last executing test programs: 3m29.820308251s ago: executing program 1 (id=1479): mount$fuseblk(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xd8]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) 3m28.444518274s ago: executing program 1 (id=1490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m28.31465281s ago: executing program 1 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 3m28.106811378s ago: executing program 1 (id=1495): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m27.965824382s ago: executing program 1 (id=1498): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000000c0)=[r5], 0x1, r3, r4, 0x3, 0x0, 0x7, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x0, 0xb, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 3m27.555658438s ago: executing program 1 (id=1502): syz_io_uring_setup(0x739b, &(0x7f0000000140)={0x0, 0xd9ae, 0x10, 0x4, 0x312}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 3m27.033764983s ago: executing program 32 (id=1502): syz_io_uring_setup(0x739b, &(0x7f0000000140)={0x0, 0xd9ae, 0x10, 0x4, 0x312}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 5.762480322s ago: executing program 5 (id=2545): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000211b010324bd7002fd"], 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xf9, 0x2, 0x79, 0xff, 0x3, 0x1, 0x1, 0x0, 0x200008, 0x1, 0x8, 0x72, 0x6, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.448598063s ago: executing program 3 (id=2548): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x80) 5.320422953s ago: executing program 4 (id=2549): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5, 0x3) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1410aa080006000300"], 0x30}}, 0x0) 5.123087063s ago: executing program 4 (id=2550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 5.061124069s ago: executing program 5 (id=2551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400000000"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) socket(0x2, 0xa, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x70bd2e, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 4.724900066s ago: executing program 4 (id=2552): open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x3, 0xd57, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100039c67952008161d02a40801020301090245"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.623320768s ago: executing program 2 (id=2553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000017000000020000000000000070778efbba7fe2e5f9a9b9e2ac501a9379ac7362b53e07d2486dbe8593df1154ffd8ae21668a0e7ce7fbf14d0c24b8570534d5176856ba545791bf5e9a84ecc9e12619197609bdf0c45d43511d835af1fcdc2e1cf9cf4599a29b35361df4028524bd3f9d25552d6d3fda76f66f70ecce6bad2f104597498d94777a9fef0bb067353b83edb01766404910c3d58fbc2b42eac6a966a2ee7b32f3eea7b7e36ef318eaf1ca2ce9862026cef8390fbf96a5295b580e9419c1cf0000000200ab0bc26d2455086dc026dbdf272f4179325a60be58b42ab3ced79616eb36457abd8a6b84b0c55dd05d5cb9b885413e02d20723d7bc924a"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.301867487s ago: executing program 5 (id=2554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x5, r6, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, r7, 0x1, 0x0, 0x1000000000000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0x6, 'abcdef'}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x5}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_proto_private(r8, 0x89e2, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r9, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r11, 0x40305828, &(0x7f0000000200)={{r9}, "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"}) write$FUSE_WRITE(r11, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r12, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 4.254107896s ago: executing program 2 (id=2555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x8fb9, 0xfffffffc, 0x2, 0x953, 0x8001, 0x1}}, {0x6, 0x2, [0xa]}}]}]}, 0x70}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0xa6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 4.033597203s ago: executing program 2 (id=2556): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 3.927118967s ago: executing program 3 (id=2557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000540)="219fa6", 0x3, 0x40001, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000640)='<', 0x1}], 0x1}}], 0x1, 0x400a055) 3.881149065s ago: executing program 2 (id=2558): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x3, 0x0, [0x4, 0x6, 0xffffffffffffffe0, 0x200], [0xffffffffffffffff, 0x8a41, 0x7, 0xff, 0x7, 0x1, 0x6, 0x5, 0x2, 0x7, 0x101, 0x3, 0xfe, 0x17, 0xfffffffffffffff7, 0x71, 0x1, 0x88, 0x3, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0xfffffffffffffe01, 0x0, 0x7fffffff, 0x9, 0x200000d, 0x3, 0x9, 0x0, 0x10000, 0x8, 0x5, 0x101, 0x9, 0x6, 0x5, 0x4, 0x7fffffffffffffff, 0x7c, 0x65f80000, 0xfffffffffffffffe, 0x200, 0xffffffff, 0x1, 0x2, 0x1, 0x1, 0x7, 0x2b, 0x200002, 0x800100000000000, 0x4, 0x3, 0x71, 0x9, 0x3d5, 0x1d7bc000000, 0x5, 0xc, 0x4, 0x7fffffff, 0xdee, 0x38, 0x81, 0x9, 0x4, 0xfffffffffffffffe, 0x7165, 0x0, 0x1, 0x1, 0x3, 0x7, 0x7, 0xfffffffffffffff4, 0x7, 0x5, 0x6, 0x2, 0x3, 0xef76, 0x100000001, 0x410, 0xf1a, 0x4, 0x0, 0x1292000, 0x7, 0x88, 0x0, 0x8000000000000000, 0x2, 0x3, 0x6, 0xff, 0x8000, 0xff, 0x8, 0x0, 0x1, 0xf4, 0x7, 0x200, 0x7, 0x6, 0x0, 0x9, 0x9, 0x0, 0x3, 0x10000000000, 0x100000000000000, 0x9b6a, 0x1e83, 0x600, 0x7, 0x3, 0x45df, 0x8000]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.688316304s ago: executing program 2 (id=2562): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) 3.417590813s ago: executing program 5 (id=2563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0xc044000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.417305559s ago: executing program 0 (id=2564): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.365023435s ago: executing program 4 (id=2565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) 3.12831845s ago: executing program 5 (id=2566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 3.065913952s ago: executing program 4 (id=2567): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x80) 3.043997162s ago: executing program 0 (id=2568): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x801, &(0x7f0000006680)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000883000/0x1000)=nil) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000040)=0x80000000) 2.965664046s ago: executing program 3 (id=2569): socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x806, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x80000133, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800002, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000004, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7a, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) 2.601237898s ago: executing program 3 (id=2570): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2.395434266s ago: executing program 0 (id=2571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.927289458s ago: executing program 0 (id=2572): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x103, 0x2) 1.589534244s ago: executing program 0 (id=2573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.143342475s ago: executing program 3 (id=2574): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.045642814s ago: executing program 5 (id=2575): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.017249395s ago: executing program 3 (id=2576): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x2) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000400)='[\v\xdbX\xae^\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa8\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, 0x0, 0xc080) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f00000000c0)="0309207965b0acf1", 0x8, 0x4004084, &(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10) open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x2007ffd) 0s ago: executing program 2 (id=2579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x1}, {0xffff}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): .1954'. [ 391.704532][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 391.717923][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.760906][ T10] usb 6-1: Product: @ [ 391.786979][ T10] usb 6-1: SerialNumber: syz [ 392.382059][T12107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 392.457277][T12107] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 393.322384][T12117] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1959'. [ 393.433297][ T5752] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 393.593319][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 393.605855][ T5752] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 393.633746][ T5752] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.668773][ T5752] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 393.713948][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.778223][ T5752] usb 4-1: config 0 descriptor?? [ 393.845887][ T29] audit: type=1326 audit(1781185739.659:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc60d39ce59 code=0x0 [ 394.136220][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.158066][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 394.365292][ T10] usb 6-1: USB disconnect, device number 6 [ 394.506912][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.610875][ T5752] corsair-cpro 0003:1B1C:0C10.001C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 394.804811][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 394.983138][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 395.001075][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 395.017529][ T5752] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -71 [ 395.040211][T12141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 395.057147][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 395.085721][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 395.117305][ T5752] usb 4-1: USB disconnect, device number 36 [ 395.123348][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 395.123392][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 395.123412][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.125964][ T10] usb 6-1: config 0 descriptor?? [ 395.243627][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 395.325171][T12150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.339068][T12150] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 395.350570][T12150] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 395.414045][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 395.421366][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 395.432805][ T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 395.445278][ T9] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.456608][ T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 395.472828][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 395.482688][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.490871][ T9] usb 3-1: Product: syz [ 395.495312][ T9] usb 3-1: Manufacturer: syz [ 395.499968][ T9] usb 3-1: SerialNumber: syz [ 395.513079][ T5703] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 395.518598][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 395.566593][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 395.575692][T12154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 395.640249][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001D/input/input21 [ 395.653856][T12154] netlink: 'syz.4.1973': attribute type 10 has an invalid length. [ 395.674944][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001D/input/input22 [ 395.683004][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 395.707197][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.746341][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.763062][ T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 395.766628][ T5703] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 395.792485][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.801771][T12156] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1974'. [ 395.814887][ T9] (id 0x00) [ 395.863084][ T5703] usb 1-1: config 0 descriptor?? [ 395.875210][ T10] kye 0003:0458:5013.001D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 395.943420][T12157] syzkaller1: entered promiscuous mode [ 395.952292][T12157] syzkaller1: entered allmulticast mode [ 395.966921][ T10] usb 6-1: USB disconnect, device number 7 [ 396.024058][ T9] rc_core: IR keymap rc-imon-pad not found [ 396.042603][ T9] Registered IR keymap rc-empty [ 396.055192][ T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 396.072283][ T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 396.109300][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 396.140913][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 396.157192][ T9] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:37> initialized [ 396.158767][T12161] fido_id[12161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 396.313085][ T5703] savu 0003:1E7D:2D5A.001E: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 396.564000][ T10] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 396.583282][ T5729] usb 1-1: USB disconnect, device number 35 [ 396.744754][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.774427][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.800499][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 396.820853][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 396.841165][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.860551][T12163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 396.886330][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 396.898436][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 396.909653][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 396.915591][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 396.934343][ T10] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 396.951914][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 397.132843][ T5729] usb 3-1: USB disconnect, device number 37 [ 397.144717][T12174] imon:send_packet: packet tx failed (-71) [ 397.193349][T12174] imon:vfd_write: send packet #2 failed [ 397.203934][T12163] imon:display_open: display port is already open [ 397.401205][T12186] binder: 12180:12186 ioctl c0306201 0 returned -14 [ 397.464434][ T10] usb 4-1: USB disconnect, device number 37 [ 397.937043][T12195] netlink: 'syz.2.1983': attribute type 13 has an invalid length. [ 398.044747][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 398.225096][ T10] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 398.242991][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 398.277446][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 398.309214][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.341932][ T10] usb 6-1: Product: syz [ 398.361352][ T10] usb 6-1: Manufacturer: syz [ 398.382834][ T10] usb 6-1: SerialNumber: syz [ 398.418506][ T10] usb 6-1: config 0 descriptor?? [ 398.447412][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 398.520600][T12209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 398.627325][T12209] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 398.992068][T12218] xt_hashlimit: size too large, truncated to 1048576 [ 399.112701][T12222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 399.176528][T12222] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 399.637199][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 400.178193][T12234] kvm: pic: non byte read [ 400.209199][T12234] kvm: pic: non byte read [ 