last executing test programs: 28m17.050703178s ago: executing program 32 (id=539): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 25m25.913516394s ago: executing program 33 (id=2336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "9303"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @main=@item_4={0x3, 0x0, 0xb, "56c9177a"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x1b23, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 22m24.015335517s ago: executing program 34 (id=4519): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0xfffffffc, 0x0, 0x2, [0x0], [0xb89, 0x0, 0x4], [0xfffffffb, 0x1002, 0x10000, 0xffffffff], [0x4, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000180)={r3, 0x80000}) close(0x3) 22m2.654998573s ago: executing program 35 (id=4738): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) 20m25.028095386s ago: executing program 36 (id=5760): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0x100300) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r1, &(0x7f0000001680)=[{0x0}], 0x1) 18m17.941369818s ago: executing program 37 (id=7159): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x5, 0x0, {0x0, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x2000}) 18m5.18016195s ago: executing program 38 (id=7276): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 17m14.045338667s ago: executing program 39 (id=7834): r0 = syz_io_uring_setup(0xf05, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x3, 0x42f7}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x22, 0x2000, @fd, 0x6, 0x0, 0x0, 0x10, 0x0, {0x3}}) r4 = syz_io_uring_setup(0x5fc5, &(0x7f00000001c0)={0x0, 0x197, 0x1000, 0x3, 0x139, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x1a83, &(0x7f0000000380)={0x0, 0xdd3c, 0x8, 0x0, 0x39d, 0x0, r4}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r5, r2, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1d, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10101, 0x0, {0x2}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 16m5.812666786s ago: executing program 40 (id=8450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x7ffffffe}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 15m39.886032906s ago: executing program 41 (id=8658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r1, 0xfc9) listen(r0, 0x0) 15m13.34317413s ago: executing program 42 (id=8727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003140)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x7, 0xffffffffffffffff, 0x2, 0x401}, 0x40, 0x4}, [{0xd2d3, 0x0, 0x6, 0x7c7, 0x1, 0x2}, {0x9, 0xa6, 0x64ed, 0x6, 0xfff, 0x2}, {0x6, 0x7ff, 0x40, 0x0, 0x3, 0x94}, {0x2, 0xff, 0x9, 0x1, 0x6, 0x8}, {0xd68, 0x5, 0x8000, 0x4, 0x23, 0x24}, {0x1, 0x3, 0x5, 0x1, 0x5d, 0xe}, {0x40004, 0x0, 0xfffffcfe, 0x0, 0x8000, 0xce11c}, {0x6, 0x7, 0x0, 0xffffffff, 0x10000, 0x6}, {0x7, 0x80000000, 0x1, 0x7, 0x5}, {0x401, 0x543, 0xe000000, 0x1, 0x60, 0x2c}, {0x1ff, 0x101, 0x0, 0x1ff, 0x7, 0x7}, {0x6, 0x2, 0x7, 0xd, 0x5}, {0x4, 0xfffffff8, 0x0, 0xd, 0x84d6, 0x3}, {0x2, 0x4, 0x7ff, 0x80000000, 0x6, 0x101}, {0x200, 0x34, 0x8a8, 0x7, 0xda, 0xe493}, {0x3, 0x9, 0xffffff00, 0x42, 0x4}, {0x9, 0x0, 0x5, 0x1c, 0x9, 0x80}, {0x8, 0x8, 0xc, 0x9, 0x4, 0x2}, {0x0, 0xffff0000, 0x7ff, 0x5, 0xdd05, 0x2}, {0x7, 0x1, 0x7, 0x5, 0x0, 0xc6}, {0x7064, 0xa00, 0x5, 0xf3, 0xffffffff, 0x2}, {0x5, 0x3, 0x8, 0x200, 0x0, 0xd21}, {0xfffffff8, 0x7, 0x7, 0x6, 0x800, 0xa}, {0x0, 0x7, 0x5, 0x9, 0x401, 0x5}, {0x7fff, 0x8, 0x63ad, 0x80, 0xa70e, 0x36}, {0x2, 0x3, 0x101, 0x6d74, 0x61, 0x6}, {0x6, 0x4f4, 0xf, 0x100, 0x2, 0x6}, {0x127, 0x0, 0x0, 0xf, 0x1, 0xb}, {0x8, 0x6, 0x1, 0x4, 0x4e6986f8, 0x2}, {0x3, 0x3, 0x1, 0x80, 0xb916, 0x8}, {0x200, 0x2, 0xf, 0x5, 0xcd}, {0xc, 0x7000, 0x7, 0x7, 0x67b, 0xc4f}, {0x3ff, 0x8, 0x80000000, 0x8, 0x101, 0xb17a}, {0xffff, 0x2, 0x6, 0x7e4, 0xfffffff6, 0x5}, {0x8, 0x4, 0x1, 0x9, 0x989, 0x7}, {0xc, 0x40, 0x1000, 0x3ff, 0x0, 0x47}, {0xc60253a, 0x10, 0x1ff, 0x4, 0x100, 0x8}, {0x3, 0x3, 0x4f70, 0xfffffff4, 0x81, 0xabb}, {0x5, 0x3, 0x1, 0x3, 0x5, 0xb4}, {0x1, 0x8, 0xd0, 0x10, 0x8001, 0x8}, {0x7fffffff, 0x1ff, 0x4, 0x6a91, 0xff, 0x3}, {0x3ff, 0x3, 0xc1bf, 0xe, 0xffff, 0xfe63}, {0x8, 0x0, 0x2, 0x400, 0xff, 0x5}, {0xfffffff8, 0xf80, 0x2, 0xc, 0x1, 0x7fff}, {0x0, 0x3, 0x401, 0x81, 0x1, 0xff}, {0x0, 0x1, 0x5, 0x89, 0x8001, 0xa}, {0x3, 0x8, 0x0, 0xe, 0x4, 0x971}, {0x8, 0x6, 0x77d, 0x2, 0x32, 0xff}, {0xfffffff9, 0xe, 0x4, 0xc288, 0xc, 0x400}, {0x2, 0x4, 0xfffffffb, 0x7fff, 0x9, 0xf7}, {0xabc, 0x6903, 0x8, 0x0, 0x1, 0x7}, {0x2, 0x7fffffff, 0x7, 0x0, 0x8, 0xb4}, {0x5, 0x5, 0x4, 0xb, 0x800, 0x8}, {0xc44, 0x3, 0xa, 0x40, 0x8, 0x1}, {0xbcb, 0xee7d, 0x3, 0x1ff, 0x2, 0x1fed}, {0xfffffff9, 0xe, 0xffffffff, 0x7306, 0x9, 0x9b36}, {0x6, 0x9, 0x1902, 0xff, 0x2, 0x1ff}, {0x40, 0x264, 0x8a, 0xf0a, 0x5, 0xd}, {0xf0a1, 0x8, 0x3, 0x3, 0x4, 0x2}, {0x5, 0x8000, 0x1000, 0x401, 0x1, 0x8}, {0x8, 0x10000, 0x1, 0x800, 0x40, 0xdc0}, {0x9, 0x9, 0x0, 0x10, 0x10, 0xfffffffe}, {0xbc3, 0x8, 0x46, 0xa3, 0x436c, 0x8}, {0x3, 0x9, 0x3d82, 0x4, 0x81, 0x1cf}, {0x8d5, 0x9, 0x6, 0x32d5, 0xffffffff, 0x1}, {0x2, 0xb, 0x6, 0x9a, 0x9, 0x4}, {0x0, 0x100, 0xff, 0x5, 0x7f, 0x7}, {0x8, 0x0, 0x7ff, 0x1, 0x2, 0x10}, {0x81, 0x5, 0x1ff, 0x8, 0x8, 0xffff0f91}, {0x6, 0x4, 0x8001, 0x1ff, 0x5, 0x7d5}, {0x2, 0xa35, 0x6c, 0x5bbc, 0x8, 0x7}, {0x5f, 0x24, 0x8001, 0x3, 0xf, 0x1b}, {0x7fff, 0x9, 0x401, 0xd, 0xfffffffc, 0x6f}, {0x6, 0x80000000, 0x9, 0x8, 0x7, 0x80000000}, {0xad7, 0xfffffff8, 0x0, 0x3, 0x5, 0x9ec}, {0x5, 0xbe5, 0x100, 0x1, 0x6, 0x10000}, {0x0, 0x4, 0x9, 0x9, 0x7ff, 0xfa34f080}, {0xfffffffc, 0xf, 0x5, 0x80000000, 0x0, 0x3ff}, {0x4, 0x5bd8, 0x5, 0x2, 0x817, 0x2}, {0x0, 0x6, 0x5, 0x4, 0x6, 0xbdc}, {0xffff7fff, 0x3, 0xfff, 0xa5, 0x5, 0x2}, {0x5, 0x4, 0x3, 0xb7, 0x81, 0x6}, {0xfffffff2, 0x5, 0x1c000, 0x2, 0x3, 0xd}, {0x4, 0xc, 0x6, 0x3, 0x5, 0x8}, {0x5, 0xffffffff, 0x766, 0x5, 0x5, 0x1a6}, {0xf, 0x2, 0x1, 0x949, 0x5, 0x2}, {0xffff, 0xff800, 0xfffffffe, 0x400, 0x100}, {0x5, 0x8000, 0x5, 0x8, 0x9, 0x400}, {0x2, 0x2, 0x8, 0x3c, 0x1, 0x7d1c}, {0x8, 0x2, 0x9, 0xffffffff, 0x2, 0x9}, {0x2, 0xfffffffa, 0x2, 0x7, 0xffffffff, 0x8}, {0x1, 0x3, 0x4, 0xbd, 0xffffffa9, 0x2}, {0xfffffffa, 0x2, 0x8, 0x5, 0xffffffff}, {0x10000, 0x7, 0x54c, 0x8001, 0x6, 0x10001}, {0xd56, 0x4, 0x1, 0xfffffff8, 0x9, 0xa}, {0x0, 0xffff8000, 0x6, 0xc3, 0x7, 0x2}, {0x8, 0x6, 0x81, 0x1, 0xf1, 0x6}, {0x800000, 0xfffffff8, 0x0, 0xffff, 0x200, 0x1}, {0x7ff, 0x4, 0x8001, 0x3, 0x5, 0x9}, {0x24b, 0x9, 0xffff, 0xfffff801, 0x4, 0xdaa7}, {0x9, 0x21, 0xfffffff8, 0xb, 0x9, 0x9}, {0x80000000, 0x5, 0x2, 0xa, 0xaea, 0x3}, {0x9, 0x10, 0x101, 0x6f3a0d83, 0x7, 0x4}, {0x80, 0x4, 0xc671, 0x3, 0x2, 0x8}, {0x1b, 0x7, 0x31b, 0xd, 0xf, 0x1}, {0x5b03, 0x6, 0x1, 0x8, 0x80000000, 0x9}, {0x9, 0x3ff, 0xd60000, 0x9, 0x3a9, 0xd884}, {0x4, 0x9, 0xb, 0x3, 0x25a946b0, 0xcd}, {0x4, 0x7fff, 0xf1e, 0x5, 0xc, 0xfffffffe}, {0x40, 0x81, 0x100, 0xffffffff, 0x1000, 0x3}, {0xcb, 0x5, 0x8, 0x3, 0x2, 0x7ff}, {0x0, 0x30, 0x4, 0x10, 0x8, 0xa2aa}, {0x9, 0x58f, 0xbea3, 0x6, 0x2, 0x4d7}, {0x0, 0xa62a, 0x8000, 0xba0, 0x9, 0x3}, {0x5, 0x4, 0xfffffffd, 0x1ff, 0xffffffff, 0xe99}, {0x7, 0x1ff, 0x3, 0x80000000, 0x5, 0x4}, {0x81, 0x5, 0xa, 0x5, 0xffff, 0x2}, {0x6, 0x5, 0x5ab7ac7, 0x80000000, 0x101}, {0x100, 0xffff287c, 0x7, 0x9, 0x5, 0x2}, {0xb, 0x63e9, 0x1, 0x9, 0x13, 0x101}, {0xffff, 0x8, 0xaa, 0xa2, 0x7a8a, 0xa}, {0x2, 0x81, 0x7, 0x20000, 0x8, 0x1}, {0x79fc57a7, 0x86, 0x2, 0x8, 0xe765, 0x7}, {0xd045000, 0x4, 0x1, 0x7, 0x9, 0x9}, {0x2, 0xf700, 0x4, 0x7, 0x9, 0x10}, {0xffffffac, 0x80, 0x81, 0xf, 0x8, 0x4}, {0x0, 0xfd7, 0x400, 0x2, 0x72, 0x6}, {0x6, 0x0, 0x8, 0x48, 0x27d5120a, 0x401}], [{0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x7}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x7, 0x1}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x5}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x80}, 0x800) 14m5.058916496s ago: executing program 43 (id=9438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) openat$sw_sync_info(0xffffff9c, 0x0, 0x200800, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 13m8.506586786s ago: executing program 44 (id=9902): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x208442, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x963}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x104}) 13m0.045441739s ago: executing program 45 (id=9955): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 12m21.060610099s ago: executing program 46 (id=10244): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11m45.332683418s ago: executing program 47 (id=10444): r0 = open(0x0, 0x101040, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x3) close(r4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(r0, 0x410, 0x0) 10m33.099259245s ago: executing program 48 (id=10942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0xa1, 0x301, 0x270bd24, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup, 0xffffffffffffffff, 0x3a, 0x1008}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m21.47147888s ago: executing program 49 (id=11005): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 9m23.070074473s ago: executing program 6 (id=11375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1100}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 9m22.943271179s ago: executing program 6 (id=11377): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0x18, 0x4, "9490c99e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x0, 0x14, 0x2, "3eda"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4c, "df1d7f890b065f1f4be297fd5d80f228ecefee46799aace1617b5dddd50c0e93a93b27f617973bc8d6c388982d6a4463c1a628f7d25fdb67032ba24a00cf1a2db1df714a9d2fc5d95599286a"}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x2, "6f85"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "821daa"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "f3ef38"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "d0"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "af4e63"}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9m19.921622047s ago: executing program 6 (id=11398): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8009, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x545, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8000000008d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m19.793472614s ago: executing program 6 (id=11401): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 9m19.758792053s ago: executing program 6 (id=11402): socket$inet6_icmp_raw(0xa, 0x3, 0x87) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m19.649580325s ago: executing program 6 (id=11404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000670000/0x3000)=nil, 0x3000, 0x3000002, 0x12012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2004, 0x0) 9m19.419667916s ago: executing program 50 (id=11404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000670000/0x3000)=nil, 0x3000, 0x3000002, 0x12012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2004, 0x0) 8m25.294725992s ago: executing program 7 (id=11732): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8m24.265898143s ago: executing program 7 (id=11740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xfffb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4854) 8m24.035523565s ago: executing program 7 (id=11743): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff0001090224"], 0x0) userfaultfd(0x80001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) inotify_init() r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 8m20.895799199s ago: executing program 7 (id=11771): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008aec1, &(0x7f0000000d00)={"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"}) 8m20.814385093s ago: executing program 7 (id=11772): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) r2 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xd3fc6000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) 8m20.539697781s ago: executing program 7 (id=11776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x50}}, 0x0) 8m19.998974723s ago: executing program 51 (id=11776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x50}}, 0x0) 6m52.562881845s ago: executing program 0 (id=12245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/109, 0x6d}], 0x3}, 0x6}], 0x1, 0x10022, 0x0) 6m52.304951928s ago: executing program 0 (id=12247): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x10, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6m49.156152976s ago: executing program 0 (id=12264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffb, 0x101, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x6, 0x3, 0x6, 0x5, 0x5, 0xb9, 0x89], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m48.965863848s ago: executing program 0 (id=12266): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 6m48.023486s ago: executing program 0 (id=12279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x400, &(0x7f00000003c0)) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xf4ad, 0x702000a1, 0xdcf, 0x4, 0xb, 0x7fe, 0x0, 0x0, 0x4, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xa, {0xb, 0x0, 0x0, {0x9, 0x80800000009, 0x5, 0x90000005, 0x40000000000003, 0x2, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000007b40)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa90220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1cb93a7a144e7a8a704ce1af0657f950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88a0dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9497b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd53eecc58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m47.853322342s ago: executing program 0 (id=12282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 6m47.570851968s ago: executing program 52 (id=12282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 6m6.2664256s ago: executing program 1 (id=12495): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7f, 0x6}, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80202, 0x0) socket(0x2, 0x2, 0x1) 6m6.195480627s ago: executing program 1 (id=12496): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) tkill(r4, 0x16) 6m6.012846972s ago: executing program 1 (id=12497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0xfffffffd) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x17, 0x65, 0x200, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, {[@noop]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x5, 0x0, 0x1}, {"108927ee972103827d9d1fa076ede0e0d1eda847bb9655b53c292791cbabaee7c63954ae0087d41cc48d067d5c848a5d269dbdbef5025c1d16"}}}}, 0x73) 6m5.376706718s ago: executing program 1 (id=12500): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m5.235051215s ago: executing program 1 (id=12501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfcff, &(0x7f0000000580)="b318"}) 6m4.970703683s ago: executing program 1 (id=12503): pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x0, 0x4, 0x0, 0x3, 0x3, 0xc0, 0x7f, 0x65, 0x68, 0x5, 0x4, 0x0, 0x2e, 0x7, 0x5, 0x5, 0xf, 0x0, '\x00', 0xf0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m4.477022947s ago: executing program 53 (id=12503): pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x0, 0x4, 0x0, 0x3, 0x3, 0xc0, 0x7f, 0x65, 0x68, 0x5, 0x4, 0x0, 0x2e, 0x7, 0x5, 0x5, 0xf, 0x0, '\x00', 0xf0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m19.26700608s ago: executing program 4 (id=12734): socket$unix(0x1, 0x1, 0x0) eventfd2(0x0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5m18.222006324s ago: executing program 4 (id=12744): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000280)={0x18, 0x0, r3, {0xffff}}, 0x18) 5m15.600324373s ago: executing program 4 (id=12757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r5, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 5m15.331617455s ago: executing program 54 (id=12757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r5, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 8.827297243s ago: executing program 5 (id=14117): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000380)={0x0, 0xd, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000004c0)={0x20, 0x12, 0x2, 'ww'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.883086117s ago: executing program 8 (id=14132): socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) capset(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 5.599047107s ago: executing program 3 (id=14124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xf}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.454521624s ago: executing program 9 (id=14125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket(0x2d, 0x2, 0x0) r3 = dup2(r1, r2) read$proc_mixer(r3, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xe, 0x2, 0x2, {0x9, 0x6, 0x7c, 0x4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 4.925861013s ago: executing program 9 (id=14126): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) close(0x4) 4.802348637s ago: executing program 5 (id=14127): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007000000451c04"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 4.731097255s ago: executing program 9 (id=14128): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4.724300506s ago: executing program 5 (id=14129): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x800007, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto$inet6(r0, &(0x7f0000000800)="4103082c111648040102", 0xa, 0x880, 0x0, 0x0) 4.631255368s ago: executing program 3 (id=14130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x8000000000000001, 0x7, 0x6, 0x7f, 0x7fffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000480)="e1a8b3", 0x3, 0x400c801, &(0x7f00000001c0)={0x11, 0x7, r5, 0x1, 0xdb, 0x6, @remote}, 0x14) 4.546628908s ago: executing program 5 (id=14133): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setrlimit(0xd, 0x0) setpriority(0x1, 0x0, 0x80000000) syz_80211_inject_frame(0x0, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.443704604s ago: executing program 3 (id=14134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xeb5, 0x10000000, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24044010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.26653814s ago: executing program 8 (id=14136): openat$misdntimer(0xffffff9c, 0x0, 0x480000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x200, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x90002, 0x0, {[0x8fc0, 0x8000, 0x7, 0xf, 0x1, 0x4, 0x52, 0x7]}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002940), 0xf000, 0x10002, 0x0) 4.139810715s ago: executing program 3 (id=14137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) 2.466736968s ago: executing program 5 (id=14138): sendmmsg(0xffffffffffffffff, 0x0, 0x49, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)=""/113, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000280)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.463471759s ago: executing program 9 (id=14148): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x305303, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 2.181563518s ago: executing program 9 (id=14139): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1.967344471s ago: executing program 