013][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.885967][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.903852][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1790.959765][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1791.078284][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1791.093994][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1791.112007][ T9853] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1791.136869][ T9853] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1791.136896][ T9853] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1791.163910][ T9853] usb 1-1: USB disconnect, device number 8 [ 1792.036940][T17856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1793.212027][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1793.722740][ T5886] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1793.722771][ T5886] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1793.722791][ T5886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1793.722840][ T5886] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1793.722866][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1793.722893][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1793.727302][ T5886] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1793.727334][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1793.727353][ T5886] usb 5-1: Product: syz [ 1793.727366][ T5886] usb 5-1: Manufacturer: syz [ 1793.867364][T17864] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1793.900499][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 1793.900519][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 1793.961801][ T5886] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1793.961822][ T5886] cdc_wdm 5-1:1.0: Unknown control protocol [ 1794.148172][T10839] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 1794.150306][ C1] wdm_int_callback: 708 callbacks suppressed [ 1794.150329][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.150347][ C1] wdm_int_callback: 708 callbacks suppressed [ 1794.150361][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.153921][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.153946][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.154183][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.154210][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.154430][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.154448][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.154665][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.154685][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.154907][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.154927][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.155149][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.155167][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.155389][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.155408][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.155631][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.155651][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1794.155872][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1794.155891][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1795.531518][T15373] usb 5-1: USB disconnect, device number 4 [ 1795.595751][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1796.003769][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.003826][ T5886] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1796.003850][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.054925][ T5886] usb 1-1: config 0 descriptor?? [ 1796.131032][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1796.693027][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1797.063691][T17918] blktrace: Concurrent blktraces are not allowed on loop18 [ 1797.915588][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 1797.922092][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.340438][ T5886] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1798.340862][ T5886] pwc: recv_control_msg error -71 req 04 val 1000 [ 1798.341259][ T5886] pwc: recv_control_msg error -71 req 04 val 1300 [ 1798.341619][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 1798.343598][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 1798.368437][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 1798.399526][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 1798.407994][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 1798.408473][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 1798.408930][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 1798.433272][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 1798.433745][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 1798.437144][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1798.438973][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1798.773025][ T5886] pwc: Registered as video103. [ 1798.809932][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 1799.829801][ T5462] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1799.887829][ T5886] usb 1-1: USB disconnect, device number 9 [ 1800.183258][ T5931] bridge_slave_1: left allmulticast mode [ 1800.183287][ T5931] bridge_slave_1: left promiscuous mode [ 1800.183604][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.540823][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1800.850306][ T5931] bridge_slave_0: left allmulticast mode [ 1800.850334][ T5931] bridge_slave_0: left promiscuous mode [ 1800.850582][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.207792][T17957] sd 0:0:1:0: device reset [ 1803.481890][ T5931] bridge_slave_1: left allmulticast mode [ 1803.481919][ T5931] bridge_slave_1: left promiscuous mode [ 1803.482105][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.580667][ T5931] bridge_slave_0: left allmulticast mode [ 1803.580687][ T5931] bridge_slave_0: left promiscuous mode [ 1803.580828][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.474907][T10839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1805.584135][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.664427][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.723704][ T5931] bond0 (unregistering): Released all slaves [ 1806.262317][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.305629][ T5931] bond0 (unregistering): Released all slaves [ 1806.432673][T12795] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1806.547201][T17657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1806.634775][T12795] usb 1-1: device descriptor read/64, error -71 [ 1806.662731][T17657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1807.362381][T12795] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1807.583351][T12795] usb 1-1: device descriptor read/64, error -71 [ 1807.698844][T12795] usb usb1-port1: attempt power cycle [ 1807.867677][T17657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1807.904919][T17657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1808.061899][T12795] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1808.082721][T12795] usb 1-1: device descriptor read/8, error -71 [ 1808.219930][T18017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1808.322089][T12795] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1808.342730][T12795] usb 1-1: device descriptor read/8, error -71 [ 1808.452181][T12795] usb usb1-port1: unable to enumerate USB device [ 1810.080720][T17657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1810.096180][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1810.159775][T17657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1810.160919][T17657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1810.211505][T17657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1810.892385][T15373] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1811.096757][T15373] usb 9-1: Using ep0 maxpacket: 8 [ 1811.152351][T15373] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1811.152415][T15373] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1811.152470][T15373] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1811.256222][T15373] usb 9-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1811.256300][T15373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.256356][T15373] usb 9-1: Product: syz [ 1811.256372][T15373] usb 9-1: Manufacturer: syz [ 1811.256386][T15373] usb 9-1: SerialNumber: syz [ 1811.845300][T15373] ti_usb_3410_5052 9-1:1.0: TI USB 3410 1 port adapter converter detected [ 1812.011214][T15373] usb 9-1: Direct firmware load for moxa/moxa-1110.fw failed with error -2 [ 1812.011255][T15373] usb 9-1: Falling back to sysfs fallback for: moxa/moxa-1110.fw [ 1814.780147][ T5931] hsr_slave_0: left promiscuous mode [ 1814.803673][ T5931] hsr_slave_1: left promiscuous mode [ 1814.804626][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1814.847424][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.075835][ T5931] hsr_slave_0: left promiscuous mode [ 1815.115387][ T5931] hsr_slave_1: left promiscuous mode [ 1815.116358][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.116381][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1815.508672][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.510949][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.820478][T18089] sd 0:0:1:0: device reset [ 1815.936357][ T5931] veth1_macvtap: left promiscuous mode [ 1815.936459][ T5931] veth0_macvtap: left promiscuous mode [ 1815.936733][ T5931] veth1_vlan: left promiscuous mode [ 1815.936892][ T5931] veth0_vlan: left promiscuous mode [ 1819.742519][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 1819.812758][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 1820.779447][T18122] sd 0:0:1:0: device reset [ 1821.015733][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 1821.369861][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 1821.775607][ T5462] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1822.152116][ T8421] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1822.241035][T17657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.282004][ T8421] usb 10-1: device descriptor read/64, error -71 [ 1822.308164][T17657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.359147][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.359313][T17686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.388130][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.388326][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.541994][ T8421] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1822.691833][ T8421] usb 10-1: device descriptor read/64, error -71 [ 1822.802405][ T8421] usb usb10-port1: attempt power cycle [ 1823.171876][ T8421] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1823.193921][ T8421] usb 10-1: device descriptor read/8, error -71 [ 1823.431887][ T8421] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1823.454126][ T8421] usb 10-1: device descriptor read/8, error -71 [ 1823.475280][T17657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.773113][ T8421] usb usb10-port1: unable to enumerate USB device [ 1824.973682][T10839] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1824.973714][T10839] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1827.241086][T17657] veth0_vlan: entered promiscuous mode [ 1827.342700][T17657] veth1_vlan: entered promiscuous mode [ 1827.619237][ T5462] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1828.808848][T17485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1828.861610][T17485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1828.868649][T17485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1828.903172][T17485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1828.929816][T17485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1829.131858][ T8421] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1829.261883][ T8421] usb 1-1: device descriptor read/64, error -71 [ 1829.501817][ T8421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1829.631884][ T8421] usb 1-1: device descriptor read/64, error -71 [ 1829.746872][ T8421] usb usb1-port1: attempt power cycle [ 1830.261260][ T8421] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1830.296719][ T8421] usb 1-1: device descriptor read/8, error -71 [ 1830.531924][ T8421] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1830.562219][ T8421] usb 1-1: device descriptor read/8, error -71 [ 1830.673082][ T8421] usb usb1-port1: unable to enumerate USB device [ 1830.742639][ T5462] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1831.007638][T18233] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2464'. [ 1831.042166][T10839] Bluetooth: hci2: command tx timeout [ 1832.172990][T10839] Bluetooth: hci5: unexpected cc 0x0c13 length: 85 > 1 [ 1832.173023][T10839] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1833.122230][T10839] Bluetooth: hci2: command tx timeout [ 1835.211825][T10839] Bluetooth: hci2: command tx timeout [ 1836.051826][ T6048] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1836.201831][ T6048] usb 10-1: Using ep0 maxpacket: 32 [ 1836.202969][ T6048] usb 10-1: no configurations [ 1836.202986][ T6048] usb 10-1: can't read configurations, error -22 [ 1836.332149][ T6048] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1836.456263][T10839] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1836.456297][T10839] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1836.491906][ T6048] usb 10-1: Using ep0 maxpacket: 32 [ 1836.494370][ T6048] usb 10-1: no configurations [ 1836.494420][ T6048] usb 10-1: can't read configurations, error -22 [ 1836.546489][ T6048] usb usb10-port1: attempt power cycle [ 1837.095090][ T6048] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1837.113872][ T6048] usb 10-1: Using ep0 maxpacket: 32 [ 1837.114500][ T6048] usb 10-1: no configurations [ 1837.114515][ T6048] usb 10-1: can't read configurations, error -22 [ 1837.290821][T10839] Bluetooth: hci2: command tx timeout [ 1837.291868][ T6048] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1837.312484][ T6048] usb 10-1: Using ep0 maxpacket: 32 [ 1837.313114][ T6048] usb 10-1: no configurations [ 1837.313129][ T6048] usb 10-1: can't read configurations, error -22 [ 1837.313449][ T6048] usb usb10-port1: unable to enumerate USB device [ 1838.187026][T18205] chnl_net:caif_netlink_parms(): no params data found [ 