last executing test programs: 14m34.78446452s ago: executing program 32 (id=1529): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) 12m35.248321196s ago: executing program 33 (id=2637): io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, 0xffffffffffffffff, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb06117", 0x8f, 0x8}]) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 11m28.371596283s ago: executing program 34 (id=3276): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x240}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x11}) 10m44.520679761s ago: executing program 35 (id=3602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x8000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x40, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 10m43.958233214s ago: executing program 36 (id=3606): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) close(r0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 9m53.345667911s ago: executing program 37 (id=4015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) 9m45.156786247s ago: executing program 38 (id=4055): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r0, 0x402, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r1, 0x402, 0x80000003) unshare(0x2a020480) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r2, 0x402, 0x9) 9m7.115407176s ago: executing program 39 (id=4310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc883, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m50.827726614s ago: executing program 40 (id=4403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8m28.664957351s ago: executing program 41 (id=4566): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000694000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m53.033800087s ago: executing program 0 (id=4826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d736b2"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000440)=[@dead_binder_done={0x40086310, 0xfc}], 0x0, 0x0, 0x0}) 7m52.856369844s ago: executing program 0 (id=4827): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x100}}], 0x2, 0x9200000000000000) 7m52.189598078s ago: executing program 0 (id=4833): syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x40010023, 0x0, 0x0) 7m52.068930205s ago: executing program 0 (id=4835): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 7m51.773894348s ago: executing program 0 (id=4837): personality(0x500006) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e25, 0x8, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1c, 0x0, 0x0, 0x2c}, 0x44004) 7m51.369713648s ago: executing program 4 (id=4840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x406026) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m50.653133782s ago: executing program 4 (id=4844): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0xd56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x2, {0x20000008, 0xffffffff, 0x0, {0x5, 0x80000, 0x1, 0x80000001, 0x0, 0x700000000000000, 0x2, 0x35741061, 0x1a, 0x8000, 0x9ea, 0x0, 0xee01, 0x41, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x8040000006, {0x10000, 0x0, 0x0, {0x4, 0x7fffffffffffffff, 0x1, 0xfff, 0x8, 0x9, 0x3aa, 0xffffffec, 0x81, 0xc000, 0x2000005, 0xee00, 0x0, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7m50.242924079s ago: executing program 4 (id=4849): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(r0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m49.918053468s ago: executing program 4 (id=4851): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 7m49.917932787s ago: executing program 0 (id=4852): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/131, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 7m49.314252165s ago: executing program 42 (id=4852): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/131, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 7m49.295069453s ago: executing program 4 (id=4856): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000001c0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r2, 0x0}]) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendfile(r0, r0, 0x0, 0x200000) 7m48.598230407s ago: executing program 4 (id=4859): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x8d3, @ipv4={'\x00', '\xff\xff', @local}, 0x107da6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7m47.762331363s ago: executing program 43 (id=4859): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x8d3, @ipv4={'\x00', '\xff\xff', @local}, 0x107da6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4m29.583507685s ago: executing program 9 (id=6248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4m29.274049528s ago: executing program 9 (id=6251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="2e660f32260faefa260f01cb66b9800000c00f326635001000000f30b805008ed0660f3a1797fdd2a30f793cb800008ee8f6c304b80f008ed8", 0x39}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m28.376655116s ago: executing program 9 (id=6256): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4f, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x40, 0x20ffff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="2e0f01c566b80a000f00d865f4c4c3056f61000cf30f09660f38815d9bdfd90fc79d00780000b8507800000f23c80f21f8350000a0000f23f826f7f7", 0x3c}], 0x1, 0x2d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m28.02321416s ago: executing program 9 (id=6260): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m27.044417191s ago: executing program 9 (id=6269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x40, 0x82, 0x9, 0x0, 0x0, 0x7, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7, 0xfffffffffffffffe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m26.764339408s ago: executing program 9 (id=6273): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)='j', 0x1}], 0x1}}], 0x1, 0x20044182) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x1, [0x1ff]}, 0xa) 4m26.378289815s ago: executing program 44 (id=6273): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)='j', 0x1}], 0x1}}], 0x1, 0x20044182) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x1, [0x1ff]}, 0xa) 3m34.210272019s ago: executing program 1 (id=6530): unshare(0x22020400) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1}, 0x4010) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m33.875534994s ago: executing program 1 (id=6534): preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1, 0xa3, 0x7400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="b805000000b9070000000f01c1460f01bd06000000a70f20c035080000000f22c0b9800000c00f3235000100000f300fc79fea810000c4c2f59cd9c483057d7b001566b82b018ec0470f23e6", 0x4c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x83, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x9}]}}) 3m33.26330391s ago: executing program 1 (id=6537): openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 3m32.877526225s ago: executing program 1 (id=6540): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m31.774453928s ago: executing program 1 (id=6547): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1d, 0x80802, 0x6) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 3m31.268274172s ago: executing program 1 (id=6551): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x0, 0x1, 0x411001f7}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m30.182767001s ago: executing program 45 (id=6551): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x0, 0x1, 0x411001f7}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m57.152491043s ago: executing program 3 (id=6710): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001000030000000300000018000180040002"], 0x2c}}, 0x4000880) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4103fd03db8a1a2869d3070000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 2m56.818882895s ago: executing program 3 (id=6713): unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m56.537137154s ago: executing program 3 (id=6715): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000001900)=""/76, 0x4c) 2m56.219456732s ago: executing program 3 (id=6718): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 2m56.031621787s ago: executing program 3 (id=6720): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r6], 0x28}}, 0x0) 2m55.704485359s ago: executing program 3 (id=6724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m55.066149107s ago: executing program 46 (id=6724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.265067729s ago: executing program 6 (id=7569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x7, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0x30}, {0xe, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48098}, 0x0) 9.019674211s ago: executing program 6 (id=7571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0xfffffffffffffffe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 8.906104919s ago: executing program 6 (id=7572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x284041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472"}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x24040001) 7.861463626s ago: executing program 6 (id=7579): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 6.515894734s ago: executing program 6 (id=7587): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(0xffffffffffffffff, 0x0, 0x22) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000600)={0xfffc, 0x9, 0x6, 0x800}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='W', 0x1, 0x200000d4, &(0x7f0000000280)={0xa, 0x4e24, 0x20004, @private2}, 0x1c) 5.876917594s ago: executing program 2 (id=7594): syz_emit_ethernet(0x4e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x3}, 0x0, 0x0) 4.722053228s ago: executing program 7 (id=7596): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @sint={0x101, 0xf}}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x4, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x5, 0x6, 0x9}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{0x587, 0x0, 0x5}, {0x87d, 0x0, 0x5}, {0x231, 0x0, 0xf129000000}, {0xadb, 0x0, 0x3363}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.351095261s ago: executing program 2 (id=7597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) io_uring_setup(0x63b7, &(0x7f0000000140)={0x0, 0xf999, 0x8, 0x1, 0x198}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x5) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="c463f5cedfb2660f388125fa79000066ba4100ec0f01c9f2a766470f2244c744240089000000c744240200500000ff2c24c461d95f52a1c4a33d5ee805f2450f1ec0", 0x42}], 0x1, 0x2c, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.216231834s ago: executing program 7 (id=7599): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.142701783s ago: executing program 5 (id=7600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/228, &(0x7f0000000040)=0xe4) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.929374384s ago: executing program 5 (id=7601): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) 2.664527887s ago: executing program 7 (id=7606): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x24800) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x40, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @const={0x0, {0x0, 0x400}}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 2.52557505s ago: executing program 2 (id=7607): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.415178569s ago: executing program 5 (id=7608): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000060000000008001e0001000000ad73e7d6c17520a693730e60e288ad"], 0x24}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.182467084s ago: executing program 5 (id=7609): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.082762674s ago: executing program 2 (id=7610): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.001501187s ago: executing program 8 (id=7611): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2c040054) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.916755421s ago: executing program 7 (id=7612): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 1.529374342s ago: executing program 5 (id=7613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/125, 0x7d}], 0x1}, 0x100) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 1.07236403s ago: executing program 8 (id=7614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/4096, 0x1000}], 0x4}, 0xd}], 0x1, 0x10022, 0x0) 924.869242ms ago: executing program 2 (id=7615): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1000, &(0x7f000097e000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 923.878054ms ago: executing program 7 (id=7616): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x7, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xf000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x111, 0x0, 0xf801, 0xdddd0000, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 777.646039ms ago: executing program 7 (id=7617): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000005c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x412402, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 558.851073ms ago: executing program 8 (id=7618): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/108, 0x6c, 0x0, 0x1, 0x2}}, 0x48) 485.373549ms ago: executing program 5 (id=7619): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) poll(&(0x7f0000000040)=[{r1, 0xa002}], 0x1, 0xd37) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r1, 0x80) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0xa, "00f2ff1701049b14c8d423dbb3ce00"}) dup3(r3, r1, 0x80000) read(r1, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 406.975017ms ago: executing program 8 (id=7620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xc, 0x9, 0x3d3b, 0x200, 0xb6, 0x400, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 287.601701ms ago: executing program 6 (id=7621): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ftruncate(r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000447000/0x1000)=nil}) 256.176781ms ago: executing program 8 (id=7622): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x22880}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x9, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x31}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x6, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0xa000, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x5}, {0x0, 0xdddd0000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0x0, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 136.842213ms ago: executing program 2 (id=7623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}}, 0x24}}, 0x0) 0s ago: executing program 8 (id=7624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0xae, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.3.6703'. [ 935.630606][T26596] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6703'. [ 935.691022][ T5936] hub 9-1:4.0: activate --> -90 [ 936.108285][ T5902] usb 9-1: USB disconnect, device number 38 [ 936.331072][ T5936] usb 9-1-port2: config error [ 937.668248][T26607] syz.3.6706 (26607): drop_caches: 2 [ 937.989351][T26630] netlink: 'syz.3.6710': attribute type 2 has an invalid length. [ 938.085763][T26637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 938.661103][ T5902] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 938.831091][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 938.862308][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 938.915898][ T5902] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 938.931325][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 938.952126][ T5902] usb 6-1: Product: syz [ 938.961470][ T5902] usb 6-1: Manufacturer: syz [ 938.966120][ T5902] usb 6-1: SerialNumber: syz [ 939.021687][ T5902] usb 6-1: config 0 descriptor?? [ 939.029047][T26645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.062722][ T5902] hub 6-1:0.0: bad descriptor, ignoring hub [ 939.068708][ T5902] hub 6-1:0.0: probe with driver hub failed with error -5 [ 940.432952][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 940.446585][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 940.459020][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 940.467709][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 940.477587][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 940.601821][ T6690] bond1 (unregistering): (slave gretap1): Releasing active interface [ 940.826085][ T6690] bond0 (unregistering): Released all slaves [ 940.838863][ T6690] bond1 (unregistering): Released all slaves [ 940.853917][ T6690] bond2 (unregistering): Released all slaves [ 941.060993][ T5936] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 941.130706][T26720] binder: 26719:26720 ioctl c0306201 200000000680 returned -14 [ 941.261883][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.303441][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 941.348281][ T5936] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 941.370360][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.428098][ T5936] usb 7-1: config 0 descriptor?? [ 941.445854][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 941.457376][ T5936] dvb-usb: bulk message failed: -22 (3/0) [ 941.486130][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 941.536394][ T6690] hsr_slave_0: left promiscuous mode [ 941.542876][ T6690] hsr_slave_1: left promiscuous mode [ 941.543171][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 941.559612][ T5936] usb 7-1: media controller created [ 941.566865][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.575409][ T5902] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 941.618798][ T5936] dvb-usb: bulk message failed: -22 (6/0) [ 941.631732][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 941.654859][T26713] dvb-usb: bulk message failed: -22 (2/0) [ 941.663048][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input143 [ 941.723688][ T5936] dvb-usb: schedule remote query interval to 150 msecs. [ 941.748174][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 941.758184][ T5902] usb 9-1: Using ep0 maxpacket: 8 [ 941.789056][ T5902] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 941.821577][ T5936] usb 7-1: USB disconnect, device number 44 [ 941.831842][ T5902] usb 9-1: config 0 has no interface number 0 [ 941.838016][ T5902] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 941.851312][ T5902] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 941.912454][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 941.932853][ T5902] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.957386][ T5902] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 941.974687][ T5902] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 942.005066][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.033397][ T5902] usb 9-1: config 0 descriptor?? [ 942.067146][ T5902] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 942.296444][T26705] chnl_net:caif_netlink_parms(): no params data found [ 942.344611][ T5902] usb 9-1: USB disconnect, device number 39 [ 942.541101][ T5825] Bluetooth: hci4: command tx timeout [ 942.655395][T26705] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.672009][T26705] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.690014][T26705] bridge_slave_0: entered allmulticast mode [ 942.702293][T26705] bridge_slave_0: entered promiscuous mode [ 942.725746][T26705] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.733486][T26705] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.745362][T26705] bridge_slave_1: entered allmulticast mode [ 942.787438][T26705] bridge_slave_1: entered promiscuous mode [ 942.959678][T26705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.003257][ T6690] IPVS: stop unused estimator thread 0... [ 943.013873][T26705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.191533][T26705] team0: Port device team_slave_0 added [ 943.209578][T26705] team0: Port device team_slave_1 added [ 943.366086][T26705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.393448][T26705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.434867][T26705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.478890][ T5873] usb 6-1: USB disconnect, device number 23 [ 943.485183][ T5902] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 943.496919][T26705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.507440][T26705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.575266][T26705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.839110][T26705] hsr_slave_0: entered promiscuous mode [ 943.881906][T26705] hsr_slave_1: entered promiscuous mode [ 943.899172][T26705] debugfs: 'hsr0' already exists in 'hsr' [ 943.917853][T26705] Cannot create hsr debugfs directory [ 943.991055][T26418] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 944.089578][T26774] syz.6.6748 (26774): drop_caches: 2 [ 944.141314][T26418] usb 9-1: Using ep0 maxpacket: 16 [ 944.154167][T26418] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.177711][T26418] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 944.200993][T26418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.224319][T26418] usb 9-1: Product: syz [ 944.262163][T26418] usb 9-1: Manufacturer: syz [ 944.266836][T26418] usb 9-1: SerialNumber: syz [ 944.314351][T26418] usb 9-1: config 0 descriptor?? [ 944.323389][T26418] asix 9-1:0.0: probe with driver asix failed with error -22 [ 944.513689][ T5916] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 944.621155][ T5825] Bluetooth: hci4: command tx timeout [ 944.684361][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.697357][T26418] usb 9-1: USB disconnect, device number 40 [ 944.728099][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.755960][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.775209][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.795581][ T5916] usb 6-1: Product: syz [ 944.800000][ T5916] usb 6-1: Manufacturer: syz [ 944.816023][ T5916] usb 6-1: SerialNumber: syz [ 945.056520][ T5916] usb 6-1: 0:2 : does not exist [ 945.085879][ T5916] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 945.200706][ T5916] usb 6-1: USB disconnect, device number 24 [ 945.397469][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.558879][T26705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 945.571231][T26705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 945.583259][T26705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 945.613827][T26705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 945.789529][T26705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.858152][T26705] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.887046][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.894321][ T6690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.914189][T26831] loop2: detected capacity change from 0 to 7 [ 945.925559][T26831] loop2: [POWERTEC] p1 p2 p3 [ 945.930742][T26831] loop2: p1 start 1819279361 is beyond EOD, truncated [ 945.939431][T26831] loop2: p2 start 144 is beyond EOD, truncated [ 945.952858][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.960150][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.970360][T26831] loop2: p3 start 262144 is beyond EOD, truncated [ 946.255534][T26705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.557384][T26705] veth0_vlan: entered promiscuous mode [ 946.704111][ T5825] Bluetooth: hci4: command tx timeout [ 946.837718][T26705] veth1_vlan: entered promiscuous mode [ 947.268730][T26705] veth0_macvtap: entered promiscuous mode [ 947.548386][T26705] veth1_macvtap: entered promiscuous mode [ 947.860792][T26705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.861145][ T5902] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 947.906386][T26705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.978232][T15577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.031128][T26418] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 948.060309][T15577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.081890][ T5902] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 948.100590][T15577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.120802][ T5902] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 948.151073][ T5902] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 948.188278][T15577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.200960][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 948.222159][T26418] usb 7-1: Using ep0 maxpacket: 32 [ 948.256776][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 948.263886][T26418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 948.330206][ T5902] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 948.335148][T26418] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 948.364993][T26875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.400974][T26418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 948.413174][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 948.424437][T26418] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 948.429885][T15577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.441158][T26418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.459678][T26418] usb 7-1: Product: syz [ 948.474056][ T5902] usb 6-1: Product: syz [ 948.488507][T26418] usb 7-1: Manufacturer: syz [ 948.488985][T15577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.501315][T26418] usb 7-1: SerialNumber: syz [ 948.511018][ T5902] usb 6-1: Manufacturer: syz [ 948.565492][ T5902] cdc_wdm 6-1:1.0: skipping garbage [ 948.567962][T26418] usb 7-1: config 0 descriptor?? [ 948.570767][ T5902] cdc_wdm 6-1:1.0: skipping garbage [ 948.611800][ T5902] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 948.645041][ T5902] cdc_wdm 6-1:1.0: Unknown control protocol [ 948.661772][T26418] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input144 [ 948.704939][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.765283][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.784153][ T5825] Bluetooth: hci4: command tx timeout [ 949.065069][ T5916] usb 7-1: USB disconnect, device number 45 [ 949.065181][ C0] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 949.079287][ C0] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 949.171820][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 949.178754][ C1] wdm_int_callback: 8 callbacks suppressed [ 949.178781][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.191502][ C1] wdm_int_callback: 8 callbacks suppressed [ 949.191522][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.204395][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.211043][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.217628][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.224246][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.230585][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.237304][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.243866][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.250502][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.256846][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.263485][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.270097][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.276828][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.283223][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.289952][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.297428][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.304082][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.311257][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 949.317948][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 949.333568][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 949.342394][ T5873] usb 6-1: USB disconnect, device number 25 [ 949.401196][ T5902] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 949.561195][ T5902] usb 8-1: Using ep0 maxpacket: 8 [ 949.590104][ T5902] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 949.600628][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.609316][ T5902] usb 8-1: Product: syz [ 949.613796][ T5902] usb 8-1: Manufacturer: syz [ 949.618428][ T5902] usb 8-1: SerialNumber: syz [ 949.632194][T26419] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 949.643374][ T5902] usb 8-1: config 0 descriptor?? [ 949.801490][T26419] usb 3-1: Using ep0 maxpacket: 16 [ 949.834634][T26419] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 949.859081][T26419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.878128][T26419] usb 3-1: Product: syz [ 949.882437][T26419] usb 3-1: Manufacturer: syz [ 949.884082][ T5902] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 949.887191][T26419] usb 3-1: SerialNumber: syz [ 949.926691][T26419] usb 3-1: config 0 descriptor?? [ 950.371270][T26419] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 950.409332][T26419] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 950.438347][T26419] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 950.461312][T26419] usb 3-1: media controller created [ 950.497153][T26419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 950.583635][T26927] tipc: Failed to remove unknown binding: 66,0,0/4:4005511915/4005511916 [ 950.614227][T26927] tipc: Failed to remove unknown binding: 66,0,0/4:4005511915/4005511916 [ 950.757577][ T5902] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 950.794258][ T5902] usb 8-1: USB disconnect, device number 36 [ 951.092841][T26419] zl10353_read_register: readreg error (reg=127, ret==0) [ 951.100077][T26419] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 951.127638][T26944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6783'. [ 951.153235][T26419] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 951.182412][T26419] usb 3-1: USB disconnect, device number 50 [ 951.289223][T26419] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 951.415548][ T5902] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 951.608817][ T5902] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 951.631985][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.640376][ T5902] usb 9-1: Product: syz [ 951.651558][ T5902] usb 9-1: Manufacturer: syz [ 951.665528][ T5902] usb 9-1: SerialNumber: syz [ 952.097367][ T5902] net_ratelimit: 30 callbacks suppressed [ 952.097395][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 952.387525][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 952.582141][T26981] netlink: 'syz.2.6793': attribute type 1 has an invalid length. [ 952.663442][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6794'. [ 953.151217][T26410] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 953.334395][T26410] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 953.369183][T26410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 953.405703][T26410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 953.427655][T26410] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 953.480051][T26410] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 953.498645][T26410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.541269][T26410] usb 8-1: config 0 descriptor?? [ 953.675518][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 953.729623][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 953.785357][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 953.831433][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 953.884301][ T5902] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 953.916399][ T5902] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 953.993743][T27017] netlink: 'syz.2.6802': attribute type 1 has an invalid length. [ 954.007579][ T5902] usb 9-1: USB disconnect, device number 41 [ 954.119220][T26410] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 954.169474][T27019] vlan2: entered allmulticast mode [ 954.181113][T27019] batadv0: entered allmulticast mode [ 954.256344][T27017] batman_adv: batadv0: Adding interface: geneve2 [ 954.300102][T27017] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 954.751043][ T5893] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 954.753520][T27027] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.765991][T27027] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.964258][ T5893] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.045882][ T5893] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.106604][ T5893] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 955.121012][T27027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.162266][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 955.208737][ T5893] usb 9-1: SerialNumber: syz [ 955.371372][ T5936] usb 8-1: USB disconnect, device number 37 [ 955.530625][ T5893] usb 9-1: 0:2 : does not exist [ 955.748333][ T5893] usb 9-1: USB disconnect, device number 42 [ 955.791408][ T6690] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.844161][ T6690] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.862718][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.909150][ T6690] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.961147][ T6690] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.672517][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6810'. [ 956.742416][T27060] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.799597][T27060] bridge_slave_1 (unregistering): left allmulticast mode [ 956.807040][T27060] bridge_slave_1 (unregistering): left promiscuous mode [ 956.815662][T27060] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.164389][T27069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6813'. [ 957.212992][T27069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6813'. [ 958.548560][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6817'. [ 958.706168][ T6692] bond0: (slave bond_slave_0): interface is now down [ 958.718153][T27093] bond0: option arp_validate: invalid value (55553) [ 958.736473][ T6692] bond0: (slave bond_slave_1): interface is now down [ 958.791350][T27093] IPv6: sit2: Disabled Multicast RS [ 958.804200][ T6692] bond0: (slave bond_slave_0): interface is now down [ 958.850329][ T6692] bond0: (slave bond_slave_1): interface is now down [ 958.929098][ T6692] bond0: now running without any active interface! [ 959.192449][T27105] netlink: 16158 bytes leftover after parsing attributes in process `syz.7.6822'. [ 959.632996][T27122] bond0: (slave dummy0): Releasing backup interface [ 959.666804][T27122] bridge_slave_0: left allmulticast mode [ 959.716293][T27122] bridge_slave_0: left promiscuous mode [ 959.755259][T27122] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.828235][T27122] bridge_slave_1: left allmulticast mode [ 959.874226][T27122] bridge_slave_1: left promiscuous mode [ 959.927207][T27122] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.016547][T27122] bond0: (slave bond_slave_0): Releasing backup interface [ 960.053145][T27134] xt_hashlimit: size too large, truncated to 1048576 [ 960.076799][T27122] bond0: (slave bond_slave_1): Releasing backup interface [ 960.127730][T27122] team0: Port device team_slave_0 removed [ 960.174240][T27122] team0: Port device team_slave_1 removed [ 960.199189][T27122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.242120][T27122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 961.163312][T27157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6834'. [ 961.863229][T27181] netlink: 'syz.8.6842': attribute type 11 has an invalid length. [ 961.961331][ T5902] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 962.133365][ T5902] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 962.158379][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 962.189669][ T5902] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 962.201264][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.219081][ T5902] usb 6-1: Product: syz [ 962.231348][ T5902] usb 6-1: Manufacturer: syz [ 962.245239][ T5902] usb 6-1: SerialNumber: syz [ 962.270237][ T5902] usb 6-1: config 0 descriptor?? [ 962.338541][ T5902] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 962.675838][T27199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 963.607724][T27221] tipc: Failed to remove unknown binding: 66,0,0/0:4168509762/4168509763 [ 963.653208][T27221] tipc: Failed to remove unknown binding: 66,0,0/0:4168509762/4168509763 [ 964.017143][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 964.017166][ T29] audit: type=1326 audit(1775299878.783:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27226 comm="syz.8.