2 (id=14140): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 1.85649124s ago: executing program 3 (id=14141): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x100) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 1.735624255s ago: executing program 2 (id=14142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.581955765s ago: executing program 2 (id=14143): landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xb}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4024587b, &(0x7f00000014c0)={{0xffffffffffffffff, 0x0, 0x10c000, 0x0, 0x3, 0x0, 0x0}, 0x1, &(0x7f0000001480)=[{0x2, 0x3, 0x0, &(0x7f0000000380)="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", 0xc88, 0x30}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0x0, 0x97, 0xe, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.460799511s ago: executing program 8 (id=14144): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 1.215774181s ago: executing program 8 (id=14145): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x10002e78) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 1.204354448s ago: executing program 2 (id=14146): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xff, 0xb6, '\x00', 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/58, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9c}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 717.889294ms ago: executing program 3 (id=14147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfcffffff, &(0x7f0000000600)="87"}) 311.423049ms ago: executing program 8 (id=14149): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x3fb}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp6\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 220.328316ms ago: executing program 2 (id=14150): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) socket$isdn(0x22, 0x3, 0x2) gettid() r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x40000010) sendmmsg(r1, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, {{0x0, 0x0, 0x0, 0xffffffffffffff43}}], 0x2, 0x4810) 143.793092ms ago: executing program 2 (id=14151): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x24, &(0x7f0000000d80)={0x40, 0x16, 0x4, "8663aec9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 86.34904ms ago: executing program 8 (id=14152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75) r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x5, 0x7, 0x55, 0x64, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x80, 0x1, 0xffffff4b, 0x6}}) syz_usb_connect$uac3(0x0, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0xff, 0xb0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x302, 0x6, 0x4, 0x2, 0x3, 0x5, 0x7f, 0x84}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x5, 0xe9fd, 0x5, 0x3, 0x2f, 0xfffd, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 75.822178ms ago: executing program 5 (id=14153): io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=14154): r0 = socket$key(0xf, 0x3, 0x2) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r0) sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0x78}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x6}, 0x1000}], 0x3, 0x8042, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019"], 0xe0}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): entered allmulticast mode [ 1642.696241][T14431] syzkaller0: entered promiscuous mode [ 1642.734506][T14431] syzkaller0: entered allmulticast mode [ 1643.142909][T14438] syzkaller0: entered promiscuous mode [ 1643.207405][T14438] syzkaller0: entered allmulticast mode [ 1644.587702][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13435'. [ 1645.397852][T14483] netlink: 'syz.8.13441': attribute type 1 has an invalid length. [ 1650.073525][T14477] tipc: Enabling of bearer rejected, failed to enable media [ 1650.083804][T14483] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1650.115035][T14505] netlink: 'syz.5.13442': attribute type 12 has an invalid length. [ 1650.475569][T32007] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1650.568181][T14543] syzkaller0: entered promiscuous mode [ 1650.574330][T14543] syzkaller0: entered allmulticast mode [ 1650.670616][T32007] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1650.701045][T32007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.719798][T32007] usb 10-1: Product: syz [ 1650.727180][T32007] usb 10-1: Manufacturer: syz [ 1650.734111][T32007] usb 10-1: SerialNumber: syz [ 1650.911602][T14548] syzkaller0: entered promiscuous mode [ 1650.917363][T14548] syzkaller0: entered allmulticast mode [ 1650.951856][T14550] IPVS: length: 199 != 272630600 [ 1650.966000][ T5909] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1651.150299][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 1651.165465][ T5909] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 1651.170550][T14555] binder: BINDER_SET_CONTEXT_MGR already set [ 1651.181909][ T5909] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 1651.188041][T14555] binder: 14554:14555 ioctl 4018620d 80000480 returned -16 [ 1651.197912][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1651.221569][ T5909] usb 6-1: config 162 has no interface number 0 [ 1651.232741][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1651.236306][T14555] binder: 14554:14555 ioctl c0306201 80000040 returned -14 [ 1651.250521][ T5909] usb 6-1: config 162 has no interface number 1 [ 1651.262817][ T5909] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1651.280404][ T5909] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1651.292658][ T5909] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1651.307276][ T5909] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1651.319385][ T5909] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1651.335258][ T5909] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1651.349888][ T5909] usb 6-1: config 162 interface 84 has no altsetting 0 [ 1651.357327][ T5909] usb 6-1: config 162 interface 2 has no altsetting 0 [ 1651.381815][ T5909] usb 6-1: config 162 interface 3 has no altsetting 0 [ 1651.410028][ T5909] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1651.424519][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.450437][ T5909] usb 6-1: Product: syz [ 1651.460226][ T5909] usb 6-1: Manufacturer: syz [ 1651.469816][ T5909] usb 6-1: SerialNumber: syz [ 1651.536658][T14560] netlink: 'syz.8.13459': attribute type 13 has an invalid length. [ 1651.697939][T14546] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1651.710362][T14546] Cannot find set identified by id 0 to match [ 1651.726392][T14546] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1651.771674][ T5909] usb 6-1: USB disconnect, device number 114 [ 1651.781745][T13308] Bluetooth: hci5: sending frame failed (-19) [ 1651.789890][ T6584] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 1652.174438][T14571] syzkaller0: entered promiscuous mode [ 1652.196838][T14571] syzkaller0: entered allmulticast mode [ 1652.500088][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1652.601306][T14574] syzkaller0: entered promiscuous mode [ 1652.623187][T14574] syzkaller0: entered allmulticast mode [ 1652.963267][T14586] syzkaller0: entered promiscuous mode [ 1652.980874][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1653.005378][T14586] syzkaller0: entered allmulticast mode [ 1653.015438][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1653.062487][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1653.085643][T32007] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1653.115113][T32007] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1653.141722][T32007] usb 10-1: USB disconnect, device number 89 [ 1653.210650][ T5884] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1653.263468][T14591] syzkaller0: entered promiscuous mode [ 1653.271157][T14591] syzkaller0: entered allmulticast mode [ 1653.381703][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.411585][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.439437][T14593] syzkaller0: entered promiscuous mode [ 1653.440719][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1653.447199][T14593] syzkaller0: entered allmulticast mode [ 1653.469751][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1653.491846][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.513902][ T5884] usb 3-1: config 0 descriptor?? [ 1653.720204][T32014] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1653.889120][T32014] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1653.926412][T32014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.941891][ T5884] plantronics 0003:047F:FFFF.00FD: reserved main item tag 0xd [ 1653.968294][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13478'. [ 1653.980513][T32014] usb 4-1: Product: syz [ 1653.999494][T32014] usb 4-1: Manufacturer: syz [ 1654.016619][ T5884] plantronics 0003:047F:FFFF.00FD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1654.038258][T32014] usb 4-1: SerialNumber: syz [ 1654.067443][T32014] usb 4-1: config 0 descriptor?? [ 1654.357188][T32014] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1654.376557][T32007] usb 3-1: USB disconnect, device number 58 [ 1654.640618][T14624] syzkaller0: entered promiscuous mode [ 1654.658976][T14624] syzkaller0: entered allmulticast mode [ 1654.760815][T14626] syzkaller0: entered promiscuous mode [ 1654.770420][T14626] syzkaller0: entered allmulticast mode [ 1654.786960][T14624] tipc: Enabled bearer , priority 0 [ 1654.817342][T14623] tipc: Resetting bearer [ 1654.863045][T14623] tipc: Disabling bearer [ 1655.286511][T14630] syzkaller0: entered promiscuous mode [ 1655.292446][T14630] syzkaller0: entered allmulticast mode [ 1655.308741][ T29] audit: type=1804 audit(1775597256.700:975): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.13486" name="/newroot/235/file1" dev="fuse" ino=1 res=1 errno=0 [ 1655.780337][T32014] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1655.839213][T32014] usb 4-1: USB disconnect, device number 10 [ 1659.610950][T14663] syzkaller0: entered promiscuous mode [ 1659.616472][T14663] syzkaller0: entered allmulticast mode [ 1659.834798][T14672] syzkaller0: entered promiscuous mode [ 1659.893022][T14672] syzkaller0: entered allmulticast mode [ 1659.928347][T14672] tipc: Started in network mode [ 1659.940873][T14672] tipc: Node identity de26480e8296, cluster identity 4711 [ 1659.977087][T14672] tipc: Enabled bearer , priority 0 [ 1659.989758][T14683] binder: BINDER_SET_CONTEXT_MGR already set [ 1660.002787][T14671] tipc: Resetting bearer [ 1660.009429][T14683] binder: 14679:14683 ioctl 4018620d 80002540 returned -16 [ 1660.053322][T14683] binder: 14679:14683 ioctl 40087447 0 returned -22 [ 1660.072787][T14671] tipc: Disabling bearer [ 1660.102960][T14682] syzkaller0: entered promiscuous mode [ 1660.109383][T14682] syzkaller0: entered allmulticast mode [ 1660.297250][T14688] syzkaller0: entered promiscuous mode [ 1660.303879][T14688] syzkaller0: entered allmulticast mode [ 1660.936471][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1660.954720][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1660.961432][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1660.971017][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1660.978271][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1661.356330][T14714] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1661.384322][ T29] audit: type=1804 audit(1775597262.770:976): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.13506" name="bus" dev="ramfs" ino=260857 res=1 errno=0 [ 1661.820639][ T5909] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1661.876004][T14726] syzkaller0: entered promiscuous mode [ 1661.892287][T14726] syzkaller0: entered allmulticast mode [ 1662.052721][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 1662.072000][ T5909] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1662.115384][ T5909] usb 9-1: config 0 has no interface number 0 [ 1662.168215][ T5909] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1662.257144][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.329884][ T5909] usb 9-1: Product: syz [ 1662.374993][ T5909] usb 9-1: Manufacturer: syz [ 1662.430188][ T5909] usb 9-1: SerialNumber: syz [ 1662.510919][ T5909] usb 9-1: config 0 descriptor?? [ 1662.551436][T32007] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1662.778371][T32007] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1662.809595][T32007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.846976][T32007] usb 3-1: Product: syz [ 1662.865049][T32007] usb 3-1: Manufacturer: syz [ 1662.884292][T32007] usb 3-1: SerialNumber: syz [ 1662.996496][ T5909] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1663.009029][ T5909] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1663.339650][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1663.372973][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1665.044046][ T5909] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1665.058262][ T5909] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1665.079199][ T5909] usb 9-1: USB disconnect, device number 82 [ 1665.191737][T14772] syzkaller0: entered promiscuous mode [ 1665.197535][T14772] syzkaller0: entered allmulticast mode [ 1665.371802][T14774] syzkaller0: entered promiscuous mode [ 1665.390566][T14774] syzkaller0: entered allmulticast mode [ 1665.433846][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 1665.471473][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1665.487582][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1665.504635][T32007] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1665.522826][T32007] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1665.563416][T32007] usb 3-1: USB disconnect, device number 59 [ 1665.630395][T14781] syzkaller0: entered promiscuous mode [ 1665.639946][T14781] syzkaller0: entered allmulticast mode [ 1666.096460][T14790] syzkaller0: entered promiscuous mode [ 1666.144248][T14790] syzkaller0: entered allmulticast mode [ 1666.500976][T14800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1666.536026][ T5884] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1666.700217][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 1666.708088][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1666.721277][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1666.730765][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.738867][ T5884] usb 3-1: Product: syz [ 1666.743556][ T5884] usb 3-1: Manufacturer: syz [ 1666.748237][ T5884] usb 3-1: SerialNumber: syz [ 1666.756732][ T5884] usb 3-1: config 0 descriptor?? [ 1666.771412][ T5884] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1666.781461][ T5884] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1666.790229][T32004] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1666.860243][T32007] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1666.880245][T32016] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1666.970225][T32004] usb 6-1: Using ep0 maxpacket: 8 [ 1666.982553][T32004] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1667.000228][T32004] usb 6-1: config 179 has no interface number 0 [ 1667.006654][T32004] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1667.040166][T32004] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1667.040218][T32016] usb 4-1: Using ep0 maxpacket: 32 [ 1667.051552][T32007] usb 9-1: Using ep0 maxpacket: 32 [ 1667.060192][T32004] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1667.066824][T32016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1667.075553][T32007] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1667.093186][T32016] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1667.103224][T32007] usb 9-1: config 0 has no interface number 0 [ 1667.111231][T32004] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1667.111333][T32016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1667.123229][T32007] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1667.140731][T32016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1667.145474][T32004] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1667.157540][T32016] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1667.168168][T32004] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1667.192012][T32004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.200872][T32007] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1667.209985][T32007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.216917][T32016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.218704][T32007] usb 9-1: Product: syz [ 1667.232453][T32007] usb 9-1: Manufacturer: syz [ 1667.238825][T32016] usb 4-1: Product: syz [ 1667.239549][T14803] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1667.251703][T32007] usb 9-1: SerialNumber: syz [ 1667.258667][T32016] usb 4-1: Manufacturer: syz [ 1667.259703][T32007] usb 9-1: config 0 descriptor?? [ 1667.273331][T14806] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1667.279272][T32016] usb 4-1: SerialNumber: syz [ 1667.306919][T32016] usb 4-1: config 0 descriptor?? [ 1667.324164][T32016] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input286 [ 1667.392430][ T5884] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1667.498195][T14806] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1667.819237][ T5884] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1667.837751][ T5884] em28xx 3-1:0.0: board has no eeprom [ 1667.844116][T14817] syzkaller0: entered promiscuous mode [ 1667.861984][T14817] syzkaller0: entered allmulticast mode [ 1667.948620][T32016] usb 4-1: USB disconnect, device number 11 [ 1668.061222][T31990] usb 6-1: USB disconnect, device number 115 [ 1668.061276][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1668.075683][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1668.160351][ T5884] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1668.168241][ T5884] em28xx 3-1:0.0: dvb set to bulk mode. [ 1668.180934][T32014] em28xx 3-1:0.0: Binding DVB extension [ 1668.496796][T31990] usb 3-1: USB disconnect, device number 60 [ 1668.522983][T31990] em28xx 3-1:0.0: Disconnecting em28xx [ 1668.588992][T32014] em28xx 3-1:0.0: Registering input extension [ 1668.616215][T31990] em28xx 3-1:0.0: Closing input extension [ 1668.645832][T31990] em28xx 3-1:0.0: Freeing device [ 1668.683467][T14833] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.692247][T14833] binder: 14832:14833 ioctl 4018620d 80000480 returned -16 [ 1668.728166][T14833] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.739430][T14833] binder: 14832:14833 ioctl 4018620d 80004a80 returned -16 [ 1668.807247][T14837] syzkaller0: entered promiscuous mode [ 1668.813163][T14837] syzkaller0: entered allmulticast mode [ 1669.024943][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.032506][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.330373][T32004] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1669.491709][T32004] usb 10-1: Using ep0 maxpacket: 16 [ 1669.502320][T32004] usb 10-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.520614][T32004] usb 10-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 