1839.805320][T18326] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1840.199704][T10839] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1840.199737][T10839] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1841.075039][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.075178][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.075560][T18205] bridge_slave_0: entered allmulticast mode [ 1841.077233][T18205] bridge_slave_0: entered promiscuous mode [ 1841.131345][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.131459][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.131665][T18205] bridge_slave_1: entered allmulticast mode [ 1841.134339][T18205] bridge_slave_1: entered promiscuous mode [ 1842.550647][T18205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.592025][T18205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.671312][T18205] team0: Port device team_slave_0 added [ 1842.681657][T18205] team0: Port device team_slave_1 added [ 1842.719657][T18205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.719675][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.719701][T18205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.741499][T18205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.741517][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.741543][T18205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.109031][T18205] hsr_slave_0: entered promiscuous mode [ 1843.115094][T18205] hsr_slave_1: entered promiscuous mode [ 1843.276199][T10839] Bluetooth: hci5: unexpected cc 0x0c13 length: 85 > 1 [ 1843.276234][T10839] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1844.889527][T18402] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1845.381210][T10839] Bluetooth: hci3: unexpected cc 0x0c13 length: 85 > 1 [ 1845.381242][T10839] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 1847.002064][ T36] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1847.321842][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1847.322926][ T36] usb 1-1: no configurations [ 1847.322943][ T36] usb 1-1: can't read configurations, error -22 [ 1848.396788][ T5931] bridge_slave_1: left allmulticast mode [ 1848.396817][ T5931] bridge_slave_1: left promiscuous mode [ 1848.397051][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.515944][ T5931] bridge_slave_0: left allmulticast mode [ 1848.520472][ T5931] bridge_slave_0: left promiscuous mode [ 1848.520759][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.555255][ T36] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1848.661189][T18455] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1849.041780][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1849.042733][ T36] usb 1-1: no configurations [ 1849.042749][ T36] usb 1-1: can't read configurations, error -22 [ 1849.054528][ T36] usb usb1-port1: attempt power cycle [ 1849.078227][T18457] ubi: mtd0 is already attached to ubi16 [ 1849.494790][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1849.701957][ T36] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1849.723420][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1849.724056][ T36] usb 1-1: no configurations [ 1849.724072][ T36] usb 1-1: can't read configurations, error -22 [ 1849.807858][T10839] Bluetooth: hci3: unexpected cc 0x0c13 length: 85 > 1 [ 1849.807890][T10839] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 1851.844640][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1851.912484][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.958547][ T5931] bond0 (unregistering): Released all slaves [ 1853.226779][ T5931] hsr_slave_0: left promiscuous mode [ 1853.245797][T18502] ubi: mtd0 is already attached to ubi16 [ 1853.252109][ T8421] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1853.461815][ T5931] hsr_slave_1: left promiscuous mode [ 1853.462855][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1853.532631][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.574269][ T8421] usb 10-1: Using ep0 maxpacket: 32 [ 1853.584436][ T8421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.584463][ T8421] usb 10-1: config 0 has no interfaces? [ 1853.587528][ T8421] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1853.587560][ T8421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.587581][ T8421] usb 10-1: Product: syz [ 1853.587596][ T8421] usb 10-1: Manufacturer: syz [ 1853.587611][ T8421] usb 10-1: SerialNumber: syz [ 1853.653624][ T8421] usb 10-1: config 0 descriptor?? [ 1853.906191][ T5931] veth1_vlan: left promiscuous mode [ 1853.906379][ T5931] veth0_vlan: left promiscuous mode [ 1855.130988][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1855.471858][ T8421] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1855.526695][T18536] syz.0.2542 (18536): /proc/18534/oom_adj is deprecated, please use /proc/18534/oom_score_adj instead. [ 1856.891458][ T8421] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1856.891488][ T8421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.891507][ T8421] usb 5-1: config 0 has no interface number 0 [ 1856.901423][ T8421] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1856.901455][ T8421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.901477][ T8421] usb 5-1: Product: syz [ 1856.901493][ T8421] usb 5-1: Manufacturer: syz [ 1856.901508][ T8421] usb 5-1: SerialNumber: syz [ 1856.922923][ T8421] usb 5-1: config 0 descriptor?? [ 1856.933506][ T8421] hub 5-1:0.31: bad descriptor, ignoring hub [ 1856.933640][ T8421] hub 5-1:0.31: probe with driver hub failed with error -5 [ 1856.937143][ T8421] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1856.937218][ T8421] uvcvideo 5-1:0.31: No valid video chain found. [ 1856.957037][ T1239] usb 10-1: USB disconnect, device number 15 [ 1857.112725][T18543] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1858.217354][T18554] ubi: mtd0 is already attached to ubi16 [ 1858.414342][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.793739][T18309] usb 5-1: USB disconnect, device number 5 [ 1859.340560][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 1859.603504][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 1861.742890][T18568] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1861.891795][T18568] usb 10-1: Using ep0 maxpacket: 32 [ 1861.896936][T18568] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.896963][T18568] usb 10-1: config 0 has no interfaces? [ 1861.900566][T18568] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1861.900594][T18568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.900614][T18568] usb 10-1: Product: syz [ 1861.900629][T18568] usb 10-1: Manufacturer: syz [ 1861.900643][T18568] usb 10-1: SerialNumber: syz [ 1861.970078][T18568] usb 10-1: config 0 descriptor?? [ 1862.507802][T18603] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1864.897346][T18349] usb 10-1: USB disconnect, device number 16 [ 1868.072040][T18669] binder: 18668:18669 ioctl c0306201 0 returned -14 [ 1868.078943][T18669] binder: BINDER_SET_CONTEXT_MGR already set [ 1868.078959][T18669] binder: 18668:18669 ioctl 4018620d 200000004a80 returned -16 [ 1868.540903][T18677] ubi: mtd0 is already attached to ubi16 [ 1869.292035][T18205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1869.337339][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1869.355828][T18205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1869.488624][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1869.491469][T18205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1869.538648][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1869.558178][T18205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1870.030902][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1870.497935][T18205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.892062][T18707] [U] ù [ 1871.963031][T18205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1871.996756][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.996889][T17686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.038469][T17782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.038582][T17782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.456112][T18717] binder: 18716:18717 ioctl c0306201 0 returned -14 [ 1873.154102][T18205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.360045][T18205] veth0_vlan: entered promiscuous mode [ 1873.471967][T18205] veth1_vlan: entered promiscuous mode [ 1873.556731][T18205] veth0_macvtap: entered promiscuous mode [ 1873.576974][T18205] veth1_macvtap: entered promiscuous mode [ 1873.602601][T18205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.607276][T18205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.697848][T15373] usb 9-1: ti_download_firmware - firmware not found [ 1873.698079][T15373] ti_usb_3410_5052 9-1:1.0: probe with driver ti_usb_3410_5052 failed with error -2 [ 1873.742618][T15373] usb 9-1: USB disconnect, device number 5 [ 1875.125174][ T5973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.145352][ T5973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.150435][ T5973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.298080][ T5973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.791629][T18760] binder: 18755:18760 ioctl c0306201 0 returned -14 [ 1877.491056][T18773] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1878.426936][T17782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.426957][T17782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.959823][T17104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.959845][T17104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.567931][T10839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1880.859787][T18787] sd 0:0:1:0: device reset [ 1884.943148][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1887.454977][T18863] FAT-fs (nullb0): bogus number of reserved sectors [ 1887.455007][T18863] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1887.934139][T18879] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1887.934257][T18879] overlayfs: failed to set xattr on upper [ 1887.934288][T18879] overlayfs: ...falling back to redirect_dir=nofollow. [ 1887.934318][T18879] overlayfs: ...falling back to index=off. [ 1887.934349][T18879] overlayfs: ...falling back to uuid=null. [ 1888.110895][T18880] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1891.286063][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1895.646800][T18931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2648'. [ 1901.341912][ T1239] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1901.491920][ T1239] usb 9-1: Using ep0 maxpacket: 32 [ 1901.494486][ T1239] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1901.497334][ T1239] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1901.497371][ T1239] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.497392][ T1239] usb 9-1: Product: syz [ 1901.497407][ T1239] usb 9-1: Manufacturer: syz [ 1901.497421][ T1239] usb 9-1: SerialNumber: syz [ 1901.573570][ T1239] usb 9-1: config 0 descriptor?? [ 1904.136673][T19018] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1904.152054][T18568] usb 9-1: USB disconnect, device number 6 [ 1904.325500][T10839] Bluetooth: hci4: unexpected cc 0x0c13 length: 85 > 1 [ 1904.325534][T10839] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1908.001882][T19050] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2686'. [ 1909.371578][T18568] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1909.524291][T18568] usb 9-1: Using ep0 maxpacket: 32 [ 1909.526803][T18568] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1909.530152][T18568] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1909.530182][T18568] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.530203][T18568] usb 9-1: Product: syz [ 1909.530216][T18568] usb 9-1: Manufacturer: syz [ 1909.530230][T18568] usb 9-1: SerialNumber: syz [ 1909.556474][T18568] usb 9-1: config 0 descriptor?? [ 1909.689075][T18568] usb 9-1: USB disconnect, device number 7 [ 1909.800543][T10839] Bluetooth: hci2: unexpected cc 0x0c13 length: 85 > 1 [ 1911.371087][T19082] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1913.172711][T18568] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1913.453266][T18568] usb 5-1: Using ep0 maxpacket: 32 [ 1913.455310][T18568] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1913.457897][T18568] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1913.457924][T18568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.457944][T18568] usb 5-1: Product: syz [ 1913.457959][T18568] usb 5-1: Manufacturer: syz [ 1913.457973][T18568] usb 5-1: SerialNumber: syz [ 1913.534005][T18568] usb 5-1: config 0 descriptor?? [ 1915.118055][T19117] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2710'. [ 1915.737732][T15373] usb 5-1: USB disconnect, device number 6 [ 1918.156502][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 1919.691624][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.611805][T19180] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2734'. [ 1920.625455][T19181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1920.625611][T19181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1922.301822][T19192] team0: No ports can be present during mode change [ 1922.302454][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2737'. [ 1922.712867][T19198] blktrace: Concurrent blktraces are not allowed on loop8 [ 1923.848548][T19192] team0 (unregistering): Port device team_slave_0 removed [ 1924.812596][T19192] team0 (unregistering): Port device team_slave_1 removed [ 1927.727437][T19222] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1933.230291][T19262] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2758'. [ 1937.310828][T19292] syz.8.2766 (19292): drop_caches: 2 [ 1937.852878][T19305] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2771'. [ 1942.814542][T19342] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2782'. [ 1942.938729][T19347] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2785'. [ 1947.050770][T19376] binder: 19375:19376 ioctl c0306201 0 returned -14 [ 1947.822703][T19384] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2795'. [ 1947.879976][T19386] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2796'. [ 1950.643636][T19416] binder: 19410:19416 ioctl c0306201 0 returned -14 [ 1950.677884][T19414] binder: BINDER_SET_CONTEXT_MGR already set [ 1950.677901][T19414] binder: 19410:19414 ioctl 4018620d 200000000100 returned -16 [ 1952.131586][T19427] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2808'. [ 