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670639c819 code=0x7fc00000 [ 964.117729][ T29] audit: type=1326 audit(1775299878.783:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27226 comm="syz.8.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f670639c819 code=0x7fc00000 [ 964.498206][ T5902] usb 6-1: USB disconnect, device number 26 [ 964.648356][ T29] audit: type=1326 audit(1775299879.393:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27237 comm="syz.6.6856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x0 [ 965.266913][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6860'. [ 965.301446][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6860'. [ 965.345755][T27257] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6860'. [ 965.821088][ T5893] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 966.021922][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 966.077191][ T5893] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 966.132829][ T5893] usb 7-1: config 0 has no interface number 0 [ 966.186765][ T5893] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 966.208991][ T5893] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 966.252548][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.300660][ T5893] usb 7-1: Product: syz [ 966.318806][ T5893] usb 7-1: Manufacturer: syz [ 966.324809][ T5893] usb 7-1: SerialNumber: syz [ 966.379879][ T5893] usb 7-1: config 0 descriptor?? [ 966.428130][T27265] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 966.716609][T27265] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 966.973545][T27288] picdev_read: 77 callbacks suppressed [ 966.973567][T27288] kvm: pic: non byte read [ 967.028356][T27288] kvm: pic: non byte write [ 967.045750][T27288] kvm: pic: non byte read [ 967.070776][T27288] kvm: pic: non byte write [ 967.109457][T27288] kvm: pic: non byte read [ 967.137373][T27288] kvm: pic: non byte write [ 967.166830][T27288] kvm: pic: non byte read [ 967.185708][T27288] kvm: pic: single mode not supported [ 967.185818][T27288] kvm: pic: non byte write [ 967.400201][T27296] kvm: Disabled LAPIC found during irq injection [ 968.622700][ T5893] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 968.682810][ T5893] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 968.720454][ T5893] asix 7-1:0.188: probe with driver asix failed with error -71 [ 968.773918][ T5893] usb 7-1: USB disconnect, device number 46 [ 969.441417][ T796] usb 9-1: new low-speed USB device number 43 using dummy_hcd [ 969.561273][T26410] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 969.632465][ T796] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 969.640794][ T796] usb 9-1: config 0 has no interface number 0 [ 969.691197][ T796] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 969.714190][ T796] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 969.729012][ T796] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 969.742184][ T796] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 969.755374][T26410] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 969.764357][ T796] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 969.764734][T26410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.795122][ T796] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 969.798686][T26410] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 969.839888][ T796] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 969.851108][T26410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.860191][ T796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.884698][T26410] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 969.901343][T26410] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 969.909484][T26410] usb 3-1: Product: syz [ 969.912384][ T796] usb 9-1: config 0 descriptor?? [ 969.934900][T26410] usb 3-1: Manufacturer: syz [ 969.938373][T27359] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 969.956191][T27359] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 969.980440][T26410] cdc_wdm 3-1:1.0: skipping garbage [ 970.001238][T26410] cdc_wdm 3-1:1.0: skipping garbage [ 970.006736][ T796] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 970.022857][T26410] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 970.039919][T26410] cdc_wdm 3-1:1.0: Unknown control protocol [ 970.398005][ T796] usb 9-1: USB disconnect, device number 43 [ 970.433287][ T796] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 970.850692][T26418] usb 3-1: USB disconnect, device number 51 [ 971.196767][T27417] netlink: 276 bytes leftover after parsing attributes in process `syz.5.6901'. [ 971.360102][T27428] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6903'. [ 972.680974][T26419] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 972.880923][T26419] usb 8-1: Using ep0 maxpacket: 8 [ 972.893652][T26419] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 972.903207][T26419] usb 8-1: config 0 has no interface number 0 [ 972.909455][T26419] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.922751][T26419] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 972.935922][T26419] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 972.970918][T26419] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 972.995699][T26419] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 973.018793][T26419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.031781][T26419] usb 8-1: config 0 descriptor?? [ 973.055408][T26419] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 973.070984][T15913] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 973.295543][T15913] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 973.313697][T15913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.333918][T15913] usb 6-1: config 0 has no interface number 0 [ 973.341180][T15913] usb 6-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 973.355285][T15913] usb 6-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.367544][T26410] usb 8-1: USB disconnect, device number 38 [ 973.368478][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 973.388287][T15913] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 973.410392][T15913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.413277][T26410] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 973.447356][T15913] usb 6-1: Product: syz [ 973.452267][T15913] usb 6-1: Manufacturer: syz [ 973.474078][T15913] usb 6-1: SerialNumber: syz [ 973.501895][T15913] usb 6-1: config 0 descriptor?? [ 973.527959][T27461] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 973.568925][T15913] hdpvr 6-1:0.33: Could not find bulk-in endpoint [ 973.597036][T15913] hdpvr 6-1:0.33: probe with driver hdpvr failed with error -12 [ 973.748462][T27471] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 973.903658][T27461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 974.069632][T26410] usb 6-1: USB disconnect, device number 27 [ 974.239911][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6920'. [ 976.474694][T27535] loop7: detected capacity change from 0 to 16384 [ 976.860843][T27540] loop7: detected capacity change from 16384 to 0 [ 976.861249][ C1] blk_print_req_error: 13 callbacks suppressed [ 976.861266][ C1] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 976.897697][ C1] I/O error, dev loop7, sector 13296 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 978.521025][T26419] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 978.693679][T26419] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.720221][T26419] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 978.759692][T26419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.794262][T26419] usb 6-1: config 0 descriptor?? [ 978.828106][T26419] pwc: Askey VC010 type 2 USB webcam detected. [ 979.244812][T26419] pwc: recv_control_msg error -32 req 02 val 2b00 [ 979.297755][T26419] pwc: recv_control_msg error -32 req 02 val 2700 [ 979.351155][T26419] pwc: recv_control_msg error -32 req 02 val 2c00 [ 979.373754][T26419] pwc: recv_control_msg error -32 req 04 val 1000 [ 979.381633][T26419] pwc: recv_control_msg error -32 req 04 val 1300 [ 979.393525][T26419] pwc: recv_control_msg error -32 req 04 val 1400 [ 979.423415][T26419] pwc: recv_control_msg error -32 req 02 val 2000 [ 979.533841][ T42] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 979.639983][T26419] pwc: recv_control_msg error -71 req 04 val 1500 [ 979.656484][T26419] pwc: recv_control_msg error -71 req 02 val 2500 [ 979.684471][T26419] pwc: recv_control_msg error -71 req 02 val 2400 [ 979.696123][T26419] pwc: recv_control_msg error -71 req 02 val 2600 [ 979.704892][T26419] pwc: recv_control_msg error -71 req 02 val 2900 [ 979.713953][T26419] pwc: recv_control_msg error -71 req 02 val 2800 [ 979.731009][T26419] pwc: recv_control_msg error -71 req 04 val 1100 [ 979.741857][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 979.763398][ T42] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 979.777955][T26419] pwc: recv_control_msg error -71 req 04 val 1200 [ 979.790766][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.812264][ T42] usb 3-1: config 0 has no interface number 0 [ 979.825185][T26419] pwc: Registered as video103. [ 979.851063][ T42] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 979.898391][T26419] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input146 [ 979.907450][ T42] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 979.959827][ T42] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 979.982080][T26419] usb 6-1: USB disconnect, device number 28 [ 980.021600][ T42] usb 3-1: Product: syz [ 980.044176][ T42] usb 3-1: Manufacturer: syz [ 980.071918][ T42] usb 3-1: config 0 descriptor?? [ 980.154261][T15913] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 980.342012][T15913] usb 9-1: Using ep0 maxpacket: 32 [ 980.370542][ T42] usb 3-1: USB disconnect, device number 52 [ 980.394179][T15913] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 980.448247][ T29] audit: type=1326 audit(1775299895.213:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.448422][T15913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.522792][ T29] audit: type=1326 audit(1775299895.213:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.553454][T15913] usb 9-1: Product: syz [ 980.576326][T15913] usb 9-1: Manufacturer: syz [ 980.619862][T15913] usb 9-1: SerialNumber: syz [ 980.658519][ T29] audit: type=1326 audit(1775299895.283:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.690019][T15913] usb 9-1: config 0 descriptor?? [ 980.724156][T15913] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 980.756378][ T29] audit: type=1326 audit(1775299895.283:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.790108][ T29] audit: type=1326 audit(1775299895.283:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.852107][ T29] audit: type=1326 audit(1775299895.283:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.916163][ T29] audit: type=1326 audit(1775299895.283:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 980.987687][ T29] audit: type=1326 audit(1775299895.283:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 981.014470][ T29] audit: type=1326 audit(1775299895.293:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 981.041532][ T29] audit: type=1326 audit(1775299895.293:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27611 comm="syz.6.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3788d9c819 code=0x7ffc0000 [ 981.443074][T27628] netlink: 'syz.6.6962': attribute type 2 has an invalid length. [ 981.560988][T26409] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 981.721694][T26409] usb 3-1: Using ep0 maxpacket: 16 [ 981.751267][T26409] usb 3-1: config 6 has an invalid interface number: 152 but max is 3 [ 981.784516][T26409] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 981.811362][T26409] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 981.823293][T26409] usb 3-1: config 6 has no interface number 0 [ 981.829729][T26409] usb 3-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 981.866846][T26409] usb 3-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 981.910602][T26409] usb 3-1: config 6 interface 152 has no altsetting 0 [ 981.919575][T27641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 981.933176][T26409] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 981.970960][ T5886] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 981.983981][T26409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.005345][T26409] usb 3-1: Product: syz [ 982.009864][T26409] usb 3-1: Manufacturer: syz [ 982.016108][T26409] usb 3-1: SerialNumber: syz [ 982.154764][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.201589][ T5886] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 982.217798][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.227456][T27650] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 982.234036][T27650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 982.250004][ T5886] usb 7-1: config 0 descriptor?? [ 982.277384][T27656] binder: BINDER_SET_CONTEXT_MGR already set [ 982.280150][T26409] ushc 3-1:6.152: probe with driver ushc failed with error -71 [ 982.292916][T27650] vhci_hcd vhci_hcd.0: Device attached [ 982.308945][T27656] binder: 27654:27656 ioctl 4018620d 200000000040 returned -16 [ 982.329732][T27658] binder: 27654:27658 ioctl c0306201 2000000003c0 returned -14 [ 982.343612][T27653] vhci_hcd: connection closed [ 982.349418][ T1013] vhci_hcd vhci_hcd.7: stop threads [ 982.374801][ T1013] vhci_hcd vhci_hcd.7: release socket [ 982.381850][T26409] usb 3-1: USB disconnect, device number 53 [ 982.410991][ T1013] vhci_hcd vhci_hcd.7: disconnect device [ 982.538660][ T5886] usbhid 7-1:0.0: can't add hid device: -71 [ 982.561244][ T5886] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 982.583450][ T5886] usb 7-1: USB disconnect, device number 47 [ 982.717411][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6973'. [ 982.771918][T26409] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 982.793105][T15913] gspca_ov534_9: reg_r err -71 [ 982.947838][T26409] usb 3-1: Using ep0 maxpacket: 16 [ 982.986954][T26409] usb 3-1: config 6 has an invalid interface number: 152 but max is 3 [ 983.019781][T26409] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 983.043606][T26409] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 983.067931][ T5886] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 983.082089][T26409] usb 3-1: config 6 has no interface number 0 [ 983.084411][T15913] gspca_ov534_9: Unknown sensor 0000 [ 983.095476][T26409] usb 3-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 983.107874][T15913] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 983.134550][T26409] usb 3-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 983.144562][T15913] usb 9-1: USB disconnect, device number 44 [ 983.194173][T26409] usb 3-1: config 6 interface 152 has no altsetting 0 [ 983.236325][T26409] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 983.253572][T26409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.263208][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 983.280400][T26409] usb 3-1: Product: syz [ 983.287043][T26409] usb 3-1: Manufacturer: syz [ 983.293513][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.314554][T26409] usb 3-1: SerialNumber: syz [ 983.320236][ T5886] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 983.373445][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.419965][ T5886] usb 7-1: config 0 descriptor?? [ 983.473036][ T5886] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 983.506003][ T5886] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 983.754900][T26409] ushc 3-1:6.152: probe with driver ushc failed with error -110 [ 983.849797][T26409] usb 3-1: USB disconnect, device number 54 [ 983.919160][T26418] usb 7-1: USB disconnect, device number 48 [ 983.945993][T26418] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 984.638737][T27731] gre2: entered allmulticast mode [ 984.797019][T27738] loop7: detected capacity change from 0 to 16384 [ 985.070951][ T796] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 985.204688][T27748] loop7: detected capacity change from 16384 to 0 [ 985.211904][ C0] I/O error, dev loop7, sector 14080 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 985.255132][ T796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.286164][ T796] usb 7-1: config 0 has no interfaces? [ 985.301927][ T796] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 985.347226][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.364198][ T796] usb 7-1: Product: syz [ 985.370616][ T796] usb 7-1: Manufacturer: syz [ 985.376006][ T796] usb 7-1: SerialNumber: syz [ 985.386263][ T796] usb 7-1: config 0 descriptor?? [ 