1669.559667][T32004] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9d.aa [ 1669.582943][T32004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.613070][ T29] audit: type=1326 audit(1775597271.010:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.3.13553" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83f6c code=0x0 [ 1669.613084][T32004] usb 10-1: Product: syz [ 1669.613133][T32004] usb 10-1: Manufacturer: syz [ 1669.692489][T32004] usb 10-1: SerialNumber: syz [ 1669.951516][T32007] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1669.992695][T32007] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1670.081054][T32007] usb 9-1: USB disconnect, device number 83 [ 1670.195071][T32014] usb 10-1: USB disconnect, device number 90 [ 1670.299390][T14855] syzkaller0: entered promiscuous mode [ 1670.305122][T14855] syzkaller0: entered allmulticast mode [ 1670.874648][T14864] syzkaller0: entered promiscuous mode [ 1670.892959][T14864] syzkaller0: entered allmulticast mode [ 1670.951648][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13561'. [ 1670.995069][T14869] vlan1: entered allmulticast mode [ 1671.001033][T14869] bridge2: entered allmulticast mode [ 1671.131762][T14869] erspan0: left allmulticast mode [ 1671.150844][T14869] bridge2: port 1(erspan0) entered blocking state [ 1671.165547][T14869] bridge2: port 1(erspan0) entered disabled state [ 1671.182980][T14869] erspan0: entered allmulticast mode [ 1671.197592][T14869] erspan0: entered promiscuous mode [ 1671.280039][T14877] syzkaller0: entered promiscuous mode [ 1671.286704][T14877] syzkaller0: entered allmulticast mode [ 1671.370998][T32007] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1671.533421][T32007] usb 9-1: config 0 has no interfaces? [ 1671.540306][T32007] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1671.559985][T32007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1671.580581][T32007] usb 9-1: SerialNumber: syz [ 1671.601973][T32007] usb 9-1: config 0 descriptor?? [ 1671.746386][T14890] syzkaller0: entered promiscuous mode [ 1671.756962][T14890] syzkaller0: entered allmulticast mode [ 1671.879727][T32007] usb 9-1: USB disconnect, device number 84 [ 1671.975647][T14896] lo: Caught tx_queue_len zero misconfig [ 1671.991923][T14896] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1673.058431][T14920] syzkaller0: entered promiscuous mode [ 1673.072591][T14920] syzkaller0: entered allmulticast mode [ 1673.129405][ T29] audit: type=1326 audit(1775597274.520:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14921 comm="syz.8.13579" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x0 [ 1673.584004][T14932] syzkaller0: entered promiscuous mode [ 1673.604805][T14932] syzkaller0: entered allmulticast mode [ 1673.640304][T14932] tipc: Enabled bearer , priority 0 [ 1673.672941][T14931] tipc: Resetting bearer [ 1673.746528][T14931] tipc: Disabling bearer [ 1674.055718][T14942] syzkaller0: entered promiscuous mode [ 1674.066027][T14942] syzkaller0: entered allmulticast mode [ 1674.390234][ T5909] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1674.570237][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 1674.601695][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1674.654219][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1674.694797][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1674.729237][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1674.775281][ T5909] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1674.820329][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.848381][ T5909] usb 9-1: Product: syz [ 1674.861566][ T5909] usb 9-1: Manufacturer: syz [ 1674.866213][ T5909] usb 9-1: SerialNumber: syz [ 1674.905739][ T5909] usb 9-1: config 0 descriptor?? [ 1674.955809][ T5909] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input288 [ 1675.082896][T14962] netlink: 1136 bytes leftover after parsing attributes in process `syz.3.13592'. [ 1675.446724][T32007] usb 9-1: USB disconnect, device number 85 [ 1675.599121][T14975] syzkaller0: entered promiscuous mode [ 1675.649569][T14975] syzkaller0: entered allmulticast mode [ 1675.974129][ T29] audit: type=1326 audit(1775597277.370:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14980 comm="syz.5.13597" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x0 [ 1676.740213][T31990] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1676.857736][T14990] bridge2: port 1(erspan0) entered blocking state [ 1676.864283][T14990] bridge2: port 1(erspan0) entered forwarding state [ 1676.885583][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13600'. [ 1676.901364][T31990] usb 9-1: Using ep0 maxpacket: 16 [ 1676.924911][T31990] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1676.950469][T31990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1676.972974][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.993596][T31990] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1676.993979][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.020234][T31990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.032336][T14990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1677.058681][T31990] usb 9-1: Product: syz [ 1677.058912][T14996] lo: left allmulticast mode [ 1677.068205][T14996] tunl0: left allmulticast mode [ 1677.080988][T14996] gre0: left allmulticast mode [ 1677.092651][T14996] gretap0: left allmulticast mode [ 1677.114322][T14996] ip_vti0: left allmulticast mode [ 1677.114714][T31990] usb 9-1: Manufacturer: syz [ 1677.128824][T14996] ip6_vti0: left allmulticast mode [ 1677.149275][T31990] usb 9-1: SerialNumber: syz [ 1677.150857][T14996] sit0: left allmulticast mode [ 1677.162491][T14996] ip6tnl0: left allmulticast mode [ 1677.168068][T14996] ip6gre0: left allmulticast mode [ 1677.175910][T14996] ip6gretap0: left allmulticast mode [ 1677.182139][T14996] bridge0: left allmulticast mode [ 1677.187684][T14996] vcan0: left allmulticast mode [ 1677.196198][T14996] bond0: left allmulticast mode [ 1677.201695][T14996] syz_tun: left allmulticast mode [ 1677.207134][T31990] usb 9-1: config 0 descriptor?? [ 1677.216834][T14996] team0: left allmulticast mode [ 1677.219911][T31990] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1677.231996][T14996] nlmon0: left allmulticast mode [ 1677.251795][T14996] caif0: left allmulticast mode [ 1677.259020][T14996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1677.281335][T31990] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1677.376706][T14998] syzkaller0: entered promiscuous mode [ 1677.382521][T14998] syzkaller0: entered allmulticast mode [ 1677.445175][T15000] syzkaller0: entered promiscuous mode [ 1677.452125][T15000] syzkaller0: entered allmulticast mode [ 1677.837043][T31990] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1677.857220][T15012] binder: BINDER_SET_CONTEXT_MGR already set [ 1677.864300][T31990] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1677.871556][T15012] binder: 15011:15012 ioctl 4018620d 80000100 returned -16 [ 1677.898823][T15012] binder: BINDER_SET_CONTEXT_MGR already set [ 1677.912707][T15012] binder: 15011:15012 ioctl 4018620d 80004a80 returned -16 [ 1678.241046][T15015] tipc: Started in network mode [ 1678.246136][T15015] tipc: Node identity 8e3f535015ad, cluster identity 4711 [ 1678.255457][T15015] tipc: Enabled bearer , priority 0 [ 1678.265835][T15015] syzkaller0: entered promiscuous mode [ 1678.271525][T15015] syzkaller0: entered allmulticast mode [ 1678.285877][T15015] tipc: Resetting bearer [ 1678.298818][T15014] tipc: Resetting bearer [ 1678.325414][T15014] tipc: Disabling bearer [ 1678.494212][T31990] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1678.870345][T32014] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1679.042178][T32014] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1679.054265][T32014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1679.065944][T32014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1679.077419][T32014] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1679.092080][T32014] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1679.101584][T32014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.131263][T32014] usb 3-1: config 0 descriptor?? [ 1679.141960][T15022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1679.312883][T31990] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1679.329645][T31990] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1679.354430][T31990] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1679.372454][T31990] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1679.401451][T31990] usb 9-1: USB disconnect, device number 86 [ 1679.577597][T32014] hid_parser_main: 445 callbacks suppressed [ 1679.577621][T32014] plantronics 0003:047F:FFFF.00FE: unknown main item tag 0x0 [ 1679.615573][T32014] plantronics 0003:047F:FFFF.00FE: unknown main item tag 0x0 [ 1679.633892][T15028] syzkaller0: entered promiscuous mode [ 1679.639653][T15028] syzkaller0: entered allmulticast mode [ 1679.650223][T32014] plantronics 0003:047F:FFFF.00FE: unknown main item tag 0x0 [ 1679.668170][T32014] plantronics 0003:047F:FFFF.00FE: unknown main item tag 0x0 [ 1679.688626][T32014] plantronics 0003:047F:FFFF.00FE: unknown main item tag 0x0 [ 1679.750597][T32014] plantronics 0003:047F:FFFF.00FE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1679.932519][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13610'. [ 1679.959046][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13610'. [ 1679.989618][T15035] netlink: 23 bytes leftover after parsing attributes in process `syz.2.13610'. [ 1680.350276][T32016] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1680.390282][T32014] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1680.540553][T32016] usb 4-1: Using ep0 maxpacket: 16 [ 1680.561184][T32016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.581704][T32014] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1680.611334][T32016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.630370][T32014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.641227][T15049] vlan2 (unregistering): left promiscuous mode [ 1680.648463][T15049] vlan0 (unregistering): left promiscuous mode [ 1680.665226][T32016] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1680.674079][T15049] bridge1: port 1(vlan2) entered disabled state [ 1680.674768][T32014] usb 10-1: Product: syz [ 1680.701040][T32014] usb 10-1: Manufacturer: syz [ 1680.705802][T32014] usb 10-1: SerialNumber: syz [ 1680.710970][T32016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.733628][T32016] usb 4-1: config 0 descriptor?? [ 1680.752649][T32014] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1680.822750][T31997] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1680.890235][ T5909] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1681.055753][ T5909] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1681.075272][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.096626][ T5909] usb 6-1: Product: syz [ 1681.116409][ T5909] usb 6-1: Manufacturer: syz [ 1681.132607][ T5909] usb 6-1: SerialNumber: syz [ 1681.191948][T32016] corsair 0003:1B1C:1B02.00FF: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1681.358266][T32016] corsair 0003:1B1C:1B02.00FF: Read invalid backlight brightness: 34. [ 1681.466557][T32004] usb 10-1: USB disconnect, device number 91 [ 1681.589032][T32007] usb 4-1: USB disconnect, device number 12 [ 1681.637486][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1681.653637][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1681.830266][T32013] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 1681.880182][T31997] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1681.887652][T31997] ath9k_htc: Failed to initialize the device [ 1681.895639][T32004] usb 10-1: ath9k_htc: USB layer deinitialized [ 1682.002616][T32013] usb 3-1: device firmware changed [ 1682.012490][T31990] usb 3-1: USB disconnect, device number 61 [ 1682.163105][T31990] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1682.327095][T31990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.355855][T31990] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1682.366940][T31990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.389586][T31990] usb 3-1: config 0 descriptor?? [ 1682.421964][T31990] pwc: Askey VC010 type 2 USB webcam detected. [ 1682.500409][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13625'. [ 1682.829700][T31990] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1682.862202][T31990] pwc: recv_control_msg error -32 req 02 val 2700 [ 1682.887951][T31990] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1682.911792][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1682.934438][T31990] pwc: recv_control_msg error -32 req 04 val 1000 [ 1682.954349][T31990] pwc: recv_control_msg error -32 req 04 val 1300 [ 1682.982853][T31990] pwc: recv_control_msg error -32 req 04 val 1400 [ 1683.001601][T31990] pwc: recv_control_msg error -32 req 02 val 2000 [ 1683.031523][T31990] pwc: recv_control_msg error -32 req 02 val 2100 [ 1683.081615][T31990] pwc: recv_control_msg error -32 req 04 val 1500 [ 1683.100267][T31990] pwc: recv_control_msg error -32 req 02 val 2500 [ 1683.347271][T31990] pwc: recv_control_msg error -71 req 02 val 2600 [ 1683.369228][T31990] pwc: recv_control_msg error -71 req 02 val 2900 [ 1683.399931][T31990] pwc: recv_control_msg error -71 req 02 val 2800 [ 1683.425711][T31990] pwc: recv_control_msg error -71 req 04 val 1100 [ 1683.441528][T31990] pwc: recv_control_msg error -71 req 04 val 1200 [ 1683.504328][T31990] pwc: Registered as video103. [ 1683.522698][T31990] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input290 [ 1683.572639][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1683.589069][T31990] usb 3-1: USB disconnect, device number 62 [ 1683.621722][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1683.662800][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1683.711693][ T5909] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1683.761744][ T5909] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1683.809135][T15090] binder: BINDER_SET_CONTEXT_MGR already set [ 1683.821441][ T5909] usb 6-1: USB disconnect, device number 116 [ 1683.825624][T15090] binder: 15089:15090 ioctl 4018620d 80000300 returned -16 [ 1683.852966][T15090] binder: BINDER_SET_CONTEXT_MGR already set [ 1683.859142][T15090] binder: 15089:15090 ioctl 4018620d 80000040 returned -16 [ 1683.963336][T15092] tipc: Enabled bearer , priority 0 [ 1683.975772][T15092] syzkaller0: entered promiscuous mode [ 1683.981717][T15092] syzkaller0: entered allmulticast mode [ 1684.052342][T15092] tipc: Resetting bearer [ 1684.082130][T15091] tipc: Resetting bearer [ 1684.150829][T15091] tipc: Disabling bearer [ 1684.229880][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13634'. [ 1684.302629][T15102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1684.455714][T15107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1685.121846][T15126] netlink: 'syz.3.13645': attribute type 1 has an invalid length. [ 1685.302489][T15126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1685.353479][T10818] syzkaller0: tun_net_xmit 76 [ 1685.359484][T10818] syzkaller0: tun_net_xmit 48 [ 1685.380405][ T5909] syzkaller0: tun_net_xmit 76 [ 1685.412354][T15129] bond6: (slave bridge3): making interface the new active one [ 1685.466523][T15129] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1685.561206][T32016] syzkaller0: tun_net_xmit 76 [ 1685.706188][ T29] audit: type=1800 audit(1775597287.100:980): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.13632" name="bus" dev="ramfs" ino=264256 res=0 errno=0 [ 1685.773224][T31990] syzkaller0: tun_net_xmit 76 [ 1685.820655][T31990] syzkaller0: tun_net_xmit 76 [ 1685.825401][T15134] syzkaller0: entered promiscuous mode [ 1685.834762][T15134] syzkaller0: entered allmulticast mode [ 1689.744592][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13652'. [ 1693.705894][T15162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.714752][T15162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.764450][T15162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1693.848310][T15164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1693.926217][T15185] netlink: 'syz.9.13658': attribute type 1 has an invalid length. [ 1693.977148][T15176] syzkaller0: entered promiscuous mode [ 1693.986103][T15176] syzkaller0: entered allmulticast mode [ 1694.043126][T15189] netlink: 44 bytes leftover after parsing attributes in process `syz.9.13658'. [ 1694.059556][T15185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1694.081597][T15189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1694.104517][T15189] bond5: (slave batadv1): making interface the new active one [ 1694.119596][T15189] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1694.159676][T15187] vlan2: entered promiscuous mode [ 1694.169224][T15187] bond5: entered promiscuous mode [ 1694.184347][T15187] batadv1: entered promiscuous mode [ 1694.191957][T15187] vlan2: entered allmulticast mode [ 1694.199016][T15187] bond5: entered allmulticast mode [ 1694.205512][T15187] batadv1: entered allmulticast mode [ 1695.141195][T32016] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1695.303231][T32016] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1695.319353][T32016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.382226][T32016] usb 6-1: config 0 descriptor?? [ 1695.416892][T32016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1696.330717][ T29] audit: type=1800 audit(1775597297.720:981): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.13659" name="bus" dev="ramfs" ino=264538 res=0 errno=0 [ 1697.644069][T32004] usb 6-1: USB disconnect, device number 117 [ 1699.080559][T32016] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1699.240365][T32016] usb 4-1: Using ep0 maxpacket: 8 [ 1699.270618][T32016] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1699.309766][T32016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.362502][T32016] usb 4-1: Product: syz [ 1699.366734][T32016] usb 4-1: Manufacturer: syz [ 1699.438292][T32016] usb 4-1: SerialNumber: syz [ 1699.522510][T32016] usb 4-1: config 0 descriptor?? [ 1699.816393][T32016] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1701.504191][T32016] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1701.542531][T32016] usb 4-1: USB disconnect, device number 13 [ 1703.772571][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13683'. [ 1703.784181][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13683'. [ 1703.794344][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13683'. [ 1703.822844][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13683'. [ 1703.843678][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13683'. [ 1703.958585][T15276] tipc: Enabled bearer , priority 0 [ 1703.999668][T15276] syzkaller0: entered promiscuous mode [ 1704.019944][T15276] syzkaller0: entered allmulticast mode [ 1704.068133][T15278] syzkaller0: entered promiscuous mode [ 1704.108056][T15278] syzkaller0: entered allmulticast