1952.137795][T19428] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2807'. [ 1952.580594][T10839] Bluetooth: hci2: command 0x0406 tx timeout [ 1955.260320][T19464] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1955.433299][T17485] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1955.433334][T17485] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1959.531866][T19507] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2830'. [ 1960.579149][T17485] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1960.579248][T17485] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1964.463891][T19551] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2841'. [ 1965.352489][ T5872] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1965.533652][ T5872] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1965.533682][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.533703][ T5872] usb 3-1: config 0 has no interface number 0 [ 1965.537131][ T5872] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1965.537162][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.537182][ T5872] usb 3-1: Product: syz [ 1965.537198][ T5872] usb 3-1: Manufacturer: syz [ 1965.537213][ T5872] usb 3-1: SerialNumber: syz [ 1965.603341][ T5872] usb 3-1: config 0 descriptor?? [ 1965.678252][ T5872] hub 3-1:0.31: bad descriptor, ignoring hub [ 1965.678292][ T5872] hub 3-1:0.31: probe with driver hub failed with error -5 [ 1965.701738][ T5872] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1965.701772][ T5872] uvcvideo 3-1:0.31: No valid video chain found. [ 1966.950061][T10412] usb 3-1: USB disconnect, device number 65 [ 1969.402503][T19595] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2855'. [ 1972.561932][ T1239] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1973.536489][ T1239] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1973.536518][ T1239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.536538][ T1239] usb 1-1: config 0 has no interfaces? [ 1973.536565][ T1239] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1973.536587][ T1239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.594926][ T1239] usb 1-1: config 0 descriptor?? [ 1973.650887][T19640] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2866'. [ 1974.889800][T10412] usb 1-1: USB disconnect, device number 22 [ 1975.011808][ T1239] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1975.261854][ T1239] usb 9-1: Using ep0 maxpacket: 8 [ 1975.266769][ T1239] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1975.266800][ T1239] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.266819][ T1239] usb 9-1: config 0 has no interfaces? [ 1975.269002][ T1239] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1975.269030][ T1239] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1975.269049][ T1239] usb 9-1: Product: syz [ 1975.269057][ T1239] usb 9-1: SerialNumber: syz [ 1975.345912][ T1239] usb 9-1: config 0 descriptor?? [ 1975.575245][ T1239] usb 9-1: USB disconnect, device number 8 [ 1977.870804][T19676] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1981.079872][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.084246][T15373] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1985.153169][T15373] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1985.153198][T15373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.153217][T15373] usb 1-1: config 0 has no interface number 0 [ 1985.157265][T15373] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1985.157295][T15373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.157315][T15373] usb 1-1: Product: syz [ 1985.157329][T15373] usb 1-1: Manufacturer: syz [ 1985.157342][T15373] usb 1-1: SerialNumber: syz [ 1985.171014][T15373] usb 1-1: config 0 descriptor?? [ 1985.176729][T15373] hub 1-1:0.31: bad descriptor, ignoring hub [ 1985.176767][T15373] hub 1-1:0.31: probe with driver hub failed with error -5 [ 1985.183641][T15373] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1985.183673][T15373] uvcvideo 1-1:0.31: No valid video chain found. [ 1986.422167][T15373] usb 1-1: USB disconnect, device number 23 [ 1987.318402][T19768] netlink: 'syz.0.2906': attribute type 1 has an invalid length. [ 1987.318425][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 1990.974998][T19789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1993.361981][T10412] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1993.519973][T10412] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1993.520003][T10412] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.520022][T10412] usb 9-1: config 0 has no interface number 0 [ 1993.633303][T10412] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1993.633334][T10412] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.633355][T10412] usb 9-1: Product: syz [ 1993.633369][T10412] usb 9-1: Manufacturer: syz [ 1993.633384][T10412] usb 9-1: SerialNumber: syz [ 1993.682647][T10412] usb 9-1: config 0 descriptor?? [ 1993.704904][T10412] hub 9-1:0.31: bad descriptor, ignoring hub [ 1993.704942][T10412] hub 9-1:0.31: probe with driver hub failed with error -5 [ 1993.749041][T10412] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1993.749076][T10412] uvcvideo 9-1:0.31: No valid video chain found. [ 1995.549411][T18349] usb 9-1: USB disconnect, device number 9 [ 1998.187219][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 2015.415994][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 2017.182502][T19966] ubi: mtd0 is already attached to ubi16 [ 2018.027944][T17485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2019.477027][T19977] binder: 19975:19977 ioctl c0306201 0 returned -14 [ 2024.063218][T17485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2025.321084][T20018] [U] ù [ 2030.776101][T20038] syz.0.2983 (20038): drop_caches: 2 [ 2032.213804][T20082] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2994'. [ 2035.496553][T17485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2037.839596][T20131] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3005'. [ 2040.461858][T12795] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2041.163973][T12795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.164005][T12795] usb 1-1: config 0 has no interfaces? [ 2041.164037][T12795] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2041.164061][T12795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.225655][T12795] usb 1-1: config 0 descriptor?? [ 2042.489286][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.520743][T18349] usb 1-1: USB disconnect, device number 24 [ 2049.026907][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 2049.028332][T20207] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3025'. [ 2049.196456][T20199] syz.0.3024 (20199): drop_caches: 2 [ 2049.354172][T20208] sd 0:0:1:0: device reset [ 2054.274580][T20249] sd 0:0:1:0: device reset [ 2055.637994][T20263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3042'. [ 2055.661254][T20256] syz.9.3040 (20256): drop_caches: 2 [ 2058.050439][T20281] sd 0:0:1:0: device reset [ 2062.282813][T20097] [U] ùù [ 2062.637588][T20324] ubi: mtd0 is already attached to ubi16 [ 2062.991844][T20322] syz.9.3058 (20322): drop_caches: 2 [ 2063.339415][T20327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3059'. [ 2066.422125][T20321] mkiss: ax0: crc mode is auto. [ 2070.419889][T20376] ubi: mtd0 is already attached to ubi16 [ 2071.620001][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 2074.353561][T20414] ubi: mtd0 is already attached to ubi16 [ 2079.147603][T20450] ubi: mtd0 is already attached to ubi16 [ 2079.524661][T20464] ubi: mtd0 is already attached to ubi16 [ 2081.731832][T12795] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2081.893563][T12795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.893590][T12795] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2081.893626][T12795] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2081.893649][T12795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.915087][T12795] usb 3-1: config 0 descriptor?? [ 2085.053497][T17424] usb 3-1: USB disconnect, device number 66 [ 2085.150336][T17485] Bluetooth: Frame is too long (len 16, expected len 4) [ 2085.707794][T20505] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3119'. [ 2086.918425][T20518] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2087.353121][T20524] ubi: mtd0 is already attached to ubi16 [ 2087.702272][T15373] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2088.575063][T15373] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.575081][T15373] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2088.575103][T15373] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2088.575115][T15373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.599843][T15373] usb 9-1: config 0 descriptor?? [ 2088.998869][T20524] overlayfs: failed to clone lowerpath [ 2090.461084][ T1239] usb 9-1: USB disconnect, device number 10 [ 2091.664422][T20563] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2095.971937][T20606] syz.4.3147 (20606): drop_caches: 2 [ 2098.403107][T18349] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2098.831711][T18349] usb 9-1: Using ep0 maxpacket: 16 [ 2098.833317][T18349] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2098.833334][T18349] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2098.833348][T18349] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2098.833361][T18349] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2098.833375][T18349] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2098.835361][T18349] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2098.835378][T18349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.835389][T18349] usb 9-1: Product: syz [ 2098.835396][T18349] usb 9-1: Manufacturer: syz [ 2098.835404][T18349] usb 9-1: SerialNumber: syz [ 2098.858753][T18349] usb 9-1: config 0 descriptor?? [ 2098.859922][T20622] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2099.086526][T20622] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2099.113346][T18349] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input45 [ 2099.739216][T10412] usb 9-1: USB disconnect, device number 11 [ 2099.739216][ C0] synaptics_usb 9-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2101.060307][T20648] syz.9.3159 (20648): drop_caches: 2 [ 2103.925598][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2107.147958][T20692] syz.2.3171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2107.638030][T20692] ubi: mtd0 is already attached to ubi16 [ 2108.793973][T20705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2110.755463][T20712] ubi: mtd0 is already attached to ubi16 [ 2111.360848][T20726] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2120.901737][T17424] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2121.053106][T17424] usb 3-1: Using ep0 maxpacket: 16 [ 2121.338412][T17424] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2121.338445][T17424] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2121.338472][T17424] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2121.338496][T17424] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2121.338524][T17424] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2121.399304][T17424] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2121.399335][T17424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.399356][T17424] usb 3-1: Product: syz [ 2121.399370][T17424] usb 3-1: Manufacturer: syz [ 2121.399385][T17424] usb 3-1: SerialNumber: syz [ 2121.449877][T17424] usb 3-1: config 0 descriptor?? [ 2121.450757][T20830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2121.678399][T20830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2121.705294][T17424] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 2123.335437][T18349] usb 3-1: USB disconnect, device number 67 [ 2124.560513][T20862] 9p: Bad value for 'wfdno' [ 2130.816465][T18349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2130.967289][T18349] usb 5-1: Using ep0 maxpacket: 16 [ 2130.978041][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2130.978068][T18349] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2130.978093][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2130.978115][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2130.978140][T18349] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2131.012512][T18349] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2131.012553][T18349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.012573][T18349] usb 5-1: Product: syz [ 2131.012587][T18349] usb 5-1: Manufacturer: syz [ 2131.012602][T18349] usb 5-1: SerialNumber: syz [ 2131.044664][T18349] usb 5-1: config 0 descriptor?? [ 2131.045800][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2131.777851][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2131.830976][T18349] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 2132.176612][T17485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2133.743902][T18349] usb 5-1: USB disconnect, device number 7 [ 2133.765696][ T5151] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 2133.961701][T12795] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2134.116713][T12795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.116761][T12795] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2134.116774][T12795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.096587][T12795] usb 3-1: config 0 descriptor?? [ 2135.144384][T12795] pwc: Askey VC010 type 2 USB webcam detected. [ 2135.691855][T12795] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2135.794559][T12795] pwc: recv_control_msg error -32 req 02 val 2700 [ 2135.797977][T12795] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2135.798774][T12795] pwc: recv_control_msg error -32 req 04 val 1000 [ 2135.799403][T12795] pwc: recv_control_msg error -32 req 04 val 1300 [ 2135.800187][T12795] pwc: recv_control_msg error -32 req 04 val 1400 [ 2135.801001][T12795] pwc: recv_control_msg error -32 req 02 val 2000 [ 2135.822654][T12795] pwc: recv_control_msg error -32 req 02 val 2100 [ 2135.830620][T12795] pwc: recv_control_msg error -32 req 04 val 1500 [ 2135.843109][ T5872] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2135.851746][T12795] pwc: recv_control_msg error -32 req 02 val 2500 [ 2135.875176][T12795] pwc: recv_control_msg error -32 req 02 val 2400 [ 2135.877733][T12795] pwc: recv_control_msg error -71 req 02 val 2600 [ 2135.878206][T12795] pwc: recv_control_msg error -71 req 02 val 2900 [ 