400.224100][T12234] kvm: pic: non byte read [ 400.239983][T12234] kvm: pic: non byte read [ 400.250148][T12234] kvm: pic: non byte read [ 400.262581][T12234] kvm: pic: non byte read [ 400.269053][T12234] kvm: pic: non byte read [ 400.273056][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 400.282749][T12234] kvm: pic: non byte read [ 400.291775][T12234] kvm: pic: non byte read [ 400.296640][T12234] kvm: pic: non byte read [ 400.327228][ T5703] usb 6-1: USB disconnect, device number 8 [ 400.453019][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 400.469084][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.497234][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.528121][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 400.554781][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.572261][T12240] binder: 12239:12240 ioctl c0306201 0 returned -14 [ 400.590281][ T10] usb 3-1: config 0 descriptor?? [ 400.879642][T12246] kvm: pic: level sensitive irq not supported [ 400.993178][ T5727] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 401.030859][ T10] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 401.041487][ T10] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 401.081497][T12254] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 401.134724][T12254] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 401.205046][ T5727] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.219184][T12261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 401.229866][ T10] ft260 0003:0403:6030.001F: chip code: 0000 0000 [ 401.240854][ T5727] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.255776][ T5727] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.265972][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.275868][T12261] netlink: 'syz.5.2006': attribute type 10 has an invalid length. [ 401.288121][T12244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.299603][ T5727] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.430518][ T10] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 401.536882][ T5727] usb 5-1: USB disconnect, device number 30 [ 401.645166][ T10] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup [ 401.900840][T12232] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x0000, size 0, write) [ 401.928438][ T5727] usb 3-1: USB disconnect, device number 38 [ 402.272844][T12280] xt_hashlimit: size too large, truncated to 1048576 [ 402.762077][T12287] xt_hashlimit: size too large, truncated to 1048576 [ 403.203042][ T5727] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 403.373586][ T5727] usb 6-1: Using ep0 maxpacket: 16 [ 403.388323][ T5727] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.405659][ T5727] usb 6-1: config 0 has no interface number 0 [ 403.424471][ T5727] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 403.446214][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.465411][ T5727] usb 6-1: Product: syz [ 403.487063][ T5727] usb 6-1: Manufacturer: syz [ 403.503111][ T5727] usb 6-1: SerialNumber: syz [ 403.520203][ T5727] usb 6-1: config 0 descriptor?? [ 403.542812][ T5727] hub 6-1:0.132: bad descriptor, ignoring hub [ 403.560320][ T5727] hub 6-1:0.132: probe with driver hub failed with error -5 [ 403.623402][ T5727] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input23 [ 404.093048][ T5727] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 404.181036][T12307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.272706][T12307] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 404.293730][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 404.305071][ T5727] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 404.327047][ T5727] usb 5-1: config 0 has no interface number 0 [ 404.334791][ T5703] usb 6-1: USB disconnect, device number 9 [ 404.355141][ T5727] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.395168][ T5727] usb 5-1: config 0 interface 89 has no altsetting 0 [ 404.419409][ T5727] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 404.445356][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.470972][ T5727] usb 5-1: Product: syz [ 404.489749][ T5727] usb 5-1: Manufacturer: syz [ 404.499681][ T5727] usb 5-1: SerialNumber: syz [ 404.516694][ T5727] usb 5-1: config 0 descriptor?? [ 404.540760][ T5727] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 404.563715][ T5727] em28xx 5-1:0.89: Video interface 89 found: [ 404.880403][T12314] binder: 12313:12314 ioctl c0306201 2000000003c0 returned -14 [ 405.021352][T12316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.163228][ T5727] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 405.331563][T12329] xt_hashlimit: size too large, truncated to 1048576 [ 405.705481][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 405.787143][ T5727] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 405.842223][ T5727] em28xx 5-1:0.89: board has no eeprom [ 405.860111][T12341] xt_hashlimit: size too large, truncated to 1048576 [ 405.907736][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 405.913733][T12343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.928213][ T5727] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 405.943251][ T5727] em28xx 5-1:0.89: analog set to bulk mode. [ 405.950042][ T5710] em28xx 5-1:0.89: Registering V4L2 extension [ 405.961302][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.972931][ T5727] usb 5-1: USB disconnect, device number 31 [ 405.989006][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 406.004718][ T5727] em28xx 5-1:0.89: Disconnecting em28xx [ 406.038663][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.062075][ T10] usb 3-1: Product: syz [ 406.066789][ T10] usb 3-1: Manufacturer: syz [ 406.071574][ T10] usb 3-1: SerialNumber: syz [ 406.082048][ T10] usb 3-1: config 0 descriptor?? [ 406.090588][ T10] usb 3-1: No union descriptors [ 406.097300][ T5710] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 406.132259][ T10] usb 3-1: unsupported MDLM descriptors [ 406.140138][ T5710] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 406.152523][ T10] cdc_acm 3-1:0.0: Zero length descriptor references [ 406.161776][ T5710] em28xx 5-1:0.89: No AC97 audio processor [ 406.172251][ T10] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 406.188100][ T5710] usb 5-1: Decoder not found [ 406.207433][ T5710] em28xx 5-1:0.89: failed to create media graph [ 406.218794][ T5710] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 406.328444][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.344302][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.369703][ T10] usb 3-1: USB disconnect, device number 39 [ 406.382429][ T5710] em28xx 5-1:0.89: Registering snapshot button... [ 406.438125][ T5710] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input24 [ 406.498169][ T5710] em28xx 5-1:0.89: Remote control support is not available for this card. [ 406.545533][ T5727] em28xx 5-1:0.89: Closing input extension [ 406.568149][ T5727] em28xx 5-1:0.89: Deregistering snapshot button [ 406.733686][ T5727] em28xx 5-1:0.89: Freeing device [ 407.040194][T12363] batadv_slave_1: entered allmulticast mode [ 407.120230][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 407.197537][ T5727] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 407.299618][T12362] batadv_slave_1: left allmulticast mode [ 407.373071][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 407.397471][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.426571][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.455101][ T5727] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.487009][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.507434][ T5727] usb 6-1: config 0 descriptor?? [ 407.526778][ T5727] hub 6-1:0.0: USB hub found [ 407.554063][T12375] xt_hashlimit: size too large, truncated to 1048576 [ 407.648413][T12381] binder: 12376:12381 ioctl c0306201 0 returned -14 [ 407.730104][ T5727] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 408.157775][ T5727] hid-generic 0003:046D:C31C.0020: unknown main item tag 0x0 [ 408.261311][ T5727] hid-generic 0003:046D:C31C.0020: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 408.763086][ T5727] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 408.862763][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.894275][T12359] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 408.933106][ T5727] usb 4-1: Using ep0 maxpacket: 8 [ 408.943577][ T5727] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 408.953092][ T5727] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.966262][ T5727] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.979440][ T5727] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.990120][ T5727] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.004349][ T5727] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.013724][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.251832][ T5727] usb 4-1: usb_control_msg returned -32 [ 409.257750][ T5727] usbtmc 4-1:16.0: can't read capabilities [ 409.473400][ T5727] usb 4-1: USB disconnect, device number 38 [ 409.504720][ T10] usb 6-1: USB disconnect, device number 10 [ 409.615846][ T5752] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 409.785441][ T5752] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 409.793214][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.804573][ T5752] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.817690][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.829599][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.843347][ T5752] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 409.862568][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.876055][ T5752] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.889128][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.901110][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.921778][ T5752] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 409.933962][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.954541][ T5752] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.973079][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.995720][ T5752] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 410.014865][ T5752] usb 3-1: string descriptor 0 read error: -22 [ 410.021630][ T5752] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 410.046587][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.077346][ T5752] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 410.325361][T12418] xt_hashlimit: size too large, truncated to 1048576 [ 411.353033][T12443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.530380][T12441] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2054'. [ 411.548520][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.366332][T12461] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2060'. [ 412.468068][T12466] binder: 12465:12466 ioctl c0306201 0 returned -14 [ 412.481523][T12468] xt_hashlimit: size too large, truncated to 1048576 [ 412.913758][ T5727] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 413.084969][ T5727] usb 6-1: config 0 has no interfaces? [ 413.097157][ T5727] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.123036][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.141541][ T5727] usb 6-1: Product: syz [ 413.164731][ T5727] usb 6-1: Manufacturer: syz [ 413.174838][ T5727] usb 6-1: SerialNumber: syz [ 413.207215][ T5727] usb 6-1: config 0 descriptor?? [ 413.454837][ T5727] usb 6-1: USB disconnect, device number 11 [ 414.369608][T12511] xt_hashlimit: size too large, truncated to 1048576 [ 414.445048][ T24] usb 3-1: USB disconnect, device number 40 [ 414.533687][ T5752] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 414.705381][ T5752] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 414.730832][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.750307][ T5752] usb 5-1: config 0 has no interface number 0 [ 414.759814][ T5752] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 414.778997][ T5752] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.811963][ T5752] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 414.824851][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.853421][T12522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.863191][ T5752] usb 5-1: Product: syz [ 414.871728][ T5752] usb 5-1: Manufacturer: syz [ 414.881990][ T5752] usb 5-1: SerialNumber: syz [ 414.900619][ T5752] usb 5-1: config 0 descriptor?? [ 414.929044][T12509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 414.956081][ T5752] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 414.967689][ T5752] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 415.001995][T12525] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2078'. [ 415.341313][T12509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.456587][ T24] usb 5-1: USB disconnect, device number 32 [ 415.605824][T12539] xt_hashlimit: size too large, truncated to 1048576 [ 415.801404][T12544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.890528][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 415.948838][T12547] hsr_slave_0 (unregistering): left promiscuous mode [ 416.373868][T12559] xt_hashlimit: size too large, truncated to 1048576 [ 416.415656][T12560] binder: 12555:12560 ioctl c0306201 0 returned -14 [ 416.738295][T12566] xt_hashlimit: size too large, truncated to 1048576 [ 417.239304][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.433278][ T5710] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 417.597471][ T5710] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.618558][ T5710] usb 5-1: config 0 has no interface number 0 [ 417.636090][ T5710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.655128][ T5710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.669558][ T5710] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 417.683509][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.702521][ T5710] usb 5-1: config 0 descriptor?? [ 417.819253][T12594] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2101'. [ 417.869028][ T5727] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 417.909005][ T5727] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.978226][T12599] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 418.197636][ T5710] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0022/input/input25 [ 418.266467][T12607] binder: 12600:12607 ioctl c0306201 0 returned -14 [ 418.309918][T12608] xt_hashlimit: size too large, truncated to 1048576 [ 418.352024][ T5710] holtek_kbd 0003:04D9:A055.0022: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 418.965776][ T5727] usb 5-1: USB disconnect, device number 33 [ 419.222991][ T5710] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 419.385200][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 419.399801][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 419.421603][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.454072][T12629] vlan1: entered allmulticast mode [ 419.466131][T12629] veth0_vlan: entered allmulticast mode [ 419.467572][ T5710] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.502811][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.538587][ T5710] usb 1-1: Product: syz [ 419.552432][ T5710] usb 1-1: Manufacturer: syz [ 419.573098][ T5710] usb 1-1: SerialNumber: syz [ 419.606560][ T5710] usb 1-1: config 0 descriptor?? [ 419.633609][ T5710] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 419.665995][ T5710] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 419.960786][T12641] binder: 12632:12641 ioctl c0306201 0 returned -14 [ 420.153181][ T5752] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 420.245669][ T5710] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 