mode [ 1704.325800][T15283] tipc: Resetting bearer [ 1704.362327][T15275] tipc: Resetting bearer [ 1704.434324][T15275] tipc: Disabling bearer [ 1704.920573][T32001] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1705.068296][T15295] syz.9.13691 (15295): drop_caches: 2 [ 1705.097613][T15295] syz.9.13691 (15295): drop_caches: 2 [ 1705.112521][T32001] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.136033][T32001] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1705.190180][T32001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.240925][T32001] usb 6-1: config 0 descriptor?? [ 1705.267658][T32001] pwc: Askey VC010 type 2 USB webcam detected. [ 1705.340682][T15298] fuse: Unknown parameter '0xffffffffffffffff' [ 1705.494834][T15307] syzkaller0: entered promiscuous mode [ 1705.509800][T15307] syzkaller0: entered allmulticast mode [ 1705.530171][T32013] usb 9-1: new full-speed USB device number 87 using dummy_hcd [ 1705.683816][T32001] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1705.693669][T32013] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1705.706368][T32001] pwc: recv_control_msg error -32 req 02 val 2700 [ 1705.714382][T32013] usb 9-1: not running at top speed; connect to a high speed hub [ 1705.725098][T32001] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1705.725143][T32013] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.757612][T32001] pwc: recv_control_msg error -32 req 04 val 1000 [ 1705.767204][T32013] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1705.767875][T32001] pwc: recv_control_msg error -32 req 04 val 1300 [ 1705.793035][T32013] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 1705.793634][T32001] pwc: recv_control_msg error -32 req 04 val 1400 [ 1705.829104][T32013] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1705.840472][T32001] pwc: recv_control_msg error -32 req 02 val 2000 [ 1705.854759][T32001] pwc: recv_control_msg error -32 req 02 val 2100 [ 1705.862305][T32013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.879671][T32013] usb 9-1: Product: syz [ 1705.879916][T32001] pwc: recv_control_msg error -32 req 04 val 1500 [ 1705.899041][T32013] usb 9-1: Manufacturer: syz [ 1705.899741][T32001] pwc: recv_control_msg error -32 req 02 val 2500 [ 1705.922603][T32013] usb 9-1: SerialNumber: syz [ 1705.950557][T15301] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1706.116261][T32001] pwc: recv_control_msg error -71 req 02 val 2600 [ 1706.135658][T32001] pwc: recv_control_msg error -71 req 02 val 2900 [ 1706.150504][T32001] pwc: recv_control_msg error -71 req 02 val 2800 [ 1706.162227][T32001] pwc: recv_control_msg error -71 req 04 val 1100 [ 1706.179735][T32001] pwc: recv_control_msg error -71 req 04 val 1200 [ 1706.201579][T32013] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1706.214237][T32001] pwc: Registered as video103. [ 1706.231144][T32001] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input291 [ 1706.284562][T32001] usb 6-1: USB disconnect, device number 118 [ 1706.370254][T32013] usb 9-1: USB disconnect, device number 87 [ 1706.442204][T14821] udevd[14821]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1706.723407][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13697'. [ 1706.753730][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13697'. [ 1706.766780][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13697'. [ 1706.777629][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13697'. [ 1706.787894][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13697'. [ 1706.958093][T15322] syzkaller0: entered promiscuous mode [ 1706.963879][T15322] syzkaller0: entered allmulticast mode [ 1707.349590][T15335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1709.571341][T32004] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1709.780490][T32004] usb 9-1: Using ep0 maxpacket: 16 [ 1709.795713][T32004] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1709.829980][T32004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1709.894918][T32004] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1709.940172][T32004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.970292][T32004] usb 9-1: Product: syz [ 1710.006670][T32004] usb 9-1: Manufacturer: syz [ 1710.017721][T32004] usb 9-1: SerialNumber: syz [ 1710.041825][T32004] usb 9-1: config 0 descriptor?? [ 1710.070010][T32004] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1710.099226][T32004] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1710.400333][T32001] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1710.582046][T32001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.594311][T32001] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1710.630678][T32001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.643979][T32001] usb 4-1: config 0 descriptor?? [ 1710.658515][T32001] pwc: Askey VC010 type 2 USB webcam detected. [ 1710.699802][T32004] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1710.707065][T32004] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1711.085372][T32001] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1711.092492][T32001] pwc: recv_control_msg error -32 req 02 val 2700 [ 1711.102513][T32001] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1711.129644][T32001] pwc: recv_control_msg error -32 req 04 val 1000 [ 1711.156884][T32001] pwc: recv_control_msg error -32 req 04 val 1300 [ 1711.182838][T32001] pwc: recv_control_msg error -32 req 04 val 1400 [ 1711.219136][T32001] pwc: recv_control_msg error -32 req 02 val 2000 [ 1711.252940][T32001] pwc: recv_control_msg error -32 req 02 val 2100 [ 1711.282322][T32001] pwc: recv_control_msg error -32 req 04 val 1500 [ 1711.301324][T32001] pwc: recv_control_msg error -32 req 02 val 2500 [ 1711.346886][T32004] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1711.354846][T32004] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1711.377661][T32004] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1711.396309][T32004] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1711.533590][T32001] pwc: recv_control_msg error -71 req 02 val 2600 [ 1711.544876][T32001] pwc: recv_control_msg error -71 req 02 val 2900 [ 1711.562319][T32001] pwc: recv_control_msg error -71 req 02 val 2800 [ 1711.581894][T32001] pwc: recv_control_msg error -71 req 04 val 1100 [ 1711.599960][T32001] pwc: recv_control_msg error -71 req 04 val 1200 [ 1711.622356][T32001] pwc: Registered as video103. [ 1711.637948][T32001] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input292 [ 1711.680228][T32001] usb 4-1: USB disconnect, device number 14 [ 1711.815294][T32004] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1711.833902][T32004] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1711.887965][T32004] usb 9-1: USB disconnect, device number 88 [ 1712.069539][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13714'. [ 1712.081008][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13714'. [ 1712.091668][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13714'. [ 1712.101240][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13714'. [ 1712.110703][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13714'. [ 1712.252695][T32001] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1712.410519][T32001] usb 10-1: Using ep0 maxpacket: 16 [ 1712.433909][T32001] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1712.472377][T32001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.513511][T32001] usb 10-1: Product: syz [ 1712.527210][T32001] usb 10-1: Manufacturer: syz [ 1712.547073][T32001] usb 10-1: SerialNumber: syz [ 1712.570983][T32001] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1712.596615][T32001] r8152-cfgselector 10-1: config 0 descriptor?? [ 1713.305512][T32016] r8152-cfgselector 10-1: USB disconnect, device number 92 [ 1714.024295][T15401] syzkaller0: entered promiscuous mode [ 1714.029891][T15401] syzkaller0: entered allmulticast mode [ 1714.437885][T15413] tipc: Enabled bearer , priority 0 [ 1714.455849][T15413] syzkaller0: entered promiscuous mode [ 1714.468499][T15413] syzkaller0: entered allmulticast mode [ 1714.528545][T15413] tipc: Resetting bearer [ 1714.553842][T15412] tipc: Resetting bearer [ 1714.600274][T32004] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 1714.660668][T15412] tipc: Disabling bearer [ 1714.776322][T32004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1714.796925][T32004] usb 6-1: not running at top speed; connect to a high speed hub [ 1714.824830][T32004] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.853709][T32004] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1714.854490][T15422] syzkaller0: entered promiscuous mode [ 1714.875543][T15422] syzkaller0: entered allmulticast mode [ 1714.888444][T32004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 1714.943313][T32004] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1714.977963][T32004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.012794][T32004] usb 6-1: Product: syz [ 1715.022742][T32004] usb 6-1: Manufacturer: syz [ 1715.049770][T32004] usb 6-1: SerialNumber: syz [ 1715.090531][T15409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1715.313744][T32004] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1715.507811][T32004] usb 6-1: USB disconnect, device number 119 [ 1715.653251][T15084] udevd[15084]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1715.825033][T15448] syzkaller0: entered promiscuous mode [ 1715.843787][T15448] syzkaller0: entered allmulticast mode [ 1716.334706][T15450] tipc: Enabled bearer , priority 0 [ 1716.387928][T15450] syzkaller0: entered promiscuous mode [ 1716.415139][T15450] syzkaller0: entered allmulticast mode [ 1716.581105][T32013] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1716.677313][T15456] tipc: Resetting bearer [ 1716.801228][T32013] usb 9-1: Using ep0 maxpacket: 16 [ 1716.817824][T32013] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1716.860527][T32013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1716.896339][T15449] tipc: Resetting bearer [ 1716.911750][T32013] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1716.921211][T32013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.929351][T32013] usb 9-1: Product: syz [ 1716.970392][T32013] usb 9-1: Manufacturer: syz [ 1716.995642][T32013] usb 9-1: SerialNumber: syz [ 1716.997836][T15449] tipc: Disabling bearer [ 1717.025090][T32013] usb 9-1: config 0 descriptor?? [ 1717.046239][T32013] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1717.080350][T32013] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1717.134596][T32004] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1717.254195][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13741'. [ 1717.293742][T32004] usb 10-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.340274][T32004] usb 10-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1717.361189][T32004] usb 10-1: config 48 interface 0 altsetting 98 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1717.391305][T32004] usb 10-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1717.420392][T32004] usb 10-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.454997][T32004] usb 10-1: config 48 interface 0 has no altsetting 0 [ 1717.494197][T32004] usb 10-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1717.507711][T32004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.517175][T32004] usb 10-1: Product: syz [ 1717.521716][T32004] usb 10-1: Manufacturer: syz [ 1717.531326][T32004] usb 10-1: SerialNumber: syz [ 1717.546002][T15458] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1717.655930][T32013] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1717.671330][T32013] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1717.809548][T32004] usb 10-1: USB disconnect, device number 93 [ 1718.281252][T32013] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1718.292562][T32013] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1718.309267][T32013] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1718.326173][T32013] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1718.575369][T15481] syzkaller0: entered promiscuous mode [ 1718.601408][T15481] syzkaller0: entered allmulticast mode [ 1718.715167][T15481] tipc: Enabled bearer , priority 0 [ 1718.736552][T15480] tipc: Resetting bearer [ 1718.745413][T32013] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1718.760367][T32013] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1718.791430][T32013] usb 9-1: USB disconnect, device number 89 [ 1718.825785][T15480] tipc: Disabling bearer [ 1720.737648][T15521] netlink: 'syz.5.13759': attribute type 1 has an invalid length. [ 1720.784871][T15521] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1720.832943][T15525] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1720.906957][T15521] bond7: (slave macvlan1): Enslaving as an active interface with a down link [ 1721.270377][T32016] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1721.416659][T15541] tipc: Enabled bearer , priority 0 [ 1721.425494][T15541] syzkaller0: entered promiscuous mode [ 1721.431103][T15541] syzkaller0: entered allmulticast mode [ 1721.481969][T32016] usb 4-1: Using ep0 maxpacket: 8 [ 1721.517767][T32016] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 1721.575934][T32016] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 1721.590495][T32016] usb 4-1: config 162 has no interface number 0 [ 1721.672128][T32016] usb 4-1: config 162 has no interface number 1 [ 1721.692294][T32016] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1721.720656][T15543] tipc: Resetting bearer [ 1721.727911][T32016] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1721.786356][T32016] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1721.824128][T15540] tipc: Resetting bearer [ 1721.873262][T32016] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1721.980162][T32016] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1722.017785][T32016] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1722.056252][T32016] usb 4-1: config 162 interface 84 has no altsetting 0 [ 1722.090596][T32016] usb 4-1: config 162 interface 2 has no altsetting 0 [ 1722.092046][T15540] tipc: Disabling bearer [ 1722.121676][T15546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13764'. [ 1722.134937][T32016] usb 4-1: config 162 interface 3 has no altsetting 0 [ 1722.185190][T32016] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1722.201033][T32016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.284901][T32016] usb 4-1: Product: syz [ 1722.320367][T32016] usb 4-1: Manufacturer: syz [ 1722.340271][T32016] usb 4-1: SerialNumber: syz [ 1722.567860][ T29] audit: type=1326 audit(1775597323.930:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1722.680053][T15530] Cannot find set identified by id 0 to match [ 1722.706231][T15530] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1722.723107][ T29] audit: type=1326 audit(1775597323.930:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1722.843280][ T6584] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1722.875096][ T29] audit: type=1326 audit(1775597323.930:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1722.899945][T32016] usb 4-1: USB disconnect, device number 15 [ 1722.947157][ T29] audit: type=1326 audit(1775597323.930:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1722.992006][T15559] batadv0: entered promiscuous mode [ 1722.998572][T15559] dummy0: entered promiscuous mode [ 1723.016206][ T29] audit: type=1326 audit(1775597323.930:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.058600][T15559] hsr1: entered promiscuous mode [ 1723.095230][T15559] hsr1: entered allmulticast mode [ 1723.108727][T15559] batadv0: entered allmulticast mode [ 1723.114511][T15559] dummy0: entered allmulticast mode [ 1723.119904][ T29] audit: type=1326 audit(1775597323.930:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.174150][ T29] audit: type=1326 audit(1775597323.930:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.219970][T15563] syzkaller0: entered promiscuous mode [ 1723.255288][ T29] audit: type=1326 audit(1775597323.930:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.288038][T15563] syzkaller0: entered allmulticast mode [ 1723.333111][T32013] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1723.349304][ T29] audit: type=1326 audit(1775597323.930:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.403025][ T29] audit: type=1326 audit(1775597323.930:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.13766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 1723.520213][T32013] usb 10-1: Using ep0 maxpacket: 16 [ 1723.527755][T32013] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.551669][T32013] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1723.583105][T32013] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1723.598280][T32013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.625070][T32013] usb 10-1: config 0 descriptor?? [ 1723.636819][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13773'. [ 1723.652493][T32013] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1723.831782][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13774'. [ 1723.912460][T32004] usb 10-1: USB disconnect, device number 94 [ 1724.052908][T32013] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1724.222838][T32013] usb 4-1: Using ep0 maxpacket: 32 [ 1724.251650][T32013] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1724.278216][T32013] usb 4-1: config 0 has no interface number 0 [ 1724.297742][T32013] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1724.329993][T32013] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1724.349468][T32013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.374347][T32013] usb 4-1: Product: syz [ 1724.388277][T32013] usb 4-1: Manufacturer: syz [ 1724.405028][T32013] usb 4-1: SerialNumber: syz [ 1724.428892][T32013] usb 4-1: config 0 descriptor?? [ 1724.447610][T15575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1724.696908][T15575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1725.500257][T32001] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1725.660248][T32001] usb 10-1: Using ep0 maxpacket: 8 [ 1725.677153][T32001] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.703345][T32001] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1725.722252][T32001] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1725.737337][T32001] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1725.753193][T32001] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1725.764684][T32001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.797434][T32001] hub 10-1:1.0: bad descriptor, ignoring hub [ 1725.805699][T32001] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1725.822178][T32001] cdc_wdm 10-1:1.0: skipping garbage [ 1725.827686][T32001] cdc_wdm 10-1:1.0: skipping garbage [ 1725.857798][T32001] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1725.865341][T32001] cdc_wdm 10-1:1.0: Unknown control protocol [ 1726.381972][T32014] usb 10-1: USB disconnect, device number 95 [ 