985.971511][T14670] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 986.154169][T14670] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 986.169072][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.184449][T14670] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.197472][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.217398][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.232191][T14670] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 986.239767][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.252305][T14670] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.269417][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.281461][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.299008][T14670] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 986.307382][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.320976][T14670] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.333429][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.349756][T14670] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 986.366434][T14670] usb 8-1: string descriptor 0 read error: -22 [ 986.377586][T14670] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 986.387631][T14670] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.417764][T14670] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 987.823519][T27828] binder: BINDER_SET_CONTEXT_MGR already set [ 987.865934][T27828] binder: 27827:27828 ioctl 4018620d 200000004a80 returned -16 [ 987.915163][ T5886] usb 7-1: USB disconnect, device number 49 [ 988.028139][T27826] syzkaller0: entered promiscuous mode [ 988.069734][T27826] syzkaller0: entered allmulticast mode [ 988.159550][T27817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.298646][T27839] binder: 27838:27839 ioctl c0306201 2000000003c0 returned -14 [ 988.745053][T27843] binder: 27842:27843 unknown command 0 [ 988.750698][T27843] binder: 27842:27843 ioctl c0306201 200000000080 returned -22 [ 988.895079][T26409] usb 8-1: USB disconnect, device number 39 [ 990.185495][T26409] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 990.352861][T26409] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 990.362620][T26409] usb 6-1: config 0 has no interface number 0 [ 990.370445][T26409] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 990.412979][T26409] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 990.452163][T26409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.461879][T26409] usb 6-1: Product: syz [ 990.471223][T26409] usb 6-1: Manufacturer: syz [ 990.475889][T26409] usb 6-1: SerialNumber: syz [ 990.488408][T26409] usb 6-1: config 0 descriptor?? [ 990.966560][T26409] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 990.994790][T26409] keyspan 6-1:0.133: unsupported endpoint type 0 [ 991.003455][T26409] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 991.022173][T26409] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 991.040723][T26409] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 991.054952][T26409] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 991.084560][T26409] usb 6-1: USB disconnect, device number 29 [ 991.096844][T26409] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 991.115118][T26409] keyspan 6-1:0.133: device disconnected [ 993.188699][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.195854][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.512204][T27883] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.520072][T27883] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.614696][T27904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7031'. [ 993.679663][T27883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.002680][ T147] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.042304][ T147] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.072835][ T147] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.113837][ T147] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.313270][T26417] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 994.513821][T26417] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 994.537564][T26417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.565352][T26417] usb 7-1: config 0 descriptor?? [ 994.599734][T26417] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input147 [ 994.681893][ T5902] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 994.792846][ T5176] bcm5974 7-1:0.0: could not read from device [ 994.818772][ T5176] bcm5974 7-1:0.0: could not read from device [ 994.848705][ T6611] bcm5974 7-1:0.0: could not read from device [ 994.853524][T26417] usb 7-1: USB disconnect, device number 50 [ 994.870962][ T5902] usb 9-1: Using ep0 maxpacket: 32 [ 994.881017][ T5902] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 994.890449][ T5176] bcm5974 7-1:0.0: could not read from device [ 994.920566][ T5902] usb 9-1: config 0 has no interface number 0 [ 994.930479][ T5902] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 994.935751][ T5176] bcm5974 7-1:0.0: could not read from device [ 994.974868][ T5902] usb 9-1: config 0 interface 89 has no altsetting 0 [ 994.986885][ T6611] udevd[6611]: Error opening device "/dev/input/event4": No such device [ 994.996250][ T5902] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 995.006610][ T6611] udevd[6611]: Unable to EVIOCGABS device "/dev/input/event4" [ 995.014601][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.024371][ T6611] udevd[6611]: Unable to EVIOCGABS device "/dev/input/event4" [ 995.032907][ T5902] usb 9-1: Product: syz [ 995.037627][ T6611] udevd[6611]: Unable to EVIOCGABS device "/dev/input/event4" [ 995.048878][ T5902] usb 9-1: Manufacturer: syz [ 995.054611][ T5902] usb 9-1: SerialNumber: syz [ 995.065321][ T6611] udevd[6611]: Unable to EVIOCGABS device "/dev/input/event4" [ 995.092179][ T5902] usb 9-1: config 0 descriptor?? [ 995.120632][ T5902] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 995.165742][ T5902] em28xx 9-1:0.89: Video interface 89 found: [ 995.493510][T27951] binder: 27950:27951 ioctl c0306201 2000000003c0 returned -14 [ 995.726082][ T5902] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 996.273419][T27973] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.348505][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7049'. [ 996.403188][ T5902] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 996.450467][ T5902] em28xx 9-1:0.89: board has no eeprom [ 996.466048][T27972] : entered promiscuous mode [ 996.563408][ T5902] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 996.583314][ T5902] em28xx 9-1:0.89: analog set to bulk mode. [ 996.603763][T27978] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 996.630275][ T24] em28xx 9-1:0.89: Registering V4L2 extension [ 996.671927][ T5902] usb 9-1: USB disconnect, device number 45 [ 996.702682][ T5902] em28xx 9-1:0.89: Disconnecting em28xx [ 996.813321][ T24] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 996.831598][ T24] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 996.848455][ T24] em28xx 9-1:0.89: No AC97 audio processor [ 996.868532][ T24] usb 9-1: Decoder not found [ 996.888259][ T24] em28xx 9-1:0.89: failed to create media graph [ 996.910560][ T24] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 996.943897][ T24] em28xx 9-1:0.89: Registering snapshot button... [ 996.972864][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input148 [ 997.014689][ T24] em28xx 9-1:0.89: Remote control support is not available for this card. [ 997.046647][ T5902] em28xx 9-1:0.89: Closing input extension [ 997.066897][ T5902] em28xx 9-1:0.89: Deregistering snapshot button [ 997.128983][ T5902] em28xx 9-1:0.89: Freeing device [ 998.849561][T28033] loop2: detected capacity change from 0 to 7 [ 998.882631][ T6611] Dev loop2: unable to read RDB block 7 [ 998.904471][ T6611] loop2: AHDI p1 p2 p3 [ 998.916160][ T6611] loop2: partition table partially beyond EOD, truncated [ 998.934142][ T6611] loop2: p1 start 1818582900 is beyond EOD, truncated [ 998.960292][ T6611] loop2: p3 start 335544320 is beyond EOD, truncated [ 998.988829][T28033] Dev loop2: unable to read RDB block 7 [ 999.030879][T28033] loop2: AHDI p1 p2 p3 [ 999.057092][T28033] loop2: partition table partially beyond EOD, truncated [ 999.094796][T28033] loop2: p1 start 1818582900 is beyond EOD, truncated [ 999.132817][T28033] loop2: p3 start 335544320 is beyond EOD, truncated [ 999.227496][T28041] binder: 28040:28041 ioctl c0306201 2000000003c0 returned -14 [ 1000.360269][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7071'. [ 1000.422752][T28072] sctp: [Deprecated]: syz.6.7072 (pid 28072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1000.422752][T28072] Use struct sctp_sack_info instead [ 1000.966070][T28090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.133107][ T5916] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1001.321685][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 1001.332893][ T5916] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.361021][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1001.395299][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1001.425766][ T5916] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.462007][ T5916] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1001.482577][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.726563][ T5916] usb 8-1: GET_CAPABILITIES returned 0 [ 1001.745756][ T5916] usbtmc 8-1:16.0: can't read capabilities [ 1001.957718][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1001.966983][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1001.976229][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1001.985380][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1001.998034][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.007270][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.016665][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.025882][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.038417][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.047557][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.056758][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.066124][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.075281][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.084552][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.093832][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.103358][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1002.144985][T26426] usb 8-1: USB disconnect, device number 40 [ 1002.181899][T26411] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1002.361022][T26411] usb 9-1: Using ep0 maxpacket: 16 [ 1002.454080][T26411] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1002.475353][T26411] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1002.522467][T26411] usb 9-1: can't read configurations, error -71 [ 1002.838292][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 1002.838315][ T29] audit: type=1804 audit(1775299917.603:1884): pid=28129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7091" name="/newroot/507/file0" dev="fuse" ino=1 res=1 errno=0 [ 1005.338731][T28160] input: syz0 as /devices/virtual/input/input149 [ 1005.851121][T20152] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1006.041069][T20152] usb 6-1: Using ep0 maxpacket: 32 [ 1006.047917][T20152] usb 6-1: config 0 has an invalid interface number: 250 but max is 1 [ 1006.056938][T20152] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.068842][T20152] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1006.078027][T20152] usb 6-1: config 0 has no interface number 0 [ 1006.086470][T20152] usb 6-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1006.095863][T20152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.104182][T20152] usb 6-1: Product: syz [ 1006.108448][T20152] usb 6-1: Manufacturer: syz [ 1006.114333][T20152] usb 6-1: SerialNumber: syz [ 1006.123251][T20152] usb 6-1: config 0 descriptor?? [ 1006.181455][T26411] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1006.341726][T26411] usb 9-1: Using ep0 maxpacket: 16 [ 1006.351009][T20152] usb 6-1: USB disconnect, device number 30 [ 1006.354621][T26411] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1006.377882][T26411] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1006.393692][T26411] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1006.404211][T26411] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.413073][T26411] usb 9-1: Product: syz [ 1006.417488][T26411] usb 9-1: Manufacturer: syz [ 1006.422729][T26411] usb 9-1: SerialNumber: syz [ 1006.430656][T26411] usb 9-1: config 0 descriptor?? [ 1006.440500][T26411] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1006.450681][T26411] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1006.550964][ T5916] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1006.711014][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 1006.720127][ T5916] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1006.730050][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.739438][ T5916] usb 8-1: Product: syz [ 1006.743758][ T5916] usb 8-1: Manufacturer: syz [ 1006.748589][ T5916] usb 8-1: SerialNumber: syz [ 1006.756323][ T5916] usb 8-1: config 0 descriptor?? [ 1006.765175][ T5916] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1006.921341][T26417] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1007.054460][T26411] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1007.071906][T26411] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1007.091068][T26417] usb 3-1: Using ep0 maxpacket: 16 [ 1007.103396][T26417] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1007.121129][T26417] usb 3-1: config 0 has no interface number 0 [ 1007.140571][T26417] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1007.160337][T26417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.180410][T26417] usb 3-1: Product: syz [ 1007.190503][T26417] usb 3-1: Manufacturer: syz [ 1007.200972][T26417] usb 3-1: SerialNumber: syz [ 1007.217521][T26417] usb 3-1: config 0 descriptor?? [ 1007.246025][T26417] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1007.697793][T26411] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1008.158319][T26411] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1008.178061][T26411] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1008.193623][T26411] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1008.201298][T26411] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1008.208275][T26411] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1008.230058][T26411] usb 9-1: USB disconnect, device number 48 [ 1008.586565][T28233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1008.622679][ T5916] gspca_sonixj: reg_r err -71 [ 1008.661358][ T5916] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 1008.679118][ T5916] usb 8-1: USB disconnect, device number 41 [ 1008.750458][T20152] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1008.864878][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7129'. [ 1008.944287][T20152] usb 7-1: Using ep0 maxpacket: 16 [ 1008.958573][T20152] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.984808][T20152] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.013154][T20152] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.022946][T20152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.051490][T20152] usb 7-1: Product: syz [ 1009.072291][T20152] usb 7-1: Manufacturer: syz [ 1009.076955][T20152] usb 7-1: SerialNumber: syz [ 1009.123141][T27046] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1009.304729][T27046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.310631][T26417] gspca_spca1528: reg_r err -71 [ 1009.328967][T20152] usb 7-1: 0:2 : does not exist [ 1009.345689][T27046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.352561][T26417] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1009.362363][T27046] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1009.375281][T27046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.386426][T26417] usb 3-1: USB disconnect, device number 55 [ 1009.386960][T20152] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1009.450684][T27046] usb 6-1: config 0 descriptor?? [ 1009.580672][T20152] usb 7-1: USB disconnect, device number 51 [ 1009.646259][ T5916] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1009.684300][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.717191][T28238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.747013][T28238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.771729][T27046] usbhid 6-1:0.0: can't add hid device: -71 [ 1009.798473][T27046] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1009.826192][ T5916] usb 9-1: config 0 has no interfaces? [ 1009.841252][T27046] usb 6-1: USB disconnect, device number 31 [ 1009.847572][ T5916] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1009.865257][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.889522][ T5916] usb 9-1: config 0 descriptor?? [ 1010.240991][T26411] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1010.341249][T27046] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1010.400962][T26411] usb 8-1: Using ep0 maxpacket: 8 [ 1010.408442][T26411] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1010.417082][T26411] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.427824][T26411] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1010.438401][T26411] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1010.449549][T26411] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.463989][T26411] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1010.474696][T26411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.530908][T27046] usb 