420.253046][ T5710] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 420.274470][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 420.314793][ T5752] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.330841][ T5752] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.343841][ T5752] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.354278][ T5752] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 420.365687][ T5752] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 420.382864][ T5752] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.393839][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.402078][ T5752] usb 3-1: Product: syz [ 420.406731][ T5752] usb 3-1: Manufacturer: syz [ 420.429819][ T5752] cdc_wdm 3-1:1.0: skipping garbage [ 420.437615][ T9] usb 5-1: config index 0 descriptor too short (expected 47396, got 36) [ 420.438438][ T5752] cdc_wdm 3-1:1.0: skipping garbage [ 420.446563][ T9] usb 5-1: config 0 has too many interfaces: 128, using maximum allowed: 32 [ 420.471791][ T5752] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 420.478160][ T5752] cdc_wdm 3-1:1.0: Unknown control protocol [ 420.485781][ T9] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 420.500011][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 128 [ 420.529979][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.539739][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.553189][ T9] usb 5-1: Product: syz [ 420.562490][ T9] usb 5-1: Manufacturer: syz [ 420.571698][ T9] usb 5-1: SerialNumber: syz [ 420.586709][ T9] usb 5-1: config 0 descriptor?? [ 420.646572][ T5752] usb 3-1: USB disconnect, device number 41 [ 420.893977][ T5703] usb 5-1: USB disconnect, device number 34 [ 421.235955][T12651] xt_hashlimit: size too large, truncated to 1048576 [ 421.274434][ T5710] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 421.289108][ T5710] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 421.303134][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 421.311467][ T5710] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 421.326126][ T5710] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 421.339390][ T5710] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 421.362132][ T5710] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 421.379343][ T5710] usb 1-1: USB disconnect, device number 36 [ 421.490104][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.510206][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 421.538148][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.572459][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 421.615671][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 421.668851][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.688387][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.701361][ T9] usb 3-1: Product: syz [ 421.708061][ T9] usb 3-1: Manufacturer: syz [ 421.727725][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 421.745880][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 421.791586][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 421.817203][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 421.981595][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 421.987351][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 421.993635][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.000447][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.006991][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.013603][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.020409][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.026240][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.032060][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.037872][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.043704][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.049539][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.055436][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.061260][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.067071][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.072878][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.078753][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.084572][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.090378][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.096247][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.103425][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.109311][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.115528][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.121385][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.127579][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.133261][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.140303][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.146123][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.151966][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.157782][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.163587][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.169379][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.175207][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.181009][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.186849][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.194826][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.200667][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.206477][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.212285][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.218196][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.224072][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.230027][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.236060][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.241878][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.247759][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.256004][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.261922][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.267661][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.273818][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.279762][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.285471][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.291250][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.297196][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.302904][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.308722][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.314629][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.320311][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.326064][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.331935][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.337969][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.343834][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.349678][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.355664][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.361523][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.367374][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.373302][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.379136][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.384959][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.390782][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.396610][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.402722][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.408640][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.414509][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.420371][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.426072][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.431871][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.437770][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.443609][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.449279][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.455043][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.460793][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.466557][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.472206][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.477919][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.483659][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.489478][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.495186][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.501029][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.506888][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.510026][T12667] vlan0: entered promiscuous mode [ 422.512576][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.523954][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 422.529659][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 422.535533][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 422.554867][ T24] usb 3-1: USB disconnect, device number 42 [ 422.633474][T12669] binder: 12664:12669 ioctl c0306201 0 returned -14 [ 422.807271][T12672] xt_hashlimit: size too large, truncated to 1048576 [ 423.125425][T12678] xt_hashlimit: size too large, truncated to 1048576 [ 423.463057][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 423.545447][T12691] binder: 12688:12691 ioctl c0306201 0 returned -14 [ 423.634178][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 423.645872][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 423.658016][ T10] usb 5-1: config 0 has no interface number 0 [ 423.684238][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 423.705810][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.723208][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 423.757295][ T10] usb 5-1: Product: syz [ 423.771809][ T10] usb 5-1: Manufacturer: syz [ 423.781097][ T10] usb 5-1: SerialNumber: syz [ 423.799895][ T10] usb 5-1: config 0 descriptor?? [ 423.913227][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 423.923615][ T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 423.940699][ T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 423.977788][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 424.004649][ T9] usb 3-1: config 250 has no interface number 0 [ 424.053026][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 424.078170][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 424.091029][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.145180][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 424.157289][ T9] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 424.188755][ T9] usb 3-1: config 250 interface 228 has no altsetting 0 [ 424.211312][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 424.265570][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 424.278131][ T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 424.291565][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 424.304231][ T9] usb 3-1: Product: syz [ 424.350097][ T9] usb 3-1: SerialNumber: syz [ 424.368418][ T9] hub 3-1:250.228: bad descriptor, ignoring hub [ 424.437780][ T9] hub 3-1:250.228: probe with driver hub failed with error -5 [ 424.572475][ T9] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 425.197278][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 425.229167][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 425.268389][ T10] usb 5-1: USB disconnect, device number 35 [ 425.424998][T12685] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 425.437129][T12685] usb 3-1: device reset changed ep0 maxpacket size! [ 425.451304][ T5703] usb 3-1: USB disconnect, device number 43 [ 425.474540][T12711] xt_hashlimit: size too large, truncated to 1048576 [ 425.498407][ T5703] usblp0: removed [ 425.663035][ T5703] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 425.832709][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 425.847833][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 425.865706][ T5703] usb 3-1: can't read configurations, error -71 [ 425.959816][T12726] binder: 12720:12726 ioctl c0306201 0 returned -14 [ 425.990118][T12727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 426.018625][T12727] netlink: 'syz.0.2139': attribute type 10 has an invalid length. [ 426.033731][ T24] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 426.195515][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.207149][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 426.217366][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 426.232981][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 426.245105][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.255448][ T24] usb 4-1: Product: syz [ 426.259812][ T24] usb 4-1: Manufacturer: syz [ 426.265690][ T24] usb 4-1: SerialNumber: syz [ 426.282627][T12716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.312698][T12729] input: syz1 as /devices/virtual/input/input26 [ 426.818069][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.872942][T12743] binder: 12739:12743 ioctl c0306201 0 returned -14 [ 426.903564][ T24] usb 4-1: USB disconnect, device number 39 [ 426.973324][T12747] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 427.059250][T12747] netlink: 'syz.0.2144': attribute type 10 has an invalid length. [ 427.417085][T12752] xt_hashlimit: size too large, truncated to 1048576 [ 427.481069][T12754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 427.771203][T12759] loop2: detected capacity change from 0 to 7 [ 427.809496][T12759] Dev loop2: unable to read RDB block 7 [ 427.823227][T12759] loop2: unable to read partition table [ 427.857626][T12759] loop2: partition table beyond EOD, truncated [ 427.903835][T12759] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.133570][T12766] syzkaller0: entered promiscuous mode [ 428.158042][T12766] syzkaller0: entered allmulticast mode [ 428.384520][ T5703] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 428.414995][T12774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 428.478862][T12774] netlink: 'syz.0.2154': attribute type 10 has an invalid length. [ 428.499696][T12777] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.564835][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 428.577799][ T5703] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 428.587014][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.601185][ T5703] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 428.610899][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.619512][ T5703] usb 4-1: Product: syz [ 428.633798][ T5703] usb 4-1: Manufacturer: syz [ 428.643533][ T5703] usb 4-1: SerialNumber: syz [ 428.661390][ T5703] usb 4-1: config 0 descriptor?? [ 428.678107][ T5703] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 429.212987][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 429.369022][ T10] usb 3-1: config 5 has an invalid interface number: 183 but max is 0 [ 429.377534][ T10] usb 3-1: config 5 has no interface number 0 [ 429.384330][ T10] usb 3-1: config 5 interface 183 has no altsetting 0 [ 429.397054][ T10] usb 3-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=6e.6a [ 429.419165][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.441785][ T10] usb 3-1: Product: syz [ 429.448322][ T10] usb 3-1: Manufacturer: syz [ 429.458458][ T10] usb 3-1: SerialNumber: syz [ 429.690445][ T10] gspca_main: spca500-2.14.0 probing 06bd:0404 [ 429.717658][ T29] audit: type=1800 audit(1781185775.529:8): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2160" name="/" dev="fuse" ino=3 res=0 errno=0 [ 429.740309][ T5727] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 429.760922][ T10] usb 3-1: USB disconnect, device number 46 [ 429.906654][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.936065][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.966015][ T5727] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 429.980862][ T5727] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 429.996111][ T5727] usb 1-1: Manufacturer: syz [ 430.015577][ T5727] usb 1-1: config 0 descriptor?? [ 430.517227][T12824] binder: 12823:12824 ioctl c0306201 200000000080 returned -14 [ 430.531889][T12824] binder: 12823:12824 ioctl c0306201 2000000003c0 returned -14 [ 430.702287][ T5703] gspca_sunplus: reg_r err -71 [ 430.713059][ T5703] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 430.723668][ T5703] usb 4-1: USB disconnect, device number 40 [ 430.822980][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 430.972996][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 430.980644][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.991993][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 430.999509][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 431.008975][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.023635][ T10] usb 3-1: config 0 descriptor?? [ 431.057989][ T5727] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #100: -71 [ 431.068389][ T5727] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 431.077811][ T5727] uclogic 0003:256C:006D.0023: failed probing pen v1 parameters: -71 [ 431.087153][ T5727] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 431.095078][ T5727] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 431.109386][ T5727] usb 1-1: USB disconnect, device number 37 [ 431.350531][T12837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.365432][T12837] netlink: 'syz.3.2174': attribute type 10 has an invalid length. [ 431.450132][ T10] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 431.656257][T12840] loop9: detected capacity change from 0 to 524287936 [ 431.816370][T12842] syzkaller0: entered promiscuous mode [ 431.822059][T12842] syzkaller0: entered allmulticast mode [ 431.940629][ T5729] usb 3-1: USB disconnect, device number 47 [ 432.124897][T12851] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2177'. [ 433.864080][T12872] binder: 12871:12872 ioctl c0306201 200000000180 returned -14 [ 436.237229][T12884] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns [ 436.263482][T12884] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 436.572985][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 436.733008][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 436.746144][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 436.758642][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.772827][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 436.782327][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.790779][ T10] usb 1-1: Product: syz [ 436.795200][ T10] usb 1-1: Manufacturer: syz [ 436.799898][ T10] usb 1-1: SerialNumber: syz [ 436.808997][ T10] usb 1-1: config 0 descriptor?? [ 436.819086][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 436.828642][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 436.863112][ T5729] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 436.993053][ T4949] Bluetooth: hci0: command 0x0406 tx timeout [ 437.035222][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 437.046778][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 437.074070][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.099152][ T5729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.130761][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 437.178594][ T5729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 437.222593][ T5729] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 437.253009][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.295958][ T5729] usb 3-1: config 0 descriptor?? [ 437.326961][T12899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 437.451279][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 437.485660][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 437.583249][T12906] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 437.603097][ T5710] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.619707][T12906] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 437.645168][T12906] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 437.667891][T12906] kvm: requested 150857 ns i8254 timer period limited to 200000 ns [ 437.687364][T12906] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 437.704692][T12906] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 437.763052][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 437.775327][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.803123][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.837897][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.887338][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 437.924049][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.975687][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.003380][ T5710] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.029026][ T5710] usb 5-1: Manufacturer: syz [ 438.066054][ T5710] usb 5-1: config 0 descriptor?? [ 438.144494][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 438.241448][ T5729] usb 3-1: USB disconnect, device number 48 [ 438.241454][ T5640] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 438.382302][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 438.392628][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 438.422035][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 438.464673][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 438.484723][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 438.512988][ T5710] rc_core: IR keymap rc-hauppauge not found [ 438.520722][ T10] usb 1-1: USB disconnect, device number 38 [ 438.534721][ T5710] Registered IR keymap rc-empty [ 438.555171][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.570141][T12923] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2197'. [ 438.583081][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.607048][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 438.639996][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 438.660528][T12926] binder: 12922:12926 ioctl c0306201 0 returned -14 [ 438.672623][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.704277][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.734760][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.763032][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.793086][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.824018][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.873181][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.923357][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.954129][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.995548][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.034370][ T5710] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 439.048536][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 439.050992][ T5710] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 439.081611][ C1] vcan0: j1939_session_tx_dat: 0xffff88805a77ec00: queue data error: -100 [ 439.100531][ T5710] usb 5-1: USB disconnect, device number 36 [ 439.193309][ T5729] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 439.384529][ T5729] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 439.415587][ T5729] usb 3-1: config 0 has no interface number 0 [ 439.435720][ T5729] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 439.467202][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.490116][ T5729] usb 3-1: Product: syz [ 439.501804][ T5729] usb 3-1: Manufacturer: syz [ 439.515335][ T5729] usb 3-1: SerialNumber: syz [ 439.536442][ T5729] usb 3-1: config 0 descriptor?? [ 439.703019][ T5710] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 439.753872][ T5729] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 439.854870][ T5710] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 439.873096][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.898236][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 439.918316][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.947511][ T5710] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 439.964281][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 439.984511][ T5710] usb 1-1: Product: syz [ 439.995200][ T5710] usb 1-1: Manufacturer: syz [ 440.016480][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 440.038419][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.045757][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.054122][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 440.068581][ T5710] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 440.080633][ T5710] cdc_wdm 1-1:1.0: Unknown control protocol [ 440.166582][ T5729] gspca_m5602: Failed to find a sensor [ 440.183000][ T5729] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 440.215583][ T5729] usb 3-1: USB disconnect, device number 49 [ 440.285551][ T5710] usb 1-1: USB disconnect, device number 39 [ 440.733227][ T5710] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 440.873199][T12956] binder: 12954:12956 ioctl c0306201 200000001ac0 returned -14 [ 440.917498][T12957] kvm: pic: non byte write [ 440.934777][ T5710] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.960202][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.999532][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.032790][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.066592][ T5710] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.081321][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.091522][ T5710] usb 1-1: Product: syz [ 441.096560][ T5710] usb 1-1: Manufacturer: syz [ 441.129926][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 441.159451][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 441.199273][ T5710] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 441.224919][ T5710] cdc_wdm 1-1:1.0: Unknown control protocol [ 441.337821][T12969] batadv_slave_1: entered allmulticast mode [ 441.366476][T12968] batadv_slave_1: left allmulticast mode [ 441.772411][T12985] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 441.854424][T12985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.921153][T12990] vlan2: entered allmulticast mode [ 441.935614][T12982] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2214'. [ 441.971678][T12990] bond1: entered allmulticast mode [ 442.008850][T12987] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2213'. [ 442.069887][T12985] bond1: (slave geneve2): making interface the new active one [ 442.110617][T12985] geneve2: entered allmulticast mode [ 442.150914][T12985] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 442.438440][T12995] syzkaller0: entered promiscuous mode [ 442.448500][T12995] syzkaller0: entered allmulticast mode [ 442.999784][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.006545][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.012860][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.019461][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.025772][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.032374][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.038828][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.045430][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.051734][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.058321][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.064647][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.071229][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.077625][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.084215][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.090603][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.097208][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.103466][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.110141][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.116677][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 443.123296][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 443.125901][ T5729] usb 1-1: USB disconnect, device number 40 [ 443.129372][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 443.514331][T13002] netlink: 'syz.0.2219': attribute type 3 has an invalid length. [ 443.539966][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 443.661906][T13004] kvm: pic: non byte write [ 443.688309][T13012] xt_hashlimit: size too large, truncated to 1048576 [ 443.823863][ T5729] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 443.988526][ T5729] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 443.999744][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.037332][ T5729] usb 1-1: config 0 descriptor?? [ 444.056236][T13019] input: syz1 as /devices/virtual/input/input28 [ 444.454317][ T5729] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 444.468726][ T5729] [drm:udl_init] *ERROR* Selecting channel failed [ 444.551175][ T5729] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 444.567743][ T5729] [drm] Initialized udl on minor 2 [ 444.578975][ T5729] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.708030][ T5729] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 444.821616][ T5703] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.842540][ T5703] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 444.877028][ T5729] usb 1-1: USB disconnect, device number 41 [ 445.212089][ T5710] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 445.224142][ T5703] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 445.365477][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 445.388216][ T5710] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 445.397685][ T5710] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 445.412987][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 445.423737][ T5710] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 445.426830][ T5703] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 445.435002][ T5710] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 445.452197][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.461576][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.489990][ T5710] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 445.492707][ T5703] usb 3-1: Product: syz [ 445.500215][ T5710] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 445.528230][ T5703] usb 3-1: Manufacturer: syz [ 445.538698][ T5710] usb 5-1: Product: syz [ 445.540231][ T5703] usb 3-1: SerialNumber: syz [ 445.566865][ T5710] usb 5-1: Manufacturer: syz [ 445.571102][ T5703] usb 3-1: config 0 descriptor?? [ 445.576688][ T5710] usb 5-1: SerialNumber: syz [ 445.590100][ T5703] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 445.617011][ T5710] usb 5-1: config 0 descriptor?? [ 445.627914][ T5710] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 445.658015][ T5710] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 445.994528][ T5710] usb 5-1: USB disconnect, device number 37 [ 446.000535][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 446.006754][T13029] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 446.037366][T13038] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 446.082608][ T5710] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 446.535223][ T5710] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 446.693534][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 446.703582][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 446.717970][ T5710] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 446.746365][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 446.763160][ T5710] usb 5-1: Product: syz [ 446.767477][ T5710] usb 5-1: Manufacturer: syz [ 446.772182][ T5710] usb 5-1: SerialNumber: syz [ 446.795640][ T5710] usb 5-1: config 0 descriptor?? [ 446.816519][T13041] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 447.083972][T13052] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2231'. [ 447.150898][ T5729] usb 5-1: USB disconnect, device number 38 [ 447.870033][ T5703] gspca_ov534_9: reg_r err -71 [ 448.113000][ T5703] gspca_ov534_9: Unknown sensor 0000 [ 448.113105][ T5703] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 448.130769][ T5703] usb 3-1: USB disconnect, device number 50 [ 449.590733][T13089] loop2: detected capacity change from 0 to 7 [ 449.630725][T13089] loop2: p1 [ 449.638355][T13089] loop2: partition table partially beyond EOD, truncated [ 449.671554][T13089] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 449.780985][ T5631] udevd[5631]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 449.850649][T13097] xt_hashlimit: size too large, truncated to 1048576 [ 450.542206][T13114] xt_hashlimit: size too large, truncated to 1048576 [ 451.542763][T13131] netlink: 'syz.2.2254': attribute type 10 has an invalid length. [ 452.745398][T13146] mmap: syz.5.2259 (13146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 452.817577][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 452.897850][T13150] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2261'. [ 453.453575][ T5752] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 453.522781][T13168] xt_hashlimit: size too large, truncated to 1048576 [ 453.555770][T13167] xt_hashlimit: size too large, truncated to 1048576 [ 453.628605][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 453.646534][ T5752] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 453.672706][ T5752] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 453.700853][ T5752] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.731606][ T5752] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 453.775703][ T5752] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 453.791012][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.811181][ T5752] usb 4-1: Product: syz [ 453.824827][ T5752] usb 4-1: Manufacturer: syz [ 453.835915][ T5752] usb 4-1: SerialNumber: syz [ 453.855935][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 453.889156][ T5752] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input29 [ 454.073110][ T5752] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 454.095542][T13175] binder: 13174:13175 ioctl c0306201 0 returned -14 [ 454.102580][ T5752] (id 0x00) [ 454.272997][ T5752] rc_core: IR keymap rc-imon-pad not found [ 454.285952][ T5752] Registered IR keymap rc-empty [ 454.316373][ T5752] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 454.349540][ T5752] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 454.369062][ T29] audit: type=1326 audit(1781185800.179:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13180 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a579ce59 code=0x0 [ 454.434124][ T5752] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 454.461247][ T5752] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input30 [ 454.548290][ T5752] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:41> initialized [ 455.562974][ T5752] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 455.657094][T13198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2274'. [ 455.680943][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.715133][T13198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2274'. [ 455.727253][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.734473][T13198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.746355][T13198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2274'. [ 455.756986][ T5752] usb 6-1: config 34 has an invalid interface number: 116 but max is 0 [ 455.766995][ T5752] usb 6-1: config 34 has no interface number 0 [ 455.773929][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.774359][ T5752] usb 6-1: config 34 interface 116 has no altsetting 0 [ 455.793199][ T5752] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 455.806543][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.824334][ T5752] usb 6-1: Product: syz [ 455.833583][ T5752] usb 6-1: Manufacturer: syz [ 455.839077][ T5752] usb 6-1: SerialNumber: syz [ 455.863092][ T5729] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 455.901535][T13202] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 455.937335][T13202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.969591][T13202] bond3: (slave veth3): Enslaving as an active interface with a down link [ 456.020470][T13202] bond3: (slave dummy0): making interface the new active one [ 456.023045][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 456.030450][T13202] dummy0: entered promiscuous mode [ 456.044373][T13202] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 456.053660][T13208] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 456.070212][T13208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2275'. [ 456.099303][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 456.127560][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 456.133202][T13207] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 456.159575][ T5752] comedi comedi5: could not set alternate setting 3 in high speed [ 456.168378][ T5729] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 456.168975][T13208] bond3: (slave dummy0): Releasing active interface [ 456.177736][ T5752] usbdux 6-1:34.116: driver 'usbdux' failed to auto-configure device. [ 456.193092][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.217823][ T5729] usb 3-1: config 0 descriptor?? [ 456.227160][ T5752] usbdux 6-1:34.116: probe with driver usbdux failed with error -71 [ 456.263981][ T5752] usb 6-1: USB disconnect, device number 12 [ 456.461947][ T10] usb 4-1: USB disconnect, device number 41 [ 456.680838][ T5729] usbhid 3-1:0.0: can't add hid device: -71 [ 456.700620][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 456.751106][ T5729] usb 3-1: USB disconnect, device number 51 [ 457.199454][T13226] syzkaller0: entered promiscuous mode [ 457.221933][T13226] syzkaller0: entered allmulticast mode [ 457.376411][T13233] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 457.431186][T13235] xt_hashlimit: size too large, truncated to 1048576 [ 457.577151][T13236] bond2: (slave veth5): Enslaving as an active interface with a down link [ 457.650225][T13244] xt_hashlimit: size too large, truncated to 1048576 [ 457.694415][T13233] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 459.341483][T13282] netlink: 572 bytes leftover after parsing attributes in process `syz.2.2294'. [ 459.384418][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 459.425750][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 459.614474][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 459.637618][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 459.676571][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.726673][ T24] usb 5-1: Product: syz [ 459.744130][ T24] usb 5-1: Manufacturer: syz [ 459.769851][ T24] usb 5-1: SerialNumber: syz [ 459.833597][ T24] usb 5-1: config 0 descriptor?? [ 460.248325][T13291] syzkaller0: entered promiscuous mode [ 460.262155][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 460.280388][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.307163][T13291] syzkaller0: entered allmulticast mode [ 460.309174][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 460.341628][ T24] usb 5-1: media controller created [ 460.407087][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.025196][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 461.047638][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 461.070327][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 461.104510][ T24] usb 5-1: USB disconnect, device number 39 [ 461.233657][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 461.299792][T13317] xt_hashlimit: size too large, truncated to 1048576 [ 461.405749][T13322] xt_hashlimit: size too large, truncated to 1048576 [ 462.553160][T13340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.261579][T13353] tipc: Started in network mode [ 463.267406][T13353] tipc: Node identity d28cff2bb19f, cluster identity 4711 [ 463.275319][T13353] tipc: Enabled bearer , priority 0 [ 463.286184][T13353] syzkaller0: entered promiscuous mode [ 463.291835][T13353] syzkaller0: entered allmulticast mode [ 463.304283][T13353] tipc: Resetting bearer [ 463.329338][T13352] tipc: Resetting bearer [ 463.388673][T13352] tipc: Disabling bearer [ 463.796765][T13372] xt_hashlimit: size too large, truncated to 1048576 [ 463.829104][T13374] xt_hashlimit: size too large, truncated to 1048576 [ 463.941844][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 464.126605][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 464.156464][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.183612][ T9] usb 6-1: Product: syz [ 464.194922][ T9] usb 6-1: Manufacturer: syz [ 464.206522][ T9] usb 6-1: SerialNumber: syz [ 464.646708][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 464.680599][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 464.983072][ T5752] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 465.149099][T13394] syzkaller0: entered promiscuous mode [ 465.157064][T13394] syzkaller0: entered allmulticast mode [ 465.187109][ T5752] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 465.215532][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.242219][ T5752] usb 1-1: Product: syz [ 465.252270][ T5752] usb 1-1: Manufacturer: syz [ 465.266700][ T5752] usb 1-1: SerialNumber: syz [ 465.286946][ T5752] usb 1-1: config 0 descriptor?? [ 465.534125][ T5752] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.867569][T13405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.091800][T13409] syzkaller0: entered promiscuous mode [ 466.105646][T13409] syzkaller0: entered allmulticast mode [ 466.119849][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 466.355597][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 466.379914][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 466.405595][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 466.430344][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 466.461895][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 466.484270][ T9] usb 6-1: USB disconnect, device number 13 [ 466.930220][T13419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.054384][ T5752] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 467.086638][ T5752] usb 1-1: USB disconnect, device number 42 [ 467.837058][T13433] binder: 13431:13433 ioctl c0306201 0 returned -14 [ 468.857345][T13436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.277006][T13441] blktrace: Concurrent blktraces are not allowed on sg0 [ 470.591613][T13451] syzkaller0: entered promiscuous mode [ 470.610545][T13451] syzkaller0: entered allmulticast mode [ 470.636738][T13452] tipc: Enabled bearer , priority 0 [ 470.673446][T13446] tipc: Resetting bearer [ 470.751238][T13446] tipc: Disabling bearer [ 470.778526][T13458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.839251][T13462] binder: 13459:13462 ioctl c0306201 0 returned -14 [ 470.873022][ T5752] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 470.880668][T13464] binder: 13455:13464 ioctl c0306201 0 returned -14 [ 471.052950][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 471.061495][ T5752] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 471.081351][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 471.103214][ T5752] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 471.114174][ T5752] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 471.128298][ T5752] usb 4-1: Product: syz [ 471.136566][ T5752] usb 4-1: Manufacturer: syz [ 471.145127][ T5752] usb 4-1: SerialNumber: syz [ 471.153100][ T5710] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 471.175041][ T5752] usb 4-1: config 0 descriptor?? [ 471.215359][ T5752] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 471.313627][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 471.321248][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 471.335798][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.345266][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.360790][ T5710] usb 5-1: Product: syz [ 471.368508][ T5710] usb 5-1: Manufacturer: syz [ 471.376948][ T5710] usb 5-1: SerialNumber: syz [ 471.387787][ T5710] usb 5-1: config 0 descriptor?? [ 471.417700][ T5710] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 471.427619][ T5710] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 471.432622][T13454] fuse: Bad value for 'fd' [ 471.445650][T13454] tmpfs: Unknown parameter 'fd' [ 471.456252][ T5752] usb 4-1: USB disconnect, device number 42 [ 471.462538][ T48] usb 4-1: Failed to submit usb control message: -71 [ 471.470833][ T48] usb 4-1: unable to send the bmi data to the device: -71 [ 471.478664][ T48] usb 4-1: unable to get target info from device [ 471.490905][ T48] usb 4-1: could not get target info (-71) [ 471.498380][ T48] usb 4-1: could not probe fw (-71) [ 471.797738][T13476] netlink: 'syz.0.2344': attribute type 10 has an invalid length. [ 471.833486][T13477] binder: 13473:13477 ioctl c0306201 0 returned -14 [ 472.046547][ T5710] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 472.265831][T13486] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2346'. [ 472.403374][T13488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.463631][ T5710] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 472.481747][ T5710] em28xx 5-1:0.0: board has no eeprom [ 473.591831][T13466] em28xx 5-1:0.0: reading from i2c device at 0x72a failed (error=-5) [ 473.616102][ T5710] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 473.657481][ T5710] em28xx 5-1:0.0: dvb set to bulk mode. [ 473.685115][ T5727] em28xx 5-1:0.0: Binding DVB extension [ 473.715830][ T5710] usb 5-1: USB disconnect, device number 40 [ 473.770147][ T5710] em28xx 5-1:0.0: Disconnecting em28xx [ 473.797108][T13505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.936760][ T5727] em28xx 5-1:0.0: Registering input extension [ 473.948127][ T5710] em28xx 5-1:0.0: Closing input extension [ 474.001634][ T5710] em28xx 5-1:0.0: Freeing device [ 474.041730][T13510] binder: 13507:13510 ioctl c0306201 0 returned -14 [ 474.786132][T13522] binder: 13521:13522 ioctl c0306201 0 returned -14 [ 474.875214][T13524] syzkaller1: entered allmulticast mode [ 475.005307][T13531] binder: 13526:13531 ioctl c0306201 0 returned -14 [ 475.370588][T13538] netlink: 'syz.4.2362': attribute type 10 has an invalid length. [ 475.445647][ T29] audit: type=1804 audit(1781185821.259:10): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2363" name="/newroot/413/file1" dev="fuse" ino=1 res=1 errno=0 [ 475.637611][T13544] syzkaller0: entered promiscuous mode [ 475.646321][T13544] syzkaller0: entered allmulticast mode [ 476.401804][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.449167][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.986016][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.015814][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.060876][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.112750][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.252121][T13566] binder: 13564:13566 ioctl c0306201 0 returned -14 [ 477.324740][T13560] syzkaller0: entered promiscuous mode [ 477.351804][T13560] syzkaller0: entered allmulticast mode [ 477.391479][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.429777][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.463514][ T48] syzkaller0: tun_net_xmit 48 [ 477.497766][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.522036][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.690895][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'. [ 479.109390][T13595] kvm: pic: non byte write [ 479.543076][ T5752] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 479.693755][ T5752] usb 3-1: too many configurations: 63, using maximum allowed: 8 [ 479.703726][ T5752] usb 3-1: config index 0 descriptor too short (expected 64988, got 72) [ 479.716142][ T5752] usb 3-1: config index 1 descriptor too short (expected 64988, got 72) [ 479.729048][ T5752] usb 3-1: config index 2 descriptor too short (expected 64988, got 72) [ 479.757108][ T5752] usb 3-1: config index 3 descriptor too short (expected 64988, got 72) [ 479.803896][ T5752] usb 3-1: config index 4 descriptor too short (expected 64988, got 72) [ 479.814343][ T5752] usb 3-1: config index 5 descriptor too short (expected 64988, got 72) [ 479.824133][ T5752] usb 3-1: config index 6 descriptor too short (expected 64988, got 72) [ 479.833943][ T5752] usb 3-1: config index 7 descriptor too short (expected 64988, got 72) [ 479.845688][ T5752] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 479.855114][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.863617][ T5752] usb 3-1: Product: syz [ 479.867945][ T5752] usb 3-1: Manufacturer: syz [ 479.873976][ T5752] usb 3-1: SerialNumber: syz [ 479.901329][ T5752] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.922443][ T5729] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 480.575433][ T5710] usb 3-1: USB disconnect, device number 52 [ 480.866100][T13608] binder: 13605:13608 ioctl c0306201 0 returned -14 [ 481.006739][ T5729] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 481.018652][ T5729] ath9k_htc: Failed to initialize the device [ 481.047466][ T5710] usb 3-1: ath9k_htc: USB layer deinitialized [ 481.533068][ T5710] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 481.705138][ T5710] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 481.718614][ T5710] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.728864][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.755765][ T5710] usb 3-1: Product: syz [ 481.761625][ T5710] usb 3-1: Manufacturer: syz [ 481.766605][ T5710] usb 3-1: SerialNumber: syz [ 481.778415][ T5710] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.819084][ T5727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.080102][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.130842][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.154224][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.173428][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.239352][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.293008][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.339948][ T5752] usb 3-1: USB disconnect, device number 53 [ 482.925226][ T5727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 482.932278][ T5727] ath9k_htc: Failed to initialize the device [ 482.939179][ T5752] usb 3-1: ath9k_htc: USB layer deinitialized [ 483.263017][ T5752] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 483.423476][T13584] syzkaller0: entered promiscuous mode [ 483.432390][T13584] syzkaller0: entered allmulticast mode [ 483.459365][ T5752] usb 3-1: Using ep0 maxpacket: 32 [ 483.502684][ T5752] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 483.513098][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 483.526267][ T5752] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 483.538250][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.553249][ T5752] usb 3-1: config 0 descriptor?? [ 483.567889][ T5752] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 483.691047][T13625] binder: 13618:13625 ioctl c0306201 0 returned -14 [ 483.883135][ T5703] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 484.045342][ T5703] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.077828][ T5640] Bluetooth: hci0: Malformed LE Event: 0x0d [ 484.087633][ T5703] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.113884][ T5703] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.144486][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.182514][T13624] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 484.209620][T13632] kvm: pic: non byte write [ 484.218099][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.585773][ T5703] usb 5-1: USB disconnect, device number 41 [ 484.791194][ T5752] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 484.839944][ T5752] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 484.884427][ T5752] usb 3-1: USB disconnect, device number 54 [ 484.938264][ T5752] mos7840 3-1:0.0: device disconnected [ 485.025665][T13645] binder: 13640:13645 ioctl c0306201 0 returned -14 [ 486.556321][T13683] syzkaller0: entered promiscuous mode [ 486.568456][T13683] syzkaller0: entered allmulticast mode [ 486.722577][T13687] syzkaller0: entered promiscuous mode [ 486.728413][T13687] syzkaller0: entered allmulticast mode [ 486.737938][T13688] syzkaller0: entered promiscuous mode [ 486.746373][T13688] syzkaller0: entered allmulticast mode [ 486.869833][T13692] syzkaller0: entered promiscuous mode [ 486.882927][T13692] syzkaller0: entered allmulticast mode [ 487.029418][T13696] syzkaller0: entered promiscuous mode [ 487.040368][T13696] syzkaller0: entered allmulticast mode [ 487.243684][ T5752] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 487.376143][T13710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.415399][ T5752] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 487.439838][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.470445][ T5752] usb 4-1: config 0 descriptor?? [ 487.485417][ T5752] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 487.906250][T13720] syzkaller0: entered promiscuous mode [ 487.921429][T13720] syzkaller0: entered allmulticast mode [ 488.365534][T13729] bridge0: port 4(macvlan2) entered blocking state [ 488.376733][T13726] Cannot find add_set index 0 as target [ 488.384278][T13729] bridge0: port 4(macvlan2) entered disabled state [ 488.415696][T13729] macvlan2: entered allmulticast mode [ 488.426163][T13729] ip6gretap0: entered allmulticast mode [ 488.475249][T13729] macvlan2: entered promiscuous mode [ 488.498610][ T5752] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 488.518527][T13729] bridge0: port 4(macvlan2) entered blocking state [ 488.525230][T13729] bridge0: port 4(macvlan2) entered forwarding state [ 488.592510][T13734] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2417'. [ 489.276425][T13750] binder_alloc: 13748: pid 13748 spamming oneway? 1 buffers allocated for a total size of 4096 [ 489.294115][T13750] binder_alloc: 13748: pid 13748 spamming oneway? 2 buffers allocated for a total size of 5120 [ 489.306962][T13749] binder: 13745:13749 ioctl c0306201 0 returned -14 [ 489.330149][ T5710] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 489.493195][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 489.512481][ T5710] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 489.535854][ T5710] usb 5-1: config 0 has no interface number 0 [ 489.559322][ T5710] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 489.587051][ T5710] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 489.609509][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 489.630612][ T5710] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 489.649156][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 489.679621][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.701576][ T5710] usb 5-1: Product: syz [ 489.718841][ T5710] usb 5-1: Manufacturer: syz [ 489.731637][ T5710] usb 5-1: SerialNumber: syz [ 489.764113][ T5710] usb 5-1: config 0 descriptor?? [ 489.779031][ T5752] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 489.799245][T13744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.808084][ T5752] usb 4-1: USB disconnect, device number 43 [ 489.825754][T13744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.979161][T13755] syzkaller0: entered promiscuous mode [ 489.993666][T13755] syzkaller0: entered allmulticast mode [ 490.064632][T13744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.083145][T13744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.246352][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.296213][ T5710] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 490.763752][T13765] syzkaller0: entered promiscuous mode [ 490.779749][T13765] syzkaller0: entered allmulticast mode [ 492.341404][ T5710] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 492.353316][ T5710] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 492.378131][ T5710] asix 5-1:0.34: probe with driver asix failed with error -71 [ 492.388787][ T5710] usb 5-1: USB disconnect, device number 42 [ 493.373030][ T5727] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 493.530716][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.547397][ T5727] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 493.558873][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.587163][ T5727] usb 5-1: config 0 descriptor?? [ 493.817376][ T5727] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 495.091152][ T5727] [drm:udl_init] *ERROR* Selecting channel failed [ 495.176284][ T5727] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 495.202996][ T5727] [drm] Initialized udl on minor 2 [ 495.221147][ T5727] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 495.251267][ T5727] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 495.284869][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 495.298908][ T5727] usb 5-1: USB disconnect, device number 43 [ 495.307595][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 495.392729][T13796] Cannot find add_set index 0 as target [ 495.520585][T13799] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2437'. [ 495.580613][T13803] syz_tun: entered allmulticast mode [ 495.595348][T13802] syzkaller0: entered promiscuous mode [ 495.602964][T13802] syzkaller0: entered allmulticast mode [ 495.617940][T13803] bond0: entered promiscuous mode [ 495.651951][T13803] bond_slave_0: entered promiscuous mode [ 495.665200][T13803] bond_slave_1: entered promiscuous mode [ 495.833958][T13811] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2442'. [ 495.850703][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.872371][T13806] syzkaller0: entered promiscuous mode [ 495.896196][T13806] syzkaller0: entered allmulticast mode [ 496.095597][T13819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2446'. [ 496.146031][T13819] bridge0: port 4(macvlan2) entered disabled state [ 496.152779][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.160215][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.230380][T13819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2446'. [ 496.932992][ T5729] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 497.120136][ T5729] usb 5-1: config index 0 descriptor too short (expected 137, got 72) [ 497.151320][ T5729] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 497.173545][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.192388][ T5729] usb 5-1: Product: syz [ 497.200883][ T5729] usb 5-1: Manufacturer: syz [ 497.215460][ T5729] usb 5-1: SerialNumber: syz [ 497.255050][ T5729] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 497.275876][ T5703] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.462983][ T5727] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 497.625661][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 497.641476][ T5727] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 497.660230][ T5727] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 497.676449][ T5727] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 497.701111][ T5727] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 497.729116][ T5727] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.755407][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.781894][ T5727] usb 3-1: Product: syz [ 497.792691][ T5727] usb 3-1: Manufacturer: syz [ 497.805604][ T5727] usb 3-1: SerialNumber: syz [ 497.848293][ T5727] usb 3-1: 0:2 : does not exist [ 498.067210][ T5727] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 498.160646][ T5752] usb 5-1: USB disconnect, device number 44 [ 498.218653][ T5727] usb 3-1: USB disconnect, device number 55 [ 498.283282][ T5710] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 498.363889][ T5703] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 498.373995][ T5703] ath9k_htc: Failed to initialize the device [ 498.382351][ T5752] usb 5-1: ath9k_htc: USB layer deinitialized [ 498.443095][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 498.455077][ T5710] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 498.463688][ T5710] usb 1-1: config 2 has no interface number 0 [ 498.469864][ T5710] usb 1-1: config 2 interface 88 has no altsetting 0 [ 498.483720][ T5710] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 498.498589][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.507507][ T5710] usb 1-1: Product: syz [ 498.516237][ T5710] usb 1-1: Manufacturer: syz [ 498.521318][ T5710] usb 1-1: SerialNumber: syz [ 498.968680][T13876] Cannot find add_set index 0 as target [ 499.125576][T13877] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2461'. [ 499.418464][ T5710] asix 1-1:2.88: probe with driver asix failed with error -71 [ 499.452700][ T5710] usb 1-1: USB disconnect, device number 43 [ 499.768454][T13879] syzkaller0: entered promiscuous mode [ 499.776050][T13879] syzkaller0: entered allmulticast mode [ 500.534185][ T29] audit: type=1326 audit(1781185846.349:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.597241][ T29] audit: type=1326 audit(1781185846.379:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.649457][ T29] audit: type=1326 audit(1781185846.389:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.731747][ T29] audit: type=1326 audit(1781185846.389:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.809767][ T29] audit: type=1326 audit(1781185846.389:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.904889][ T29] audit: type=1326 audit(1781185846.