1726.642099][T15601] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1727.340288][T32001] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1727.383048][T32013] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1727.416872][T32013] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1727.478438][T32013] usb 4-1: USB disconnect, device number 16 [ 1727.500227][T32001] usb 10-1: Using ep0 maxpacket: 16 [ 1727.521054][T32001] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1727.554582][T32001] usb 10-1: config 0 has no interface number 0 [ 1727.585992][T32001] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1727.617608][T32001] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1727.644578][T32001] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1727.667544][T32001] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1727.683019][T32001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.703973][T32001] usb 10-1: Product: syz [ 1727.717585][T32001] usb 10-1: Manufacturer: syz [ 1727.730983][T32001] usb 10-1: SerialNumber: syz [ 1727.755223][T32001] usb 10-1: config 0 descriptor?? [ 1727.783777][T15607] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1727.818487][T15607] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1728.091675][T32001] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1728.111615][T32004] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1728.128959][T32001] usb 10-1: USB disconnect, device number 96 [ 1728.234787][T15616] syzkaller0: entered promiscuous mode [ 1728.240437][T15616] syzkaller0: entered allmulticast mode [ 1728.291157][ T5909] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1728.304559][T32004] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1728.314758][T32004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.322981][T32004] usb 9-1: Product: syz [ 1728.327367][T32004] usb 9-1: Manufacturer: syz [ 1728.332505][T32004] usb 9-1: SerialNumber: syz [ 1728.450322][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1728.457798][ T5909] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1728.466758][ T5909] usb 6-1: config 0 has no interface number 0 [ 1728.473037][ T5909] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1728.490207][T31990] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1728.499232][ T5909] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ed [ 1728.508916][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.518211][ T5909] usb 6-1: Product: syz [ 1728.525174][ T5909] usb 6-1: Manufacturer: syz [ 1728.529985][ T5909] usb 6-1: SerialNumber: syz [ 1728.548633][ T5909] usb 6-1: config 0 descriptor?? [ 1728.558311][ T5909] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1728.569438][ T5909] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1728.670239][T31990] usb 3-1: Using ep0 maxpacket: 8 [ 1728.677884][T31990] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1728.727356][T31990] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1728.736963][T31990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.745422][T31990] usb 3-1: Product: syz [ 1728.750026][T31990] usb 3-1: Manufacturer: syz [ 1728.772928][T31990] usb 3-1: SerialNumber: syz [ 1728.788187][T31990] usb 3-1: config 0 descriptor?? [ 1728.798897][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1728.815322][ T5909] usb 6-1: USB disconnect, device number 120 [ 1728.825497][T31990] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1728.835006][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1730.454282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.462304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.743035][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1730.956633][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1730.972765][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1730.986649][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1730.997431][T32004] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1731.024026][T32004] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1731.039874][T32004] usb 9-1: USB disconnect, device number 90 [ 1731.526728][T31990] gspca_zc3xx: reg_r err -71 [ 1732.120453][T31990] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1732.126817][T31990] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1732.144093][T31990] usb 3-1: USB disconnect, device number 63 [ 1732.401023][T15650] netlink: 'syz.2.13794': attribute type 13 has an invalid length. [ 1732.795485][T15626] tipc: Enabling of bearer rejected, failed to enable media [ 1733.260280][T32013] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1733.344315][T31990] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1733.480157][T32013] usb 4-1: Using ep0 maxpacket: 32 [ 1733.531334][T32013] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1733.539739][T32013] usb 4-1: config 0 has no interface number 0 [ 1733.549680][T32013] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1733.610269][T31990] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1733.626021][T32013] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1733.665728][T31990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.690292][T31990] usb 6-1: Product: syz [ 1733.695426][T31990] usb 6-1: Manufacturer: syz [ 1733.700501][T31990] usb 6-1: SerialNumber: syz [ 1733.830228][T32013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.891477][T32013] usb 4-1: Product: syz [ 1733.943835][T32013] usb 4-1: Manufacturer: syz [ 1733.948827][T32013] usb 4-1: SerialNumber: syz [ 1733.981448][T32013] usb 4-1: config 0 descriptor?? [ 1734.086967][T15655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1734.356883][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1734.370894][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1734.379465][T15655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1734.731137][T15674] netlink: 'syz.8.13800': attribute type 12 has an invalid length. [ 1734.870598][T15677] syzkaller0: entered promiscuous mode [ 1734.876154][T15677] syzkaller0: entered allmulticast mode [ 1735.042993][T15681] netlink: 'syz.9.13802': attribute type 1 has an invalid length. [ 1735.150345][T32014] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1735.313253][T32014] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.338736][T32014] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1735.371828][T32014] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1735.395416][T32014] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1735.419965][T32014] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1735.453215][T32014] usb 3-1: config 48 interface 0 has no altsetting 0 [ 1735.475796][T32014] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1735.492317][T32014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.510221][T32014] usb 3-1: Product: syz [ 1735.520321][T32014] usb 3-1: Manufacturer: syz [ 1735.530249][T32014] usb 3-1: SerialNumber: syz [ 1735.547442][T15679] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1735.616878][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1735.742213][T15688] syzkaller0: entered promiscuous mode [ 1735.758235][T15688] syzkaller0: entered allmulticast mode [ 1735.893008][T32014] usb 3-1: USB disconnect, device number 64 [ 1736.052410][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1736.075251][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1736.105845][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1736.124058][T31990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1736.151185][T31990] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1736.177444][T31990] usb 6-1: USB disconnect, device number 121 [ 1736.458619][T15690] syzkaller0: entered promiscuous mode [ 1736.467570][T15690] syzkaller0: entered allmulticast mode [ 1736.534555][T15695] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.542365][T15695] binder: 15693:15695 ioctl 4018620d 800000c0 returned -16 [ 1736.552877][T15695] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.558899][T15695] binder: 15693:15695 ioctl 4018620d 80000040 returned -16 [ 1736.578961][T15695] binder: 15693:15695 ioctl c0306201 80000240 returned -11 [ 1737.070805][T32013] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1737.102993][T32013] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1737.154756][T32013] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1737.210312][T32013] usb 4-1: USB disconnect, device number 17 [ 1739.524081][T15741] sit1: entered promiscuous mode [ 1743.274890][T15792] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 1743.354760][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1743.354779][ T29] audit: type=1804 audit(1775597344.730:996): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.13833" name="bus" dev="ramfs" ino=268003 res=1 errno=0 [ 1744.169860][ T29] audit: type=1800 audit(1775597345.560:997): pid=15812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.13842" name="bus" dev="tmpfs" ino=1616 res=0 errno=0 [ 1745.236276][T15820] syzkaller0: entered promiscuous mode [ 1745.276412][T15820] syzkaller0: entered allmulticast mode [ 1745.304516][T15821] 0: reclassify loop, rule prio 0, protocol 800 [ 1746.698078][T15857] netlink: 'syz.3.13855': attribute type 2 has an invalid length. [ 1746.715119][T15857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13855'. [ 1748.923743][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.931331][T15878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.209736][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13866'. [ 1749.262855][T15878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.342524][T15878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.745498][ T1100] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.799142][ T1100] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.928733][ T1100] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.968433][ T1100] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.353238][T15905] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1750.566939][T15905] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1750.603197][T15905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.631357][T15925] syzkaller0: entered promiscuous mode [ 1750.645935][T15905] usb 6-1: Product: syz [ 1750.655833][T15925] syzkaller0: entered allmulticast mode [ 1750.663400][T15905] usb 6-1: Manufacturer: syz [ 1750.679912][T15905] usb 6-1: SerialNumber: syz [ 1751.143506][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1751.185399][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1752.009524][T15948] syzkaller0: entered promiscuous mode [ 1752.026079][T15948] syzkaller0: entered allmulticast mode [ 1752.045545][T15950] syzkaller0: entered promiscuous mode [ 1752.055265][T15950] syzkaller0: entered allmulticast mode [ 1752.670291][T15903] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1752.840367][T15903] usb 4-1: Using ep0 maxpacket: 32 [ 1752.867391][T15903] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1752.909554][T15903] usb 4-1: config 0 has no interface number 0 [ 1752.936532][T15903] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1752.948732][T15903] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1752.970921][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.993904][T15903] usb 4-1: Product: syz [ 1753.005565][T15903] usb 4-1: Manufacturer: syz [ 1753.026564][T15903] usb 4-1: SerialNumber: syz [ 1753.044900][T15903] usb 4-1: config 0 descriptor?? [ 1753.457451][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1753.509077][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1753.564751][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1753.639731][T15905] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1753.679348][T15905] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1753.728774][T15905] usb 6-1: USB disconnect, device number 122 [ 1754.182046][T15976] syzkaller0: entered promiscuous mode [ 1754.187953][T15976] syzkaller0: entered allmulticast mode [ 1754.311767][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13889'. [ 1754.423328][T15979] syzkaller0: entered promiscuous mode [ 1754.429079][T15979] syzkaller0: entered allmulticast mode [ 1754.865054][T15988] netlink: 'syz.5.13893': attribute type 2 has an invalid length. [ 1754.874875][T15988] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13893'. [ 1755.030358][T15905] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1755.172612][ T29] audit: type=1326 audit(1775597356.570:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.2.13896" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2f6c code=0x0 [ 1755.220438][T15905] usb 10-1: Using ep0 maxpacket: 32 [ 1755.228014][T15905] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1755.246836][T15905] usb 10-1: config 0 has no interface number 0 [ 1755.265428][T15905] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1755.283251][T15905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.301927][T15905] usb 10-1: Product: syz [ 1755.313213][T15905] usb 10-1: Manufacturer: syz [ 1755.326633][T15905] usb 10-1: SerialNumber: syz [ 1755.344693][T15905] usb 10-1: config 0 descriptor?? [ 1755.774228][T15905] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1755.786215][T15905] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1755.918196][T15903] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1755.926041][T15903] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1755.933976][T15903] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1755.941919][T15903] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1755.954559][T15903] usb 4-1: USB disconnect, device number 18 [ 1757.465782][T16013] tipc: Failed to remove unknown binding: 66,1,1/5:892344149/892344151 [ 1757.543233][T16014] tipc: Failed to remove unknown binding: 66,1,1/5:892344149/892344151 [ 1757.566028][T16014] tipc: Failed to remove unknown binding: 66,1,1/5:892344149/892344151 [ 1758.029600][T15905] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1758.065457][T15905] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1758.103206][T15905] usb 10-1: USB disconnect, device number 97 [ 1758.838929][T16029] vlan3: entered promiscuous mode [ 1758.864311][T16029] vlan3: entered allmulticast mode [ 1758.871306][T16029] hsr_slave_1: entered allmulticast mode [ 1758.945207][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13907'. [ 1761.204482][T16055] syzkaller0: entered promiscuous mode [ 1761.209993][T16055] syzkaller0: entered allmulticast mode [ 1762.557425][T15892] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1762.730176][T15892] usb 3-1: device descriptor read/64, error -71 [ 1762.774823][ T29] audit: type=1800 audit(1775597364.170:999): pid=16083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13920" name="bus" dev="tmpfs" ino=3630 res=0 errno=0 [ 1763.021092][T15892] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1763.230703][T15892] usb 3-1: device descriptor read/64, error -71 [ 1763.360872][T15892] usb usb3-port1: attempt power cycle [ 1763.740194][T15892] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1763.772385][T15892] usb 3-1: device descriptor read/8, error -71 [ 1763.867428][T16088] syzkaller0: entered promiscuous mode [ 1763.873427][T16088] syzkaller0: entered allmulticast mode [ 1764.020176][T15892] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1764.041517][T15892] usb 3-1: device descriptor read/8, error -71 [ 1764.171983][T15892] usb usb3-port1: unable to enumerate USB device [ 1764.517644][T15904] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1764.696571][T15904] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1764.744766][T15904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.779767][T15904] usb 6-1: Product: syz [ 1764.788750][T15904] usb 6-1: Manufacturer: syz [ 1764.818883][T15904] usb 6-1: SerialNumber: syz [ 1765.259361][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1765.276231][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1766.989118][T16124] netlink: 'syz.3.13933': attribute type 1 has an invalid length. [ 1767.117542][T16124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1767.198944][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1767.256564][T16127] bond7: (slave gretap1): making interface the new active one [ 1767.296588][T16127] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1767.410027][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1767.445472][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1767.484040][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1767.507300][T15904] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1767.537614][T15904] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1767.578127][T15904] usb 6-1: USB disconnect, device number 123 [ 1767.724760][ T29] audit: type=1800 audit(1775597369.120:1000): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13936" name="bus" dev="tmpfs" ino=1464 res=0 errno=0 [ 1768.861811][T16145] netlink: 'syz.3.13948': attribute type 10 has an invalid length. [ 1768.906459][T16147] syzkaller0: entered promiscuous mode [ 1768.921764][T16147] syzkaller0: entered allmulticast mode [ 1768.970964][T16145] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1769.090709][T16151] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1769.102491][T16151] bond8: (slave macvlan0): Enslaving as a backup interface with a down link [ 1769.356584][T16163] syzkaller0: entered promiscuous mode [ 1769.385603][T16163] syzkaller0: entered allmulticast mode [ 1769.898039][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13947'. [ 1770.560296][T15904] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1770.714641][T15904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1770.731446][T15904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1770.757998][T15904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1770.801313][T15904] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1770.810916][T15904] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1770.822629][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13960'. [ 1770.851094][T15904] usb 3-1: Manufacturer: syz [ 1770.867460][T15904] usb 3-1: config 0 descriptor?? [ 1770.874687][T15904] smsusb:smsusb_probe: board id=9, interface number 0 [ 1770.903564][T15904] smsusb:smsusb_probe: Device initialized with return code -19 [ 1770.927340][ T29] audit: type=1800 audit(1775597372.320:1001): pid=16191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13950" name="bus" dev="tmpfs" ino=2048 res=0 errno=0 [ 1771.147871][T32007] usb 3-1: USB disconnect, device number 69 [ 1771.796511][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13952'. [ 1771.833222][T16194] dummy0: entered promiscuous mode [ 1771.895854][T16194] dummy0: left promiscuous mode [ 1774.105272][T15892] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1774.113348][ T29] audit: type=1800 audit(1775597375.470:1002): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13957" name="nullb0" dev="devtmpfs" ino=5777 res=0 errno=0 [ 1774.350884][T15892] usb 6-1: Using ep0 maxpacket: 16 [ 