6-1: Using ep0 maxpacket: 16 [ 1010.547164][T27046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.570249][T27046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.595807][T27046] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 1010.597924][T28261] netlink: 'syz.6.7139': attribute type 10 has an invalid length. [ 1010.627489][T27046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.645393][T27046] usb 6-1: config 0 descriptor?? [ 1010.657638][T28261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.677820][T28261] bond0: (slave team0): Enslaving as an active interface with an up link [ 1010.720082][T26411] usb 8-1: usb_control_msg returned -32 [ 1010.741549][T26411] usbtmc 8-1:16.0: can't read capabilities [ 1011.054548][T28254] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 1011.055243][T26411] usb 8-1: USB disconnect, device number 42 [ 1011.094957][T27046] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1011.135092][T27046] mcp2221 0003:04D8:00DD.0070: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1011.327397][T28238] i2c i2c-1: unsupported multi-msg i2c transaction [ 1011.347503][T26411] usb 6-1: USB disconnect, device number 32 [ 1012.346882][T27046] usb 9-1: USB disconnect, device number 49 [ 1013.161994][T28308] kvm: kvm [28307]: vcpu0, guest rIP: 0x273 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1014.820997][T26426] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1015.020966][T26426] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1015.066670][T26426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.119959][T26426] usb 9-1: config 0 has no interfaces? [ 1015.146389][T26426] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1015.198770][T26426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.259675][T26426] usb 9-1: config 0 descriptor?? [ 1015.895317][T28337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1017.169143][T28345] syzkaller0: entered promiscuous mode [ 1017.197797][T28345] syzkaller0: entered allmulticast mode [ 1017.595310][T20152] usb 9-1: USB disconnect, device number 50 [ 1017.781629][T26426] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1017.972811][T26426] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.015474][T26426] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.060681][T26426] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1018.071980][T26426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1018.080045][T26426] usb 3-1: SerialNumber: syz [ 1023.102671][T28381] binder: 28380:28381 ioctl c0306201 200000000380 returned -14 [ 1023.186988][T26426] usb 3-1: skipping empty audio interface (v1) [ 1023.356568][T26426] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1023.438949][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.613874][ T29] audit: type=1804 audit(1775299938.353:1885): pid=28386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.7180" name="/newroot/711/file0" dev="fuse" ino=1 res=1 errno=0 [ 1023.781070][T26426] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1023.981034][T26426] usb 7-1: Using ep0 maxpacket: 32 [ 1024.069510][T26426] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 1024.078271][T26426] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.137493][T26426] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1024.147973][T26426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.156158][T26426] usb 7-1: Product: syz [ 1024.160550][T26426] usb 7-1: Manufacturer: syz [ 1024.165597][T26426] usb 7-1: SerialNumber: syz [ 1024.175496][T26426] usb 7-1: config 0 descriptor?? [ 1024.186961][T26426] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1024.652822][T26417] usb 3-1: USB disconnect, device number 56 [ 1024.891821][T28401] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7185'. [ 1025.093801][T28407] syzkaller0: entered promiscuous mode [ 1025.099344][T28407] syzkaller0: entered allmulticast mode [ 1025.119666][T26417] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1025.170837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 1025.352730][T26417] usb 3-1: Using ep0 maxpacket: 32 [ 1025.379394][T26417] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1025.421926][T26417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.457363][T26417] usb 3-1: Product: syz [ 1025.462136][T26411] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1025.487498][T26417] usb 3-1: Manufacturer: syz [ 1025.498228][T28414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7190'. [ 1025.518558][T26417] usb 3-1: SerialNumber: syz [ 1025.533622][T26417] usb 3-1: config 0 descriptor?? [ 1025.537338][T28414] l2tp_ppp: sess 2/0: no socket in recv [ 1025.560518][T26417] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1025.646437][T26411] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.700541][T26411] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1025.749990][T26411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.805195][T26411] usb 8-1: config 0 descriptor?? [ 1025.848862][T26411] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1026.269686][T26426] gspca_sunplus: reg_r err -71 [ 1026.297105][T26426] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1026.344502][T26426] usb 7-1: USB disconnect, device number 52 [ 1026.597316][ T5916] usb 8-1: USB disconnect, device number 43 [ 1027.621873][T26417] gspca_ov534_9: reg_r err -71 [ 1027.921894][T26417] gspca_ov534_9: Unknown sensor 0000 [ 1027.922004][T26417] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1027.996154][T26417] usb 3-1: USB disconnect, device number 57 [ 1028.391169][T26426] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1028.480170][T26425] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 1028.517532][T26425] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1028.550974][T26426] usb 8-1: Using ep0 maxpacket: 16 [ 1028.554685][T26426] usb 8-1: config 0 has no interfaces? [ 1028.554730][T26426] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1028.554754][T26426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.558033][T26426] usb 8-1: config 0 descriptor?? [ 1028.957608][T28435] kvm: kvm [28433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1028.957767][T28435] kvm: kvm [28433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1029.139990][ T5916] usb 8-1: USB disconnect, device number 44 [ 1030.756695][T28486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1031.101750][T28455] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.180965][T26426] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1032.213570][T28499] syzkaller0: entered promiscuous mode [ 1032.234212][T28499] syzkaller0: entered allmulticast mode [ 1032.311052][T20152] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1032.421682][T26426] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1032.438220][T26426] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1032.450676][T26426] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1032.491147][T26426] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1032.500448][T26426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.523742][T20152] usb 3-1: Using ep0 maxpacket: 32 [ 1032.531437][T20152] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1032.545866][T28496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1032.550926][T20152] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1032.586335][T20152] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1032.630879][T20152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.708486][T20152] usb 3-1: config 0 descriptor?? [ 1033.610661][T20152] corsair-cpro 0003:1B1C:0C10.0072: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1034.015991][T20152] corsair-cpro 0003:1B1C:0C10.0072: probe with driver corsair-cpro failed with error -71 [ 1034.062297][T20152] usb 3-1: USB disconnect, device number 58 [ 1034.498280][T28515] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.505182][T28515] binder: 28514:28515 ioctl 4018620d 200000004a80 returned -16 [ 1035.675199][T26426] aiptek 6-1:17.0: Aiptek tried all speeds, no sane response [ 1035.686440][T26426] aiptek 6-1:17.0: probe with driver aiptek failed with error -22 [ 1035.715574][T26426] usb 6-1: USB disconnect, device number 33 [ 1036.787477][T28548] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7234'. [ 1037.241105][T26425] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1037.408108][T26425] usb 7-1: Using ep0 maxpacket: 32 [ 1037.427871][T26425] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1037.442466][T26425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.476965][T26425] usb 7-1: Product: syz [ 1037.491396][T26425] usb 7-1: Manufacturer: syz [ 1037.504869][T26425] usb 7-1: SerialNumber: syz [ 1037.539842][T26425] usb 7-1: config 0 descriptor?? [ 1037.564506][T26425] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1039.830079][T26425] gspca_ov534_9: reg_r err -71 [ 1039.915816][T28586] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7244'. [ 1040.091499][T26425] gspca_ov534_9: Unknown sensor 0000 [ 1040.091571][T26425] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1040.118739][T26425] usb 7-1: USB disconnect, device number 53 [ 1040.279034][T28595] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1040.295523][T28595] syzkaller0: entered promiscuous mode [ 1040.301929][T28595] syzkaller0: entered allmulticast mode [ 1040.308225][T26417] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1040.464296][T26417] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1040.473556][T26417] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1040.484107][T26417] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.494955][T26417] usb 8-1: config 220 has no interface number 2 [ 1040.501481][T26417] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1040.517671][T26417] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1040.524663][T26417] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1040.532224][T26417] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1040.543868][T26417] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1040.554122][T26417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.562369][T26417] usb 8-1: Product: syz [ 1040.566666][T26417] usb 8-1: Manufacturer: syz [ 1040.572174][T26417] usb 8-1: SerialNumber: syz [ 1040.720975][T20152] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1040.784864][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7246'. [ 1040.859727][T28602] syzkaller0: entered promiscuous mode [ 1040.866642][T28602] syzkaller0: entered allmulticast mode [ 1040.882245][T20152] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1040.899554][T20152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.909313][T20152] usb 7-1: Product: syz [ 1040.914352][T20152] usb 7-1: Manufacturer: syz [ 1040.940032][T20152] usb 7-1: SerialNumber: syz [ 1040.969601][T26417] usb 8-1: selecting invalid altsetting 0 [ 1040.978370][T26417] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1040.991717][T26417] uvcvideo 8-1:220.0: No valid video chain found. [ 1041.005649][T26417] usb 8-1: selecting invalid altsetting 0 [ 1041.012464][T26417] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1041.032833][T26417] usb 8-1: USB disconnect, device number 45 [ 1041.171259][T20152] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1041.192421][T20152] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1041.203570][T20152] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1041.214297][T20152] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1041.231109][T20152] usb 7-1: USB disconnect, device number 54 [ 1041.240513][ T5984] udevd[5984]: setting owner of /dev/bus/usb/007/054 to uid=0, gid=0 failed: No such file or directory [ 1044.489967][ T29] audit: type=1800 audit(1775299959.263:1886): pid=28653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7265" name="/" dev="fuse" ino=2 res=0 errno=0 [ 1048.408785][T28697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1050.203022][T26417] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1050.211242][T26425] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1050.377089][T26417] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.387915][T26425] usb 9-1: Using ep0 maxpacket: 16 [ 1050.400205][T26417] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.419112][T26425] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1050.428685][T26425] usb 9-1: config 0 has no interface number 0 [ 1050.452064][T26417] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1050.464858][T26425] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1050.484414][T26417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1050.496453][T26425] usb 9-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.519084][T26417] usb 3-1: SerialNumber: syz [ 1050.532932][T26425] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1050.555737][T26425] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1050.607232][T26425] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.631130][T26425] usb 9-1: Product: syz [ 1050.635746][T26425] usb 9-1: Manufacturer: syz [ 1050.649353][T26425] usb 9-1: SerialNumber: syz [ 1050.659262][T26425] usb 9-1: config 0 descriptor?? [ 1050.676209][T28722] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1050.691142][T26425] sr9700 9-1:0.41: probe with driver sr9700 failed with error -22 [ 1050.769895][T26417] usb 3-1: 0:2 : does not exist [ 1051.014549][T26417] usb 3-1: USB disconnect, device number 59 [ 1051.063379][T28722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1051.815293][T27046] usb 9-1: USB disconnect, device number 51 [ 1054.599218][ T29] audit: type=1326 audit(1775299969.363:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.7.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cded9c819 code=0x7fc00000 [ 1054.649350][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.659493][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.689650][ T29] audit: type=1326 audit(1775299969.393:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.7.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1cded9c819 code=0x7fc00000 [ 1056.002051][T27046] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1056.196128][T27046] usb 7-1: Using ep0 maxpacket: 32 [ 1056.224073][T27046] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1056.272144][T27046] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 1056.308831][T27046] usb 7-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 1056.341138][T27046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.373300][T27046] usb 7-1: Product: syz [ 1056.377508][T27046] usb 7-1: Manufacturer: syz [ 1056.415889][T27046] usb 7-1: SerialNumber: syz [ 1056.501980][T26425] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1056.660967][T26425] usb 9-1: Using ep0 maxpacket: 8 [ 1056.685014][T26425] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.733450][T26425] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1056.761729][T27046] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1056.768735][T26425] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.787457][T27046] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1056.790899][T26425] usb 9-1: Product: syz [ 1056.820431][T26425] usb 9-1: Manufacturer: syz [ 1056.838363][T26425] usb 9-1: SerialNumber: syz [ 1056.885833][T26425] usb 9-1: config 0 descriptor?? [ 1056.912681][T27046] usb 7-1: USB disconnect, device number 55 [ 1056.994115][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.074463][T26425] msi2500 9-1:0.0: Registered as swradio24 [ 1057.084089][T26425] msi2500 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1057.103148][T26417] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1057.226226][T28814] ptrace attach of "./syz-executor exec"[15598] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ @ \x0a N ÿ  `Mg €    ¥ ÿÿ     $ @   \x0c   , @ ( ÀH  k  ÿÿÿÿ [ 1057.239661][T27046] usb 9-1: USB disconnect, device number 52 [ 1057.357477][T26417] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1057.366760][T26417] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.377337][T26417] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1057.486037][T26417] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.539636][T26417] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1057.549368][T26417] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1057.560562][T26417] usb 8-1: Product: syz [ 1057.569310][T26417] usb 8-1: Manufacturer: syz [ 1057.616617][T26417] cdc_wdm 8-1:1.0: skipping garbage [ 1057.624811][T26417] cdc_wdm 8-1:1.0: skipping garbage [ 1057.648179][T26417] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1057.659540][T26417] cdc_wdm 8-1:1.0: Unknown control protocol [ 1057.878129][T20152] usb 8-1: USB disconnect, device number 46 [ 1058.351655][T26426] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1058.513186][T26426] usb 7-1: Using ep0 maxpacket: 16 [ 1058.536413][T26426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1058.562774][T26426] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1058.573576][T26426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.581904][T26426] usb 7-1: Product: syz [ 1058.586406][T26426] usb 7-1: Manufacturer: syz [ 1058.598138][T26426] usb 7-1: SerialNumber: syz [ 1058.610730][T26426] usb 7-1: config 0 descriptor?? [ 1058.640422][T26426] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1058.650395][T26426] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1059.266331][T26426] em28xx 7-1:0.0: chip ID is em2765 [ 1059.710962][T26417] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1059.838163][T28878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7340'. [ 1059.873011][T26417] usb 8-1: Using ep0 