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.942990][ T29] audit: type=1326 audit(1781185846.399:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 500.974598][ T29] audit: type=1326 audit(1781185846.399:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 501.025781][ T29] audit: type=1326 audit(1781185846.399:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 501.067008][ T29] audit: type=1326 audit(1781185846.439:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60d39ce59 code=0x7ffc0000 [ 501.453081][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 501.474218][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480620][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.555128][T13908] syzkaller0: entered promiscuous mode [ 501.560658][T13908] syzkaller0: entered allmulticast mode [ 501.615401][ T10] usb 1-1: config index 0 descriptor too short (expected 137, got 72) [ 501.625955][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.635242][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.644197][ T10] usb 1-1: Product: syz [ 501.648463][ T10] usb 1-1: Manufacturer: syz [ 501.653125][ T10] usb 1-1: SerialNumber: syz [ 501.667773][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 501.686109][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.786992][T13911] xt_hashlimit: size too large, truncated to 1048576 [ 502.455281][ T24] usb 1-1: USB disconnect, device number 44 [ 502.763244][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 502.772509][ T9] ath9k_htc: Failed to initialize the device [ 502.780737][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 502.829731][T13920] syzkaller0: entered promiscuous mode [ 502.835487][T13920] syzkaller0: entered allmulticast mode [ 502.966980][T13922] syzkaller0: entered promiscuous mode [ 502.972809][T13922] syzkaller0: entered allmulticast mode [ 503.075342][T13924] syz_tun (unregistering): left allmulticast mode [ 503.267767][T13934] syzkaller0: entered promiscuous mode [ 503.273487][T13934] syzkaller0: entered allmulticast mode [ 503.488244][T13943] xt_hashlimit: size too large, truncated to 1048576 [ 503.643016][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 503.752971][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 503.804766][ T10] usb 3-1: config index 0 descriptor too short (expected 137, got 72) [ 503.824344][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.837119][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.850895][ T10] usb 3-1: Product: syz [ 503.865009][ T10] usb 3-1: Manufacturer: syz [ 503.878745][ T10] usb 3-1: SerialNumber: syz [ 503.896129][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 503.915049][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 503.936005][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.951021][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 503.962655][ T5710] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 503.985389][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.995820][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.007173][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.015636][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.029455][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.043328][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.043353][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.046312][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.046342][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.046366][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.046495][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.046520][ T5727] hid-generic 0005:5B44:0004.0025: unknown main item tag 0x0 [ 504.074935][ T9] usb 5-1: config 0 descriptor?? [ 504.120368][ T5727] hid-generic 0005:5B44:0004.0025: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 504.509996][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 504.788844][ T5727] usb 3-1: USB disconnect, device number 56 [ 504.821709][T13961] binder: 13960:13961 ioctl c0306201 0 returned -14 [ 505.073038][ T5710] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 505.086710][ T5710] ath9k_htc: Failed to initialize the device [ 505.100341][ T5727] usb 3-1: ath9k_htc: USB layer deinitialized [ 505.392669][T13977] syzkaller0: entered promiscuous mode [ 505.408331][T13977] syzkaller0: entered allmulticast mode [ 505.662615][T13987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=539148999 (1078297998 ns) > initial count (4211076 ns). Using initial count to start timer. [ 505.943492][ T24] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 505.977157][T14002] binder: 14000:14002 ioctl c0306201 0 returned -14 [ 506.083014][ T24] usb 5-1: device descriptor read/64, error -32 [ 506.245058][T14011] binder: 14009:14011 ioctl c0306201 0 returned -14 [ 506.323052][ T24] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 506.462935][ T24] usb 5-1: device descriptor read/64, error -32 [ 506.713081][ T24] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 506.755048][ T24] usb 5-1: device descriptor read/8, error -32 [ 506.761408][T14014] binder: 14013:14014 ioctl c0306201 0 returned -14 [ 506.941683][T14016] syzkaller0: entered promiscuous mode [ 506.978481][T14016] syzkaller0: entered allmulticast mode [ 507.067175][T14020] syzkaller0: entered promiscuous mode [ 507.073531][T14020] syzkaller0: entered allmulticast mode [ 507.255020][ T24] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 507.286631][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 507.303998][ T5752] usb 5-1: USB disconnect, device number 45 [ 507.483319][ T5752] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 507.498737][T14033] binder: 14032:14033 ioctl c0306201 0 returned -14 [ 507.653373][ T5710] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 507.662950][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 507.671576][ T5752] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 507.683614][ T5752] usb 5-1: config 0 has no interface number 0 [ 507.691494][ T5752] usb 5-1: config 0 interface 12 has no altsetting 0 [ 507.703680][ T5752] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 507.722428][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.733696][ T5752] usb 5-1: Product: syz [ 507.738096][ T5752] usb 5-1: Manufacturer: syz [ 507.742962][ T5752] usb 5-1: SerialNumber: syz [ 507.750179][T14042] binder: 14040:14042 ioctl c0306201 0 returned -14 [ 507.760617][ T5752] usb 5-1: config 0 descriptor?? [ 507.813530][ T5710] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 507.826645][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.840216][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.856184][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.879302][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.893837][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.907735][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.922143][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.944744][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.957895][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.971375][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.992278][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.014155][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.027103][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.051292][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.067372][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.091356][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.116973][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.138609][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.165634][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.200028][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.222351][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.245785][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.267198][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.302339][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.325251][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.348293][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.379008][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.412655][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.427536][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.449322][ T5710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.472976][ T5710] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.502938][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.517403][ T5710] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 508.543025][ T5710] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 508.552987][ T5710] usb 4-1: Product: syz [ 508.557313][ T5710] usb 4-1: Manufacturer: syz [ 508.563074][ T5710] usb 4-1: SerialNumber: syz [ 508.577964][ T5710] usb 4-1: config 0 descriptor?? [ 508.592660][ T5710] yurex 4-1:0.0: Could not find endpoints [ 508.604459][ T5729] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 508.676566][T14049] tipc: Started in network mode [ 508.681609][T14049] tipc: Node identity 3a8ac469b015, cluster identity 4711 [ 508.690658][T14049] tipc: Enabled bearer , priority 0 [ 508.698593][T14047] binder: 14046:14047 ioctl c0306201 0 returned -14 [ 508.706449][T14049] syzkaller0: entered promiscuous mode [ 508.712877][T14049] syzkaller0: entered allmulticast mode [ 508.777276][T14049] tipc: Resetting bearer [ 508.797708][ T5729] usb 6-1: config 0 has no interfaces? [ 508.805147][ T5729] usb 6-1: config 0 has no interfaces? [ 508.812626][ T5729] usb 6-1: config 0 has no interfaces? [ 508.820480][ T5729] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 508.830564][T14048] tipc: Resetting bearer [ 508.842270][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.881318][ T5729] usb 6-1: config 0 descriptor?? [ 508.897912][T14048] tipc: Disabling bearer [ 508.983188][T14053] binder: 14050:14053 ioctl c0306201 0 returned -14 [ 509.016100][ T5752] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 509.037629][ T5752] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 509.048432][ T5752] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 509.058889][ T5752] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 509.078477][ T5752] usb 5-1: USB disconnect, device number 46 [ 509.142817][ T5710] usb 4-1: USB disconnect, device number 44 [ 509.147381][ T24] usb 6-1: USB disconnect, device number 14 [ 509.945102][T14064] syzkaller0: entered promiscuous mode [ 509.966316][T14064] syzkaller0: entered allmulticast mode [ 510.183563][T14074] syzkaller0: entered promiscuous mode [ 510.198994][T14074] syzkaller0: entered allmulticast mode [ 510.408819][T14083] binder: 14082:14083 ioctl c0306201 0 returned -14 [ 510.441997][T14069] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2521'. [ 510.892939][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 511.063944][T14095] binder: 14094:14095 ioctl c0306201 200000000180 returned -14 [ 511.072289][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 511.094434][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.137116][ T24] usb 6-1: config 0 has no interfaces? [ 511.170433][ T24] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 511.239873][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.294255][ T24] usb 6-1: config 0 descriptor?? [ 511.350963][T14101] binder: 14098:14101 ioctl c0306201 0 returned -14 [ 511.763069][ T5727] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 511.963168][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 511.975547][ T5727] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 511.995773][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.021198][T14108] binder: 14106:14108 ioctl c0306201 0 returned -14 [ 512.040130][ T5727] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 512.055600][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.107407][ T5727] usb 4-1: Product: syz [ 512.120314][ T5710] usb 6-1: USB disconnect, device number 15 [ 512.139048][ T5727] usb 4-1: Manufacturer: syz [ 512.159350][ T5727] usb 4-1: SerialNumber: syz [ 512.199463][ T5727] usb 4-1: config 0 descriptor?? [ 512.221219][ T5727] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 512.244384][ T5727] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 512.357020][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 512.357036][ T29] audit: type=1326 audit(1781185858.169:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.434805][ T29] audit: type=1326 audit(1781185858.169:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.499202][ T29] audit: type=1326 audit(1781185858.169:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.570440][ T29] audit: type=1326 audit(1781185858.169:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.668892][ T29] audit: type=1326 audit(1781185858.169:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.801334][ T29] audit: type=1326 audit(1781185858.169:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5199f9ce59 code=0x7ffc0000 [ 512.831432][ T5727] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 512.849639][ T5727] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 512.887754][ T29] audit: type=1326 audit(1781185858.229:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5199f5d68e code=0x7ffc0000 [ 512.950110][ T29] audit: type=1326 audit(1781185858.239:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5199f5d68e code=0x7ffc0000 [ 513.018998][ T29] audit: type=1326 audit(1781185858.239:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5199f5d68e code=0x7ffc0000 [ 513.052475][ T29] audit: type=1326 audit(1781185858.279:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5199f5d68e code=0x7ffc0000 [ 513.244131][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 513.372996][T13950] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 513.417012][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.427990][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.442420][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 513.452429][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.461132][ T10] usb 1-1: SerialNumber: syz [ 513.473774][ T10] cdc_ether 1-1:1.0: missing cdc header ether descriptor [ 513.484074][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 513.495453][ T10] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 513.527688][ T5727] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 513.535410][ T5727] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 513.572460][T13950] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 513.581860][T13950] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 513.590346][T13950] usb 5-1: Product: syz [ 513.595146][T13950] usb 5-1: SerialNumber: syz [ 513.601954][T13950] usb 5-1: config 0 descriptor?? [ 513.611154][T13950] hso 5-1:0.0: Not our interface [ 513.762939][ T5727] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 513.771582][ T5727] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 513.950650][ T5727] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 513.962563][ T5727] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 513.971911][ T5727] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 513.989084][ T5727] usb 4-1: USB disconnect, device number 45 [ 514.026847][T14136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.038949][T14136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.057277][ T5729] usb 5-1: USB disconnect, device number 47 [ 514.621457][T14151] binder: 14147:14151 ioctl c0306201 0 returned -14 [ 514.932123][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2551'. [ 515.007262][T14157] bond1: entered promiscuous mode [ 515.013433][T14157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.172209][T14160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.210289][T14160] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 515.258886][T14160] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 515.573096][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 515.699791][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.744650][T14172] syzkaller0: entered promiscuous mode [ 515.750297][T14172] syzkaller0: entered allmulticast mode [ 515.784131][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 515.984390][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.998064][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.006155][ T10] usb 5-1: can't read configurations, error -71 [ 516.085753][T13950] usb 1-1: USB disconnect, device number 45 [ 516.552696][T14201] loop5: detected capacity change from 0 to 7 [ 516.572178][T14201] Dev loop5: unable to read RDB block 7 [ 516.593641][T14201] loop5: unable to read partition table [ 516.598950][T14199] syzkaller0: entered promiscuous mode [ 516.617186][T14199] syzkaller0: entered allmulticast mode [ 516.624653][T14201] loop5: partition table beyond EOD, truncated [ 516.645879][T14201] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.141549][T14213] xt_hashlimit: size too large, truncated to 1048576 [ 517.148833][T14216] binder: 14206:14216 ioctl c0306201 0 returned -14 [ 