1774.398724][T15892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.437250][T15892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.601923][T15892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1774.641316][T15892] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1774.672724][T15892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.719196][T15892] usb 6-1: config 0 descriptor?? [ 1775.143939][T15892] microsoft 0003:045E:07DA.0100: ignoring exceeding usage max [ 1775.178762][T15892] microsoft 0003:045E:07DA.0100: unsupported Resolution Multiplier 0 [ 1775.211230][T15892] microsoft 0003:045E:07DA.0100: implement() called with n (152) > 32! (kworker/0:8) [ 1775.223116][T16236] vlan0: entered promiscuous mode [ 1775.228289][T16236] vlan0: entered allmulticast mode [ 1775.276654][T16236] hsr_slave_1: entered allmulticast mode [ 1775.322171][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13962'. [ 1775.342305][T15892] microsoft 0003:045E:07DA.0100: unsupported Resolution Multiplier 0 [ 1775.390420][T15892] microsoft 0003:045E:07DA.0100: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1775.446824][T15892] microsoft 0003:045E:07DA.0100: no inputs found [ 1775.464450][T15892] microsoft 0003:045E:07DA.0100: could not initialize ff, continuing anyway [ 1775.573656][T16219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.592352][T16219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.613492][T15903] usb 6-1: USB disconnect, device number 124 [ 1776.105810][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13965'. [ 1776.135310][T16248] dummy0: entered promiscuous mode [ 1776.154629][T16248] dummy0: left promiscuous mode [ 1776.382774][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13969'. [ 1776.507140][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13969'. [ 1776.579502][T16255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.587273][T16255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.916936][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.005438][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.276036][T16255] vlan2: left allmulticast mode [ 1777.304691][T16255] bond1: left allmulticast mode [ 1777.309591][T16255] geneve2: left allmulticast mode [ 1777.388888][T16255] bond2: left promiscuous mode [ 1777.400242][T16255] bond3: left promiscuous mode [ 1777.450617][T16255] bond4: left promiscuous mode [ 1777.455439][T16255] bridge1: left promiscuous mode [ 1777.506159][T16255] hsr1: left promiscuous mode [ 1777.520169][T16255] hsr1: left allmulticast mode [ 1777.538134][T16255] batadv0: left allmulticast mode [ 1777.551145][T16255] dummy0: left allmulticast mode [ 1777.640508][T16262] bond6 (unregistering): Released all slaves [ 1777.727436][ T8548] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.768027][ T8548] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.810850][T16277] tipc: Enabled bearer , priority 0 [ 1777.843669][T16279] syzkaller0: entered promiscuous mode [ 1777.874678][T16279] syzkaller0: entered allmulticast mode [ 1777.894304][ T8548] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.924528][ T8548] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.007496][T16269] tipc: Resetting bearer [ 1778.117478][T16269] tipc: Disabling bearer [ 1778.191947][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13976'. [ 1778.550722][T16308] tipc: Enabled bearer , priority 0 [ 1778.568980][ T1100] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.620502][ T1100] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.645772][ T1100] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.691288][T16305] syzkaller0: entered promiscuous mode [ 1778.719984][T16305] syzkaller0: entered allmulticast mode [ 1778.799743][T16302] syz.8.13978 (16302): drop_caches: 2 [ 1778.866580][ T1100] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.917231][T16309] tipc: Resetting bearer [ 1778.952314][T16304] tipc: Resetting bearer [ 1779.003287][T16304] tipc: Disabling bearer [ 1779.160201][T15894] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1779.251071][T16325] binder: BINDER_SET_CONTEXT_MGR already set [ 1779.265917][T16325] binder: 16320:16325 ioctl 4018620d 80000100 returned -16 [ 1779.305230][T16325] binder: BINDER_SET_CONTEXT_MGR already set [ 1779.311910][T16325] binder: 16320:16325 ioctl 4018620d 80004a80 returned -16 [ 1779.321147][T15894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.336602][T15894] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1779.350583][T15894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.371898][T15894] usb 9-1: config 0 descriptor?? [ 1779.606985][T15894] usbhid 9-1:0.0: can't add hid device: -71 [ 1779.637375][T15894] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1779.696599][T15894] usb 9-1: USB disconnect, device number 91 [ 1779.936304][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1780.141365][T15894] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1780.332680][T15894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.385475][T15894] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1780.429634][T15894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.468720][T15894] usb 9-1: config 0 descriptor?? [ 1780.549805][T16351] netlink: 'syz.9.13991': attribute type 10 has an invalid length. [ 1780.629584][T16351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1780.697127][T16315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.775589][T16315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.809948][T16356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13992'. [ 1780.839136][T16352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1780.853120][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13983'. [ 1780.941545][T16353] bond_slave_0: entered promiscuous mode [ 1780.947307][T16353] bond_slave_1: entered promiscuous mode [ 1780.953053][T16353] syz_tun: entered promiscuous mode [ 1781.003438][T15894] usbhid 9-1:0.0: can't add hid device: -71 [ 1781.036685][T15894] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1781.038514][T16353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1781.113890][T16353] bond6: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 1781.127672][T15894] usb 9-1: USB disconnect, device number 92 [ 1781.158548][T16353] bond6: (slave macvlan2): speed changed to 0 on port 1 [ 1781.214665][T16353] bond6: (slave macvlan2): Enslaving as a backup interface with an up link [ 1781.520221][T15894] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1781.680264][T15894] usb 9-1: Using ep0 maxpacket: 16 [ 1781.687031][T15894] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.698605][T15894] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1781.705312][T15894] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1781.715887][T15894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.726992][T15894] usb 9-1: config 0 descriptor?? [ 1782.147920][T15894] mcp2221 0003:04D8:00DD.0101: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1782.347083][ C0] usb 9-1: input irq status -75 received [ 1782.548176][ C0] usb 9-1: input irq status -75 received [ 1782.750651][T15894] usb 9-1: USB disconnect, device number 93 [ 1783.381825][T16370] bridge2: port 1(erspan0) entered disabled state [ 1783.500567][ T29] audit: type=1800 audit(1775597384.900:1003): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13993" name="bus" dev="tmpfs" ino=1216 res=0 errno=0 [ 1783.591078][T15894] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1783.691311][T15893] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1783.771975][T15894] usb 10-1: Using ep0 maxpacket: 16 [ 1783.795899][T15894] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1783.837218][T15894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.860213][T15893] usb 3-1: Using ep0 maxpacket: 8 [ 1783.879715][T15893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.897469][T15894] usb 10-1: config 0 descriptor?? [ 1783.922844][T15894] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1783.936977][T15893] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1783.968058][T15893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.005688][T15893] usb 3-1: config 0 descriptor?? [ 1784.027418][T15893] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1784.186866][T15901] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1784.361997][T15901] usb 6-1: config 0 has no interfaces? [ 1784.383434][T15901] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1784.421930][T15901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.464719][T15901] usb 6-1: config 0 descriptor?? [ 1784.565791][T15901] usb 3-1: USB disconnect, device number 70 [ 1784.700757][T15893] usb 6-1: USB disconnect, device number 125 [ 1785.160345][T15905] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1785.312590][T15905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1785.324981][T15905] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1785.336273][T15905] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1785.349899][T15905] usb 6-1: string descriptor 0 read error: -22 [ 1785.356345][T15905] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1785.365475][T15905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.579196][T15905] usb 6-1: Can't get UAC3 power state for id 10 [ 1786.189258][T15905] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 1786.754610][T15894] gspca_sonixj: reg_w err -71 [ 1786.759717][T15894] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1786.776313][T15894] usb 10-1: USB disconnect, device number 98 [ 1787.206383][T15905] usb 6-1: USB disconnect, device number 126 [ 1788.017903][T16413] syzkaller0: entered promiscuous mode [ 1788.028985][T16413] syzkaller0: entered allmulticast mode [ 1788.060269][T15905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1788.223419][T15905] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1788.236355][T15905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.257750][T15905] usb 4-1: Product: syz [ 1788.268333][T15905] usb 4-1: Manufacturer: syz [ 1788.276278][T15905] usb 4-1: SerialNumber: syz [ 1788.284723][T15905] usb 4-1: config 0 descriptor?? [ 1788.499633][T15905] usb 4-1: USB disconnect, device number 19 [ 1788.599181][T16417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14008'. [ 1788.780573][T16419] tipc: Enabled bearer , priority 0 [ 1788.800941][T16419] syzkaller0: entered promiscuous mode [ 1788.809121][T16419] syzkaller0: entered allmulticast mode [ 1788.940121][T16419] tipc: Resetting bearer [ 1788.958920][T16418] tipc: Resetting bearer [ 1789.123168][T16418] tipc: Disabling bearer [ 1789.417754][T16438] netlink: 76 bytes leftover after parsing attributes in process `syz.8.14014'. [ 1789.735053][T16446] syzkaller0: entered promiscuous mode [ 1789.767824][T16446] syzkaller0: entered allmulticast mode [ 1790.452589][ T29] audit: type=1800 audit(1775597391.820:1004): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.14018" name="bus" dev="tmpfs" ino=1761 res=0 errno=0 [ 1791.064789][T16462] tipc: Enabled bearer , priority 0 [ 1791.106946][T16462] syzkaller0: entered promiscuous mode [ 1791.125106][T16462] syzkaller0: entered allmulticast mode [ 1791.233960][T16462] tipc: Resetting bearer [ 1791.275568][T16461] tipc: Resetting bearer [ 1791.342656][T16461] tipc: Disabling bearer [ 1791.372258][T16466] syzkaller0: entered promiscuous mode [ 1791.385205][T16466] syzkaller0: entered allmulticast mode [ 1791.904062][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.915140][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.160434][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14028'. [ 1792.600940][T16494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.705320][T16494] bond_slave_0: left promiscuous mode [ 1792.731001][T16494] bond_slave_1: left promiscuous mode [ 1792.988499][T16494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.030908][T16494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.336550][ T1027] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.355838][ T1027] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.399716][ T1027] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.436282][ T1027] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.620650][T16508] syzkaller0: entered promiscuous mode [ 1793.626912][T16508] syzkaller0: entered allmulticast mode [ 1794.150160][T15893] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1794.637712][T16524] syzkaller0: entered promiscuous mode [ 1794.656168][T16524] syzkaller0: entered allmulticast mode [ 1794.699169][T16510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1795.212374][T16531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1795.400204][T15893] usb 4-1: device descriptor read/64, error -71 [ 1795.639896][T16542] tipc: Enabled bearer , priority 0 [ 1795.646611][T15893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1795.657727][T16542] syzkaller0: entered promiscuous mode [ 1795.663680][T16542] syzkaller0: entered allmulticast mode [ 1795.671706][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.705031][T16542] tipc: Resetting bearer [ 1795.721010][T16542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.749100][T16541] tipc: Resetting bearer [ 1795.777311][T16541] tipc: Disabling bearer [ 1795.780186][T15893] usb 4-1: device descriptor read/64, error -71 [ 1795.900956][T15893] usb usb4-port1: attempt power cycle [ 1796.096939][T16554] netlink: 'syz.2.14046': attribute type 2 has an invalid length. [ 1796.118167][T16554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14046'. [ 1796.150378][T15901] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1796.200216][T15892] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1796.250232][T15893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1796.292598][T15893] usb 4-1: device descriptor read/8, error -71 [ 1796.322929][T15901] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.341782][T15901] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1796.370214][T15892] usb 6-1: Using ep0 maxpacket: 16 [ 1796.380825][T15901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.393634][T15892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1796.425586][T15892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1796.457972][T15901] usb 9-1: config 0 descriptor?? [ 1796.473852][T15901] pwc: Askey VC010 type 2 USB webcam detected. [ 1796.491959][T15892] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1796.510400][T15892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.526967][T15892] usb 6-1: Product: syz [ 1796.540272][T15893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1796.548075][T15892] usb 6-1: Manufacturer: syz [ 1796.552816][T15892] usb 6-1: SerialNumber: syz [ 1796.589379][T15892] usb 6-1: config 0 descriptor?? [ 1796.595249][T15893] usb 4-1: device descriptor read/8, error -71 [ 1796.607097][T15892] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1796.619274][T15892] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1796.710678][T15893] usb usb4-port1: unable to enumerate USB device [ 1796.893212][T15901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1796.911303][T15901] pwc: recv_control_msg error -32 req 02 val 2700 [ 1796.934351][T15901] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1796.958404][T15901] pwc: recv_control_msg error -32 req 04 val 1000 [ 1796.980264][T15901] pwc: recv_control_msg error -32 req 04 val 1300 [ 1797.004045][T15901] pwc: recv_control_msg error -32 req 04 val 1400 [ 1797.019431][T15901] pwc: recv_control_msg error -32 req 02 val 2000 [ 1797.035017][T15901] pwc: recv_control_msg error -32 req 02 val 2100 [ 1797.052242][T15901] pwc: recv_control_msg error -32 req 04 val 1500 [ 1797.065379][T15901] pwc: recv_control_msg error -32 req 02 val 2500 [ 1797.079996][T15901] pwc: recv_control_msg error -32 req 02 val 2400 [ 1797.196323][T16561] binder: BINDER_SET_CONTEXT_MGR already set [ 1797.204350][T16561] binder: 16560:16561 ioctl 4018620d 80000100 returned -16 [ 1797.215348][T15892] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1797.223667][T15892] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1797.233704][T16561] binder: BINDER_SET_CONTEXT_MGR already set [ 1797.239819][T16561] binder: 16560:16561 ioctl 4018620d 80004a80 returned -16 [ 1797.240184][T15903] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1797.295356][T15901] pwc: recv_control_msg error -71 req 02 val 2900 [ 1797.303045][T15901] pwc: recv_control_msg error -71 req 02 val 2800 [ 1797.311358][T15901] pwc: recv_control_msg error -71 req 04 val 1100 [ 1797.318507][T15901] pwc: recv_control_msg error -71 req 04 val 1200 [ 1797.327049][T15901] pwc: Registered as video103. [ 1797.334572][T15901] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input293 [ 1797.363239][T15901] usb 9-1: USB disconnect, device number 94 [ 1797.400634][T15903] usb 10-1: Using ep0 maxpacket: 16 [ 1797.412892][T15903] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 1797.421447][T15903] usb 10-1: config 0 has no interface number 0 [ 1797.427743][T15903] usb 10-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.444720][T15903] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1797.454641][T15903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.462931][T15903] usb 10-1: Product: syz [ 1797.467369][T15903] usb 10-1: Manufacturer: syz [ 1797.472110][T15903] usb 10-1: SerialNumber: syz [ 1797.479291][T15903] usb 10-1: config 0 descriptor?? [ 1797.493127][T15903] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1797.717965][ T1100] usb 10-1: Failed to submit usb control message: -71 [ 1797.718224][T15901] usb 10-1: USB disconnect, device number 99 [ 1797.726470][ T1100] usb 10-1: unable to send the bmi data to the device: -71 [ 1797.740320][ T1100] usb 10-1: unable to get target info from device [ 1797.746867][ T1100] usb 10-1: could not get target info (-71) [ 1797.753081][ T1100] usb 10-1: could not probe fw (-71) [ 1797.843848][T15892] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1797.854072][T15892] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1797.948616][T16570] syzkaller0: entered allmulticast mode [ 1798.415438][T16583] syzkaller0: entered promiscuous mode [ 1798.421435][T15903] usb 9-1: new full-speed USB device number 95 using dummy_hcd [ 1798.434604][T16583] syzkaller0: entered allmulticast mode [ 1798.491212][T15892] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 1798.514212][T15892] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1798.613255][T15903] usb 9-1: config 128 interface 0 has no altsetting 0 [ 1798.621577][T15903] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1798.631238][T15903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.678618][T15892] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1798.689812][T15892] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1798.703180][T15892] usb 6-1: USB disconnect, device number 127 [ 1798.882869][T15903] usb 9-1: string descriptor 0 read error: -71 [ 1798.931174][T15903] usb 9-1: selecting invalid altsetting 3 [ 1798.956567][T15903] comedi comedi5: could not set alternate setting 3 in high speed [ 1798.976856][T15903] usbduxsigma 