maxpacket: 8 [ 1059.893839][T26426] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1059.907359][T26417] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1059.908629][T28878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7340'. [ 1059.915769][T26426] em28xx 7-1:0.0: board has no eeprom [ 1059.938659][T26417] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1059.951189][T26417] usb 8-1: string descriptor 0 read error: -22 [ 1059.957531][T26417] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1059.998479][T26417] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1060.045746][T26417] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1060.079099][T26417] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1060.104764][T26417] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1060.114567][T26417] usb 8-1: media controller created [ 1060.158404][T26417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.373597][T28895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7346'. [ 1060.485038][T20152] usb 8-1: USB disconnect, device number 47 [ 1060.755405][T28903] syzkaller0: entered promiscuous mode [ 1060.761326][T28903] syzkaller0: entered allmulticast mode [ 1060.790973][T26417] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1060.963906][T26417] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1060.973310][T26417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.982094][T26417] usb 6-1: Product: syz [ 1060.987201][T26417] usb 6-1: Manufacturer: syz [ 1060.994332][T26417] usb 6-1: SerialNumber: syz [ 1061.035205][T28845] em28xx 7-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 1061.096847][T26426] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1061.112367][T26426] em28xx 7-1:0.0: dvb set to bulk mode. [ 1061.122449][T26411] em28xx 7-1:0.0: Binding DVB extension [ 1061.153700][T26426] usb 7-1: USB disconnect, device number 56 [ 1061.185194][T26426] em28xx 7-1:0.0: Disconnecting em28xx [ 1061.239906][T26411] em28xx 7-1:0.0: Registering input extension [ 1061.246593][T26426] em28xx 7-1:0.0: Closing input extension [ 1061.348745][T26426] em28xx 7-1:0.0: Freeing device [ 1064.210352][T26417] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1064.234352][T26417] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1064.269005][T26417] usb 6-1: USB disconnect, device number 34 [ 1064.621961][T27046] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1064.760980][T20152] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1064.820116][T27046] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1064.845440][T27046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.875837][T27046] usb 7-1: Product: syz [ 1064.885457][T27046] usb 7-1: Manufacturer: syz [ 1064.898455][T27046] usb 7-1: SerialNumber: syz [ 1064.920133][T27046] usb 7-1: config 0 descriptor?? [ 1064.925487][T20152] usb 9-1: Using ep0 maxpacket: 32 [ 1064.959633][T20152] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1064.980402][T20152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.013816][T20152] usb 9-1: Product: syz [ 1065.024148][T20152] usb 9-1: Manufacturer: syz [ 1065.036502][T20152] usb 9-1: SerialNumber: syz [ 1065.059964][T20152] usb 9-1: config 0 descriptor?? [ 1065.082498][T20152] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1065.163770][T27046] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1065.874129][T28936] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20003 [ 1066.279135][T28949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1066.351033][T26411] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1066.525224][T26411] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 1066.561894][T26411] usb 8-1: config 0 has no interface number 0 [ 1066.577147][T26411] usb 8-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1066.612836][T27046] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1066.632897][T26411] usb 8-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.657040][T26411] usb 8-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.677923][T26411] usb 8-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1066.691556][T26411] usb 8-1: config 0 interface 16 has no altsetting 0 [ 1066.695199][T27046] usb 7-1: USB disconnect, device number 57 [ 1066.713315][T26411] usb 8-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1066.738653][T26411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.782973][T26411] usb 8-1: config 0 descriptor?? [ 1066.941641][T28455] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.344636][T20152] gspca_ov534_9: reg_w failed -71 [ 1067.591070][ T5916] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1067.651117][T20152] gspca_ov534_9: Unknown sensor 0000 [ 1067.651275][T20152] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1067.727980][T20152] usb 9-1: USB disconnect, device number 53 [ 1067.761576][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1067.813550][ T5916] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.882146][ T5916] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1067.951194][ T5916] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1068.024685][ T5916] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1068.109297][ T5916] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1068.149402][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.189288][ T5916] usb 3-1: Product: syz [ 1068.214872][ T5916] usb 3-1: Manufacturer: syz [ 1068.236487][ T5916] usb 3-1: SerialNumber: syz [ 1068.308534][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1068.347376][ T5916] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input153 [ 1068.540925][ T5916] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1068.581017][ T5916] (id 0x00) [ 1068.813403][ T5916] rc_core: IR keymap rc-imon-pad not found [ 1068.835458][ T5916] Registered IR keymap rc-empty [ 1068.855280][ T5916] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1068.899376][ T5916] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1068.952367][ T5916] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1069.023704][ T5916] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input154 [ 1069.109485][ T5916] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:60> initialized [ 1069.335718][T26411] usbhid 8-1:0.16: can't add hid device: -71 [ 1069.368829][T26411] usbhid 8-1:0.16: probe with driver usbhid failed with error -71 [ 1069.432675][T26411] usb 8-1: USB disconnect, device number 48 [ 1069.546414][T28965] imon:send_packet: task interrupted [ 1069.568294][T28965] imon:send_packet: packet tx failed (-512) [ 1069.629443][T28965] imon:vfd_write: send packet #1 failed [ 1069.684411][T28965] imon:send_packet: task interrupted [ 1069.719165][T28965] imon:send_packet: packet tx failed (-512) [ 1069.749494][T28965] imon:vfd_write: send packet #0 failed [ 1069.787713][T28990] imon:display_open: display port is already open [ 1069.819525][T28965] imon:send_packet: packet tx failed (-32) [ 1069.843000][T28965] imon:vfd_write: send packet #0 failed [ 1069.857214][ T5916] usb 3-1: USB disconnect, device number 60 [ 1071.669255][T29018] binder: 29017:29018 ioctl c0306201 2000000003c0 returned -14 [ 1071.838746][T29020] syzkaller0: entered promiscuous mode [ 1071.882417][T29020] syzkaller0: entered allmulticast mode [ 1072.105740][T29029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1078.600896][ T5916] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1078.780956][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 1078.812355][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.843257][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.870979][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.891607][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.927798][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1078.969615][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.249569][ T5916] usb 3-1: GET_CAPABILITIES returned 0 [ 1079.286426][ T5916] usbtmc 3-1:16.0: can't read capabilities [ 1079.520252][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1079.556621][T26417] usb 3-1: USB disconnect, device number 61 [ 1079.936985][T29085] syzkaller0: entered promiscuous mode [ 1079.955102][T29085] syzkaller0: entered allmulticast mode [ 1080.906184][T29109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7416'. [ 1080.986650][T29113] syzkaller0: entered promiscuous mode [ 1081.001497][T29113] syzkaller0: entered allmulticast mode [ 1081.024165][T29113] tipc: Enabled bearer , priority 0 [ 1081.061082][T29111] tipc: Resetting bearer [ 1081.099551][T29111] tipc: Disabling bearer [ 1081.781408][T26411] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1081.962118][T26411] usb 9-1: Using ep0 maxpacket: 16 [ 1081.982368][T26411] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.031047][T26411] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.085746][T26411] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.116900][T26411] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.153826][T26411] usb 9-1: Product: syz [ 1082.168039][T26411] usb 9-1: Manufacturer: syz [ 1082.180961][T26417] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1082.191318][T26411] usb 9-1: SerialNumber: syz [ 1082.373439][T26417] usb 6-1: Using ep0 maxpacket: 8 [ 1082.408505][T26417] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1082.448800][T26417] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 1082.501577][T26411] usb 9-1: 0:2 : does not exist [ 1082.520074][T26417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.599556][T26411] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1082.679308][T26417] usb 6-1: Product: syz [ 1082.757609][T26417] usb 6-1: Manufacturer: syz [ 1082.805399][T26417] usb 6-1: SerialNumber: syz [ 1083.100216][T26411] usb 9-1: USB disconnect, device number 54 [ 1083.122388][T26417] usb 6-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1083.263155][T26417] usb 6-1: found format II with max.bitrate = 4, frame size=65533 [ 1083.323227][T26417] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1083.402435][T26417] usb 6-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1083.471373][T26417] usb 6-1: found format II with max.bitrate = 4, frame size=65533 [ 1083.498495][T26417] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1083.531461][T26417] usb 6-1: failed to enable PITCH for EP 0x1 [ 1083.543498][ T29] audit: type=1326 audit(1775299998.303:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29160 comm="syz.6.7435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3788d9c819 code=0x0 [ 1083.575489][T26417] usb 6-1: unit 8 not found! [ 1083.823252][T26417] usb 6-1: USB disconnect, device number 35 [ 1084.430924][T26417] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1084.612757][T26417] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.630988][T26417] usb 3-1: config 0 has no interfaces? [ 1084.644097][T26417] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1084.665592][T26417] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1084.682578][T26417] usb 3-1: Manufacturer: syz [ 1084.699456][T26417] usb 3-1: config 0 descriptor?? [ 1085.056860][T27046] usb 3-1: USB disconnect, device number 62 [ 1085.067670][T29182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7443'. [ 1085.283659][T29187] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1085.331080][T29187] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1085.350398][T29187] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1085.372396][T29187] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1085.391357][T29187] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1085.399539][T29187] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1085.427107][T29187] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1085.435298][T29187] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1085.443896][T29187] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 1085.458090][T29187] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1085.742953][ T29] audit: type=1326 audit(1775300000.513:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29197 comm="syz.7.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cded9c819 code=0x7fc00000 [ 1085.807781][ T29] audit: type=1326 audit(1775300000.533:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29197 comm="syz.7.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1cded9c819 code=0x7fc00000 [ 1085.870681][T29205] kvm: pic: single mode not supported [ 1085.870718][T29205] kvm: pic: level sensitive irq not supported [ 1085.898971][T29205] kvm: pic: non byte write [ 1086.275111][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7455'. [ 1086.724188][T26418] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1086.915682][T26418] usb 9-1: config 0 has no interfaces? [ 1086.935427][T26418] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1086.962961][T26418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.002133][T26418] usb 9-1: config 0 descriptor?? [ 1087.268297][T26418] usb 9-1: USB disconnect, device number 55 [ 1087.440868][ T5916] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1087.611139][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 1087.622850][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1087.634756][ T5916] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1087.644182][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.654517][ T5916] usb 7-1: config 0 descriptor?? [ 1087.874626][ T5916] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1087.974221][T29267] binder: 29266:29267 ioctl 541b 0 returned -22 [ 1088.081782][ T5916] usb 7-1: USB disconnect, device number 58 [ 1088.488056][T29275] kvm: kvm [29274]: vcpu0, guest rIP: 0x2ab Unhandled WRMSR(0xc2) = 0xb000610000bd46 [ 1088.593131][T29275] kvm: kvm [29274]: vcpu0, guest rIP: 0x2ab Unhandled WRMSR(0xc2) = 0xb000610000abda [ 1088.603541][T29275] kvm: kvm [29274]: vcpu0, guest rIP: 0x2ab Unhandled WRMSR(0xc1) = 0xb00061000007ee [ 1088.651077][T26418] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1088.686191][T26417] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1088.782097][T29275] kvm: kvm [29274]: vcpu0, guest rIP: 0x2ab Unhandled WRMSR(0xc2) = 0xb000610000dca6 [ 1088.819089][T29275] kvm: kvm [29274]: vcpu0, guest rIP: 0x2ab Unhandled WRMSR(0xc2) = 0xb0006100008153 [ 1088.838773][T26418] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1088.862873][T26417] usb 8-1: Using ep0 maxpacket: 32 [ 1088.891215][T26418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.919204][T26417] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.931751][T26418] usb 3-1: config 0 descriptor?? [ 1088.947888][T26417] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.963008][T26418] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1089.061905][T26417] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1089.134131][T26417] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1089.146119][T26417] usb 8-1: Product: syz [ 1089.150433][T26417] usb 8-1: Manufacturer: syz [ 1089.226442][T26417] hub 8-1:4.0: USB hub found [ 1089.418108][T26417] hub 8-1:4.0: 2 ports detected [ 1090.178652][T26418] gspca_stv06xx: I2C: Read error writing address: -71 [ 1090.206673][T26418] usb 3-1: USB disconnect, device number 63 [ 1090.650985][T26418] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1090.675582][T26417] hub 8-1:4.0: activate --> -90 [ 1090.720961][T26425] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1090.811019][T26418] usb 9-1: Using ep0 maxpacket: 32 [ 1090.839485][T26418] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1090.864067][T26418] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1090.873460][T26425] usb 7-1: Using ep0 maxpacket: 32 [ 1090.881890][T26425] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1090.907749][T26425] usb 7-1: config 0 has no interface number 0 [ 1090.914425][T26418] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1090.931226][T26425] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1090.941996][T26418] usb 9-1: Product: syz [ 1090.946211][T26418] usb 9-1: Manufacturer: syz [ 1090.963103][T26425] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1090.980922][T26418] usb 9-1: SerialNumber: syz [ 1090.991151][T26425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.007687][T26418] usb 9-1: config 0 descriptor?? [ 1091.034380][T29303] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1091.041749][T26425] usb 7-1: Product: syz [ 1091.062276][T26425] usb 7-1: Manufacturer: syz [ 1091.083642][T26425] usb 7-1: SerialNumber: syz [ 1091.121902][T26425] usb 7-1: config 0 descriptor?? [ 1091.130753][T29305] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1091.347888][T29305] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1091.505971][T26417] hub 8-1:4.0: hub_ext_port_status failed (err = -71) [ 1091.548196][T26418] usb 8-1: USB disconnect, device number 49 [ 1091.554406][T26417] usb 8-1-port2: cannot reset (err = -71) [ 1091.576182][T26417] usb 8-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1091.601889][T29319] kvm: pic: non byte write [ 1091.612060][T26417] usb 8-1-port2: attempt power cycle [ 1092.825348][T29334] netlink: 'syz.2.7496': attribute type 29 has an invalid length. [ 1092.836150][T29334] netlink: 'syz.2.7496': attribute type 29 has an invalid length. [ 1092.849079][T29334] netlink: 'syz.2.7496': attribute type 32 has an invalid length. [ 1092.861607][T29334] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7496'. [ 1093.151248][T26418] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1093.169480][T29341] kvm: pic: single mode not supported [ 1093.312424][T26418] usb 6-1: Using ep0 maxpacket: 32 [ 1093.329706][T26418] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1093.344663][T26418] usb 