2135.878646][T12795] pwc: recv_control_msg error -71 req 02 val 2800 [ 2135.879272][T12795] pwc: recv_control_msg error -71 req 04 val 1100 [ 2135.879693][T12795] pwc: recv_control_msg error -71 req 04 val 1200 [ 2135.939037][T12795] pwc: Registered as video103. [ 2135.951267][T12795] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 2135.984471][T12795] usb 3-1: USB disconnect, device number 68 [ 2136.026715][ T5872] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2136.026734][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.026745][ T5872] usb 9-1: Product: syz [ 2136.026752][ T5872] usb 9-1: Manufacturer: syz [ 2136.026760][ T5872] usb 9-1: SerialNumber: syz [ 2136.588725][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2136.588790][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2138.433319][T18349] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2138.695509][T18349] usb 5-1: Using ep0 maxpacket: 16 [ 2138.812890][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2138.813113][T18349] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2138.813196][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2138.813276][T18349] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2138.813496][T18349] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2138.976663][T18349] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2138.976696][T18349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.976717][T18349] usb 5-1: Product: syz [ 2138.976731][T18349] usb 5-1: Manufacturer: syz [ 2138.976746][T18349] usb 5-1: SerialNumber: syz [ 2139.019602][T18349] usb 5-1: config 0 descriptor?? [ 2139.020774][T20973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2139.253781][T20973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2139.273400][T18349] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input49 [ 2139.312358][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2139.841342][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 2140.181804][ C0] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2140.181860][T15211] usb 5-1: USB disconnect, device number 8 [ 2140.247280][ T5151] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 2140.247989][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 2140.248685][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2140.248726][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2140.555160][ T5151] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 2142.199148][ T5872] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2142.258987][ T5872] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 2142.409351][T21008] overlayfs: missing 'lowerdir' [ 2142.429925][ T5872] usb 9-1: USB disconnect, device number 12 [ 2143.028159][ T1239] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2143.422122][ T1239] usb 1-1: Using ep0 maxpacket: 16 [ 2143.754670][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.754707][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.754730][ T1239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2143.754780][ T1239] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2143.754804][ T1239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.838576][ T1239] usb 1-1: config 0 descriptor?? [ 2144.215267][T21023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3274'. [ 2144.308387][T21023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3274'. [ 2144.649041][ T1239] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 2145.052947][T21029] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2146.428013][T21042] overlayfs: missing 'lowerdir' [ 2147.008965][T21049] capability: warning: `syz.9.3285' uses deprecated v2 capabilities in a way that may be insecure [ 2148.898531][T21065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3289'. [ 2148.927050][T21065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3289'. [ 2149.324464][ T1239] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2149.324500][ T1239] microsoft 0003:045E:07DA.0004: no inputs found [ 2149.324514][ T1239] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 2149.371099][ T1239] usb 1-1: USB disconnect, device number 25 [ 2150.389350][T21069] fido_id[21069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2150.575891][T21082] overlayfs: missing 'lowerdir' [ 2151.018492][T21089] binder: 21087:21089 ioctl c0306201 0 returned -14 [ 2153.406647][T21106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3302'. [ 2153.406829][T21106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3302'. [ 2155.929681][T21120] syz.9.3306 (21120): drop_caches: 2 [ 2156.942931][T21128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2156.942986][T21128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2157.469145][T21141] binder: 21140:21141 ioctl c0306201 0 returned -14 [ 2159.093296][ T1239] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2159.241670][ T1239] usb 10-1: Using ep0 maxpacket: 16 [ 2159.244019][ T1239] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.244052][ T1239] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2159.244084][ T1239] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2159.244107][ T1239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.298863][ T1239] usb 10-1: config 0 descriptor?? [ 2159.478707][T21164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3318'. [ 2159.483392][T21164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3318'. [ 2160.548079][ T1239] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 2160.548104][ T1239] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 2160.548119][ T1239] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 2160.548134][ T1239] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 2160.548149][ T1239] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 2160.650253][ T1239] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 2160.798489][T21170] syz.8.3320 (21170): drop_caches: 2 [ 2160.856959][ T1239] usb 10-1: USB disconnect, device number 17 [ 2162.184967][T21168] fido_id[21168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2163.267736][T21185] 9p: Bad value for 'rfdno' [ 2165.806573][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.104445][T21208] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3331'. [ 2166.124225][T21208] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3331'. [ 2167.010944][T21220] blktrace: Concurrent blktraces are not allowed on loop4 [ 2169.070197][T10412] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2170.641958][T21246] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2171.348898][T10412] usb 1-1: device descriptor read/all, error -71 [ 2171.398148][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2171.891677][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 2171.893807][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2171.893840][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2173.043718][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3348'. [ 2173.064760][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3348'. [ 2173.359158][ T31] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2173.359252][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.359334][ T31] usb 3-1: Product: syz [ 2173.359405][ T31] usb 3-1: Manufacturer: syz [ 2173.359476][ T31] usb 3-1: SerialNumber: syz [ 2173.609021][ T31] usb 3-1: config 0 descriptor?? [ 2175.244969][ T31] usb 3-1: can't set config #0, error -71 [ 2175.322715][ T31] usb 3-1: USB disconnect, device number 69 [ 2178.256752][T21285] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2180.891137][T21308] blktrace: Concurrent blktraces are not allowed on loop0 [ 2183.301674][T15373] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2183.571681][T10839] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 2183.950396][T15373] usb 1-1: Using ep0 maxpacket: 16 [ 2184.782331][T15373] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2184.782369][T15373] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2184.787114][T15373] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2184.787145][T15373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.787166][T15373] usb 1-1: Product: syz [ 2184.787181][T15373] usb 1-1: Manufacturer: syz [ 2184.787196][T15373] usb 1-1: SerialNumber: syz [ 2184.863189][T15373] usb 1-1: config 0 descriptor?? [ 2185.197882][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2188.080836][T15373] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 2188.761741][T21343] blktrace: Concurrent blktraces are not allowed on loop16 [ 2190.030409][T15373] imon:send_packet: packet tx failed (-71) [ 2190.045306][T15373] imon 1-1:0.0: panel buttons/knobs setup failed [ 2191.128711][T15373] rc_core: IR keymap rc-imon-pad not found [ 2191.128733][T15373] Registered IR keymap rc-empty [ 2191.168851][T15373] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2191.168874][T15373] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2191.194510][T15373] imon:send_packet: packet tx failed (-71) [ 2191.211687][T15373] imon 1-1:0.0: remote input dev register failed [ 2191.214463][T15373] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 2193.342395][T15373] imon 1-1:0.0: unable to initialize intf0, err 0 [ 2193.342420][T15373] imon:imon_probe: failed to initialize context! [ 2193.342433][T15373] imon 1-1:0.0: unable to register, err -19 [ 2193.711740][ T5886] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2193.783320][T15373] usb 1-1: USB disconnect, device number 28 [ 2193.861665][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 2193.863997][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2193.864032][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2193.866823][ T5886] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2193.866853][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.866874][ T5886] usb 3-1: Product: syz [ 2193.866889][ T5886] usb 3-1: Manufacturer: syz [ 2193.866903][ T5886] usb 3-1: SerialNumber: syz [ 2193.890726][ T5886] usb 3-1: config 0 descriptor?? [ 2194.141725][T15373] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2194.423764][T15373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.423820][T15373] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2194.423845][T15373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.506237][T15373] usb 1-1: config 0 descriptor?? [ 2194.539683][T15373] pwc: Askey VC010 type 2 USB webcam detected. [ 2195.448208][T15373] pwc: send_video_command error -71 [ 2195.448229][T15373] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2195.448348][T15373] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 2195.479461][T15373] usb 1-1: USB disconnect, device number 29 [ 2195.683708][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2196.124499][ T5886] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 2197.026601][T21405] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2198.052357][ T5886] imon:send_packet: packet tx failed (-71) [ 2198.071651][ T5886] imon 3-1:0.0: panel buttons/knobs setup failed [ 2199.331671][ T5886] rc_core: IR keymap rc-imon-pad not found [ 2199.331692][ T5886] Registered IR keymap rc-empty [ 2199.331767][ T5886] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2199.331784][ T5886] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2199.332206][ T5886] imon:send_packet: packet tx failed (-71) [ 2199.351708][ T5886] imon 3-1:0.0: remote input dev register failed [ 2199.351869][ T5886] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 2204.784078][ T5886] imon 3-1:0.0: unable to initialize intf0, err 0 [ 2204.784100][ T5886] imon:imon_probe: failed to initialize context! [ 2204.784114][ T5886] imon 3-1:0.0: unable to register, err -19 [ 2204.808962][ T5886] usb 3-1: USB disconnect, device number 70 [ 2207.277584][T21458] input: syz0 as /devices/virtual/input/input54 [ 2207.853090][T15211] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2208.001662][T15211] usb 1-1: Using ep0 maxpacket: 16 [ 2208.004162][T15211] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2208.004295][T15211] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2208.004323][T15211] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2208.004349][T15211] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2208.004375][T15211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2208.007377][T15211] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2208.007404][T15211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.007431][T15211] usb 1-1: Product: syz [ 2208.007446][T15211] usb 1-1: Manufacturer: syz [ 2208.007460][T15211] usb 1-1: SerialNumber: syz [ 2208.103905][T15211] usb 1-1: config 0 descriptor?? [ 2208.105099][T21469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2209.100917][T21469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2209.159306][T15211] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input55 [ 2209.452045][ T5886] usb 1-1: USB disconnect, device number 30 [ 2209.452060][ C0] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2215.766473][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 2222.591723][T15211] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2222.741853][T15211] usb 5-1: Using ep0 maxpacket: 16 [ 2222.766264][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2222.766474][T15211] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2222.766733][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2222.766969][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2222.766998][T15211] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2222.827086][T15211] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2222.827114][T15211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.827126][T15211] usb 5-1: Product: syz [ 2222.827134][T15211] usb 5-1: Manufacturer: syz [ 2222.827142][T15211] usb 5-1: SerialNumber: syz [ 2223.245564][T15211] usb 5-1: config 0 descriptor?? [ 2223.276590][T21589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2223.492164][T21589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2223.539910][T15211] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 2223.717727][T15211] usb 5-1: USB disconnect, device number 9 [ 2224.341087][T21606] sp0: Synchronizing with TNC [ 2227.695545][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2229.960174][T21642] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3463'. [ 2229.960191][T21642] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3463'. [ 