9-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1799.030508][T15903] usbduxsigma 9-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1799.062134][T16587] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1799.081715][T15903] usb 9-1: USB disconnect, device number 95 [ 1799.103440][T16587] kvm: pic: level sensitive irq not supported [ 1799.103503][T16587] kvm: pic: non byte read [ 1799.130657][T16587] kvm: pic: level sensitive irq not supported [ 1799.130727][T16587] kvm: pic: non byte read [ 1799.155791][T16587] kvm: pic: level sensitive irq not supported [ 1799.156132][T16587] kvm: pic: non byte read [ 1799.182117][T16587] kvm: pic: level sensitive irq not supported [ 1799.182234][T16587] kvm: pic: non byte read [ 1799.408540][T16592] syzkaller0: entered promiscuous mode [ 1799.414067][T16592] syzkaller0: entered allmulticast mode [ 1799.678626][T16603] syzkaller0: entered promiscuous mode [ 1799.694565][T16603] syzkaller0: entered allmulticast mode [ 1800.241584][T16612] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 1800.270134][T16612] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 1800.295274][T16612] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1800.309019][T16600] kvm: Disabled LAPIC found during irq injection [ 1800.316498][T16612] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 1800.334381][T16612] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 1800.356063][T16612] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 1800.365916][T16612] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 1800.401293][T16612] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1800.428064][T16612] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 1800.970287][T15903] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1801.141469][T15903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.184177][T15903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1801.221412][T15903] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1801.275623][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.312805][T15903] usb 4-1: Product: syz [ 1801.321318][T15903] usb 4-1: Manufacturer: syz [ 1801.328929][T15903] usb 4-1: SerialNumber: syz [ 1801.340356][T15903] usb 4-1: config 0 descriptor?? [ 1801.617827][T15892] usb 4-1: USB disconnect, device number 24 [ 1801.711889][T15903] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1801.910471][T15903] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1801.923149][T15903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.952361][T15903] usb 10-1: config 0 descriptor?? [ 1802.209216][T16635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.259970][T16635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.349840][T16652] binder: BINDER_SET_CONTEXT_MGR already set [ 1802.361930][T16652] binder: 16651:16652 ioctl 4018620d 800000c0 returned -16 [ 1802.397616][T16652] binder: BINDER_SET_CONTEXT_MGR already set [ 1802.421069][T16652] binder: 16651:16652 ioctl 4018620d 80000040 returned -16 [ 1802.471296][T16652] binder: 16651:16652 ioctl c0306201 80001440 returned -11 [ 1802.496933][T15903] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1802.532804][T15903] [drm:udl_init] *ERROR* Selecting channel failed [ 1802.571621][T15903] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1802.601874][T15903] [drm] Initialized udl on minor 2 [ 1802.666564][T15903] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1802.735944][T15903] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1802.755628][T15901] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1802.770617][T15903] usb 10-1: USB disconnect, device number 100 [ 1802.779323][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14081'. [ 1802.797415][T16661] syzkaller0: entered promiscuous mode [ 1802.805183][T16661] syzkaller0: entered allmulticast mode [ 1802.833158][T15901] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1803.590787][T16667] tipc: Enabled bearer , priority 0 [ 1803.605113][T16659] tipc: Resetting bearer [ 1803.737460][T16659] tipc: Disabling bearer [ 1803.788974][T16676] syzkaller0: entered promiscuous mode [ 1803.810166][T16676] syzkaller0: entered allmulticast mode [ 1803.996309][T16681] syzkaller0: entered promiscuous mode [ 1804.010368][T16681] syzkaller0: entered allmulticast mode [ 1804.194140][T16690] netlink: 'syz.8.14086': attribute type 2 has an invalid length. [ 1804.202573][T15903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1804.217896][T16690] netlink: 132 bytes leftover after parsing attributes in process `syz.8.14086'. [ 1804.390153][T15903] usb 4-1: Using ep0 maxpacket: 8 [ 1804.403093][T15903] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1804.411815][T15903] usb 4-1: config 0 has no interface number 0 [ 1804.428498][T15903] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1804.445629][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.464077][T15903] usb 4-1: Product: syz [ 1804.472986][T15903] usb 4-1: Manufacturer: syz [ 1804.485221][T15903] usb 4-1: SerialNumber: syz [ 1804.511961][T15903] usb 4-1: config 0 descriptor?? [ 1804.731996][T15903] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1804.745958][T15903] uvcvideo 4-1:0.31: Failed to initialize entity for entity 32774 [ 1804.771582][T15903] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1804.986851][T15903] usb 4-1: USB disconnect, device number 25 [ 1805.250233][T15892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1805.410162][T15892] usb 6-1: Using ep0 maxpacket: 16 [ 1805.435240][T15892] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1805.473058][T15892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1805.494058][T15892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1805.507046][T15892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.517039][T15892] usb 6-1: Product: syz [ 1805.522274][T15892] usb 6-1: Manufacturer: syz [ 1805.590602][T15903] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1805.611801][T15892] usb 6-1: SerialNumber: syz [ 1805.628327][T16704] create_pit_timer: 5 callbacks suppressed [ 1805.628340][T16704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1805.665447][T16704] kvm: pic: level sensitive irq not supported [ 1805.665664][T16704] kvm: pic: non byte read [ 1805.678445][T16704] kvm: pic: level sensitive irq not supported [ 1805.678536][T16704] kvm: pic: non byte read [ 1805.690235][T16704] kvm: pic: level sensitive irq not supported [ 1805.690285][T16704] kvm: pic: non byte read [ 1805.702181][T16704] kvm: pic: level sensitive irq not supported [ 1805.702238][T16704] kvm: pic: non byte read [ 1805.750144][T15903] usb 9-1: Using ep0 maxpacket: 8 [ 1805.757345][T15903] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1805.769993][T15903] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1805.780955][T15903] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1805.793045][T15903] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1805.804717][T15903] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1805.820633][T15903] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1805.829999][T15903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.994582][T15892] usb 6-1: 0:2 : does not exist [ 1806.101767][T15903] usb 9-1: usb_control_msg returned -32 [ 1806.111813][T15903] usbtmc 9-1:16.0: can't read capabilities [ 1806.196462][T15892] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1806.337393][T15892] usb 6-1: USB disconnect, device number 2 [ 1806.430493][T15903] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1806.469271][T16720] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1806.602794][T15903] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1806.612010][T15903] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1806.640116][T15903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1806.661122][T16722] syzkaller0: entered promiscuous mode [ 1806.668534][T15903] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1806.683031][T15905] usb 9-1: USB disconnect, device number 96 [ 1806.692204][T16722] syzkaller0: entered allmulticast mode [ 1806.720222][T15903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1806.768050][T15903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1806.802124][T15903] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1806.813287][T15903] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1806.830998][T15903] usb 3-1: Product: syz [ 1806.835697][T15903] usb 3-1: Manufacturer: syz [ 1806.865712][T16714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1806.924913][T15903] cdc_wdm 3-1:1.0: skipping garbage [ 1806.972387][T15903] cdc_wdm 3-1:1.0: skipping garbage [ 1807.004047][T15903] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1807.029342][T15903] cdc_wdm 3-1:1.0: Unknown control protocol [ 1807.108746][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.115424][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.121731][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.128326][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.134789][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.141392][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.147693][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.154301][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.160635][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.167229][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.173508][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.180136][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.187134][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.193758][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.210289][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.216945][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.225739][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.232385][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.238762][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1807.245393][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1807.260084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1807.262755][T16714] openvswitch: netlink: EtherType 50a is less than min 600 [ 1807.270138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1807.513861][T16731] syzkaller0: entered promiscuous mode [ 1807.530134][T16731] syzkaller0: entered allmulticast mode [ 1807.566937][T15892] usb 3-1: USB disconnect, device number 71 [ 1807.568718][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1807.582254][T16729] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 1807.817154][T16735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1808.196814][T16747] netlink: 'syz.9.14101': attribute type 2 has an invalid length. [ 1808.225185][T16747] netlink: 132 bytes leftover after parsing attributes in process `syz.9.14101'. [ 1808.581229][T16751] syzkaller0: entered promiscuous mode [ 1808.592408][T16751] syzkaller0: entered allmulticast mode [ 1808.615686][T16751] 0: reclassify loop, rule prio 0, protocol 800 [ 1808.978223][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.002900][T15894] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1809.190471][T15894] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1809.234215][T15894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.318691][T15894] usb 6-1: config 0 descriptor?? [ 1809.354481][T15894] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1809.573920][T15894] gp8psk: usb in 128 operation failed. [ 1809.805900][T15894] gp8psk: usb in 146 operation failed. [ 1809.821714][T15894] gp8psk: failed to get FW version [ 1809.835908][T15894] gp8psk: FPGA Version = 200 [ 1810.239563][T15894] gp8psk: usb out operation failed. [ 1810.257979][T15894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1810.302495][T15894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1810.374627][T15894] usb 6-1: USB disconnect, device number 3 [ 1811.053004][ T29] audit: type=1800 audit(1775597412.430:1005): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14116" name="bus" dev="tmpfs" ino=1368 res=0 errno=0 [ 1811.192696][T15894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1811.401032][T15894] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1811.428965][T15894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.457549][T15894] usb 6-1: Product: syz [ 1811.490170][T15894] usb 6-1: Manufacturer: syz [ 1811.509920][T15894] usb 6-1: SerialNumber: syz [ 1811.891304][T16797] syzkaller0: entered promiscuous mode [ 1811.903603][T16797] syzkaller0: entered allmulticast mode [ 1811.993149][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1812.052970][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1813.142583][T16799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1814.070149][T15903] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1814.139002][T16814] binder: BINDER_SET_CONTEXT_MGR already set [ 1814.149022][T16814] binder: 16813:16814 ioctl 4018620d 80000100 returned -16 [ 1814.160795][T16814] binder: BINDER_SET_CONTEXT_MGR already set [ 1814.179782][T16814] binder: 16813:16814 ioctl 4018620d 80001000 returned -16 [ 1814.200562][T15893] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1814.242309][T15903] usb 3-1: config 128 interface 0 has no altsetting 0 [ 1814.249344][T15903] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1814.264329][T15903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.295044][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1814.310700][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1814.323418][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 1814.336331][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1814.347285][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1814.358082][T15894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1814.369438][T15894] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1814.379408][T15893] usb 9-1: config 0 has no interfaces? [ 1814.388956][T15893] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1814.409137][T15894] usb 6-1: USB disconnect, device number 4 [ 1814.415997][T15893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.431507][T15893] usb 9-1: Product: syz [ 1814.436005][T15893] usb 9-1: Manufacturer: syz [ 1814.441129][T15893] usb 9-1: SerialNumber: syz [ 1814.450335][T15893] usb 9-1: config 0 descriptor?? [ 1814.485578][T15903] usb 3-1: string descriptor 0 read error: -71 [ 1814.512659][T15903] usb 3-1: selecting invalid altsetting 3 [ 1814.518442][T15903] comedi comedi5: could not set alternate setting 3 in high speed [ 1814.532723][T15903] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1814.544556][T15903] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1814.555108][T15903] usb 3-1: USB disconnect, device number 72 [ 1814.778577][T16808] netdevsim netdevsim8 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1814.795505][T15903] usb 9-1: USB disconnect, device number 97 [ 1814.814335][T16820] syzkaller0: entered promiscuous mode [ 1814.831169][T16820] syzkaller0: entered allmulticast mode [ 1815.023603][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14129'. [ 1815.062842][T16829] syzkaller0: entered promiscuous mode [ 1815.069303][T16829] syzkaller0: entered allmulticast mode [ 1815.289437][T16837] syzkaller0: entered promiscuous mode [ 1815.297100][T16837] syzkaller0: entered allmulticast mode [ 1815.559711][T16843] netlink: 'syz.2.14135': attribute type 2 has an invalid length. [ 1815.569372][T16843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14135'. [ 1816.319712][T16834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.954743][T16883] binder: BINDER_SET_CONTEXT_MGR already set [ 1817.969749][T16883] binder: 16880:16883 ioctl 4018620d 800000c0 returned -16 [ 1817.988816][T16883] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.013452][T16883] binder: 16880:16883 ioctl 4018620d 80000040 returned -16 [ 1818.084041][ T5487] netdevsim netdevsim8 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1819.023398][T16904] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.034118][T16904] binder: 16903:16904 ioctl 4018620d 80000100 returned -16 [ 1819.059385][T16904] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.076716][T16904] binder: 16903:16904 ioctl 4018620d 80004a80 returned -16 [ 1819.501913][T16910] tipc: Cannot configure node identity twice [ 1819.695085][T16916] input: syz0 as /devices/virtual/input/input294 [ 1819.723930][T16918] [ 1819.723944][T16918] ===================================================== [ 1819.723954][T16918] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1819.723977][T16918] syzkaller #0 Tainted: G L [ 1819.723989][T16918] ----------------------------------------------------- [ 1819.723996][T16918] syz.9.14154/16918 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1819.724018][T16918] ffff88806a5b7468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1819.724139][T16918] [ 1819.724139][T16918] and this task is already holding: [ 1819.724145][T16918] ffffffff8effe4d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1819.724224][T16918] which would create a new lock dependency: [ 1819.724233][T16918] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1819.724276][T16918] [ 1819.724276][T16918] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1819.724284][T16918] (kbd_event_lock){..-.}-{3:3} [ 1819.724301][T16918] [ 1819.724301][T16918] ... which became SOFTIRQ-irq-safe at: [ 1819.724311][T16918] lock_acquire+0xf0/0x2e0 [ 1819.826643][T16918] _raw_spin_lock+0x2e/0x40 [ 1819.826742][T16918] kbd_event+0xd6/0x40d0 [ 1819.826759][T16918] input_handle_events_default+0xd4/0x1a0 [ 1819.826808][T16918] input_pass_values+0x288/0x890 [ 1819.826821][T16918] input_event_dispose+0x3e5/0x6b0 [ 1819.826863][T16918] input_event+0x89/0xe0 [ 1819.826882][T16918] hidinput_hid_event+0x14cb/0x1ed0 [ 1819.826927][T16918] hid_process_event+0x4be/0x620 [ 1819.826942][T16918] hid_report_raw_event+0xec2/0x1730 [ 1819.826965][T16918] hid_input_report+0x44b/0x580 [ 1819.826987][T16918] hid_irq_in+0x47e/0x6d0 [ 1819.827029][T16918] __usb_hcd_giveback_urb+0x376/0x540 [ 1819.827090][T16918] dummy_timer+0xbbd/0x4650 [ 1819.827134][T16918] __hrtimer_run_queues+0x53a/0xcc0 [ 1819.827154][T16918] hrtimer_run_softirq+0x182/0x5a0 [ 1819.827177][T16918] handle_softirqs+0x22a/0x870 [ 1819.827198][T16918] __irq_exit_rcu+0x5f/0x150 [ 1819.827216][T16918] irq_exit_rcu+0x9/0x30 [ 1819.827234][T16918] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1819.827256][T16918] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.827272][T16918] pv_native_safe_halt+0xf/0x20 [ 1819.827288][T16918] default_idle+0x9/0x20 [ 1819.827308][T16918] default_idle_call+0x72/0xb0 [ 1819.827329][T16918] do_idle+0x36a/0x5f0 [ 1819.827348][T16918] cpu_startup_entry+0x43/0x60 [ 1819.827367][T16918] rest_init+0x2de/0x300 [ 1819.827380][T16918] start_kernel+0x385/0x3d0 [ 1819.827392][T16918] x86_64_start_reservations+0x24/0x30 [ 1819.827409][T16918] x86_64_start_kernel+0x143/0x1c0 [ 1819.827433][T16918] common_startup_64+0x13e/0x147 [ 1819.827447][T16918] [ 1819.827447][T16918] to a SOFTIRQ-irq-unsafe lock: [ 1819.827455][T16918] (tasklist_lock){.+.