6-1: config 0 has no interface number 0 [ 1093.351514][T26418] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1093.362238][T26418] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1093.374207][T26418] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1093.390424][T26425] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1093.404851][T26418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.413145][T26425] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1093.424986][T26418] usb 6-1: Product: syz [ 1093.429933][T26425] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1093.444479][T26418] usb 6-1: Manufacturer: syz [ 1093.449317][T26418] usb 6-1: SerialNumber: syz [ 1093.462273][T27046] usb 9-1: USB disconnect, device number 56 [ 1093.493550][T26425] usb 7-1: USB disconnect, device number 59 [ 1093.519408][T26418] usb 6-1: config 0 descriptor?? [ 1093.557176][T26418] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1093.598883][T26418] em28xx 6-1:0.89: Video interface 89 found: [ 1093.819671][T29360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.157665][T29360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.187891][T26418] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1094.889482][ T1013] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.936549][ T1013] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.985227][ T1013] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.034469][ T1013] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.650699][T26418] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1095.661416][T20152] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1095.681522][T26418] em28xx 6-1:0.89: board has no eeprom [ 1095.750940][T26418] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1095.764559][T26418] em28xx 6-1:0.89: analog set to bulk mode. [ 1095.774033][T26425] em28xx 6-1:0.89: Registering V4L2 extension [ 1095.787666][T26418] usb 6-1: USB disconnect, device number 36 [ 1095.803544][T26418] em28xx 6-1:0.89: Disconnecting em28xx [ 1095.851442][T20152] usb 7-1: Using ep0 maxpacket: 8 [ 1095.869294][T20152] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1095.878183][T20152] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.894096][T20152] usb 7-1: config 0 has no interface number 0 [ 1095.900490][T26425] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1095.911952][T26425] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1095.919665][T20152] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1095.930502][T26425] em28xx 6-1:0.89: No AC97 audio processor [ 1095.956955][T20152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.967633][T20152] usb 7-1: Product: syz [ 1095.978863][T20152] usb 7-1: Manufacturer: syz [ 1095.984900][T26425] usb 6-1: Decoder not found [ 1095.992378][T26425] em28xx 6-1:0.89: failed to create media graph [ 1095.998486][T20152] usb 7-1: SerialNumber: syz [ 1096.006021][T26425] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1096.019118][T20152] usb 7-1: config 0 descriptor?? [ 1096.039046][T26425] em28xx 6-1:0.89: Registering snapshot button... [ 1096.039192][T20152] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1096.056368][T20152] uvcvideo 7-1:0.31: No valid video chain found. [ 1096.068825][T26425] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input155 [ 1096.098267][T26425] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1096.108008][T26418] em28xx 6-1:0.89: Closing input extension [ 1096.114822][T26418] em28xx 6-1:0.89: Deregistering snapshot button [ 1096.134680][T26418] em28xx 6-1:0.89: Freeing device [ 1096.172161][T26426] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1096.315221][T20152] usb 7-1: USB disconnect, device number 60 [ 1096.372775][T26426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.387584][T26426] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1096.398129][T26426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.409654][T26426] usb 3-1: config 0 descriptor?? [ 1096.424605][T26426] pwc: Askey VC010 type 2 USB webcam detected. [ 1096.501234][ T5916] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1096.660872][ T5916] usb 9-1: Using ep0 maxpacket: 16 [ 1096.672407][ T5916] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1096.696949][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1096.728665][ T5916] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1096.750497][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.768454][ T5916] usb 9-1: Product: syz [ 1096.777809][ T5916] usb 9-1: Manufacturer: syz [ 1096.790124][ T5916] usb 9-1: SerialNumber: syz [ 1096.805176][ T5916] usb 9-1: config 0 descriptor?? [ 1096.825111][ T5916] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1096.825946][T26426] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1096.846053][ T5916] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1096.848107][T26426] pwc: recv_control_msg error -32 req 02 val 2700 [ 1096.870220][T26426] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1096.880398][T26426] pwc: recv_control_msg error -32 req 04 val 1000 [ 1096.894494][T26426] pwc: recv_control_msg error -32 req 04 val 1300 [ 1096.902217][T26426] pwc: recv_control_msg error -32 req 04 val 1400 [ 1096.909580][T26426] pwc: recv_control_msg error -32 req 02 val 2000 [ 1096.919482][T26426] pwc: recv_control_msg error -32 req 02 val 2100 [ 1097.130373][T26426] pwc: recv_control_msg error -71 req 02 val 2500 [ 1097.156137][T26426] pwc: recv_control_msg error -71 req 02 val 2400 [ 1097.183309][T26426] pwc: recv_control_msg error -71 req 02 val 2600 [ 1097.212998][T26426] pwc: recv_control_msg error -71 req 02 val 2900 [ 1097.226748][T26426] pwc: recv_control_msg error -71 req 02 val 2800 [ 1097.254653][T26426] pwc: recv_control_msg error -71 req 04 val 1100 [ 1097.294674][T26426] pwc: recv_control_msg error -71 req 04 val 1200 [ 1097.331810][T26426] pwc: Registered as video103. [ 1097.364941][T26426] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input156 [ 1097.456060][ T5916] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1097.486722][T26426] usb 3-1: USB disconnect, device number 64 [ 1097.505206][ T5916] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1098.153977][ T5916] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1098.169401][ T5916] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1098.293664][T29423] create_pit_timer: 6 callbacks suppressed [ 1098.293683][T29423] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1098.361365][ T5916] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1098.377418][T29423] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1098.401650][T29423] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1098.415847][ T5916] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1098.420956][T29423] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1098.444217][T29423] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1098.497578][ T29] audit: type=1326 audit(1775300013.263:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.7525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0799c819 code=0x0 [ 1098.560920][ T5916] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1098.589524][ T5916] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1098.614563][T29430] random: crng reseeded on system resumption [ 1098.743854][ T5916] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1098.769611][ T5916] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1098.794792][ T5916] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1098.857281][ T5916] usb 9-1: USB disconnect, device number 57 [ 1099.578292][T29448] binder: 29445:29448 ioctl c0306201 200000004a40 returned -22 [ 1100.930844][ T5916] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1101.116722][ T5916] usb 9-1: Using ep0 maxpacket: 32 [ 1101.148142][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.185926][T29477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1101.193567][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.231069][ T5916] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1101.264127][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.284206][ T5916] usb 9-1: config 0 descriptor?? [ 1101.324059][ T5916] hub 9-1:0.0: USB hub found [ 1101.494364][ T5916] hub 9-1:0.0: 1 port detected [ 1101.722976][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7548'. [ 1101.732814][T29494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.991026][T26425] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1102.100553][ T5916] hub 9-1:0.0: activate --> -90 [ 1102.138145][T29498] syzkaller0: entered promiscuous mode [ 1102.143948][T26425] usb 3-1: Using ep0 maxpacket: 16 [ 1102.149283][T29498] syzkaller0: entered allmulticast mode [ 1102.161444][T26425] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1102.172095][T26425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.180156][T26425] usb 3-1: Product: syz [ 1102.184894][T26425] usb 3-1: Manufacturer: syz [ 1102.189627][T26425] usb 3-1: SerialNumber: syz [ 1102.198272][T26425] usb 3-1: config 0 descriptor?? [ 1102.325126][T29500] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1102.333406][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7550'. [ 1102.371410][ T5916] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1102.371840][T26426] usb 9-1: USB disconnect, device number 58 [ 1102.619711][T26425] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1102.634366][T26425] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1102.644487][T26425] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1102.652830][T26425] usb 3-1: media controller created [ 1102.666046][T26425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.235780][T26425] zl10353_read_register: readreg error (reg=127, ret==0) [ 1103.245428][T29494] dtv5100: wlen = 0, aborting. [ 1103.266125][T26425] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1103.325241][T26425] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1103.372468][T26425] usb 3-1: USB disconnect, device number 65 [ 1103.382056][T29516] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1103.406033][T29516] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 1103.428657][T29516] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1103.467277][T29516] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 1103.486316][T26425] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1103.505870][T29516] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 1103.540093][T29516] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1103.555334][T29516] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 1103.568604][T29516] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 1103.578572][T29516] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 1103.586929][T29516] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1104.341513][T29530] kvm: pic: non byte write [ 1104.976425][T29540] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7562'. [ 1105.041396][T29542] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7562'. [ 1105.059638][T29540] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 1105.154369][T29542] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 1105.623171][ T5916] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1105.783297][ T5916] usb 3-1: config 0 has no interfaces? [ 1105.793208][ T5916] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1105.815755][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.852538][ T5916] usb 3-1: config 0 descriptor?? [ 1106.103506][T29547] kvm: kvm [29546]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1106.122394][T29567] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7573'. [ 1106.135245][T29547] kvm: kvm [29546]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1106.228854][ T5916] usb 3-1: USB disconnect, device number 66 [ 1106.838889][T29579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1107.016691][T29582] loop5: detected capacity change from 0 to 7 [ 1107.066396][T29582] Dev loop5: unable to read RDB block 7 [ 1107.104175][T29582] loop5: unable to read partition table [ 1107.132619][T29582] loop5: partition table beyond EOD, truncated [ 1107.159639][T29582] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1107.470070][T29591] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1108.225083][T29606] kvm: pic: single mode not supported [ 1108.225107][T29606] kvm: pic: level sensitive irq not supported [ 1108.249095][T29606] kvm: pic: level sensitive irq not supported [ 1108.282473][T29606] kvm: pic: single mode not supported [ 1108.923089][T26418] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1109.093938][T26418] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 1109.107947][T26418] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.119847][T26418] usb 9-1: config 171 has no interface number 0 [ 1109.126969][T26418] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1109.167431][T26418] usb 9-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 1109.186312][T26418] usb 9-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1109.209006][T26418] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1109.218870][T26418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.228334][T26418] usb 9-1: Product: syz [ 1109.238112][T26418] usb 9-1: Manufacturer: syz [ 1109.247434][T26418] usb 9-1: SerialNumber: syz [ 1109.287940][T29620] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1110.381622][T26418] ath6kl: Failed to submit usb control message: -110 [ 1110.417658][T26418] ath6kl: unable to send the bmi data to the device: -110 [ 1110.453839][T26418] ath6kl: Unable to send get target info: -110 [ 1110.479721][T26418] ath6kl: Failed to init ath6kl core: -110 [ 1110.517515][T26418] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1110.554692][T26418] usb 9-1: USB disconnect, device number 59 [ 1110.684386][T29640] kvm: user requested TSC rate below hardware speed [ 1110.723179][T29640] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1112.692749][T29668] syz.2.7607 (29668): drop_caches: 2 [ 1113.607561][T29686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1113.660074][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1114.055319][T29692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1114.545012][T29707] syzkaller0: entered promiscuous mode [ 1114.556821][T29707] syzkaller0: entered allmulticast mode [ 1114.791054][T29713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1114.949688][T29711] [ 1114.952089][T29711] ===================================================== [ 1114.952101][T29711] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1114.952116][T29711] syzkaller #0 Tainted: G L [ 1114.952125][T29711] ----------------------------------------------------- [ 1114.952132][T29711] syz.6.7621/29711 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1114.952150][T29711] ffff8880538e0468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1114.952195][T29711] [ 1114.952195][T29711] and this task is already holding: [ 1114.952201][T29711] ffffffff8effe4d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1114.952237][T29711] which would create a new lock dependency: [ 1114.952243][T29711] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1114.952279][T29711] [ 1114.952279][T29711] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1114.952287][T29711] (kbd_event_lock){..-.}-{3:3} [ 1114.952302][T29711] [ 1114.952302][T29711] ... which became SOFTIRQ-irq-safe at: [ 1114.952311][T29711] lock_acquire+0xf0/0x2e0 [ 1114.952330][T29711] _raw_spin_lock+0x2e/0x40 [ 1114.952346][T29711] kbd_event+0xd6/0x40d0 [ 1114.952360][T29711] input_handle_events_default+0xd4/0x1a0 [ 1114.952376][T29711] input_pass_values+0x288/0x890 [ 1114.952389][T29711] input_event_dispose+0x330/0x6b0 [ 1114.952409][T29711] input_event+0x89/0xe0 [ 1114.952427][T29711] hidinput_report_event+0xa1/0x100 [ 1114.952443][T29711] hid_report_raw_event+0x150f/0x1730 [ 1114.952465][T29711] hid_input_report+0x44b/0x580 [ 1114.952484][T29711] hid_irq_in+0x47e/0x6d0 [ 1114.952502][T29711] __usb_hcd_giveback_urb+0x376/0x540 [ 1114.952525][T29711] dummy_timer+0xbbd/0x45d0 [ 1114.952546][T29711] __hrtimer_run_queues+0x53a/0xcc0 [ 1114.952566][T29711] hrtimer_run_softirq+0x182/0x5a0 [ 1114.952586][T29711] handle_softirqs+0x22a/0x870 [ 1114.952612][T29711] __irq_exit_rcu+0x5f/0x150 [ 1114.952629][T29711] irq_exit_rcu+0x9/0x30 [ 1114.952646][T29711] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1114.952664][T29711] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1114.952679][T29711] unwind_next_frame+0x18e1/0x23c0 [ 1114.952699][T29711] arch_stack_walk+0x11b/0x150 [ 1114.952720][T29711] stack_trace_save+0xa9/0x100 [ 1114.952734][T29711] kasan_save_track+0x3e/0x80 [ 1114.952749][T29711] __kasan_kmalloc+0x93/0xb0 [ 1114.952765][T29711] __kmalloc_cache_noprof+0x31c/0x660 [ 1114.952780][T29711] kmem_cache_free+0x15b/0x630 [ 1114.952796][T29711] __put_anon_vma+0x12b/0x2d0 [ 1114.952811][T29711] unlink_anon_vmas+0x58b/0x730 [ 1114.952825][T29711] free_pgtables+0x836/0xb70 [ 1114.952841][T29711] exit_mmap+0x490/0xa10 [ 1114.952854][T29711] __mmput+0x118/0x430 [ 1114.952872][T29711] exec_mmap+0x3b4/0x440 [ 1114.952885][T29711] begin_new_exec+0x134a/0x24a0 [ 1114.952898][T29711] load_elf_binary+0xa47/0x2980 [ 1114.952915][T29711] bprm_execve+0x93d/0x1460 [ 1114.952929][T29711] do_execveat_common+0x50d/0x690 [ 1114.952944][T29711] __x64_sys_execve+0x97/0xc0 [ 1114.952958][T29711] do_syscall_64+0x14d/0xf80 [ 1114.952976][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.952990][T29711] [ 1114.952990][T29711] to a SOFTIRQ-irq-unsafe lock: [ 1114.952996][T29711] (tasklist_lock){.+.+}-{3:3} [ 1114.953011][T29711] [ 1114.953011][T29711] ... which became SOFTIRQ-irq-unsafe at: [ 1114.953018][T29711] ... [ 1114.953023][T29711] lock_acquire+0xf0/0x2e0 [ 1114.953040][T29711] _raw_read_lock+0x36/0x50 [ 1114.953054][T29711] __do_wait+0xde/0x740 [ 1114.953068][T29711] do_wait+0x1e7/0x540 [ 1114.953081][T29711] kernel_wait+0xd6/0x1c0 [ 1114.953095][T29711] call_usermodehelper_exec_work+0xbe/0x230 [ 1114.953113][T29711] process_scheduled_works+0xb6e/0x18c0 [ 1114.953130][T29711] worker_thread+0xa53/0xfc0 [ 1114.953147][T29711] kthread+0x388/0x470 [ 1114.953160][T29711] ret_from_fork+0x51e/0xb90 [ 1114.953177][T29711] ret_from_fork_asm+0x1a/0x30 [ 1114.953198][T29711] [ 1114.953198][T29711] other info that might help us debug this: [ 1114.953198][T29711] [ 1114.953203][T29711] Chain exists of: [ 1114.953203][T29711] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1114.953203][T29711] [ 1114.953230][T29711] Possible interrupt unsafe locking scenario: [ 1114.953230][T29711] [ 1114.953236][T29711] CPU0 CPU1 [ 1114.953241][T29711] ---- ---- [ 1114.953247][T29711] lock(tasklist_lock); [ 1114.953259][T29711] local_irq_disable(); [ 1114.953265][T29711] lock(kbd_event_lock); [ 1114.953277][T29711] lock(&tty->flow.lock); [ 1114.953289][T29711] [ 1114.953294][T29711] lock(kbd_event_lock); [ 1114.953306][T29711] [ 1114.953306][T29711] *** DEADLOCK *** [ 1114.953306][T29711] [ 1114.953311][T29711] 5 locks held by syz.6.7621/29711: [ 1114.953321][T29711] #0: ffff88802b7b3118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1114.953359][T29711] #1: ffff88802b5d7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1114.953404][T29711] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1114.953445][T29711] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1114.953480][T29711] #4: ffffffff8effe4d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1114.953517][T29711] [ 1114.953517][T29711] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1114.953525][T29711] -> (kbd_event_lock){..-.}-{3:3} { [ 1114.953546][T29711] IN-SOFTIRQ-W at: [ 1114.953555][T29711] lock_acquire+0xf0/0x2e0 [ 1114.953573][T29711] _raw_spin_lock+0x2e/0x40 [ 1114.953588][T29711] kbd_event+0xd6/0x40d0 [ 1114.953610][T29711] input_handle_events_default+0xd4/0x1a0 [ 1114.953626][T29711] input_pass_values+0x288/0x890 [ 1114.953639][T29711] input_event_dispose+0x330/0x6b0 [ 1114.953658][T29711] input_event+0x89/0xe0 [ 1114.953676][T29711] hidinput_report_event+0xa1/0x100 [ 1114.953691][T29711] hid_report_raw_event+0x150f/0x1730 [ 1114.953712][T29711] hid_input_report+0x44b/0x580 [ 1114.953732][T29711] hid_irq_in+0x47e/0x6d0 [ 1114.953750][T29711] __usb_hcd_giveback_urb+0x376/0x540 [ 1114.953771][T29711] dummy_timer+0xbbd/0x45d0 [ 1114.953792][T29711] __hrtimer_run_queues+0x53a/0xcc0 [ 1114.953813][T29711] hrtimer_run_softirq+0x182/0x5a0 [ 1114.953834][T29711] handle_softirqs+0x22a/0x870 [ 1114.953852][T29711] __irq_exit_rcu+0x5f/0x150 [ 1114.953870][T29711] irq_exit_rcu+0x9/0x30 [ 1114.953888][T29711] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1114.953905][T29711] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1114.953920][T29711] unwind_next_frame+0x18e1/0x23c0 [ 1114.953940][T29711] arch_stack_walk+0x11b/0x150 [ 1114.953961][T29711] stack_trace_save+0xa9/0x100 [ 1114.953974][T29711] kasan_save_track+0x3e/0x80 [ 1114.953989][T29711] __kasan_kmalloc+0x93/0xb0 [ 1114.954005][T29711] __kmalloc_cache_noprof+0x31c/0x660 [ 1114.954021][T29711] kmem_cache_free+0x15b/0x630 [ 1114.954037][T29711] __put_anon_vma+0x12b/0x2d0 [ 1114.954052][T29711] unlink_anon_vmas+0x58b/0x730 [ 1114.954067][T29711] free_pgtables+0x836/0xb70 [ 1114.954083][T29711] exit_mmap+0x490/0xa10 [ 1114.954096][T29711] __mmput+0x118/0x430 [ 1114.954112][T29711] exec_mmap+0x3b4/0x440 [ 1114.954126][T29711] begin_new_exec+0x134a/0x24a0 [ 1114.954140][T29711] load_elf_binary+0xa47/0x2980 [ 1114.954157][T29711] bprm_execve+0x93d/0x1460 [ 1114.954170][T29711] do_execveat_common+0x50d/0x690 [ 1114.954186][T29711] __x64_sys_execve+0x97/0xc0 [ 1114.954201][T29711] do_syscall_64+0x14d/0xf80 [ 1114.954219][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.954233][T29711] INITIAL USE at: [ 1114.954242][T29711] lock_acquire+0xf0/0x2e0 [ 1114.954259][T29711] _raw_spin_lock_irqsave+0x40/0x60 [ 1114.954275][T29711] vt_reset_unicode+0x2b/0x1a0 [ 1114.954289][T29711] reset_vc+0x68/0x1b0 [ 1114.954309][T29711] vc_init+0x70/0x4a0 [ 1114.954327][T29711] con_init+0x377/0x6a0 [ 1114.954345][T29711] console_init+0x10b/0x4d0 [ 1114.954361][T29711] start_kernel+0x22b/0x3d0 [ 1114.954382][T29711] x86_64_start_reservations+0x24/0x30 [ 1114.954399][T29711] x86_64_start_kernel+0x143/0x1c0 [ 1114.954415][T29711] common_startup_64+0x13e/0x147 [ 1114.954429][T29711] } [ 1114.954434][T29711] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1114.954506][T29711] [ 1114.954506][T29711] the dependencies between the lock to be acquired [ 1114.954512][T29711] and SOFTIRQ-irq-unsafe lock: [ 1114.954532][T29711] -> (tasklist_lock){.+.+}-{3:3} { [ 1114.954556][T29711] HARDIRQ-ON-R at: [ 1114.954565][T29711] lock_acquire+0xf0/0x2e0 [ 1114.954584][T29711] _raw_read_lock+0x36/0x50 [ 1114.954599][T29711] __do_wait+0xde/0x740 [ 1114.954707][T29711] do_wait+0x1e7/0x540 [ 1114.954722][T29711] kernel_wait+0xd6/0x1c0 [ 1114.954737][T29711] call_usermodehelper_exec_work+0xbe/0x230 [ 1114.954758][T29711] process_scheduled_works+0xb6e/0x18c0 [ 1114.954777][T29711] worker_thread+0xa53/0xfc0 [ 1114.954796][T29711] kthread+0x388/0x470 [ 1114.954810][T29711] ret_from_fork+0x51e/0xb90 [ 1114.954829][T29711] ret_from_fork_asm+0x1a/0x30 [ 1114.954851][T29711] SOFTIRQ-ON-R at: [ 1114.954861][T29711] lock_acquire+0xf0/0x2e0 [ 1114.954878][T29711] _raw_read_lock+0x36/0x50 [ 1114.954894][T29711] __do_wait+0xde/0x740 [ 1114.954907][T29711] do_wait+0x1e7/0x540 [ 1114.954921][T29711] kernel_wait+0xd6/0x1c0 [ 1114.954936][T29711] call_usermodehelper_exec_work+0xbe/0x230 [ 1114.954954][T29711] process_scheduled_works+0xb6e/0x18c0 [ 1114.954971][T29711] worker_thread+0xa53/0xfc0 [ 1114.954990][T29711] kthread+0x388/0x470 [ 1114.955002][T29711] ret_from_fork+0x51e/0xb90 [ 1114.955019][T29711] ret_from_fork_asm+0x1a/0x30 [ 1114.955040][T29711] INITIAL USE at: [ 1114.955049][T29711] lock_acquire+0xf0/0x2e0 [ 1114.955066][T29711] _raw_write_lock_irq+0x3d/0x50 [ 1114.955083][T29711] copy_process+0x247a/0x3cd0 [ 1114.955101][T29711] kernel_clone+0x248/0x8e0 [ 1114.955120][T29711] user_mode_thread+0x110/0x180 [ 1114.955140][T29711] rest_init+0x23/0x300 [ 1114.955152][T29711] start_kernel+0x385/0x3d0 [ 1114.955173][T29711] x86_64_start_reservations+0x24/0x30 [ 1114.955190][T29711] x86_64_start_kernel+0x143/0x1c0 [ 1114.955207][T29711] common_startup_64+0x13e/0x147 [ 1114.955221][T29711] INITIAL READ USE at: [ 1114.955231][T29711] lock_acquire+0xf0/0x2e0 [ 1114.955248][T29711] _raw_read_lock+0x36/0x50 [ 1114.955263][T29711] __do_wait+0xde/0x740 [ 1114.955277][T29711] do_wait+0x1e7/0x540 [ 1114.955291][T29711] kernel_wait+0xd6/0x1c0 [ 1114.955306][T29711] call_usermodehelper_exec_work+0xbe/0x230 [ 1114.955323][T29711] process_scheduled_works+0xb6e/0x18c0 [ 1114.955342][T29711] worker_thread+0xa53/0xfc0 [ 1114.955360][T29711] kthread+0x388/0x470 [ 1114.955373][T29711] ret_from_fork+0x51e/0xb90 [ 1114.955391][T29711] ret_from_fork_asm+0x1a/0x30 [ 1114.955411][T29711] } [ 1114.955416][T29711] ... key at: [] tasklist_lock+0x18/0x40 [ 1114.955469][T29711] ... acquired at: [ 1114.955483][T29711] _raw_read_lock+0x36/0x50 [ 1114.955499][T29711] send_sigio+0x101/0x370 [ 1114.955514][T29711] dnotify_handle_event+0x169/0x440 [ 1114.955533][T29711] fsnotify+0x168e/0x1ae0 [ 1114.955547][T29711] __fsnotify_parent+0x50d/0x620 [ 1114.955561][T29711] iterate_dir+0x3ea/0x570 [ 1114.955579][T29711] __se_sys_getdents64+0xf1/0x280 [ 1114.955596][T29711] do_syscall_64+0x14d/0xf80 [ 1114.955622][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.955637][T29711] [ 1114.955641][T29711] -> (&f_owner->lock){....}-{3:3} { [ 1114.955663][T29711] INITIAL USE at: [ 1114.955672][T29711] lock_acquire+0xf0/0x2e0 [ 1114.955689][T29711] _raw_write_lock_irq+0x3d/0x50 [ 1114.955706][T29711] __f_setown+0x67/0x370 [ 1114.955719][T29711] fcntl_dirnotify+0x3f9/0x6a0 [ 1114.955736][T29711] do_fcntl+0x77e/0x1a20 [ 1114.955751][T29711] __se_sys_fcntl+0xc8/0x150 [ 1114.955765][T29711] do_syscall_64+0x14d/0xf80 [ 1114.955783][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.955797][T29711] INITIAL READ USE at: [ 1114.955807][T29711] lock_acquire+0xf0/0x2e0 [ 1114.955825][T29711] _raw_read_lock_irqsave+0x48/0x60 [ 1114.955842][T29711] send_sigio+0x38/0x370 [ 1114.955858][T29711] kill_fasync+0x24d/0x4d0 [ 1114.955873][T29711] lease_break_callback+0x26/0x30 [ 1114.955889][T29711] __break_lease+0x81c/0x1e80 [ 1114.955910][T29711] vfs_mknod+0x52d/0x610 [ 1114.955926][T29711] unix_bind+0x548/0x1230 [ 1114.955947][T29711] __sys_bind+0x2e3/0x410 [ 1114.955961][T29711] __x64_sys_bind+0x7a/0x90 [ 1114.955975][T29711] do_syscall_64+0x14d/0xf80 [ 1114.955992][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.956007][T29711] } [ 1114.956012][T29711] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1114.956049][T29711] ... acquired at: [ 1114.956056][T29711] _raw_read_lock_irqsave+0x48/0x60 [ 1114.956072][T29711] send_sigio+0x38/0x370 [ 1114.956087][T29711] kill_fasync+0x24d/0x4d0 [ 1114.956103][T29711] lease_break_callback+0x26/0x30 [ 1114.956119][T29711] __break_lease+0x81c/0x1e80 [ 1114.956139][T29711] vfs_mknod+0x52d/0x610 [ 1114.956155][T29711] unix_bind+0x548/0x1230 [ 1114.956174][T29711] __sys_bind+0x2e3/0x410 [ 1114.956187][T29711] __x64_sys_bind+0x7a/0x90 [ 1114.956200][T29711] do_syscall_64+0x14d/0xf80 [ 1114.956218][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.956232][T29711] [ 1114.956237][T29711] -> (&new->fa_lock){...-}-{3:3} { [ 1114.956260][T29711] IN-SOFTIRQ-R at: [ 1114.956269][T29711] lock_acquire+0xf0/0x2e0 [ 1114.956287][T29711] _raw_read_lock_irqsave+0x48/0x60 [ 1114.956304][T29711] kill_fasync+0x199/0x4d0 [ 1114.956320][T29711] sock_wake_async+0x137/0x160 [ 1114.956334][T29711] sock_def_readable+0x3c1/0x580 [ 1114.956356][T29711] tcp_data_queue+0x1e2e/0x5e50 [ 1114.956375][T29711] tcp_rcv_established+0xf45/0x2740 [ 1114.956393][T29711] tcp_v4_do_rcv+0xa90/0x1430 [ 1114.956406][T29711] tcp_v4_rcv+0x2825/0x31f0 [ 1114.956419][T29711] ip_protocol_deliver_rcu+0x221/0x440 [ 1114.956441][T29711] ip_local_deliver_finish+0x3bb/0x6f0 [ 1114.956463][T29711] NF_HOOK+0x336/0x3c0 [ 1114.956482][T29711] NF_HOOK+0x336/0x3c0 [ 1114.956502][T29711] process_backlog+0xaa3/0x1950 [ 1114.956517][T29711] __napi_poll+0xae/0x340 [ 1114.956530][T29711] net_rx_action+0x627/0xf70 [ 1114.956544][T29711] handle_softirqs+0x22a/0x870 [ 1114.956562][T29711] do_softirq+0x76/0xd0 [ 1114.956580][T29711] __local_bh_enable_ip+0xf8/0x130 [ 1114.956597][T29711] sk_stream_wait_memory+0x72b/0xf80 [ 1114.956625][T29711] tcp_sendmsg_locked+0x23ba/0x5490 [ 1114.956645][T29711] tcp_sendmsg+0x2f/0x50 [ 1114.956663][T29711] __sys_sendto+0x5de/0x710 [ 1114.956678][T29711] __x64_sys_sendto+0xde/0x100 [ 1114.956694][T29711] do_syscall_64+0x14d/0xf80 [ 1114.956712][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.956727][T29711] INITIAL USE at: [ 1114.956736][T29711] lock_acquire+0xf0/0x2e0 [ 1114.956752][T29711] _raw_write_lock_irq+0x3d/0x50 [ 1114.956769][T29711] fasync_remove_entry+0xf1/0x1c0 [ 1114.956784][T29711] lease_modify+0x4f7/0x6c0 [ 1114.956804][T29711] generic_setlease+0xe22/0xff0 [ 1114.956817][T29711] fcntl_setlease+0x108/0x180 [ 1114.956830][T29711] do_fcntl+0x8b3/0x1a20 [ 1114.956846][T29711] __se_sys_fcntl+0xc8/0x150 [ 1114.956860][T29711] do_syscall_64+0x14d/0xf80 [ 1114.956878][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.956892][T29711] INITIAL READ USE at: [ 1114.956901][T29711] lock_acquire+0xf0/0x2e0 [ 1114.956918][T29711] _raw_read_lock_irqsave+0x48/0x60 [ 1114.956934][T29711] kill_fasync+0x199/0x4d0 [ 1114.956949][T29711] lease_break_callback+0x26/0x30 [ 1114.956965][T29711] __break_lease+0x81c/0x1e80 [ 1114.956985][T29711] vfs_mknod+0x52d/0x610 [ 1114.957001][T29711] unix_bind+0x548/0x1230 [ 1114.957019][T29711] __sys_bind+0x2e3/0x410 [ 1114.957033][T29711] __x64_sys_bind+0x7a/0x90 [ 1114.957046][T29711] do_syscall_64+0x14d/0xf80 [ 1114.957064][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.957079][T29711] } [ 1114.957084][T29711] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1114.957108][T29711] ... acquired at: [ 1114.957114][T29711] _raw_read_lock_irqsave+0x48/0x60 [ 1114.957130][T29711] kill_fasync+0x199/0x4d0 [ 1114.957144][T29711] __start_tty+0x18c/0x220 [ 1114.957157][T29711] tty_send_xchar+0x1d2/0x4d0 [ 1114.957170][T29711] tty_ioctl+0x9c5/0xde0 [ 1114.957184][T29711] __se_sys_ioctl+0xfc/0x170 [ 1114.957199][T29711] do_syscall_64+0x14d/0xf80 [ 1114.957216][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.957230][T29711] [ 1114.957234][T29711] -> (&tty->flow.lock){....}-{3:3} { [ 1114.957255][T29711] INITIAL USE at: [ 1114.957264][T29711] lock_acquire+0xf0/0x2e0 [ 1114.957281][T29711] _raw_spin_lock_irqsave+0x40/0x60 [ 1114.957296][T29711] start_tty+0x20/0x70 [ 1114.957309][T29711] n_tty_set_termios+0xa7c/0x10c0 [ 1114.957327][T29711] tty_set_termios+0xdb3/0x1800 [ 1114.957347][T29711] set_termios+0x566/0x710 [ 1114.957359][T29711] tty_mode_ioctl+0x4a6/0x7d0 [ 1114.957372][T29711] tty_ioctl+0x9c5/0xde0 [ 1114.957386][T29711] __se_sys_ioctl+0xfc/0x170 [ 1114.957401][T29711] do_syscall_64+0x14d/0xf80 [ 1114.957419][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.957433][T29711] } [ 1114.957438][T29711] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1114.957474][T29711] ... acquired at: [ 1114.957480][T29711] _raw_spin_lock_irqsave+0x40/0x60 [ 1114.957495][T29711] stop_tty+0x2f/0x150 [ 1114.957507][T29711] kbd_event+0x2ec1/0x40d0 [ 1114.957522][T29711] input_handle_events_default+0xd4/0x1a0 [ 1114.957539][T29711] input_pass_values+0x288/0x890 [ 1114.957553][T29711] input_event_dispose+0x330/0x6b0 [ 1114.957573][T29711] input_inject_event+0x1dd/0x340 [ 1114.957591][T29711] evdev_write+0x325/0x4c0 [ 1114.957612][T29711] vfs_write+0x29a/0xb90 [ 1114.957626][T29711] ksys_write+0x150/0x270 [ 1114.957640][T29711] do_syscall_64+0x14d/0xf80 [ 1114.957658][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.957671][T29711] [ 1114.957675][T29711] [ 1114.957675][T29711] stack backtrace: [ 1114.957688][T29711] CPU: 1 UID: 0 PID: 29711 Comm: syz.6.7621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1114.957709][T29711] Tainted: [L]=SOFTLOCKUP [ 1114.957715][T29711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1114.957725][T29711] Call Trace: [ 1114.957732][T29711] [ 1114.957738][T29711] dump_stack_lvl+0xe8/0x150 [ 1114.957759][T29711] __lock_acquire+0x2a94/0x2cf0 [ 1114.957785][T29711] lock_acquire+0xf0/0x2e0 [ 1114.957802][T29711] ? stop_tty+0x2f/0x150 [ 1114.957817][T29711] _raw_spin_lock_irqsave+0x40/0x60 [ 1114.957833][T29711] ? stop_tty+0x2f/0x150 [ 1114.957847][T29711] stop_tty+0x2f/0x150 [ 1114.957862][T29711] kbd_event+0x2ec1/0x40d0 [ 1114.957878][T29711] ? kernel_fpu_end+0x4f/0x80 [ 1114.957892][T29711] ? blake2s_compress+0x1e17/0x1eb0 [ 1114.957912][T29711] ? __pfx_kbd_event+0x10/0x10 [ 1114.957930][T29711] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.957950][T29711] ? __pfx_blake2s_compress+0x10/0x10 [ 1114.957966][T29711] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.957987][T29711] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.958005][T29711] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.958026][T29711] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.958044][T29711] ? lock_acquire+0xf0/0x2e0 [ 1114.958063][T29711] input_handle_events_default+0xd4/0x1a0 [ 1114.958081][T29711] ? input_pass_values+0x8d/0x890 [ 1114.958093][T29711] input_pass_values+0x288/0x890 [ 1114.958109][T29711] ? input_handle_event+0x70c/0xf30 [ 1114.958129][T29711] input_event_dispose+0x330/0x6b0 [ 1114.958149][T29711] input_inject_event+0x1dd/0x340 [ 1114.958170][T29711] ? input_inject_event+0xb6/0x340 [ 1114.958190][T29711] evdev_write+0x325/0x4c0 [ 1114.958208][T29711] ? __pfx_evdev_write+0x10/0x10 [ 1114.958223][T29711] ? bpf_lsm_file_permission+0x9/0x20 [ 1114.958241][T29711] ? security_file_permission+0x75/0x260 [ 1114.958261][T29711] ? rw_verify_area+0x255/0x4d0 [ 1114.958276][T29711] ? __pfx_evdev_write+0x10/0x10 [ 1114.958291][T29711] vfs_write+0x29a/0xb90 [ 1114.958309][T29711] ? __pfx_vfs_write+0x10/0x10 [ 1114.958324][T29711] ? __fget_files+0x2a/0x420 [ 1114.958338][T29711] ? __fget_files+0x2a/0x420 [ 1114.958350][T29711] ? __fget_files+0x3a0/0x420 [ 1114.958362][T29711] ? __fget_files+0x2a/0x420 [ 1114.958376][T29711] ksys_write+0x150/0x270 [ 1114.958392][T29711] ? __pfx_ksys_write+0x10/0x10 [ 1114.958410][T29711] do_syscall_64+0x14d/0xf80 [ 1114.958428][T29711] ? trace_irq_disable+0x3b/0x150 [ 1114.958441][T29711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.958455][T29711] ? clear_bhb_loop+0x40/0x90 [ 1114.958471][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.958486][T29711] RIP: 0033:0x7f3788d9c819 [ 1114.958501][T29711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.958514][T29711] RSP: 002b:00007f3789d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.958530][T29711] RAX: ffffffffffffffda RBX: 00007f3789015fa0 RCX: 00007f3788d9c819 [ 1114.958541][T29711] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 1114.958551][T29711] RBP: 00007f3788e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1114.958560][T29711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.958569][T29711] R13: 00007f3789016038 R14: 00007f3789015fa0 R15: 00007f378913fa48 [ 1114.958585][T29711] [ 1116.063392][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.063443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22