2234.244728][T21689] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2238.324131][T10412] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2238.691718][T10412] usb 9-1: device not accepting address 13, error -71 [ 2239.097295][T21722] lo speed is unknown, defaulting to 1000 [ 2239.098297][T21722] lo speed is unknown, defaulting to 1000 [ 2239.163731][T21722] lo speed is unknown, defaulting to 1000 [ 2239.204742][T21722] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2239.204807][T21722] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2239.204874][T21722] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2239.506480][T21722] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2239.548016][T21722] lo speed is unknown, defaulting to 1000 [ 2239.549712][T21722] lo speed is unknown, defaulting to 1000 [ 2239.554573][T21722] lo speed is unknown, defaulting to 1000 [ 2239.555969][T21722] lo speed is unknown, defaulting to 1000 [ 2239.557588][T21722] lo speed is unknown, defaulting to 1000 [ 2247.589679][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 2247.668167][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 2248.133569][T21790] team1: entered promiscuous mode [ 2248.133601][T21790] team1: entered allmulticast mode [ 2248.280796][T21790] 8021q: adding VLAN 0 to HW filter on device team1 [ 2248.296236][T21792] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 2249.595319][T21792] team2: entered promiscuous mode [ 2249.595339][T21792] team2: entered allmulticast mode [ 2249.595700][T21792] 8021q: adding VLAN 0 to HW filter on device team2 [ 2252.349473][T21832] 9p: Bad value for 'rfdno' [ 2255.552395][T21872] 9p: Bad value for 'rfdno' [ 2259.491612][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 2259.813642][T21918] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3552'. [ 2259.813668][T21918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3552'. [ 2261.255002][T21931] 9p: Bad value for 'rfdno' [ 2266.489080][T21966] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3566'. [ 2266.489108][T21966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3566'. [ 2268.579486][T21994] netlink: 'syz.4.3579': attribute type 12 has an invalid length. [ 2272.027121][T22015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2273.701979][T22036] netlink: 'syz.8.3591': attribute type 12 has an invalid length. [ 2274.371641][T15211] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 2274.524436][T15211] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 2274.524466][T15211] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.524486][T15211] usb 10-1: config 0 has no interface number 0 [ 2274.527134][T15211] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2274.527163][T15211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.527182][T15211] usb 10-1: Product: syz [ 2274.527196][T15211] usb 10-1: Manufacturer: syz [ 2274.527211][T15211] usb 10-1: SerialNumber: syz [ 2274.715602][T15211] usb 10-1: config 0 descriptor?? [ 2274.727946][T15211] hub 10-1:0.31: bad descriptor, ignoring hub [ 2274.727983][T15211] hub 10-1:0.31: probe with driver hub failed with error -5 [ 2274.733429][T15211] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2274.733462][T15211] uvcvideo 10-1:0.31: No valid video chain found. [ 2275.984728][ T1239] usb 10-1: USB disconnect, device number 18 [ 2278.998250][T22091] 9p: Bad value for 'rfdno' [ 2281.631646][ T5886] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 2281.731687][T15211] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2281.881684][T15211] usb 10-1: Using ep0 maxpacket: 16 [ 2281.884123][T15211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2281.884157][T15211] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2281.887077][T15211] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2281.887105][T15211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.887126][T15211] usb 10-1: Product: syz [ 2281.887141][T15211] usb 10-1: Manufacturer: syz [ 2281.887156][T15211] usb 10-1: SerialNumber: syz [ 2281.897209][T15211] usb 10-1: config 0 descriptor?? [ 2282.775022][T15211] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input58 [ 2282.879950][ T5886] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 2282.879981][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.880001][ T5886] usb 9-1: config 0 has no interface number 0 [ 2282.916929][ T5886] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2282.916960][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.916981][ T5886] usb 9-1: Product: syz [ 2282.916996][ T5886] usb 9-1: Manufacturer: syz [ 2282.917011][ T5886] usb 9-1: SerialNumber: syz [ 2283.113100][ T5886] usb 9-1: config 0 descriptor?? [ 2283.165797][ T5886] hub 9-1:0.31: bad descriptor, ignoring hub [ 2283.165832][ T5886] hub 9-1:0.31: probe with driver hub failed with error -5 [ 2283.187289][ T5886] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2283.187322][ T5886] uvcvideo 9-1:0.31: No valid video chain found. [ 2285.442324][ T5886] usb 9-1: USB disconnect, device number 15 [ 2286.471603][T15211] rc_core: IR keymap rc-imon-pad not found [ 2286.471625][T15211] Registered IR keymap rc-empty [ 2286.471762][T15211] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2286.471782][T15211] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2286.482336][ C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2287.375862][T15211] imon:send_packet: packet tx failed (-71) [ 2287.391674][T15211] imon 10-1:0.0: remote input dev register failed [ 2287.391825][T15211] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 2287.873278][T15211] imon 10-1:0.0: unable to initialize intf0, err 0 [ 2287.873302][T15211] imon:imon_probe: failed to initialize context! [ 2287.873314][T15211] imon 10-1:0.0: unable to register, err -19 [ 2287.947446][T15211] usb 10-1: USB disconnect, device number 19 [ 2288.246201][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.976243][T22188] overlayfs: failed to resolve './file1': -2 [ 2291.373969][T18309] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 2291.437686][T15211] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2291.903851][T18309] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2291.903879][T18309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.903891][T18309] usb 3-1: config 0 has no interface number 0 [ 2291.906661][T18309] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2291.906691][T18309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.906711][T18309] usb 3-1: Product: syz [ 2291.906725][T18309] usb 3-1: Manufacturer: syz [ 2291.906739][T18309] usb 3-1: SerialNumber: syz [ 2291.911778][T18309] usb 3-1: config 0 descriptor?? [ 2291.914034][T18309] hub 3-1:0.31: bad descriptor, ignoring hub [ 2291.914055][T18309] hub 3-1:0.31: probe with driver hub failed with error -5 [ 2291.961592][T15211] usb 9-1: Using ep0 maxpacket: 16 [ 2292.018824][T15211] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2292.018848][T15211] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2292.048686][T18309] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2292.048744][T18309] uvcvideo 3-1:0.31: No valid video chain found. [ 2292.059978][T15211] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2292.059998][T15211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.060012][T15211] usb 9-1: Product: syz [ 2292.060020][T15211] usb 9-1: Manufacturer: syz [ 2292.060028][T15211] usb 9-1: SerialNumber: syz [ 2292.117725][T15211] usb 9-1: config 0 descriptor?? [ 2292.972000][T10412] usb 3-1: USB disconnect, device number 71 [ 2293.197282][T15211] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input60 [ 2293.599185][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2293.682138][T15211] rc_core: IR keymap rc-imon-pad not found [ 2293.682160][T15211] Registered IR keymap rc-empty [ 2293.682237][T15211] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2293.682255][T15211] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2293.682682][T15211] imon:send_packet: packet tx failed (-71) [ 2293.730335][T15211] imon 9-1:0.0: remote input dev register failed [ 2293.730493][T15211] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 2293.879594][T15211] imon 9-1:0.0: unable to initialize intf0, err 0 [ 2293.879616][T15211] imon:imon_probe: failed to initialize context! [ 2293.879629][T15211] imon 9-1:0.0: unable to register, err -19 [ 2293.919613][T15211] usb 9-1: USB disconnect, device number 16 [ 2294.731046][T22236] blktrace: Concurrent blktraces are not allowed on loop4 [ 2296.192157][T22248] syzkaller1: entered promiscuous mode [ 2296.192183][T22248] syzkaller1: entered allmulticast mode [ 2296.411059][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3661'. [ 2296.437749][T15211] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2296.583919][T15211] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2296.583947][T15211] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2296.583966][T15211] usb 3-1: config 0 has no interface number 0 [ 2296.789745][T15211] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2296.789777][T15211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.789797][T15211] usb 3-1: Product: syz [ 2296.789811][T15211] usb 3-1: Manufacturer: syz [ 2296.789826][T15211] usb 3-1: SerialNumber: syz [ 2296.913888][T15211] usb 3-1: config 0 descriptor?? [ 2296.920426][T15211] hub 3-1:0.31: bad descriptor, ignoring hub [ 2296.920462][T15211] hub 3-1:0.31: probe with driver hub failed with error -5 [ 2296.984662][T15211] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2296.984699][T15211] uvcvideo 3-1:0.31: No valid video chain found. [ 2298.127625][T10412] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2298.631610][T10412] usb 9-1: Using ep0 maxpacket: 16 [ 2298.647467][T10412] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2298.647499][T10412] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2298.670258][T10412] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2298.670290][T10412] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.670310][T10412] usb 9-1: Product: syz [ 2298.670325][T10412] usb 9-1: Manufacturer: syz [ 2298.670339][T10412] usb 9-1: SerialNumber: syz [ 2298.772967][T12795] usb 3-1: USB disconnect, device number 72 [ 2298.846410][T10412] usb 9-1: config 0 descriptor?? [ 2300.037389][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2300.050513][T10412] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input62 [ 2300.169364][T22276] blktrace: Concurrent blktraces are not allowed on loop18 [ 2301.317624][T10412] imon:send_packet: packet tx failed (-71) [ 2301.344575][T10412] imon 9-1:0.0: panel buttons/knobs setup failed [ 2301.671684][T10412] rc_core: IR keymap rc-imon-pad not found [ 2301.671705][T10412] Registered IR keymap rc-empty [ 2301.671778][T10412] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2301.671836][T10412] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2302.492110][T10412] imon:send_packet: packet tx failed (-71) [ 2302.512000][T10412] imon 9-1:0.0: remote input dev register failed [ 2302.512705][T10412] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 2302.573696][T18309] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2302.814116][T22290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2306.511207][T18309] usb 10-1: device descriptor read/all, error -71 [ 2306.883357][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3673'. [ 2306.913004][T22304] netlink: 'syz.2.3674': attribute type 12 has an invalid length. [ 2306.946430][T10412] imon 9-1:0.0: unable to initialize intf0, err 0 [ 2306.946451][T10412] imon:imon_probe: failed to initialize context! [ 2306.946463][T10412] imon 9-1:0.0: unable to register, err -19 [ 2307.000981][T10412] usb 9-1: USB disconnect, device number 17 [ 2308.255409][T15211] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2308.631596][T22319] blktrace: Concurrent blktraces are not allowed on loop8 [ 2309.471578][T15211] usb 3-1: Using ep0 maxpacket: 16 [ 2309.475227][T15211] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2309.475262][T15211] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2309.478259][T15211] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2309.478287][T15211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.478308][T15211] usb 3-1: Product: syz [ 2309.478323][T15211] usb 3-1: Manufacturer: syz [ 2309.478337][T15211] usb 3-1: SerialNumber: syz [ 2309.501700][T15211] usb 3-1: config 0 descriptor?? [ 2310.349317][T15211] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input64 [ 2310.583260][T15211] rc_core: IR keymap rc-imon-pad not found [ 2310.583281][T15211] Registered IR keymap rc-empty [ 2310.583420][T15211] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2310.583438][T15211] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2310.888235][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2310.888347][T15211] imon:send_packet: packet tx failed (-71) [ 2310.901816][T15211] imon 3-1:0.0: remote input dev register failed [ 2310.901967][T15211] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 2312.890330][T15211] imon 3-1:0.0: unable to initialize intf0, err 0 [ 2312.890356][T15211] imon:imon_probe: failed to initialize context! [ 2312.890368][T15211] imon 3-1:0.0: unable to register, err -19 [ 2312.919094][T15211] usb 3-1: USB disconnect, device number 73 [ 2312.987955][T22352] netlink: 'syz.8.3687': attribute type 12 has an invalid length. [ 2315.451663][T22368] blktrace: Concurrent blktraces are not allowed on loop4 [ 2319.568478][T22387] netlink: 'syz.8.3699': attribute type 12 has an invalid length. [ 2321.391268][T22411] blktrace: Concurrent blktraces are not allowed on loop16 [ 2322.261724][T22416] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2322.261762][T22416] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2326.529677][T22457] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2326.529705][T22457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2333.242410][T22495] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2333.242429][T22495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2336.999746][T22535] blktrace: Concurrent blktraces are not allowed on loop4 [ 2341.879454][T22576] blktrace: Concurrent blktraces are not allowed on loop0 [ 2345.458167][T22607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2348.042465][T22629] blktrace: Concurrent blktraces are not allowed on loop16 [ 2349.842094][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.065183][T22678] blktrace: Concurrent blktraces are not allowed on loop16 [ 2354.445339][T22715] blktrace: Concurrent blktraces are not allowed on loop16 [ 2355.730079][T22725] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2355.730106][T22725] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2358.152282][T22763] blktrace: Concurrent blktraces are not allowed on loop4 [ 2365.222851][T22822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3831'. [ 2365.925438][T22827] netlink: 'syz.8.3833': attribute type 12 has an invalid length. [ 2369.131723][T10412] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2369.461545][T10412] usb 9-1: Using ep0 maxpacket: 16 [ 2369.463474][T10412] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2369.463507][T10412] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2369.465742][T10412] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2369.465769][T10412] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.465789][T10412] usb 9-1: Product: syz [ 2369.465804][T10412] usb 9-1: Manufacturer: syz [ 2369.465819][T10412] usb 9-1: SerialNumber: syz [ 2369.607443][T10412] usb 9-1: config 0 descriptor?? [ 2369.689580][T22866] netlink: 'syz.2.3844': attribute type 12 has an invalid length. [ 2369.887844][T10412] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input68 [ 2370.795866][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2370.871761][T10412] rc_core: IR keymap rc-imon-pad not found [ 2370.871782][T10412] Registered IR keymap rc-empty [ 2370.871858][T10412] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2370.871876][T10412] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2370.872201][T10412] imon:send_packet: packet tx failed (-71) [ 2370.891659][T10412] imon 9-1:0.0: remote input dev register failed [ 2370.891809][T10412] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 2371.832704][T10412] imon 9-1:0.0: unable to initialize intf0, err 0 [ 2371.832726][T10412] imon:imon_probe: failed to initialize context! [ 2371.832740][T10412] imon 9-1:0.0: unable to register, err -19 [ 2372.212069][T10412] usb 9-1: USB disconnect, device number 18 [ 2373.647417][T22908] netlink: 'syz.0.3856': attribute type 12 has an invalid length. [ 2374.160853][T22921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3862'. [ 2374.988889][T22927] Illegal XDP return value 4292563472 on prog (id 140) dev N/A, expect packet loss! [ 2387.119093][T23032] fuse: Bad value for 'fd' [ 2387.548264][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3901'. [ 2387.632708][T23041] team1: entered promiscuous mode [ 2387.632740][T23041] team1: entered allmulticast mode [ 2387.637984][T23041] 8021q: adding VLAN 0 to HW filter on device team1 [ 2387.690965][T23043] 9p: Bad value for 'rfdno' [ 2387.936715][T23050] overlayfs: failed to resolve './file1': -2 [ 2388.420920][T23062] fuse: Bad value for 'fd' [ 2388.668168][T10839] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 2390.949039][T23078] 9p: Bad value for 'rfdno' [ 2391.561684][ T31] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2391.723534][ T31] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2391.723570][ T31] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2391.723597][ T31] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2391.723636][ T31] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2391.723658][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.786608][T23090] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2392.601980][ T31] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 2392.619773][ T31] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input72 [ 2394.318005][ T31] usb 10-1: USB disconnect, device number 22 [ 2394.318119][ C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2397.001605][T18568] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2397.252182][T18568] usb 1-1: Using ep0 maxpacket: 16 [ 2397.258470][T18568] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2397.258499][T18568] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2397.395295][T18568] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2397.395325][T18568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.395343][T18568] usb 1-1: Product: syz [ 2397.395356][T18568] usb 1-1: Manufacturer: syz [ 2397.395369][T18568] usb 1-1: SerialNumber: syz [ 2397.438504][T18568] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 2397.438529][T18568] usb 1-1: no configuration chosen from 1 choice [ 2397.771670][T18568] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2397.928047][T18568] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2397.928084][T18568] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2397.928111][T18568] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2397.928153][T18568] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2397.928176][T18568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.352060][T23156] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2398.449617][T23164] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3946'. [ 2398.449766][T23164] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3946'. [ 2399.295589][T23174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2400.136781][T18568] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 2400.148041][T18568] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input74 [ 2400.316508][T18568] usb 5-1: USB disconnect, device number 10 [ 2400.316625][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2400.430335][T18309] usb 1-1: USB disconnect, device number 31 [ 2400.786316][T23179] netlink: 'syz.0.3950': attribute type 12 has an invalid length. [ 2401.281563][T18309] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2401.437237][T18309] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.437294][T18309] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2401.437317][T18309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.549968][T18309] usb 10-1: config 0 descriptor?? [ 2401.576883][T18309] pwc: Askey VC010 type 2 USB webcam detected. [ 2401.611785][T18568] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2401.762739][T18568] usb 1-1: Using ep0 maxpacket: 8 [ 2401.765181][T18568] usb 1-1: no configurations [ 2401.765200][T18568] usb 1-1: can't read configurations, error -22 [ 2401.972822][T18309] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2401.986413][T18568] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2402.141678][T18568] usb 1-1: Using ep0 maxpacket: 8 [ 2402.143004][T18568] usb 1-1: no configurations [ 2402.143022][T18568] usb 1-1: can't read configurations, error -22 [ 2402.148878][T18568] usb usb1-port1: attempt power cycle [ 2402.188075][T18309] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2402.188628][T18309] pwc: recv_control_msg error -71 req 04 val 1000 [ 2402.190200][T18309] pwc: recv_control_msg error -71 req 04 val 1300 [ 2402.190532][T18309] pwc: recv_control_msg error -71 req 04 val 1400 [ 2402.190851][T18309] pwc: recv_control_msg error -71 req 02 val 2000 [ 2402.227632][T18309] pwc: recv_control_msg error -71 req 02 val 2100 [ 2402.235167][T18309] pwc: recv_control_msg error -71 req 04 val 1500 [ 2402.272186][T18309] pwc: recv_control_msg error -71 req 02 val 2500 [ 2402.273044][T18309] pwc: recv_control_msg error -71 req 02 val 2400 [ 2402.273559][T18309] pwc: recv_control_msg error -71 req 02 val 2600 [ 2402.273951][T18309] pwc: recv_control_msg error -71 req 02 val 2900 [ 2402.274413][T18309] pwc: recv_control_msg error -71 req 02 val 2800 [ 2402.275035][T18309] pwc: recv_control_msg error -71 req 04 val 1100 [ 2402.276717][T18309] pwc: recv_control_msg error -71 req 04 val 1200 [ 2402.352399][T18309] pwc: Registered as video103. [ 2402.368820][T18309] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input75 [ 2402.401833][T18309] usb 10-1: USB disconnect, device number 23 [ 2402.605203][T18568] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2402.632022][T18568] usb 1-1: Using ep0 maxpacket: 8 [ 2402.634145][T18568] usb 1-1: no configurations [ 2402.634162][T18568] usb 1-1: can't read configurations, error -22 [ 2402.761682][T18568] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2402.783363][T18568] usb 1-1: Using ep0 maxpacket: 8 [ 2402.784214][T18568] usb 1-1: no configurations [ 2402.784230][T18568] usb 1-1: can't read configurations, error -22 [ 2402.790920][T18568] usb usb1-port1: unable to enumerate USB device [ 2402.949758][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3958'. [ 2402.949899][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3958'. [ 2405.088331][T23222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2406.760391][T23228] blktrace: Concurrent blktraces are not allowed on loop0 [ 2408.522077][T18568] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2408.669909][T23236] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3969'. [ 2408.670047][T23236] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3969'. [ 2408.694134][T18568] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2408.694169][T18568] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2408.694194][T18568] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2408.694232][T18568] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2408.694254][T18568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2408.703833][T23227] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2409.521974][T18568] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 2409.548584][T18568] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input76 [ 2409.889578][T18568] usb 5-1: USB disconnect, device number 11 [ 2409.889685][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2411.068449][T23264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2411.886313][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.788701][T23283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3981'. [ 2413.788843][T23283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3981'. [ 2416.750419][T23322] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3994'. [ 2416.750562][T23322] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3994'. [ 2421.178357][T23343] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4000'. [ 2421.612194][T17424] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2421.668506][T23355] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2421.771571][T17424] usb 5-1: Using ep0 maxpacket: 16 [ 2421.773990][T17424] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2421.774023][T17424] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2421.775972][T17424] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2421.775988][T17424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.775998][T17424] usb 5-1: Product: syz [ 2421.776006][T17424] usb 5-1: Manufacturer: syz [ 2421.776014][T17424] usb 5-1: SerialNumber: syz [ 2421.793112][T17424] usb 5-1: config 0 descriptor?? [ 2423.084743][T17424] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input77 [ 2423.139648][T23364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4006'. [ 2423.139790][T23364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4006'. [ 2423.581732][T17424] rc_core: IR keymap rc-imon-pad not found [ 2423.581753][T17424] Registered IR keymap rc-empty [ 2423.582021][T17424] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2423.582040][T17424] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2424.073158][T10839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2424.363713][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2424.364838][T17424] imon:send_packet: packet tx failed (-71) [ 2424.386687][T17424] imon 5-1:0.0: remote input dev register failed [ 2424.386839][T17424] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 2424.562630][T17424] imon 5-1:0.0: unable to initialize intf0, err 0 [ 2424.562645][T17424] imon:imon_probe: failed to initialize context! [ 2424.562652][T17424] imon 5-1:0.0: unable to register, err -19 [ 2424.600627][T17424] usb 5-1: USB disconnect, device number 12 [ 2426.594209][T23396] syzkaller1: entered promiscuous mode [ 2426.594227][T23396] syzkaller1: entered allmulticast mode [ 2430.003209][T10839] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 2431.970636][T23440] No control pipe specified [ 2432.014961][T23445] syzkaller1: entered promiscuous mode [ 2432.014988][T23445] syzkaller1: entered allmulticast mode [ 2432.408757][T23450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2434.424974][T10839] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 2437.034519][T23486] No control pipe specified [ 2437.814672][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 2440.758121][T18568] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2440.911913][T18568] usb 10-1: Using ep0 maxpacket: 16 [ 2440.914265][T18568] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2440.914331][T18568] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2440.914355][T18568] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2440.914383][T18568] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2440.917305][T18568] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2440.917334][T18568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.917355][T18568] usb 10-1: Product: syz [ 2440.917370][T18568] usb 10-1: Manufacturer: syz [ 2440.917385][T18568] usb 10-1: SerialNumber: syz [ 2441.007300][T18568] usb 10-1: config 0 descriptor?? [ 2441.321547][T15211] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2441.439061][T18568] usb 10-1: USB disconnect, device number 24 [ 2441.473524][T15211] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2441.473560][T15211] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2441.473588][T15211] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2441.473630][T15211] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2441.473653][T15211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.550388][T23517] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2441.805310][T23524] autofs: Bad value for 'fd' [ 2442.586001][T10839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2442.743498][T15211] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 2442.749811][T15211] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input79 [ 2442.844240][T15211] usb 3-1: USB disconnect, device number 74 [ 2442.844326][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2446.068142][T23567] autofs: Bad value for 'fd' [ 2447.282006][T12795] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2447.311600][T23580] 9p: Bad value for 'rfdno' [ 2447.391641][T15211] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2447.434755][T12795] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2447.434791][T12795] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2447.434817][T12795] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2447.434844][T12795] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2447.434857][T12795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.495827][T23576] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2448.027427][T15211] usb 1-1: Using ep0 maxpacket: 16 [ 2448.043597][T15211] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2448.043705][T15211] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2448.043727][T15211] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2448.043750][T15211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2448.048628][T15211] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2448.048647][T15211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2448.048657][T15211] usb 1-1: Product: syz [ 2448.048665][T15211] usb 1-1: Manufacturer: syz [ 2448.048672][T15211] usb 1-1: SerialNumber: syz [ 2448.056900][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 2448.166494][T15211] usb 1-1: config 0 descriptor?? [ 2449.908867][T12795] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 2449.925548][T12795] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input80 [ 2449.958663][T15211] usb 1-1: USB disconnect, device number 36 [ 2450.839475][T12795] usb 5-1: USB disconnect, device number 13 [ 2450.839574][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2452.504446][T23603] autofs: Bad value for 'fd' [ 2454.163809][T23612] 9p: Bad value for 'rfdno' [ 2455.270785][T23633] blktrace: Concurrent blktraces are not allowed on loop8 [ 2457.212534][T23638] autofs: Unknown parameter '0x0000000000000000' [ 2462.280500][T23674] blktrace: Concurrent blktraces are not allowed on loop16 [ 2463.946397][T23684] autofs: Unknown parameter '0x0000000000000000' [ 2466.271328][T10839] Bluetooth: Frame is too long (len 16, expected len 4) [ 2467.715467][T23712] blktrace: Concurrent blktraces are not allowed on loop16 [ 2469.041634][T23719] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2469.195280][T23723] autofs: Unknown parameter '0x0000000000000000' [ 2470.288316][T23731] 9p: Bad value for 'rfdno' [ 2471.068900][T10839] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 2471.981547][T18568] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2472.882660][T18568] usb 3-1: Using ep0 maxpacket: 16 [ 2472.884930][T18568] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2472.884957][T18568] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2472.885004][T18568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2472.887912][T18568] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2472.887941][T18568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.887962][T18568] usb 3-1: Product: syz [ 2472.887984][T18568] usb 3-1: Manufacturer: syz [ 2472.887998][T18568] usb 3-1: SerialNumber: syz [ 2472.965645][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.991169][T18568] usb 3-1: config 0 descriptor?? [ 2473.059597][T23761] autofs: Unknown parameter '0x0000000000000000' [ 2473.966330][ T31] usb 3-1: USB disconnect, device number 75 [ 2475.753766][T10839] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 2478.321588][T15211] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2478.481555][T15211] usb 5-1: Using ep0 maxpacket: 16 [ 2478.489109][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2478.489141][T15211] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2478.489167][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2478.489193][T15211] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2478.489219][T15211] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2478.511108][T15211] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2478.511139][T15211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.511159][T15211] usb 5-1: Product: syz [ 2478.511173][T15211] usb 5-1: Manufacturer: syz [ 2478.511187][T15211] usb 5-1: SerialNumber: syz [ 2478.533738][T15211] usb 5-1: config 0 descriptor?? [ 2478.535658][T23823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2478.850230][T23823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2478.922121][T15211] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 2479.190682][T10412] usb 5-1: USB disconnect, device number 14 [ 2479.190782][ C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2480.332707][T23845] overlayfs: missing 'lowerdir' [ 2482.584805][T23857] autofs: Unknown parameter '0x0000000000000000' [ 2485.641103][T23900] afs: Unknown parameter 'audit' [ 2485.729607][T23902] autofs: Unknown parameter 'fd0x0000000000000000' [ 2488.461817][T18568] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2488.613890][T18568] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2488.613926][T18568] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2488.613963][T18568] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2488.613985][T18568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2488.643912][T23930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2488.864066][T23937] autofs: Unknown parameter 'fd0x0000000000000000' [ 2489.728265][T18568] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2490.993592][T23948] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2494.147020][T23973] netlink: 'syz.8.4201': attribute type 2 has an invalid length. [ 2494.147044][T23973] netlink: 'syz.8.4201': attribute type 1 has an invalid length. [ 2494.150243][T23973] netlink: 'syz.8.4201': attribute type 1 has an invalid length. [ 2494.358173][T23975] autofs: Unknown parameter 'fd0x0000000000000000' [ 2494.817952][T18568] usb 5-1: USB disconnect, device number 15 [ 2497.250490][T24001] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2498.903551][T24014] 9p: Bad value for 'rfdno' [ 2499.250752][T24023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2499.250780][T24023] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2499.250869][T24023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2499.751875][T24029] 9p: Bad value for 'rfdno' [ 2499.960191][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4221'. [ 2499.960215][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4221'. [ 2502.627090][T24063] 9p: Bad value for 'rfdno' [ 2502.831583][T18309] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2503.953680][T18309] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2503.953716][T18309] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2503.953744][T18309] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2503.953786][T18309] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2503.953810][T18309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.988197][T24061] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2504.093473][T24081] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2504.432476][T10412] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 2505.035839][T18309] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 2505.037521][T10412] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2505.037546][T10412] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2505.037565][T10412] usb 9-1: config 0 has no interface number 0 [ 2505.037608][T10412] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2505.064307][T10412] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2505.064336][T10412] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2505.064356][T10412] usb 9-1: Product: syz [ 2505.064371][T10412] usb 9-1: SerialNumber: syz [ 2505.064456][T18309] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input84 [ 2505.181074][T10412] usb 9-1: config 0 descriptor?? [ 2505.426067][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 2505.427407][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 2505.463939][T10412] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 2505.502158][T10412] usb 9-1: USB disconnect, device number 19 [ 2505.737279][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2505.739336][T18309] usb 10-1: USB disconnect, device number 25 [ 2507.378862][T24109] 9p: Bad value for 'rfdno' [ 2509.578483][ T5886] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2509.858934][ T5886] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2509.858969][ T5886] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2509.859479][ T5886] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2509.860199][ T5886] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2509.860288][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.494120][T24123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2510.918456][T10839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2511.901658][T18309] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2511.902014][ T5886] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 2511.905033][ T5886] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input85 [ 2512.004713][ T5886] usb 3-1: USB disconnect, device number 76 [ 2512.004790][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2512.945084][T18309] usb 9-1: Using ep0 maxpacket: 32 [ 2512.952363][T18309] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2512.952393][T18309] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2512.952413][T18309] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2512.955931][T18309] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2512.955960][T18309] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2512.955982][T18309] usb 9-1: Product: syz [ 2512.955997][T18309] usb 9-1: Manufacturer: syz [ 2512.956012][T18309] usb 9-1: SerialNumber: syz [ 2512.972048][T18309] usb 9-1: config 0 descriptor?? [ 2513.287774][T17424] usb 9-1: USB disconnect, device number 20 [ 2513.432506][T10839] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 2516.325486][T24184] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4270'. [ 2518.262125][T24201] blktrace: Concurrent blktraces are not allowed on loop16 [ 2518.351538][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2518.481571][ T5886] usb 5-1: device descriptor read/64, error -71 [ 2518.731559][ T5886] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2519.745767][T10839] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 2519.777272][ T5886] usb 5-1: device descriptor read/64, error -71 [ 2520.053617][ T5886] usb usb5-port1: attempt power cycle [ 2521.861607][ T5886] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2521.882194][ T5886] usb 5-1: device descriptor read/8, error -71 [ 2521.951599][T18568] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 2522.164329][ T5886] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2522.235747][ T5886] usb 5-1: device descriptor read/8, error -71 [ 2522.345052][ T5886] usb usb5-port1: unable to enumerate USB device [ 2522.900186][T18568] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2522.901070][T18568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.920818][T18568] usb 10-1: Product: syz [ 2522.920840][T18568] usb 10-1: Manufacturer: syz [ 2522.920855][T18568] usb 10-1: SerialNumber: syz [ 2522.978169][T18568] usb 10-1: config 0 descriptor?? [ 2523.192265][T18568] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2523.789003][T10839] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 2524.848645][T24264] blktrace: Concurrent blktraces are not allowed on loop8 [ 2525.824364][T18568] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2525.842728][T18568] usb 10-1: USB disconnect, device number 26 [ 2527.091774][T18568] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2527.409351][T18568] usb 10-1: device descriptor read/64, error -71 [ 2528.003803][T18568] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2528.181571][T18568] usb 10-1: device descriptor read/64, error -71 [ 2528.294859][T18568] usb usb10-port1: attempt power cycle [ 2528.297783][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4301'. [ 2528.704877][T18568] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2528.756691][T10839] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 2529.132872][T18568] usb 10-1: device descriptor read/8, error -71 [ 2529.386434][T18568] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2529.403443][T18568] usb 10-1: device descriptor read/8, error -71 [ 2529.511987][T18568] usb usb10-port1: unable to enumerate USB device [ 2533.690331][T10839] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 2534.018562][T24346] ubi: mtd0 is already attached to ubi16 [ 2534.019326][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.454854][T24360] macvtap1: entered promiscuous mode [ 2535.454878][T24360] macvtap1: entered allmulticast mode [ 2535.461040][T24360] syz_tun: entered promiscuous mode [ 2535.461058][T24360] syz_tun: entered allmulticast mode [ 2536.143816][T24360] team0: Device macvtap1 failed to register rx_handler [ 2536.435863][T24360] syz_tun: left allmulticast mode [ 2536.439249][T24360] syz_tun: left promiscuous mode [ 2536.966532][T24372] 9p: Bad value for 'rfdno' [ 2536.977119][ T5886] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2537.782518][T10839] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 2538.483992][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 2538.543340][ T5886] usb 10-1: device descriptor read/all, error -71 [ 2541.634260][T24406] ubi: mtd0 is already attached to ubi16 [ 2544.048309][T10839] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 2544.303997][T24431] 9p: Bad value for 'rfdno' [ 2547.627573][T24459] ubi: mtd0 is already attached to ubi16 [ 2550.086893][T24487] 9p: Bad value for 'rfdno' [ 2550.351742][T18568] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 2551.262626][T18568] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2551.262656][T18568] usb 10-1: config 0 has no interface number 0 [ 2551.262698][T18568] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2551.268756][T18568] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2551.268796][T18568] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2551.268816][T18568] usb 10-1: Product: syz [ 2551.268830][T18568] usb 10-1: SerialNumber: syz [ 2551.276829][T18568] usb 10-1: config 0 descriptor?? [ 2551.289788][T18568] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 2553.775144][ T1239] usb 10-1: USB disconnect, device number 33 [ 2555.683098][ T37] audit: type=1326 audit(1776622940.801:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.683149][ T37] audit: type=1326 audit(1776622940.861:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.683293][ T37] audit: type=1326 audit(1776622940.891:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.714916][ T37] audit: type=1326 audit(1776622940.921:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.714964][ T37] audit: type=1326 audit(1776622940.921:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.715000][ T37] audit: type=1326 audit(1776622940.921:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149223c819 code=0x7ffc0000 [ 2555.716427][ T37] audit: type=1326 audit(1776622940.921:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14921fd04e code=0x7ffc0000 [ 2555.732258][ T37] audit: type=1326 audit(1776622940.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14921fd04e code=0x7ffc0000 [ 2555.752492][ T37] audit: type=1326 audit(1776622940.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14921fd04e code=0x7ffc0000 [ 2555.755119][ T37] audit: type=1326 audit(1776622940.961:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24531 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14921fd04e code=0x7ffc0000 [ 2556.286397][T24531] =========================================================[ 2556.286397][T24531] ================================================================== [ 2556.286411][T24531] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 2556.286524][T24531] Read of size 1 at addr ffff88806313c200 by task syz.0.4366/24531 [ 2556.286535][T24531] [ 2556.286633][T24531] CPU: 0 UID: 0 PID: 24531 Comm: syz.0.4366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2556.286648][T24531] Tainted: [L]=SOFTLOCKUP [ 2556.286653][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2556.286666][T24531] Call Trace: [ 2556.286671][T24531] [ 2556.286677][T24531] dump_stack_lvl+0xe8/0x150 [ 2556.286720][T24531] print_address_description+0x55/0x1e0 [ 2556.286740][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.286749][T24531] print_report+0x58/0x70 [ 2556.286768][T24531] kasan_report+0x117/0x150 [ 2556.286852][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.286862][T24531] ? __wake_up_common_lock+0x2f/0x1e0 [ 2556.286910][T24531] __kasan_check_byte+0x2a/0x40 [ 2556.286926][T24531] lock_acquire+0x84/0x350 [ 2556.286990][T24531] rt_spin_lock+0x83/0x400 [ 2556.286999][T24531] ? __wake_up_common_lock+0x2f/0x1e0 [ 2556.287010][T24531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2556.287021][T24531] ? __pfx_rt_spin_lock+0x10/0x10 [ 2556.287030][T24531] ? rt_spin_unlock+0x14f/0x200 [ 2556.287040][T24531] ? rt_spin_unlock+0x160/0x200 [ 2556.287050][T24531] __wake_up_common_lock+0x2f/0x1e0 [ 2556.287063][T24531] snd_pcm_stop+0x428/0x550 [ 2556.287138][T24531] loopback_trigger+0x11ff/0x1cf0 [ 2556.287270][T24531] snd_pcm_start+0x43d/0x5d0 [ 2556.287283][T24531] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 2556.287319][T24531] ? __pfx_interleaved_copy+0x10/0x10 [ 2556.287334][T24531] ? __pfx_default_write_copy+0x10/0x10 [ 2556.287350][T24531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2556.287364][T24531] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 2556.287378][T24531] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2556.287388][T24531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2556.287401][T24531] ? snd_pcm_oss_write3+0x191/0x300 [ 2556.287469][T24531] snd_pcm_oss_write3+0x1ab/0x300 [ 2556.287484][T24531] snd_pcm_oss_write2+0x2c2/0x440 [ 2556.287499][T24531] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2556.287514][T24531] ? rt_spin_unlock+0x14f/0x200 [ 2556.287524][T24531] ? rt_spin_unlock+0x160/0x200 [ 2556.287534][T24531] snd_pcm_oss_sync1+0x180/0x520 [ 2556.287545][T24531] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 2556.287555][T24531] ? __pfx_default_wake_function+0x10/0x10 [ 2556.287610][T24531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2556.287623][T24531] ? __asan_memset+0x22/0x50 [ 2556.287635][T24531] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 2556.287646][T24531] snd_pcm_oss_sync+0xab2/0xfc0 [ 2556.287663][T24531] snd_pcm_oss_release+0x102/0x250 [ 2556.287677][T24531] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 2556.287692][T24531] __fput+0x461/0xa70 [ 2556.287733][T24531] task_work_run+0x1d9/0x270 [ 2556.287774][T24531] ? __pfx_task_work_run+0x10/0x10 [ 2556.287788][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.287812][T24531] exit_to_user_mode_loop+0xed/0x480 [ 2556.287846][T24531] ? rcu_is_watching+0x15/0xb0 [ 2556.287882][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.287893][T24531] do_syscall_64+0x33e/0xf80 [ 2556.287949][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.287959][T24531] ? clear_bhb_loop+0x40/0x90 [ 2556.287971][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.287985][T24531] RIP: 0033:0x7f149223c819 [ 2556.287999][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2556.288009][T24531] RSP: 002b:00007fffb6c8b568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2556.288021][T24531] RAX: 0000000000000000 RBX: 00007f14924b7da0 RCX: 00007f149223c819 [ 2556.288029][T24531] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2556.288036][T24531] RBP: 00007f14924b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 2556.288043][T24531] R10: 00007f14924b7cb0 R11: 0000000000000246 R12: 000000000026ffcb [ 2556.288050][T24531] R13: 00007f14924b627c R14: 000000000026feb3 R15: 00007f14924b6270 [ 2556.288061][T24531] [ 2556.288065][T24531] [ 2556.288070][T24531] Allocated by task 24532: [ 2556.288076][T24531] kasan_save_track+0x3e/0x80 [ 2556.288090][T24531] __kasan_kmalloc+0x93/0xb0 [ 2556.288103][T24531] __kmalloc_cache_noprof+0x3a6/0x690 [ 2556.288161][T24531] snd_pcm_attach_substream+0x5b7/0xb20 [ 2556.288171][T24531] snd_pcm_open_substream+0xbd/0x2420 [ 2556.288182][T24531] snd_pcm_oss_open+0xf90/0x1c20 [ 2556.288195][T24531] chrdev_open+0x4d0/0x5f0 [ 2556.288224][T24531] do_dentry_open+0x83d/0x13e0 [ 2556.288254][T24531] vfs_open+0x3b/0x350 [ 2556.288264][T24531] path_openat+0x2e43/0x38a0 [ 2556.288296][T24531] do_file_open+0x23e/0x4a0 [ 2556.288309][T24531] do_sys_openat2+0x113/0x200 [ 2556.288319][T24531] __x64_sys_openat+0x138/0x170 [ 2556.288330][T24531] do_syscall_64+0x15f/0xf80 [ 2556.288340][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.288350][T24531] [ 2556.288352][T24531] Freed by task 24532: [ 2556.288357][T24531] kasan_save_track+0x3e/0x80 [ 2556.288369][T24531] kasan_save_free_info+0x46/0x50 [ 2556.288380][T24531] __kasan_slab_free+0x5c/0x80 [ 2556.288392][T24531] kfree+0x1c5/0x6c0 [ 2556.288408][T24531] snd_pcm_detach_substream+0x1c8/0x270 [ 2556.288417][T24531] snd_pcm_oss_release+0x184/0x250 [ 2556.288429][T24531] __fput+0x461/0xa70 [ 2556.288440][T24531] task_work_run+0x1d9/0x270 [ 2556.288450][T24531] exit_to_user_mode_loop+0xed/0x480 [ 2556.288460][T24531] do_syscall_64+0x33e/0xf80 [ 2556.288471][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.288479][T24531] [ 2556.288482][T24531] The buggy address belongs to the object at ffff88806313c000 [ 2556.288482][T24531] which belongs to the cache kmalloc-2k of size 2048 [ 2556.288491][T24531] The buggy address is located 512 bytes inside of [ 2556.288491][T24531] freed 2048-byte region [ffff88806313c000, ffff88806313c800) [ 2556.288502][T24531] [ 2556.288505][T24531] The buggy address belongs to the physical page: [ 2556.288518][T24531] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888063139000 pfn:0x63138 [ 2556.288530][T24531] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2556.288539][T24531] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 2556.288552][T24531] page_type: f5(slab) [ 2556.288562][T24531] raw: 0080000000000240 ffff88801a024000 ffffea0000ade810 ffffea0000dee410 [ 2556.288571][T24531] raw: ffff888063139000 0000000800080006 00000000f5000000 0000000000000000 [ 2556.288580][T24531] head: 0080000000000240 ffff88801a024000 ffffea0000ade810 ffffea0000dee410 [ 2556.288588][T24531] head: ffff888063139000 0000000800080006 00000000f5000000 0000000000000000 [ 2556.288597][T24531] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2556.288605][T24531] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2556.288611][T24531] page dumped because: kasan: bad access detected [ 2556.288617][T24531] page_owner tracks the page as allocated [ 2556.288621][T24531] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5800, tgid 5800 (syz-executor), ts 87296694436, free_ts 0 [ 2556.288641][T24531] post_alloc_hook+0x231/0x280 [ 2556.288691][T24531] get_page_from_freelist+0x27c8/0x2840 [ 2556.288701][T24531] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2556.288711][T24531] allocate_slab+0x77/0x660 [ 2556.288741][T24531] refill_objects+0x33c/0x3d0 [ 2556.288751][T24531] __pcs_replace_empty_main+0x373/0x720 [ 2556.288762][T24531] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 2556.288777][T24531] pskb_expand_head+0x230/0x1390 [ 2556.288836][T24531] netlink_trim+0x1b3/0x2c0 [ 2556.288898][T24531] netlink_broadcast_filtered+0x80/0xea0 [ 2556.288911][T24531] nlmsg_notify+0xf0/0x1a0 [ 2556.288926][T24531] __dev_notify_flags+0xf2/0x310 [ 2556.288955][T24531] netif_change_flags+0xe8/0x1a0 [ 2556.288963][T24531] dev_change_flags+0x130/0x260 [ 2556.288999][T24531] devinet_ioctl+0x9f2/0x1b30 [ 2556.289046][T24531] inet_ioctl+0x42a/0x560 [ 2556.289071][T24531] page_owner free stack trace missing [ 2556.289075][T24531] [ 2556.289078][T24531] Memory state around the buggy address: [ 2556.289083][T24531] ffff88806313c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2556.289091][T24531] ffff88806313c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2556.289098][T24531] >ffff88806313c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2556.289103][T24531] ^ [ 2556.289108][T24531] ffff88806313c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2556.289114][T24531] ffff88806313c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2556.289119][T24531] ================================================================== [ 2556.296746][T24531] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2556.296769][T24531] CPU: 0 UID: 0 PID: 24531 Comm: syz.0.4366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2556.296799][T24531] Tainted: [L]=SOFTLOCKUP [ 2556.296807][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2556.296818][T24531] Call Trace: [ 2556.296826][T24531] [ 2556.296834][T24531] vpanic+0x56c/0xa60 [ 2556.296860][T24531] ? __pfx_vpanic+0x10/0x10 [ 2556.296877][T24531] ? __pfx___schedule+0x10/0x10 [ 2556.296963][T24531] panic+0xc5/0xd0 [ 2556.296981][T24531] ? __pfx_panic+0x10/0x10 [ 2556.297000][T24531] ? preempt_schedule_common+0x82/0xd0 [ 2556.297022][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.297039][T24531] check_panic_on_warn+0x89/0xb0 [ 2556.297126][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.297142][T24531] end_report+0x73/0x170 [ 2556.297178][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.297193][T24531] kasan_report+0x128/0x150 [ 2556.297220][T24531] ? rt_spin_lock+0x83/0x400 [ 2556.297239][T24531] ? __wake_up_common_lock+0x2f/0x1e0 [ 2556.297260][T24531] __kasan_check_byte+0x2a/0x40 [ 2556.297284][T24531] lock_acquire+0x84/0x350 [ 2556.297309][T24531] rt_spin_lock+0x83/0x400 [ 2556.297322][T24531] ? __wake_up_common_lock+0x2f/0x1e0 [ 2556.297339][T24531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2556.297356][T24531] ? __pfx_rt_spin_lock+0x10/0x10 [ 2556.297373][T24531] ? rt_spin_unlock+0x14f/0x200 [ 2556.297392][T24531] ? rt_spin_unlock+0x160/0x200 [ 2556.297408][T24531] __wake_up_common_lock+0x2f/0x1e0 [ 2556.297429][T24531] snd_pcm_stop+0x428/0x550 [ 2556.297453][T24531] loopback_trigger+0x11ff/0x1cf0 [ 2556.297484][T24531] snd_pcm_start+0x43d/0x5d0 [ 2556.297511][T24531] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 2556.297543][T24531] ? __pfx_interleaved_copy+0x10/0x10 [ 2556.297568][T24531] ? __pfx_default_write_copy+0x10/0x10 [ 2556.297596][T24531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2556.297619][T24531] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 2556.297644][T24531] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2556.297662][T24531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2556.297681][T24531] ? snd_pcm_oss_write3+0x191/0x300 [ 2556.297707][T24531] snd_pcm_oss_write3+0x1ab/0x300 [ 2556.297733][T24531] snd_pcm_oss_write2+0x2c2/0x440 [ 2556.297760][T24531] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2556.297784][T24531] ? rt_spin_unlock+0x14f/0x200 [ 2556.297802][T24531] ? rt_spin_unlock+0x160/0x200 [ 2556.297821][T24531] snd_pcm_oss_sync1+0x180/0x520 [ 2556.297842][T24531] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 2556.297859][T24531] ? __pfx_default_wake_function+0x10/0x10 [ 2556.297883][T24531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2556.297906][T24531] ? __asan_memset+0x22/0x50 [ 2556.297928][T24531] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 2556.297949][T24531] snd_pcm_oss_sync+0xab2/0xfc0 [ 2556.297977][T24531] snd_pcm_oss_release+0x102/0x250 [ 2556.298002][T24531] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 2556.298026][T24531] __fput+0x461/0xa70 [ 2556.298052][T24531] task_work_run+0x1d9/0x270 [ 2556.298076][T24531] ? __pfx_task_work_run+0x10/0x10 [ 2556.298099][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.298137][T24531] exit_to_user_mode_loop+0xed/0x480 [ 2556.298163][T24531] ? rcu_is_watching+0x15/0xb0 [ 2556.298187][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.298205][T24531] do_syscall_64+0x33e/0xf80 [ 2556.298226][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.298244][T24531] ? clear_bhb_loop+0x40/0x90 [ 2556.298265][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.298282][T24531] RIP: 0033:0x7f149223c819 [ 2556.298299][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2556.298314][T24531] RSP: 002b:00007fffb6c8b568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2556.298333][T24531] RAX: 0000000000000000 RBX: 00007f14924b7da0 RCX: 00007f149223c819 [ 2556.298345][T24531] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2556.298356][T24531] RBP: 00007f14924b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 2556.298368][T24531] R10: 00007f14924b7cb0 R11: 0000000000000246 R12: 000000000026ffcb [ 2556.298380][T24531] R13: 00007f14924b627c R14: 000000000026feb3 R15: 00007f14924b6270 [ 2556.298400][T24531] [ 2556.298537][T24531] Kernel Offset: disabled