517.603012][ T5752] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 517.787578][ T5752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.807514][ T5752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.834160][ T5752] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.846960][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.862949][ T5752] usb 4-1: SerialNumber: syz [ 518.127093][ T5752] usb 4-1: 0:2 : does not exist [ 518.199562][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 518.199580][ T29] audit: type=1804 audit(1781185863.999:65): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2572" name="/newroot/458/file0" dev="fuse" ino=1 res=1 errno=0 [ 518.222954][ T5752] usb 4-1: USB disconnect, device number 46 [ 518.369443][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.496723][T14229] tipc: Started in network mode [ 518.518154][T14229] tipc: Node identity 9e2fdc616668, cluster identity 4711 [ 518.554836][T14229] tipc: Enabled bearer , priority 0 [ 518.593393][T14230] syzkaller0: entered promiscuous mode [ 518.627223][T14230] syzkaller0: entered allmulticast mode [ 518.724825][T14229] tipc: Resetting bearer [ 518.777956][T14228] tipc: Resetting bearer [ 518.930694][T14228] tipc: Disabling bearer [ 519.200438][T14244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 519.222986][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 519.236146][T14244] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 519.245640][ T5752] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 519.393121][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 519.410566][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 519.418917][ T5752] usb 6-1: Using ep0 maxpacket: 32 [ 519.429377][ T5752] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 519.438288][ T24] usb 5-1: config 0 has no interface number 0 [ 519.445538][ T5752] usb 6-1: config 0 has no interface number 0 [ 519.453043][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 519.461162][ T5752] usb 6-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 519.477304][ T5752] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 519.489076][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 519.499974][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.510647][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.519850][ T5752] usb 6-1: Product: syz [ 519.524259][ T24] usb 5-1: Product: syz [ 519.529194][ T5752] usb 6-1: Manufacturer: syz [ 519.534427][ T24] usb 5-1: Manufacturer: syz [ 519.540373][ T5752] usb 6-1: SerialNumber: syz [ 519.545765][ T24] usb 5-1: SerialNumber: syz [ 519.556343][ T5752] usb 6-1: config 0 descriptor?? [ 519.567373][ T24] usb 5-1: config 0 descriptor?? [ 519.577290][ T5752] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 519.594902][ T5752] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 519.855358][T14197] syz.2.2562 (14197): drop_caches: 1 [ 624.982813][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 624.990105][ C1] rcu: 0-...!: (1 GPs behind) idle=a064/1/0x4000000000000000 softirq=84463/84467 fqs=0 [ 625.000956][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4999/1:b..l [ 625.008875][ C1] rcu: (detected by 1, t=10502 jiffies, g=104997, q=172 ncpus=2) [ 625.016769][ C1] Sending NMI from CPU 1 to CPUs 0: [ 625.016805][ C0] NMI backtrace for cpu 0 [ 625.016824][ C0] CPU: 0 UID: 0 PID: 14239 Comm: syz.3.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.016845][ C0] Tainted: [L]=SOFTLOCKUP [ 625.016850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.016860][ C0] RIP: 0010:_find_first_zero_bit+0x44/0xb0 [ 625.016989][ C0] Code: 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 48 50 80 fd 49 8b 06 48 83 f8 ff 74 2b 45 31 ed <48> f7 d0 f3 48 0f bc c0 4c 01 e8 48 39 d8 48 0f 43 c3 eb 05 31 db [ 625.017003][ C0] RSP: 0018:ffffc9000348fc18 EFLAGS: 00000046 [ 625.017016][ C0] RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000080000001 [ 625.017030][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff88807a85ed90 [ 625.017040][ C0] RBP: 0000000080000000 R08: 1ffff1100f50bc61 R09: 0000000000000000 [ 625.017050][ C0] R10: ffff88807a85e44c R11: fffff52000691f78 R12: dffffc0000000000 [ 625.017061][ C0] R13: 0000000000000000 R14: ffff88807a85ed90 R15: ffff88807a85e200 [ 625.017072][ C0] FS: 00007f0b896926c0(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 625.017085][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.017095][ C0] CR2: 00002000000f1000 CR3: 0000000088698000 CR4: 00000000003526f0 [ 625.017108][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.017117][ C0] DR3: 00000000ffff000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 625.017127][ C0] Call Trace: [ 625.017135][ C0] [ 625.017145][ C0] sched_mm_cid_fork+0x67c/0x10e0 [ 625.017235][ C0] bprm_execve+0xdb7/0x1510 [ 625.017288][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 625.017307][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 625.017335][ C0] ? alloc_bprm+0x508/0x5c0 [ 625.017354][ C0] ? count+0x1cb/0x230 [ 625.017375][ C0] do_execveat_common+0x50d/0x690 [ 625.017400][ C0] __x64_sys_execveat+0xc7/0xf0 [ 625.017421][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.017453][ C0] do_syscall_64+0x174/0x580 [ 625.017540][ C0] ? clear_bhb_loop+0x40/0x90 [ 625.017556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.017571][ C0] RIP: 0033:0x7f0b8879ce59 [ 625.017587][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.017599][ C0] RSP: 002b:00007f0b89692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 625.017615][ C0] RAX: ffffffffffffffda RBX: 00007f0b88a15fa0 RCX: 00007f0b8879ce59 [ 625.017626][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 625.017635][ C0] RBP: 00007f0b88832d6f R08: 0000000000001000 R09: 0000000000000000 [ 625.017645][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.017654][ C0] R13: 00007f0b88a16038 R14: 00007f0b88a15fa0 R15: 00007f0b88b3fa48 [ 625.017671][ C0] [ 625.017794][ C1] task:udevd state:R running task stack:22360 pid:4999 tgid:4999 ppid:1 task_flags:0x400140 flags:0x00080000 [ 625.318717][ C1] Call Trace: [ 625.322090][ C1] [ 625.325029][ C1] __schedule+0x1821/0x5740 [ 625.329650][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 625.334610][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 625.339548][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 625.344490][ C1] ? unwind_next_frame+0xa6/0x2550 [ 625.349626][ C1] ? __pfx___schedule+0x10/0x10 [ 625.354570][ C1] ? __follow_mount_rcu+0x1d8/0x560 [ 625.359803][ C1] preempt_schedule_irq+0x4d/0xa0 [ 625.364819][ C1] irqentry_exit+0x14f/0x8b0 [ 625.369404][ C1] ? trace_irq_disable+0x3b/0x140 [ 625.374459][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.380432][ C1] RIP: 0010:try_to_unlazy+0x311/0xc50 [ 625.385804][ C1] Code: d1 80 e1 07 80 c1 03 38 c1 7c 80 48 8b 7c 24 08 e8 a4 43 e9 ff 48 8b 54 24 08 e9 6c ff ff ff e8 85 ec 7d ff 48 8b 2c 24 eb 0f 7a ec 7d ff 49 be 00 00 00 00 00 fc ff df 48 8d 5d 40 48 89 d8 [ 625.405490][ C1] RSP: 0018:ffffc90002f1f9c8 EFLAGS: 00000246 [ 625.411558][ C1] RAX: ffffffff8247c8ed RBX: 0000000000000000 RCX: 0000000000000000 [ 625.419522][ C1] RDX: ffff88807d325d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.427491][ C1] RBP: ffffc90002f1fc60 R08: ffff88801e6d5520 R09: ffff8880231e5028 [ 625.435456][ C1] R10: ffff88801e6d5520 R11: ffffffff826fe6c0 R12: ffff8880231e5028 [ 625.443508][ C1] R13: ffffc90002f1fc60 R14: 0000000000000500 R15: 1ffff920005e3f93 [ 625.451569][ C1] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 625.457413][ C1] ? try_to_unlazy+0xdd/0xc50 [ 625.462090][ C1] ? try_to_unlazy+0xdd/0xc50 [ 625.466851][ C1] ? inode_permission+0x479/0x5f0 [ 625.471871][ C1] link_path_walk+0xadc/0x18d0 [ 625.476645][ C1] path_lookupat+0xe4/0x8c0 [ 625.481170][ C1] filename_lookup+0x256/0x5d0 [ 625.485964][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 625.491267][ C1] ? strncpy_from_user+0x150/0x2b0 [ 625.496478][ C1] ? do_getname+0x151/0x250 [ 625.500977][ C1] do_readlinkat+0xe3/0x510 [ 625.505477][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 625.510593][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.516651][ C1] __x64_sys_readlink+0x7f/0x90 [ 625.521500][ C1] do_syscall_64+0x174/0x580 [ 625.526088][ C1] ? clear_bhb_loop+0x40/0x90 [ 625.530760][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.536639][ C1] RIP: 0033:0x7f9e975153a7 [ 625.541039][ C1] RSP: 002b:00007ffd050c6ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 625.549441][ C1] RAX: ffffffffffffffda RBX: 00007ffd050c73c0 RCX: 00007f9e975153a7 [ 625.557402][ C1] RDX: 0000000000000400 RSI: 00007ffd050c6ef0 RDI: 00007ffd050c73c0 [ 625.565362][ C1] RBP: 00007ffd050c6ef0 R08: 0000561fc7119820 R09: 0000000000000002 [ 625.573321][ C1] R10: 0000561fc70fe010 R11: 0000000000000246 R12: 0000000000000400 [ 625.581280][ C1] R13: 0000561fc37fa100 R14: 0000000000000000 R15: 00007ffd050c7ec0 [ 625.589256][ C1] [ 625.592270][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g104997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 625.603534][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 625.613500][ C1] rcu: RCU grace-period kthread stack dump: [ 625.619371][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 625.632843][ C1] Call Trace: [ 625.636115][ C1] [ 625.639036][ C1] __schedule+0x1821/0x5740 [ 625.643539][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 625.648492][ C1] ? __pfx___schedule+0x10/0x10 [ 625.653348][ C1] ? schedule+0x90/0x360 [ 625.657581][ C1] schedule+0x164/0x360 [ 625.661728][ C1] schedule_timeout+0x158/0x2c0 [ 625.666574][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 625.671942][ C1] ? __pfx_process_timeout+0x10/0x10 [ 625.677255][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 625.683055][ C1] ? prepare_to_swait_event+0x340/0x370 [ 625.688685][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 625.693530][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 625.698718][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 625.703482][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 625.708755][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 625.714082][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.719887][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 625.724475][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 625.729661][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.735492][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 625.740448][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 625.745484][ C1] kthread+0x389/0x470 [ 625.749547][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 625.754735][ C1] ? __pfx_kthread+0x10/0x10 [ 625.759315][ C1] ret_from_fork+0x514/0xb70 [ 625.763927][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 625.769030][ C1] ? __switch_to+0xc79/0x1410 [ 625.773712][ C1] ? __pfx_kthread+0x10/0x10 [ 625.778293][ C1] ret_from_fork_asm+0x1a/0x30 [ 625.783094][ C1] [ 625.786103][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 625.792418][ C1] CPU: 1 UID: 0 PID: 14243 Comm: syz.0.2578 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.803340][ C1] Tainted: [L]=SOFTLOCKUP [ 625.807647][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.817691][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 625.824379][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 aa 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 55 03 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 3a 03 0c [ 625.843982][ C1] RSP: 0018:ffffc9000327f100 EFLAGS: 00000246 [ 625.850043][ C1] RAX: ffffffff81b9b466 RBX: ffff8880b873c388 RCX: 0000000000080000 [ 625.858006][ C1] RDX: ffffc9000e4cb000 RSI: 000000000007ffff RDI: 0000000000080000 [ 625.865972][ C1] RBP: ffffc9000327f230 R08: ffffffff903037f7 R09: 1ffffffff20606fe [ 625.873939][ C1] R10: dffffc0000000000 R11: fffffbfff20606ff R12: 1ffff110170c85d1 [ 625.881906][ C1] R13: dffffc0000000000 R14: ffff8880b8642e88 R15: 0000000000000000 [ 625.889888][ C1] FS: 00007f4c8c9f66c0(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 625.898810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.905385][ C1] CR2: 0000200000269030 CR3: 00000000ad4b6000 CR4: 00000000003526f0 [ 625.913350][ C1] Call Trace: [ 625.916622][ C1] [ 625.919548][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 625.924482][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 625.929690][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 625.935063][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 625.941383][ C1] ? rcu_is_watching+0x15/0xb0 [ 625.946141][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 625.951512][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 625.956707][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 625.961817][ C1] flush_tlb_mm_range+0x5c3/0x10b0 [ 625.966932][ C1] ? page_table_check_clear+0x124/0x4f0 [ 625.972510][ C1] ? page_table_check_clear+0x48d/0x4f0 [ 625.978055][ C1] ptep_clear_flush+0x120/0x170 [ 625.982928][ C1] do_wp_page+0x3da7/0x4cc0 [ 625.987431][ C1] ? do_wp_page+0x37b4/0x4cc0 [ 625.992113][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 625.996953][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.001975][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 626.007348][ C1] handle_mm_fault+0x1698/0x3170 [ 626.012304][ C1] ? handle_mm_fault+0xf1/0x3170 [ 626.017240][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 626.022532][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 626.027814][ C1] do_user_addr_fault+0x75b/0x1340 [ 626.032929][ C1] exc_page_fault+0x6a/0xc0 [ 626.037428][ C1] asm_exc_page_fault+0x26/0x30 [ 626.042279][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 626.047997][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 84 03 00 90 90 90 90 90 90 90 90 90 90 [ 626.067684][ C1] RSP: 0018:ffffc9000327f8b8 EFLAGS: 00050202 [ 626.073762][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000269030 [ 626.081726][ C1] RDX: ffff8880299d1f00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 626.089690][ C1] RBP: ffffc9000327fa30 R08: ffffc9000327f687 R09: 1ffff9200064fed0 [ 626.097653][ C1] R10: dffffc0000000000 R11: fffff5200064fed1 R12: 1ffff9200064ff24 [ 626.105618][ C1] R13: 0000000000000002 R14: 0000200000269000 R15: dffffc0000000000 [ 626.113597][ C1] ____sys_recvmsg+0x2be/0x4a0 [ 626.118478][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 626.123767][ C1] ? import_iovec+0x73/0xa0 [ 626.128271][ C1] ___sys_recvmsg+0x215/0x590 [ 626.133122][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 626.138424][ C1] do_recvmmsg+0x334/0x800 [ 626.142838][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.147856][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 626.152805][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 626.157854][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 626.163483][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.169543][ C1] do_syscall_64+0x174/0x580 [ 626.174131][ C1] ? trace_irq_disable+0x3b/0x140 [ 626.179151][ C1] ? clear_bhb_loop+0x40/0x90 [ 626.183827][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.189707][ C1] RIP: 0033:0x7f4c8bb9ce59 [ 626.194114][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.213710][ C1] RSP: 002b:00007f4c8c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.222114][ C1] RAX: ffffffffffffffda RBX: 00007f4c8be16090 RCX: 00007f4c8bb9ce59 [ 626.230072][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 626.238032][ C1] RBP: 00007f4c8bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 626.245994][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 626.253956][ C1] R13: 00007f4c8be16128 R14: 00007f4c8be16090 R15: 00007f4c8bf3fa48 [ 626.261925][ C1]