+}-{3:3} [ 1819.827472][T16918] [ 1819.827472][T16918] ... which became SOFTIRQ-irq-unsafe at: [ 1819.827480][T16918] ... [ 1819.827483][T16918] lock_acquire+0xf0/0x2e0 [ 1819.827506][T16918] _raw_read_lock+0x36/0x50 [ 1819.827546][T16918] __do_wait+0xde/0x740 [ 1819.827561][T16918] do_wait+0x1e7/0x540 [ 1819.827575][T16918] kernel_wait+0xd6/0x1c0 [ 1819.827589][T16918] call_usermodehelper_exec_work+0xbe/0x230 [ 1819.827608][T16918] process_scheduled_works+0xb6e/0x18c0 [ 1819.827627][T16918] worker_thread+0xa53/0xfc0 [ 1819.827654][T16918] kthread+0x388/0x470 [ 1819.827667][T16918] ret_from_fork+0x51e/0xb90 [ 1819.827685][T16918] ret_from_fork_asm+0x1a/0x30 [ 1819.827707][T16918] [ 1819.827707][T16918] other info that might help us debug this: [ 1819.827707][T16918] [ 1819.827714][T16918] Chain exists of: [ 1819.827714][T16918] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1819.827714][T16918] [ 1819.827741][T16918] Possible interrupt unsafe locking scenario: [ 1819.827741][T16918] [ 1819.827748][T16918] CPU0 CPU1 [ 1819.827753][T16918] ---- ---- [ 1819.827758][T16918] lock(tasklist_lock); [ 1819.827769][T16918] local_irq_disable(); [ 1819.827775][T16918] lock(kbd_event_lock); [ 1819.827786][T16918] lock(&tty->flow.lock); [ 1819.827798][T16918] [ 1819.827803][T16918] lock(kbd_event_lock); [ 1819.827814][T16918] [ 1819.827814][T16918] *** DEADLOCK *** [ 1819.827814][T16918] [ 1819.827824][T16918] 5 locks held by syz.9.14154/16918: [ 1819.827835][T16918] #0: ffff88802cf2b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1819.827904][T16918] #1: ffff88802cdbc230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1819.827955][T16918] #2: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1819.827997][T16918] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1819.828033][T16918] #4: ffffffff8effe4d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1819.828070][T16918] [ 1819.828070][T16918] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1819.828078][T16918] -> (kbd_event_lock){..-.}-{3:3} { [ 1819.828098][T16918] IN-SOFTIRQ-W at: [ 1819.828107][T16918] lock_acquire+0xf0/0x2e0 [ 1819.828126][T16918] _raw_spin_lock+0x2e/0x40 [ 1819.828142][T16918] kbd_event+0xd6/0x40d0 [ 1819.828158][T16918] input_handle_events_default+0xd4/0x1a0 [ 1819.828175][T16918] input_pass_values+0x288/0x890 [ 1819.828188][T16918] input_event_dispose+0x3e5/0x6b0 [ 1819.828207][T16918] input_event+0x89/0xe0 [ 1819.828226][T16918] hidinput_hid_event+0x14cb/0x1ed0 [ 1819.828242][T16918] hid_process_event+0x4be/0x620 [ 1819.828283][T16918] hid_report_raw_event+0xec2/0x1730 [ 1819.828306][T16918] hid_input_report+0x44b/0x580 [ 1819.828328][T16918] hid_irq_in+0x47e/0x6d0 [ 1819.828347][T16918] __usb_hcd_giveback_urb+0x376/0x540 [ 1819.828371][T16918] dummy_timer+0xbbd/0x4650 [ 1819.828383][T16918] __hrtimer_run_queues+0x53a/0xcc0 [ 1819.828404][T16918] hrtimer_run_softirq+0x182/0x5a0 [ 1819.828456][T16918] handle_softirqs+0x22a/0x870 [ 1819.828476][T16918] __irq_exit_rcu+0x5f/0x150 [ 1819.828495][T16918] irq_exit_rcu+0x9/0x30 [ 1819.828513][T16918] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1819.828540][T16918] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.828556][T16918] pv_native_safe_halt+0xf/0x20 [ 1819.828575][T16918] default_idle+0x9/0x20 [ 1819.828598][T16918] default_idle_call+0x72/0xb0 [ 1819.828620][T16918] do_idle+0x36a/0x5f0 [ 1819.828641][T16918] cpu_startup_entry+0x43/0x60 [ 1819.828661][T16918] rest_init+0x2de/0x300 [ 1819.828674][T16918] start_kernel+0x385/0x3d0 [ 1819.828687][T16918] x86_64_start_reservations+0x24/0x30 [ 1819.828705][T16918] x86_64_start_kernel+0x143/0x1c0 [ 1819.828722][T16918] common_startup_64+0x13e/0x147 [ 1819.828745][T16918] INITIAL USE at: [ 1819.828756][T16918] lock_acquire+0xf0/0x2e0 [ 1819.828774][T16918] _raw_spin_lock_irqsave+0x40/0x60 [ 1819.828797][T16918] vt_reset_unicode+0x2b/0x1a0 [ 1819.828816][T16918] reset_vc+0x68/0x1b0 [ 1819.828889][T16918] vc_init+0x70/0x4a0 [ 1819.828909][T16918] con_init+0x377/0x6a0 [ 1819.828927][T16918] console_init+0x10b/0x4d0 [ 1819.828945][T16918] start_kernel+0x22b/0x3d0 [ 1819.828958][T16918] x86_64_start_reservations+0x24/0x30 [ 1819.828981][T16918] x86_64_start_kernel+0x143/0x1c0 [ 1819.829002][T16918] common_startup_64+0x13e/0x147 [ 1819.829015][T16918] } [ 1819.829020][T16918] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1819.829043][T16918] [ 1819.829043][T16918] the dependencies between the lock to be acquired [ 1819.829048][T16918] and SOFTIRQ-irq-unsafe lock: [ 1819.829079][T16918] -> (tasklist_lock){.+.+}-{3:3} { [ 1819.829102][T16918] HARDIRQ-ON-R at: [ 1819.829112][T16918] lock_acquire+0xf0/0x2e0 [ 1819.829130][T16918] _raw_read_lock+0x36/0x50 [ 1819.829147][T16918] __do_wait+0xde/0x740 [ 1819.829162][T16918] do_wait+0x1e7/0x540 [ 1819.829177][T16918] kernel_wait+0xd6/0x1c0 [ 1819.829196][T16918] call_usermodehelper_exec_work+0xbe/0x230 [ 1819.829220][T16918] process_scheduled_works+0xb6e/0x18c0 [ 1819.829242][T16918] worker_thread+0xa53/0xfc0 [ 1819.829262][T16918] kthread+0x388/0x470 [ 1819.829276][T16918] ret_from_fork+0x51e/0xb90 [ 1819.829296][T16918] ret_from_fork_asm+0x1a/0x30 [ 1819.829318][T16918] SOFTIRQ-ON-R at: [ 1819.829328][T16918] lock_acquire+0xf0/0x2e0 [ 1819.829346][T16918] _raw_read_lock+0x36/0x50 [ 1819.829362][T16918] __do_wait+0xde/0x740 [ 1819.829375][T16918] do_wait+0x1e7/0x540 [ 1819.829389][T16918] kernel_wait+0xd6/0x1c0 [ 1819.829403][T16918] call_usermodehelper_exec_work+0xbe/0x230 [ 1819.829421][T16918] process_scheduled_works+0xb6e/0x18c0 [ 1819.829448][T16918] worker_thread+0xa53/0xfc0 [ 1819.829468][T16918] kthread+0x388/0x470 [ 1819.829481][T16918] ret_from_fork+0x51e/0xb90 [ 1819.829500][T16918] ret_from_fork_asm+0x1a/0x30 [ 1819.829522][T16918] INITIAL USE at: [ 1819.829530][T16918] lock_acquire+0xf0/0x2e0 [ 1819.829549][T16918] _raw_write_lock_irq+0x3d/0x50 [ 1819.829567][T16918] copy_process+0x247a/0x3cd0 [ 1819.829586][T16918] kernel_clone+0x248/0x8e0 [ 1819.829607][T16918] user_mode_thread+0x110/0x180 [ 1819.829627][T16918] rest_init+0x23/0x300 [ 1819.829640][T16918] start_kernel+0x385/0x3d0 [ 1819.829656][T16918] x86_64_start_reservations+0x24/0x30 [ 1819.829674][T16918] x86_64_start_kernel+0x143/0x1c0 [ 1819.829690][T16918] common_startup_64+0x13e/0x147 [ 1819.829704][T16918] INITIAL READ USE at: [ 1819.829713][T16918] lock_acquire+0xf0/0x2e0 [ 1819.829732][T16918] _raw_read_lock+0x36/0x50 [ 1819.829749][T16918] __do_wait+0xde/0x740 [ 1819.829763][T16918] do_wait+0x1e7/0x540 [ 1819.829778][T16918] kernel_wait+0xd6/0x1c0 [ 1819.829793][T16918] call_usermodehelper_exec_work+0xbe/0x230 [ 1819.829812][T16918] process_scheduled_works+0xb6e/0x18c0 [ 1819.829830][T16918] worker_thread+0xa53/0xfc0 [ 1819.829848][T16918] kthread+0x388/0x470 [ 1819.829861][T16918] ret_from_fork+0x51e/0xb90 [ 1819.829878][T16918] ret_from_fork_asm+0x1a/0x30 [ 1819.829900][T16918] } [ 1819.829904][T16918] ... key at: [] tasklist_lock+0x18/0x40 [ 1819.829928][T16918] ... acquired at: [ 1819.829933][T16918] _raw_read_lock+0x36/0x50 [ 1819.829948][T16918] send_sigurg+0x12b/0x420 [ 1819.829964][T16918] sk_send_sigurg+0x6c/0x2e0 [ 1819.830045][T16918] queue_oob+0x42c/0x4f0 [ 1819.830092][T16918] unix_stream_sendmsg+0xcb1/0xe80 [ 1819.830144][T16918] ____sys_sendmsg+0x972/0x9f0 [ 1819.830186][T16918] ___sys_sendmsg+0x2a5/0x360 [ 1819.830204][T16918] __sys_sendmmsg+0x2e7/0x4e0 [ 1819.830222][T16918] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1819.830241][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.830262][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.830282][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.830299][T16918] [ 1819.830303][T16918] -> (&f_owner->lock){....}-{3:3} { [ 1819.830325][T16918] INITIAL USE at: [ 1819.830333][T16918] lock_acquire+0xf0/0x2e0 [ 1819.830351][T16918] _raw_write_lock_irq+0x3d/0x50 [ 1819.830370][T16918] __f_setown+0x67/0x370 [ 1819.830384][T16918] fcntl_dirnotify+0x3f9/0x6a0 [ 1819.830401][T16918] do_fcntl+0x77e/0x1a20 [ 1819.830416][T16918] do_compat_fcntl64+0x51e/0x7e0 [ 1819.830439][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.830469][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.830490][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.830508][T16918] INITIAL READ USE at: [ 1819.830518][T16918] lock_acquire+0xf0/0x2e0 [ 1819.830536][T16918] _raw_read_lock_irqsave+0x48/0x60 [ 1819.830554][T16918] send_sigio+0x38/0x370 [ 1819.830570][T16918] dnotify_handle_event+0x169/0x440 [ 1819.830588][T16918] fsnotify+0x1831/0x1ae0 [ 1819.830600][T16918] fsnotify_mkdir+0x121/0x180 [ 1819.830618][T16918] vfs_mkdir+0x45e/0x630 [ 1819.830635][T16918] filename_mkdirat+0x285/0x510 [ 1819.830652][T16918] __se_sys_mkdirat+0x35/0x150 [ 1819.830670][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.830689][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.830709][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.830726][T16918] } [ 1819.830731][T16918] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1819.830774][T16918] ... acquired at: [ 1819.830779][T16918] _raw_read_lock_irqsave+0x48/0x60 [ 1819.830796][T16918] send_sigio+0x38/0x370 [ 1819.830811][T16918] kill_fasync+0x24d/0x4d0 [ 1819.830825][T16918] lease_break_callback+0x26/0x30 [ 1819.830842][T16918] __break_lease+0x81c/0x1e80 [ 1819.830863][T16918] vfs_mknod+0x52d/0x610 [ 1819.830878][T16918] filename_mknodat+0x3cb/0x660 [ 1819.830897][T16918] __se_sys_mknodat+0x3b/0x150 [ 1819.830913][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.830932][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.830952][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.830968][T16918] [ 1819.830972][T16918] -> (&new->fa_lock){...-}-{3:3} { [ 1819.830992][T16918] IN-SOFTIRQ-R at: [ 1819.831001][T16918] lock_acquire+0xf0/0x2e0 [ 1819.831019][T16918] _raw_read_lock_irqsave+0x48/0x60 [ 1819.831035][T16918] kill_fasync+0x199/0x4d0 [ 1819.831050][T16918] sock_wake_async+0x137/0x160 [ 1819.831063][T16918] sock_def_readable+0x3c1/0x580 [ 1819.831085][T16918] tcp_data_queue+0x1e2e/0x5e50 [ 1819.831247][T16918] tcp_rcv_established+0xf45/0x2740 [ 1819.831267][T16918] tcp_v4_do_rcv+0xa90/0x1430 [ 1819.831302][T16918] tcp_v4_rcv+0x2825/0x31f0 [ 1819.831315][T16918] ip_protocol_deliver_rcu+0x221/0x440 [ 1819.831340][T16918] ip_local_deliver_finish+0x3bb/0x6f0 [ 1819.831353][T16918] NF_HOOK+0x336/0x3c0 [ 1819.831376][T16918] NF_HOOK+0x336/0x3c0 [ 1819.831397][T16918] process_backlog+0xaa3/0x1950 [ 1819.831439][T16918] __napi_poll+0xae/0x340 [ 1819.831453][T16918] net_rx_action+0x627/0xf70 [ 1819.831468][T16918] handle_softirqs+0x22a/0x870 [ 1819.831487][T16918] do_softirq+0x76/0xd0 [ 1819.831506][T16918] __local_bh_enable_ip+0xf8/0x130 [ 1819.831525][T16918] sk_stream_wait_memory+0x72b/0xf80 [ 1819.831569][T16918] tcp_sendmsg_locked+0x23ba/0x5490 [ 1819.831590][T16918] tcp_sendmsg+0x2f/0x50 [ 1819.831610][T16918] __sys_sendto+0x5de/0x710 [ 1819.831626][T16918] __ia32_sys_sendto+0xdd/0x100 [ 1819.831643][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.831664][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.831689][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.831706][T16918] INITIAL USE at: [ 1819.831715][T16918] lock_acquire+0xf0/0x2e0 [ 1819.831732][T16918] _raw_write_lock_irq+0x3d/0x50 [ 1819.831749][T16918] fasync_remove_entry+0xf1/0x1c0 [ 1819.831764][T16918] pipe_fasync+0xa9/0x1e0 [ 1819.831782][T16918] __fput+0x8a5/0xa70 [ 1819.831804][T16918] delayed_fput+0x63/0xa0 [ 1819.831825][T16918] process_scheduled_works+0xb6e/0x18c0 [ 1819.831844][T16918] worker_thread+0xa53/0xfc0 [ 1819.831862][T16918] kthread+0x388/0x470 [ 1819.831875][T16918] ret_from_fork+0x51e/0xb90 [ 1819.831893][T16918] ret_from_fork_asm+0x1a/0x30 [ 1819.831914][T16918] INITIAL READ USE at: [ 1819.831922][T16918] lock_acquire+0xf0/0x2e0 [ 1819.831940][T16918] _raw_read_lock_irqsave+0x48/0x60 [ 1819.831956][T16918] kill_fasync+0x199/0x4d0 [ 1819.831971][T16918] anon_pipe_write+0x728/0x1480 [ 1819.831989][T16918] aio_write+0x5cd/0x870 [ 1819.832006][T16918] io_submit_one+0x7bb/0x14c0 [ 1819.832021][T16918] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 1819.832035][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.832058][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.832080][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.832098][T16918] } [ 1819.832106][T16918] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1819.832136][T16918] ... acquired at: [ 1819.832142][T16918] _raw_read_lock_irqsave+0x48/0x60 [ 1819.832159][T16918] kill_fasync+0x199/0x4d0 [ 1819.832181][T16918] __start_tty+0x18c/0x220 [ 1819.832194][T16918] tty_send_xchar+0x1d2/0x4d0 [ 1819.832207][T16918] tty_ioctl+0x9c5/0xde0 [ 1819.832254][T16918] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1819.832271][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.832291][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.832312][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.832329][T16918] [ 1819.832334][T16918] -> (&tty->flow.lock){....}-{3:3} { [ 1819.832357][T16918] INITIAL USE at: [ 1819.832366][T16918] lock_acquire+0xf0/0x2e0 [ 1819.832384][T16918] _raw_spin_lock_irqsave+0x40/0x60 [ 1819.832404][T16918] start_tty+0x20/0x70 [ 1819.832417][T16918] n_tty_set_termios+0xa7c/0x10c0 [ 1819.832443][T16918] tty_set_termios+0xdb3/0x1800 [ 1819.832465][T16918] set_termios+0x566/0x710 [ 1819.832478][T16918] tty_mode_ioctl+0x4a6/0x7d0 [ 1819.832490][T16918] tty_ioctl+0x9c5/0xde0 [ 1819.832505][T16918] __se_sys_ioctl+0xfc/0x170 [ 1819.832525][T16918] do_syscall_64+0x14d/0xf80 [ 1819.832545][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.832564][T16918] } [ 1819.832569][T16918] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1819.832610][T16918] ... acquired at: [ 1819.832616][T16918] _raw_spin_lock_irqsave+0x40/0x60 [ 1819.832636][T16918] stop_tty+0x2f/0x150 [ 1819.832648][T16918] kbd_event+0x2ec1/0x40d0 [ 1819.832668][T16918] input_handle_events_default+0xd4/0x1a0 [ 1819.832691][T16918] input_pass_values+0x288/0x890 [ 1819.832705][T16918] input_event_dispose+0x330/0x6b0 [ 1819.832724][T16918] input_inject_event+0x1dd/0x340 [ 1819.832743][T16918] evdev_write+0x325/0x4c0 [ 1819.832758][T16918] vfs_write+0x29a/0xb90 [ 1819.832772][T16918] ksys_write+0x150/0x270 [ 1819.832787][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.832810][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.832830][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.832848][T16918] [ 1819.832852][T16918] [ 1819.832852][T16918] stack backtrace: [ 1819.832866][T16918] CPU: 1 UID: 0 PID: 16918 Comm: syz.9.14154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.832887][T16918] Tainted: [L]=SOFTLOCKUP [ 1819.832893][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1819.832904][T16918] Call Trace: [ 1819.832912][T16918] [ 1819.832920][T16918] dump_stack_lvl+0xe8/0x150 [ 1819.832940][T16918] __lock_acquire+0x2a94/0x2cf0 [ 1819.832965][T16918] lock_acquire+0xf0/0x2e0 [ 1819.832983][T16918] ? stop_tty+0x2f/0x150 [ 1819.832998][T16918] _raw_spin_lock_irqsave+0x40/0x60 [ 1819.833019][T16918] ? stop_tty+0x2f/0x150 [ 1819.833032][T16918] stop_tty+0x2f/0x150 [ 1819.833046][T16918] kbd_event+0x2ec1/0x40d0 [ 1819.833061][T16918] ? kernel_fpu_end+0x4f/0x80 [ 1819.833076][T16918] ? blake2s_compress+0x1e17/0x1eb0 [ 1819.833126][T16918] ? __pfx_kbd_event+0x10/0x10 [ 1819.833144][T16918] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.833164][T16918] ? __pfx_blake2s_compress+0x10/0x10 [ 1819.833193][T16918] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.833212][T16918] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.833234][T16918] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.833253][T16918] ? lock_acquire+0xf0/0x2e0 [ 1819.833276][T16918] input_handle_events_default+0xd4/0x1a0 [ 1819.833295][T16918] ? input_pass_values+0x8d/0x890 [ 1819.833309][T16918] input_pass_values+0x288/0x890 [ 1819.833324][T16918] ? input_handle_event+0x70c/0xf30 [ 1819.833345][T16918] input_event_dispose+0x330/0x6b0 [ 1819.833367][T16918] input_inject_event+0x1dd/0x340 [ 1819.833387][T16918] ? input_inject_event+0xb6/0x340 [ 1819.833407][T16918] evdev_write+0x325/0x4c0 [ 1819.833429][T16918] ? __pfx_evdev_write+0x10/0x10 [ 1819.833444][T16918] ? bpf_lsm_file_permission+0x9/0x20 [ 1819.833464][T16918] ? security_file_permission+0x75/0x260 [ 1819.833485][T16918] ? rw_verify_area+0x255/0x4d0 [ 1819.833500][T16918] ? __pfx_evdev_write+0x10/0x10 [ 1819.833515][T16918] vfs_write+0x29a/0xb90 [ 1819.833534][T16918] ? __pfx_vfs_write+0x10/0x10 [ 1819.833550][T16918] ? __fget_files+0x2a/0x420 [ 1819.833563][T16918] ? __fget_files+0x2a/0x420 [ 1819.833575][T16918] ? __fget_files+0x3a0/0x420 [ 1819.833587][T16918] ? __fget_files+0x2a/0x420 [ 1819.833602][T16918] ksys_write+0x150/0x270 [ 1819.833618][T16918] ? __pfx_ksys_write+0x10/0x10 [ 1819.833637][T16918] __do_fast_syscall_32+0x20d/0x640 [ 1819.833658][T16918] ? do_fast_syscall_32+0x33/0x70 [ 1819.833679][T16918] ? asm_int80_emulation+0x1a/0x20 [ 1819.833692][T16918] ? do_int80_emulation+0x274/0x4d0 [ 1819.833712][T16918] ? trace_irq_disable+0x3b/0x150 [ 1819.833727][T16918] do_fast_syscall_32+0x33/0x70 [ 1819.833747][T16918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1819.833766][T16918] RIP: 0023:0xf6fcef6c [ 1819.833781][T16918] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1819.833795][T16918] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1819.833811][T16918] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1819.833822][T16918] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1819.833832][T16918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1819.833841][T16918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1819.833851][T16918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1819.833864][T16918] [ 1819.910588][T15905] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1820.087126][T15905] usb 3-1: config 0 has no interfaces? [ 1820.087168][T15905] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1820.087191][T15905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.093536][T15905] usb 3-1: config 0 descriptor?? [ 1820.158972][T16267] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1820.317332][T16267] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1820.317359][T16267] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1820.319641][T16267] usb 9-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 1820.319662][T16267] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.319673][T16267] usb 9-1: Product: syz [ 1820.319681][T16267] usb 9-1: Manufacturer: syz [ 1820.319689][T16267] usb 9-1: SerialNumber: syz [ 1820.333530][T15905] usb 3-1: USB disconnect, device number 73 [ 1820.770136][T15893] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1822.664681][T16267] usb 9-1: unit 4 not found! [ 1822.669429][T16267] usb 9-1: unit 2 not found! [ 1822.682728][T16267] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1822.701770][T16267] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1822.715426][T16267] usb 9-1: USB disconnect, device number 98 [ 1822.731552][T14744] udevd[14744]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory