last executing test programs: 19.982760489s ago: executing program 1 (id=3354): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x3b8d7000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)}) 17.301382382s ago: executing program 3 (id=3360): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20042844}, 0x44895) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000080)={0x9, 0x36, 0x540, 0x6, 0x9, 0xd95}) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000fa43"], 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="53594e54480a564f4c554d45202753796e746820436170745032b28ff8b26d7f940c263b8475726520537769"], 0xb9) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) 16.752772242s ago: executing program 1 (id=3361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000700ffffffff"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r5, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x200000, 0x8000, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r6) 16.697783988s ago: executing program 0 (id=3362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1e}, 0x48, 0xfffffffffffffffa) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "97c04fb8269ce36ba72248cb1179f0b96dd19ae9f28fcee0f4910686c22a5b87bee1f68b2bc3bc4f42b36e6dfd3c5c2b1e842d9f12d84a39275d9019a8f498be3c815fef2180b0f3822f"}}}}}}, 0x72) 16.0609069s ago: executing program 4 (id=3363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r6}) r8 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0), 0x0, r6) r9 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r8) socket$inet(0x2, 0x800, 0x0) keyctl$assume_authority(0x10, r9) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 14.8557465s ago: executing program 0 (id=3364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.777412195s ago: executing program 2 (id=3365): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x0, 0x0}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13.235074229s ago: executing program 1 (id=3366): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) listen(r6, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100)) 12.785953471s ago: executing program 3 (id=3367): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) listen(r6, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100)) 12.75036905s ago: executing program 2 (id=3368): r0 = socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @broadcast}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 12.199417056s ago: executing program 4 (id=3369): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000080)={0xfffffff8, 0x5, 0x7}, 0x0) unshare(0x40000080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 12.004471111s ago: executing program 0 (id=3370): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/157, 0x9d}}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='7', 0x1, 0x4}]) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x1000}) 9.615424948s ago: executing program 4 (id=3371): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x3b8d7000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)}) 9.316728938s ago: executing program 0 (id=3372): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x28802, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet(0x2, 0x2, 0x307fea7b) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x10001d, 0x18b, &(0x7f0000000440)}) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r4, 0x8}, {r1, 0x80}, {r6, 0x2004}, {r2, 0x2002}, {r0, 0x3000}, {r2, 0x20}, {r5, 0x23}, {0xffffffffffffffff, 0x6025}, {r5, 0x80}, {r7, 0x288}], 0xa, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000686000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff0800"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9.315799961s ago: executing program 1 (id=3373): r0 = socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 9.169666444s ago: executing program 2 (id=3374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xf, 0x803, 0x9) r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/sequencer2\x00', 0x20, 0x6, 0x20, [0x66, 0x33, 0x65, 0x37, 0x6e, 0xe, 0x62, 0x66]}, 0x44, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "97c04fb8269ce36ba72248cb1179f0b96dd19ae9f28fcee0f4910686c22a5b87bee1f68b2bc3bc4f42b36e6dfd3c5c2b1e842d9f12d84a39275d9019a8f498be3c815fef2180b0f3822f"}}}}}}, 0x72) 9.116155713s ago: executing program 3 (id=3375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1e}, 0x48, 0xfffffffffffffffa) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "97c04fb8269ce36ba72248cb1179f0b96dd19ae9f28fcee0f4910686c22a5b87bee1f68b2bc3bc4f42b36e6dfd3c5c2b1e842d9f12d84a39275d9019a8f498be3c815fef2180b0f3822f"}}}}}}, 0x72) 7.75332063s ago: executing program 3 (id=3376): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0x2, 0xce20, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000380)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="5825be06000000000000007ca2746314d178", 0x12}], 0x1}}], 0x2, 0x4080) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r7 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 6.532036817s ago: executing program 2 (id=3377): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=@newsa={0xfc, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf9}}]}, 0xfc}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e9, 0x1000, 0x0, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 6.384164192s ago: executing program 4 (id=3378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fstat(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000019140)=[0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fchownat(0xffffffffffffffff, &(0x7f0000019100)='./file0\x00', r3, r4, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r10 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000019340)={&(0x7f0000019280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019300)={&(0x7f00000192c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0xa1, &(0x7f0000019400)={@remote, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f98000", 0x67, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x32, 0x4, 0x2, 0x8c, 0x0, [@private1, @empty]}], {0x0, 0xe1f, 0x3f, 0x0, @opaque="bd82d5414570b820378fb9ac449d2439e67c6ad0a30209036059cb550a1b5fccf2ceaeef26c3da42990404c961fe3f45542409be494811"}}}}}}, 0x0) 5.104710713s ago: executing program 0 (id=3379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, 0x0}], 0x1, 0x4010800) io_setup(0xff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x84) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_submit(0x0, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 5.104192435s ago: executing program 1 (id=3380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r6}) r8 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0), 0x0, r6) r9 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r8) socket$inet(0x2, 0x800, 0x0) keyctl$assume_authority(0x10, r9) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 4.666264112s ago: executing program 3 (id=3381): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000020c0)=ANY=[@ANYRES8=0x0]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) 3.78433557s ago: executing program 4 (id=3382): r0 = socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 3.634681329s ago: executing program 2 (id=3383): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) listen(r6, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100)) 2.492466436s ago: executing program 1 (id=3384): r0 = socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @broadcast}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2.007434973s ago: executing program 3 (id=3385): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000080)={0xfffffff8, 0x5, 0x7}, 0x0) unshare(0x40000080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.71662893s ago: executing program 0 (id=3386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x417}, &(0x7f0000000240)=0x8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000001640)={0x80000001, 0x1, 0x1, {0x0, @sliced={0x17f, [0x7, 0x7, 0x0, 0x4, 0xb, 0xf6, 0x7, 0x7, 0x3, 0x0, 0x2, 0x9, 0x6, 0x6, 0x81, 0xe9b, 0xfff6, 0xaa98, 0x2, 0x4, 0x5, 0x5, 0xffff, 0x80, 0x7, 0xa1, 0xfffb, 0x2, 0xff, 0xffff, 0x8, 0xff48, 0xef46, 0x9, 0x7, 0x8, 0x10, 0xb, 0x8, 0x2, 0x7, 0xff68, 0x6, 0x9, 0x7, 0x7, 0xc78, 0x3]}}, 0x6}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc}}], 0x1, 0x20004080) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x760, 0xd8, &(0x7f0000000400)="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", &(0x7f0000001400)=""/216, 0xfff, 0x0, 0x0, 0x77, 0x0, &(0x7f0000001540)="dd0a1f9acb2c454cae388845b6e68ddb621db5013c9dc39a0309ed1c7d8d8e63049c3d2233af3c14938569859c9b1054eba5654de0de4646ad674591d7b85d26ec8a99698143c60b907e6243ce32b3a249791e0d412896acc5e95d8fb11e74c4ab91dfa03ecadec621b0c46d9d12d5778ed84a1c5310a4", 0x2, 0x0, 0x2}, 0x4c) sendfile(r6, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) semget(0x0, 0x4, 0x326) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000280)={0x1, 0x2}, 0x8) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r7, 0x0, 0x0, 0x4004000) 227.65946ms ago: executing program 2 (id=3387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xf, 0x803, 0x9) r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1e}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/sequencer2\x00', 0x20, 0x6, 0x20, [0x66, 0x33, 0x65, 0x37, 0x6e, 0xe, 0x62, 0x66]}, 0x44, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "97c04fb8269ce36ba72248cb1179f0b96dd19ae9f28fcee0f4910686c22a5b87bee1f68b2bc3bc4f42b36e6dfd3c5c2b1e842d9f12d84a39275d9019a8f498be3c815fef2180b0f3822f"}}}}}}, 0x72) 0s ago: executing program 4 (id=3388): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x0, 0x0}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): vrusb2: ********** [ 1819.689745][ T2345] pvrusb2: Invalid write control endpoint [ 1820.204832][ T2345] pvrusb2: Invalid write control endpoint [ 1820.215195][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1820.258550][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1820.270758][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1820.288823][ T2345] pvrusb2: Device being rendered inoperable [ 1820.317077][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1820.325369][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 1820.334978][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1820.345773][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1820.365556][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1821.486842][T20757] netlink: 'syz.1.2860': attribute type 4 has an invalid length. [ 1821.915099][T20758] netlink: 'syz.1.2860': attribute type 4 has an invalid length. [ 1822.244401][T18117] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1822.282639][ T10] usb 5-1: USB disconnect, device number 70 [ 1822.414656][T18117] usb 2-1: Using ep0 maxpacket: 8 [ 1822.429017][T18117] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1822.448633][T18117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.834482][T12127] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1822.866028][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1822.907136][T18117] pvrusb2: ********** [ 1822.934269][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1822.945168][T18117] pvrusb2: Important functionality might not be entirely working. [ 1822.953056][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1823.010562][T18117] pvrusb2: ********** [ 1823.047493][T12127] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.074053][ T2345] pvrusb2: Invalid write control endpoint [ 1823.109244][T12127] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1823.245272][T20779] kvm: emulating exchange as write [ 1823.294237][T12127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1823.334784][T12127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.364283][ T2345] pvrusb2: Invalid write control endpoint [ 1823.438674][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1823.467698][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1823.484821][T12127] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1823.680183][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1823.712809][ T2345] pvrusb2: Device being rendered inoperable [ 1823.734085][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1823.769253][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 1823.820246][T12127] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1823.836879][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1823.952281][T20787] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2865'. [ 1823.993893][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1824.026361][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1824.355162][T12127] usb 2-1: USB disconnect, device number 75 [ 1824.364864][T20789] syzkaller1: entered promiscuous mode [ 1824.370422][T20789] syzkaller1: entered allmulticast mode [ 1824.732568][T20795] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1825.152858][T20800] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1825.166596][T20800] syzkaller1: entered promiscuous mode [ 1825.172291][T20800] syzkaller1: entered allmulticast mode [ 1825.733435][T18117] usb 4-1: USB disconnect, device number 71 [ 1825.766251][T20768] delete_channel: no stack [ 1828.592547][T20834] loop6: detected capacity change from 0 to 524287999 [ 1828.757052][T20839] netlink: 'syz.2.2874': attribute type 4 has an invalid length. [ 1828.811292][T20837] netlink: 'syz.2.2874': attribute type 4 has an invalid length. [ 1829.289399][T12127] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1830.123989][T12127] usb 3-1: Using ep0 maxpacket: 8 [ 1830.133779][T12127] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1830.143311][T12127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.174268][T12127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1830.193033][T12127] pvrusb2: ********** [ 1830.202310][T12127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1830.232879][T12127] pvrusb2: Important functionality might not be entirely working. [ 1830.276272][T12127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1830.328479][T12127] pvrusb2: ********** [ 1830.376099][ T2345] pvrusb2: Invalid write control endpoint [ 1830.465512][T20848] xt_bpf: check failed: parse error [ 1831.138988][ T2345] pvrusb2: Invalid write control endpoint [ 1831.177529][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1831.275646][T20843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2875'. [ 1831.352850][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1831.372871][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1831.400043][ T2345] pvrusb2: Device being rendered inoperable [ 1831.415864][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1831.431185][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 1831.443716][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1831.629189][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1831.649258][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1832.085178][T20862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1832.094405][T20862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1832.109549][T20862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1832.118212][T20862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1832.128088][T20862] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1833.706206][T20873] libceph: resolve '. [ 1833.706206][T20873] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 1833.706206][T20873] ' (ret=-3): failed [ 1833.759359][T20878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2880'. [ 1833.775797][T20878] syzkaller1: entered promiscuous mode [ 1833.781507][T20878] syzkaller1: entered allmulticast mode [ 1833.897790][T20879] binder: 20876:20879 ioctl c0306201 0 returned -14 [ 1833.906767][T20879] binder: 20876:20879 ioctl 4018620d 0 returned -22 [ 1833.926228][T20879] binder: 20876:20879 ioctl c0306201 0 returned -14 [ 1834.059471][T18136] usb 3-1: USB disconnect, device number 68 [ 1834.204276][ T9382] Bluetooth: hci4: command 0x0c1a tx timeout [ 1834.287220][ T9382] Bluetooth: hci3: command 0x0c1a tx timeout [ 1834.293319][ T9382] Bluetooth: hci2: command 0x0c1a tx timeout [ 1834.299379][ T9382] Bluetooth: hci1: command 0x0c1a tx timeout [ 1834.305427][ T9382] Bluetooth: hci0: command 0x0c1a tx timeout [ 1834.689948][T20886] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2883'. [ 1834.701114][T20886] syzkaller1: entered promiscuous mode [ 1834.706901][T20886] syzkaller1: entered allmulticast mode [ 1836.445670][T20899] netlink: 'syz.4.2884': attribute type 2 has an invalid length. [ 1836.510089][T20910] netlink: 'syz.4.2884': attribute type 2 has an invalid length. [ 1836.612574][T20899] !: entered promiscuous mode [ 1836.630968][T20910] !: left promiscuous mode [ 1838.260320][T18117] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1838.406563][T20929] binder: 20923:20929 ioctl 4018620d 0 returned -22 [ 1838.435916][T20929] binder: 20923:20929 ioctl c0306201 80000080 returned -14 [ 1838.512233][T18117] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1838.533936][T18117] usb 4-1: config 0 has no interface number 0 [ 1838.566581][T18117] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1838.635366][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 1838.747061][T18117] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1838.798076][T18117] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1838.869262][T18117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.894321][T18117] usb 4-1: Product: syz [ 1838.905633][T18117] usb 4-1: Manufacturer: syz [ 1838.919557][T18117] usb 4-1: SerialNumber: syz [ 1838.978313][T18117] usb 4-1: config 0 descriptor?? [ 1839.237664][T20919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1839.491885][T18117] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1840.928359][T20929] binder: 20923:20929 ioctl d000941e 0 returned -22 [ 1840.988088][T12127] usb 4-1: USB disconnect, device number 72 [ 1840.996114][T12127] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1841.224477][T20948] netlink: 'syz.0.2893': attribute type 4 has an invalid length. [ 1841.257023][T20948] netlink: 'syz.0.2893': attribute type 4 has an invalid length. [ 1841.671698][T12127] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1841.896178][T12127] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1841.904816][T12127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.935851][T12127] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1841.964860][T12127] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1841.993983][T12127] usb 4-1: Manufacturer: syz [ 1842.014317][T12127] usb 4-1: config 0 descriptor?? [ 1842.024487][T18136] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1842.184470][T18136] usb 1-1: Using ep0 maxpacket: 8 [ 1842.202533][T18136] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1842.328565][T20960] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2897'. [ 1842.340658][T20960] syzkaller1: entered promiscuous mode [ 1842.346346][T20960] syzkaller1: entered allmulticast mode [ 1842.384450][T18136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.426801][T18136] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1842.444322][T12127] rc_core: IR keymap rc-hauppauge not found [ 1842.450398][T12127] Registered IR keymap rc-empty [ 1842.459186][T18136] pvrusb2: ********** [ 1842.463455][T18136] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1842.527836][T12127] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1842.561998][T18136] pvrusb2: Important functionality might not be entirely working. [ 1842.593606][T12127] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 1842.664779][T18136] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1842.729294][T18136] pvrusb2: ********** [ 1842.760003][ T2345] pvrusb2: Invalid write control endpoint [ 1843.102783][ T2345] pvrusb2: Invalid write control endpoint [ 1843.375856][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1843.406693][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1843.436802][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1843.492045][ T2345] pvrusb2: Device being rendered inoperable [ 1843.519628][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1843.544381][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 1843.586117][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1843.607237][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1843.638741][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1843.986934][ T30] audit: type=1326 audit(1765663039.905:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20949 comm="syz.3.2895" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x0 [ 1845.705726][T12127] usb 4-1: USB disconnect, device number 73 [ 1845.750093][ T5908] usb 1-1: USB disconnect, device number 73 [ 1847.064945][ T5908] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1847.266636][ T5908] usb 2-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.281279][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1847.338370][T21000] xt_bpf: check failed: parse error [ 1847.714379][ T5908] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1847.907825][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.948941][ T5908] usb 2-1: config 0 descriptor?? [ 1848.130516][T18136] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1848.140857][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1848.337557][T18136] usb 3-1: device descriptor read/64, error -32 [ 1848.372653][ T5908] nti 0003:0757:0A00.0009: invalid report_size -1903817399 [ 1848.536364][ T5908] nti 0003:0757:0A00.0009: item 0 4 1 7 parsing failed [ 1848.547419][ T5908] nti 0003:0757:0A00.0009: probe with driver nti failed with error -22 [ 1848.609668][T20993] netlink: 'syz.1.2903': attribute type 11 has an invalid length. [ 1848.621557][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 1848.642428][ T5908] usb 2-1: USB disconnect, device number 76 [ 1848.762505][T18136] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1848.957204][T18136] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1848.965735][T18136] usb 3-1: config 0 has no interface number 0 [ 1848.975769][T18136] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1848.999367][T18136] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1849.045049][T18136] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1849.062781][T18136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.093135][T18136] usb 3-1: Product: syz [ 1849.103947][T18136] usb 3-1: Manufacturer: syz [ 1849.117754][T18136] usb 3-1: SerialNumber: syz [ 1849.140113][T18136] usb 3-1: config 0 descriptor?? [ 1849.174774][T21005] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.225405][T18136] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1849.532743][T21021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2908'. [ 1849.753288][T21023] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2909'. [ 1850.741220][ T5908] usb 3-1: USB disconnect, device number 70 [ 1850.749703][ T5908] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1851.661495][T21047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1851.675836][T21047] syzkaller1: entered promiscuous mode [ 1851.681418][T21047] syzkaller1: entered allmulticast mode [ 1851.906799][T18117] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1852.279073][T18117] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1852.300378][T18117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.345957][T18117] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1852.795167][T18117] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1852.813506][T18117] usb 1-1: Manufacturer: syz [ 1852.880074][T18117] usb 1-1: config 0 descriptor?? [ 1852.963957][T18117] rc_core: IR keymap rc-hauppauge not found [ 1852.983896][T18117] Registered IR keymap rc-empty [ 1853.003794][T18117] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1853.055275][T18117] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 1854.872666][T21068] netlink: 'syz.1.2917': attribute type 3 has an invalid length. [ 1855.004390][ T30] audit: type=1326 audit(1765663050.925:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.0.2913" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 1856.554837][ T5908] usb 1-1: USB disconnect, device number 74 [ 1856.874018][T18117] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1857.174541][T18117] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1857.182671][T18117] usb 3-1: config 0 has no interface number 0 [ 1857.293921][T18117] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1857.313197][T18117] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1857.335582][T18117] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1857.480846][T18117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.550680][T21098] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2924'. [ 1857.564123][T21098] syzkaller1: entered promiscuous mode [ 1857.569794][T21098] syzkaller1: entered allmulticast mode [ 1857.621040][T18117] usb 3-1: Product: syz [ 1857.755418][T18117] usb 3-1: Manufacturer: syz [ 1857.760496][T18117] usb 3-1: SerialNumber: syz [ 1857.896556][T18117] usb 3-1: config 0 descriptor?? [ 1857.929574][T21083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1858.046683][T18117] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1858.179963][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 1858.819873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.832020][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.409538][T12127] usb 3-1: USB disconnect, device number 71 [ 1859.425816][T12127] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1859.482179][T21111] netlink: 'syz.1.2925': attribute type 4 has an invalid length. [ 1859.658451][T21116] netlink: 'syz.1.2925': attribute type 4 has an invalid length. [ 1860.318734][ T5908] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1860.523987][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 1860.546167][ T5908] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1860.680972][T21126] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1860.707947][T21126] syzkaller1: entered promiscuous mode [ 1860.713600][T21126] syzkaller1: entered allmulticast mode [ 1860.725373][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.816413][ T5908] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1860.836375][ T5908] pvrusb2: ********** [ 1860.847121][ T5908] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1860.877939][ T5908] pvrusb2: Important functionality might not be entirely working. [ 1860.901475][ T5908] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1860.936819][ T5908] pvrusb2: ********** [ 1861.063999][ T2345] pvrusb2: Invalid write control endpoint [ 1861.130264][T21132] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 1861.551842][T21132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.571253][ T2345] pvrusb2: Invalid write control endpoint [ 1861.632789][T21143] netlink: 'syz.3.2930': attribute type 3 has an invalid length. [ 1861.645211][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1861.796720][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1861.818912][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1861.890469][ T2345] pvrusb2: Device being rendered inoperable [ 1861.974079][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1862.010577][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1862.024639][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1862.030141][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1862.040997][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1862.386239][T21155] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1863.845453][T18117] usb 2-1: USB disconnect, device number 77 [ 1864.255305][T21167] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1864.484579][T21168] syzkaller1: entered promiscuous mode [ 1864.514957][T21168] syzkaller1: entered allmulticast mode [ 1864.633534][T21172] netlink: 'syz.4.2934': attribute type 4 has an invalid length. [ 1864.767328][T21176] netlink: 'syz.4.2934': attribute type 4 has an invalid length. [ 1864.953004][T21178] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1865.349304][T12127] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1865.487899][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 1865.513982][T12127] usb 5-1: Using ep0 maxpacket: 8 [ 1865.533971][ T5908] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1865.554061][T12127] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1865.564448][T12127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.727697][T12127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1865.740458][T12127] pvrusb2: ********** [ 1865.752158][T12127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1865.774069][T12127] pvrusb2: Important functionality might not be entirely working. [ 1865.795813][T12127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1865.815999][ T5908] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1865.833338][ T5908] usb 4-1: config 0 has no interface number 0 [ 1865.840095][T12127] pvrusb2: ********** [ 1865.855090][ T5908] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1865.867000][ T2345] pvrusb2: Invalid write control endpoint [ 1865.894390][ T5908] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1865.953670][ T5908] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1865.980861][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.012216][ T5908] usb 4-1: Product: syz [ 1866.027528][ T5908] usb 4-1: Manufacturer: syz [ 1866.042781][ T5908] usb 4-1: SerialNumber: syz [ 1866.061534][ T5908] usb 4-1: config 0 descriptor?? [ 1866.078536][T21183] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1866.134586][ T5908] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1866.254655][ T2345] pvrusb2: Invalid write control endpoint [ 1866.269334][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1866.288044][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1866.312771][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1866.327463][ T2345] pvrusb2: Device being rendered inoperable [ 1866.344083][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1866.351776][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1866.387894][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1866.428551][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1866.493960][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1868.627155][ T5908] usb 4-1: USB disconnect, device number 74 [ 1868.635948][ T5908] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1869.002414][T17222] usb 5-1: USB disconnect, device number 71 [ 1869.222281][T21210] [U]  [ 1869.733578][T21222] binder: 21213:21222 ioctl c0306201 0 returned -14 [ 1870.218720][T21225] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1871.676890][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1872.128284][T21245] netlink: 'syz.2.2945': attribute type 2 has an invalid length. [ 1872.145627][T21245] !: entered promiscuous mode [ 1872.159810][T21245] netlink: 'syz.2.2945': attribute type 2 has an invalid length. [ 1872.167914][T21245] !: left promiscuous mode [ 1872.275353][T21248] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2947'. [ 1872.286346][T21248] syzkaller1: entered promiscuous mode [ 1872.291992][T21248] syzkaller1: entered allmulticast mode [ 1874.716010][T21264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1874.781693][T21265] lo: left promiscuous mode [ 1874.805460][T21265] tunl0: left promiscuous mode [ 1874.887236][T21265] gre0: left promiscuous mode [ 1874.903336][T21265] gretap0: left promiscuous mode [ 1874.929595][T21266] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1875.881392][T21265] erspan0: left promiscuous mode [ 1876.050252][T21265] ip_vti0: left promiscuous mode [ 1876.060083][T21265] ip6_vti0: left promiscuous mode [ 1876.066681][T21265] sit0: left promiscuous mode [ 1876.090849][T21265] ip6tnl0: left promiscuous mode [ 1876.097028][T21265] ip6gre0: left promiscuous mode [ 1876.104801][T21265] syz_tun: left promiscuous mode [ 1876.132907][T21265] ip6gretap0: left promiscuous mode [ 1876.184189][T21265] vcan0: left promiscuous mode [ 1876.215596][T21265] team0: left promiscuous mode [ 1876.220702][T21265] team_slave_0: left promiscuous mode [ 1876.290220][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 1876.303223][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 1876.404236][T21265] team_slave_1: left promiscuous mode [ 1876.411653][T21265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1876.419648][T21265] dummy0: left promiscuous mode [ 1876.447443][T21265] nlmon0: left promiscuous mode [ 1876.484447][T21265] caif0: left promiscuous mode [ 1876.554105][T21265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1876.863945][T18117] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1877.205242][T18117] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1877.215889][T18117] usb 1-1: config 0 has no interface number 0 [ 1877.222070][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1877.233776][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1877.254193][T18117] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1877.264008][T18117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.274422][T18117] usb 1-1: Product: syz [ 1877.409334][T18117] usb 1-1: Manufacturer: syz [ 1877.435288][T18117] usb 1-1: SerialNumber: syz [ 1877.464490][T18117] usb 1-1: config 0 descriptor?? [ 1877.494567][T21276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1877.526408][T18117] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1878.277938][T21292] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2956'. [ 1878.525033][T21290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1878.531925][T21290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1878.544686][T21290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1878.584549][T21290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1878.590940][T21290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1879.678791][ T5908] usb 1-1: USB disconnect, device number 75 [ 1879.687993][ T5908] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1880.325912][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 1880.453658][T20881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1880.574596][T20881] Bluetooth: hci1: command 0x0c1a tx timeout [ 1880.574609][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1880.659716][T20881] Bluetooth: hci4: command 0x0c1a tx timeout [ 1880.659752][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1882.130572][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1882.929525][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1883.344850][T21342] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1883.356822][T21342] syzkaller1: entered promiscuous mode [ 1883.362550][T21342] syzkaller1: entered allmulticast mode [ 1884.911110][T21359] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1886.501240][T21366] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1887.746368][T21366] bridge_slave_1: left allmulticast mode [ 1887.762815][T21366] bridge_slave_1: left promiscuous mode [ 1887.854334][T21366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.872969][T21366] bridge_slave_0: left allmulticast mode [ 1887.888740][T21366] bridge_slave_0: left promiscuous mode [ 1887.910322][T21366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.603076][T21377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1890.620205][T21377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1890.632350][T21377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1890.644289][T21377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1890.650846][T21377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1892.935136][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1892.935640][T20881] Bluetooth: hci3: command 0x0c1a tx timeout [ 1892.941623][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1892.953608][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1892.959780][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 1895.142807][T21426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1895.435615][T21430] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1895.447522][T21430] syzkaller1: entered promiscuous mode [ 1895.453130][T21430] syzkaller1: entered allmulticast mode [ 1896.040034][T21435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2980'. [ 1896.075391][T21433] syzkaller1: entered promiscuous mode [ 1896.081022][T21433] syzkaller1: entered allmulticast mode [ 1896.380160][T21440] usb usb8: usbfs: process 21440 (syz.0.2991) did not claim interface 0 before use [ 1899.022143][T21467] netlink: 'syz.2.2985': attribute type 4 has an invalid length. [ 1899.454912][T18117] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1899.673958][T18117] usb 3-1: Using ep0 maxpacket: 8 [ 1899.775643][T18117] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1899.812766][T18117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.238349][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1901.407899][T18117] pvrusb2: ********** [ 1901.446123][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1901.483744][T18117] pvrusb2: Important functionality might not be entirely working. [ 1901.500382][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1901.519181][T18117] pvrusb2: ********** [ 1901.568459][ T2345] pvrusb2: Invalid write control endpoint [ 1901.917868][ T2345] pvrusb2: Invalid write control endpoint [ 1901.923679][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1902.127682][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1902.203760][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1902.283882][ T2345] pvrusb2: Device being rendered inoperable [ 1902.315211][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1902.346146][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1902.378738][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1902.393659][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1902.444619][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1902.719726][T21491] program syz.4.2989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1903.500789][T21503] syz.3.2992 (21503): /proc/21494/oom_adj is deprecated, please use /proc/21494/oom_score_adj instead. [ 1903.578486][T18117] usb 3-1: USB disconnect, device number 72 [ 1907.562156][T21540] F2FS-fs: Conflicting test_dummy_encryption options [ 1910.270322][T21559] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1910.368521][T21554] [U]  [ 1912.221602][T21576] netlink: 'syz.0.3005': attribute type 4 has an invalid length. [ 1912.272088][T21578] netlink: 'syz.0.3005': attribute type 4 has an invalid length. [ 1912.955725][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 1916.237158][T21621] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1916.315017][T21622] netlink: 'syz.4.3013': attribute type 3 has an invalid length. [ 1917.431172][T21628] syzkaller1: entered promiscuous mode [ 1917.460642][T21628] syzkaller1: entered allmulticast mode [ 1920.267308][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.294164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.817472][T21648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3016'. [ 1920.989779][T21653] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1921.573170][T21648] bridge_slave_1: left allmulticast mode [ 1921.597118][T21648] bridge_slave_1: left promiscuous mode [ 1921.636406][T21648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.890660][T21648] : left allmulticast mode [ 1921.908221][T21648] : left promiscuous mode [ 1921.921723][T21648] bridge0: port 1() entered disabled state [ 1922.305335][T21648] bridge0 (unregistering): left promiscuous mode [ 1922.605865][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1922.716501][T21669] random: crng reseeded on system resumption [ 1922.937081][T21673] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1922.965509][T21673] syzkaller1: entered promiscuous mode [ 1922.973890][T21673] syzkaller1: entered allmulticast mode [ 1923.654122][T21678] usb usb8: usbfs: process 21678 (syz.0.3023) did not claim interface 0 before use [ 1923.816591][ T30] audit: type=1400 audit(1765663119.555:1284): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=21674 comm="syz.0.3023" [ 1925.025705][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 1925.039318][T21692] netlink: 'syz.3.3026': attribute type 4 has an invalid length. [ 1925.053083][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 1925.310695][T21698] netlink: 'syz.3.3026': attribute type 4 has an invalid length. [ 1925.683937][T17222] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1926.024288][T17222] usb 4-1: Using ep0 maxpacket: 8 [ 1926.122615][T17222] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1926.131951][T17222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.176112][T17222] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1926.273557][T17222] pvrusb2: ********** [ 1926.337362][T17222] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1926.371487][T17222] pvrusb2: Important functionality might not be entirely working. [ 1926.393253][T17222] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1926.416684][T17222] pvrusb2: ********** [ 1926.427696][ T2345] pvrusb2: Invalid write control endpoint [ 1927.014451][ T2345] pvrusb2: Invalid write control endpoint [ 1927.046036][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1927.086107][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1927.340316][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1927.563893][ T2345] pvrusb2: Device being rendered inoperable [ 1927.581325][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1927.652626][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1927.763881][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1927.776592][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1927.800880][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1929.025206][T17222] usb 4-1: USB disconnect, device number 75 [ 1929.729512][T21742] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1929.878200][T17222] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1930.080854][T17222] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1930.089569][T17222] usb 1-1: config 0 has no interface number 0 [ 1930.097465][T17222] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1930.455830][T17222] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1930.543763][T17222] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1930.553173][T17222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.561306][T17222] usb 1-1: Product: syz [ 1930.565979][T17222] usb 1-1: Manufacturer: syz [ 1930.570730][T17222] usb 1-1: SerialNumber: syz [ 1930.698607][T17222] usb 1-1: config 0 descriptor?? [ 1930.777160][T21743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1930.832301][T17222] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1932.435091][T17222] usb 1-1: USB disconnect, device number 76 [ 1932.443538][T17222] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1932.876784][T21770] netlink: 'syz.1.3038': attribute type 4 has an invalid length. [ 1932.936928][T21772] netlink: 'syz.1.3038': attribute type 4 has an invalid length. [ 1933.030014][T21768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1933.254059][T12127] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1933.504038][T12127] usb 2-1: Using ep0 maxpacket: 8 [ 1934.485398][T12127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1934.495988][T12127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.611054][T12127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1934.631887][T12127] pvrusb2: ********** [ 1934.645758][T12127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1934.690640][T12127] pvrusb2: Important functionality might not be entirely working. [ 1934.718492][T12127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1934.749987][T12127] pvrusb2: ********** [ 1934.791886][ T2345] pvrusb2: Invalid write control endpoint [ 1935.195308][ T2345] pvrusb2: Invalid write control endpoint [ 1935.207222][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1935.259031][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1935.300063][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1935.322461][ T2345] pvrusb2: Device being rendered inoperable [ 1935.338192][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1935.353900][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1935.395237][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1935.407166][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1935.431342][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1935.964253][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1935.977042][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1936.056176][T17222] usb 2-1: USB disconnect, device number 78 [ 1936.074163][T21794] sg_write: process 3029 (syz.4.3040) changed security contexts after opening file descriptor, this is not allowed. [ 1936.752485][T21804] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 1936.761352][T21804] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 1937.063976][T18117] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1937.284007][T18117] usb 3-1: Using ep0 maxpacket: 8 [ 1937.293057][T18117] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1937.309430][T18117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.740271][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1937.994076][T18117] pvrusb2: ********** [ 1938.029482][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1938.051051][T18117] pvrusb2: Important functionality might not be entirely working. [ 1938.180931][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1938.280078][T18117] pvrusb2: ********** [ 1938.301454][ T2345] pvrusb2: Invalid write control endpoint [ 1938.895773][ T2345] pvrusb2: Invalid write control endpoint [ 1938.949077][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1938.988029][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1939.024578][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1939.068662][ T2345] pvrusb2: Device being rendered inoperable [ 1939.097894][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1939.227556][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1939.242530][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1939.252633][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1939.279950][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1940.977362][ T5908] usb 3-1: USB disconnect, device number 73 [ 1941.733954][ T5908] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1942.145828][ T5908] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1942.156986][ T5908] usb 2-1: config 0 has no interface number 0 [ 1942.164263][ T5908] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1942.193856][ T5908] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1942.315179][ T5908] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1942.893939][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.902104][ T5908] usb 2-1: Product: syz [ 1942.947537][ T5908] usb 2-1: Manufacturer: syz [ 1943.014238][ T5908] usb 2-1: SerialNumber: syz [ 1943.035177][ T5908] usb 2-1: config 0 descriptor?? [ 1943.048368][T21842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1943.201016][ T5908] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1944.564220][T17222] usb 2-1: USB disconnect, device number 79 [ 1944.572206][T17222] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1944.843747][T21878] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 1944.862457][T21877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1945.130737][T21882] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 1945.626578][T17222] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1946.064248][T17222] usb 5-1: Using ep0 maxpacket: 8 [ 1946.094511][T17222] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1946.103632][T17222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.185901][T17222] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1946.211316][T17222] pvrusb2: ********** [ 1946.223910][T17222] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1946.237539][T17222] pvrusb2: Important functionality might not be entirely working. [ 1946.248383][T17222] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1946.278535][T17222] pvrusb2: ********** [ 1946.396485][ T2345] pvrusb2: Invalid write control endpoint [ 1946.887706][ T2345] pvrusb2: Invalid write control endpoint [ 1946.904122][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1946.978996][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1947.007450][T17222] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1947.031907][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1947.040649][T17222] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1947.075540][ T2345] pvrusb2: Device being rendered inoperable [ 1947.102169][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1947.116566][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1947.132119][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1947.148439][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1947.183106][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1947.244168][T18117] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1947.484759][T18117] usb 2-1: config 0 has no interfaces? [ 1947.756032][T18117] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1947.771525][T18117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1947.851345][T18117] usb 2-1: SerialNumber: syz [ 1947.931560][T18117] usb 2-1: config 0 descriptor?? [ 1948.224914][ T30] audit: type=1326 audit(1765663144.145:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.284069][ T30] audit: type=1326 audit(1765663144.145:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.326845][T21889] IPVS: set_ctl: invalid protocol: 131 172.20.20.11:21 [ 1948.379812][ T5908] usb 2-1: USB disconnect, device number 80 [ 1948.403943][ T30] audit: type=1326 audit(1765663144.245:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.529231][T18117] usb 5-1: USB disconnect, device number 72 [ 1948.535356][ T30] audit: type=1326 audit(1765663144.245:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.563832][ T30] audit: type=1326 audit(1765663144.245:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.593902][ T30] audit: type=1326 audit(1765663144.245:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.688604][ T30] audit: type=1326 audit(1765663144.245:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.711559][ T30] audit: type=1326 audit(1765663144.245:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.774273][ T30] audit: type=1326 audit(1765663144.245:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1948.808834][ T30] audit: type=1326 audit(1765663144.245:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1949.368336][T21912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1950.119693][T21919] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1950.158400][T21918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.523028][T21922] netlink: 'syz.0.3067': attribute type 13 has an invalid length. [ 1950.553352][T21930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3066'. [ 1950.576121][T21918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1952.254309][T12127] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1952.422848][T12127] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1952.431218][T12127] usb 4-1: config 0 has no interface number 0 [ 1952.462532][T12127] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1952.508847][T12127] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1952.582726][T12127] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1952.600631][T12127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.680045][T12127] usb 4-1: Product: syz [ 1952.690365][T21942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1952.742288][T12127] usb 4-1: Manufacturer: syz [ 1952.760505][T12127] usb 4-1: SerialNumber: syz [ 1952.774352][T12127] usb 4-1: config 0 descriptor?? [ 1952.804343][T21937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1952.823496][T12127] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1953.028424][T12127] usb 4-1: USB disconnect, device number 76 [ 1953.040445][T12127] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1953.509752][T21956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1954.332324][T21962] netlink: 'syz.3.3073': attribute type 4 has an invalid length. [ 1954.357771][T21961] netlink: 'syz.3.3073': attribute type 4 has an invalid length. [ 1954.643907][T18117] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1954.844999][T18117] usb 4-1: Using ep0 maxpacket: 8 [ 1954.858716][T18117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1954.868242][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.901664][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1954.913398][T18117] pvrusb2: ********** [ 1954.918685][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1954.942813][T18117] pvrusb2: Important functionality might not be entirely working. [ 1954.988504][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1955.023948][T18117] pvrusb2: ********** [ 1955.134223][ T2345] pvrusb2: Invalid write control endpoint [ 1955.382762][ T2345] pvrusb2: Invalid write control endpoint [ 1955.768070][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1955.789010][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1955.824006][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1955.844978][ T2345] pvrusb2: Device being rendered inoperable [ 1955.870350][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1955.904889][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1955.971605][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1955.982434][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1956.004646][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1957.754727][T18117] usb 4-1: USB disconnect, device number 77 [ 1958.130180][T21994] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1958.314879][T21998] syzkaller1: entered promiscuous mode [ 1958.320950][T21998] syzkaller1: entered allmulticast mode [ 1958.334829][T22000] netlink: 'syz.1.3080': attribute type 4 has an invalid length. [ 1958.537945][T22003] netlink: 'syz.1.3080': attribute type 4 has an invalid length. [ 1958.629923][T22004] F2FS-fs: Conflicting test_dummy_encryption options [ 1959.970682][T21984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1959.993464][T21984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1960.000392][T21984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1960.034206][T21984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1960.040341][T21984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1960.354156][T12127] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1960.379962][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1960.379977][ T30] audit: type=1326 audit(1765663156.295:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1960.484657][ T30] audit: type=1326 audit(1765663156.325:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1960.531123][T22015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3083'. [ 1960.764105][ T30] audit: type=1326 audit(1765663156.325:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1960.786767][ T30] audit: type=1326 audit(1765663156.325:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1960.813068][T12127] usb 2-1: Using ep0 maxpacket: 8 [ 1960.818974][T21410] Bluetooth: hci0: command 0x0c1a tx timeout [ 1960.856370][T12127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1960.865597][T12127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.881455][T12127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1960.903922][T12127] pvrusb2: ********** [ 1960.908069][T12127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1960.926764][T12127] pvrusb2: Important functionality might not be entirely working. [ 1960.944119][T12127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1960.955853][T12127] pvrusb2: ********** [ 1960.962606][ T30] audit: type=1326 audit(1765663156.325:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1961.214679][ T2345] pvrusb2: Invalid write control endpoint [ 1961.528544][ T30] audit: type=1326 audit(1765663156.325:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1961.553329][T12127] usb 2-1: USB disconnect, device number 81 [ 1961.591021][T22025] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3085'. [ 1961.714136][ T30] audit: type=1326 audit(1765663156.325:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1961.862625][ T30] audit: type=1326 audit(1765663156.325:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1961.894121][ T30] audit: type=1326 audit(1765663156.325:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1962.063751][ T30] audit: type=1326 audit(1765663156.325:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1962.087280][T21410] Bluetooth: hci2: command 0x0c1a tx timeout [ 1962.123310][ T9382] Bluetooth: hci1: command 0x0c1a tx timeout [ 1962.130086][ T9382] Bluetooth: hci4: command 0x0c1a tx timeout [ 1962.140690][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1962.256576][ T2345] pvrusb2: Invalid write control endpoint [ 1962.343491][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1962.380535][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1962.412185][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1962.437943][T22025] bridge0 (unregistering): left promiscuous mode [ 1962.458953][ T2345] pvrusb2: Device being rendered inoperable [ 1962.520564][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1962.537958][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1962.562817][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1962.619353][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1962.639704][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1963.723969][T17222] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1964.223925][T17222] usb 5-1: Using ep0 maxpacket: 32 [ 1964.332582][T17222] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1964.380200][T17222] usb 5-1: config 0 has no interface number 0 [ 1964.437887][T17222] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1964.684665][T17222] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1964.704205][T17222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.733131][T17222] usb 5-1: Product: syz [ 1964.742378][T17222] usb 5-1: Manufacturer: syz [ 1964.753920][T17222] usb 5-1: SerialNumber: syz [ 1964.766838][T17222] usb 5-1: config 0 descriptor?? [ 1964.785815][T17222] f81534 5-1:0.12: required endpoints missing [ 1966.166195][T22064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1966.285534][T22066] syzkaller1: entered promiscuous mode [ 1966.291657][T22066] syzkaller1: entered allmulticast mode [ 1966.694774][T22069] F2FS-fs: Conflicting test_dummy_encryption options [ 1966.923361][T12127] usb 5-1: USB disconnect, device number 73 [ 1967.412636][T22078] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 1967.474229][T22078] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 1967.503987][T17222] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1967.698302][T22081] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3097'. [ 1967.720573][T22081] syzkaller1: entered promiscuous mode [ 1967.727957][T22081] syzkaller1: entered allmulticast mode [ 1967.766822][T18117] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1967.825632][T17222] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1967.856114][T17222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1967.967259][T17222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.987526][T17222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1968.015907][T17222] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1968.027657][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 1968.088293][T17222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.100505][T18117] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1968.110414][T18117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.147499][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1968.163410][T18117] pvrusb2: ********** [ 1968.181857][T17222] usb 3-1: config 0 descriptor?? [ 1968.188888][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1968.216775][T18117] pvrusb2: Important functionality might not be entirely working. [ 1968.245726][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1968.292919][T18117] pvrusb2: ********** [ 1968.387724][ T2345] pvrusb2: Invalid write control endpoint [ 1968.592219][ T2345] pvrusb2: Invalid write control endpoint [ 1968.606278][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1968.639828][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1968.704108][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1968.893088][T17222] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x7 [ 1968.927967][ T2345] pvrusb2: Device being rendered inoperable [ 1968.934435][T17222] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 1969.107083][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1969.193091][T17222] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 1969.428913][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1969.430127][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1969.566467][T17222] hid-picolcd 0003:04D8:C002.000B: item fetching failed at offset 5/7 [ 1969.584176][T22072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1969.626856][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1969.638029][T17222] hid-picolcd 0003:04D8:C002.000B: device report parse failed [ 1969.704636][T22090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1969.733950][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1969.744168][T17222] hid-picolcd 0003:04D8:C002.000B: probe with driver hid-picolcd failed with error -22 [ 1970.344499][T22098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1970.354076][T22098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1970.397475][T22098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1970.455514][T18146] usb 3-1: USB disconnect, device number 74 [ 1970.677645][T22107] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1970.950593][T22107] bridge_slave_1: left allmulticast mode [ 1970.979472][T22107] bridge_slave_1: left promiscuous mode [ 1971.000437][T22107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.231439][T22107] bridge_slave_0: left allmulticast mode [ 1971.262538][T22107] bridge_slave_0: left promiscuous mode [ 1971.292396][T22107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.495396][T18146] usb 5-1: USB disconnect, device number 74 [ 1971.692681][T22107] bridge0 (unregistering): left promiscuous mode [ 1974.380306][T22137] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1974.392220][T22137] syzkaller1: entered promiscuous mode [ 1974.397974][T22137] syzkaller1: entered allmulticast mode [ 1974.704380][T22147] netlink: 'syz.1.3111': attribute type 4 has an invalid length. [ 1974.714419][T22147] netlink: 'syz.1.3111': attribute type 4 has an invalid length. [ 1975.035917][T12127] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1975.263893][T12127] usb 2-1: Using ep0 maxpacket: 8 [ 1975.279581][T12127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1975.288808][T12127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.341954][T12127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1975.366586][T12127] pvrusb2: ********** [ 1975.378937][T12127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1975.408524][T12127] pvrusb2: Important functionality might not be entirely working. [ 1975.434080][T12127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1975.487465][T12127] pvrusb2: ********** [ 1975.541346][ T2345] pvrusb2: Invalid write control endpoint [ 1975.916097][ T2345] pvrusb2: Invalid write control endpoint [ 1975.934280][T22155] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1975.948758][T22155] syzkaller1: entered promiscuous mode [ 1975.954816][T22155] syzkaller1: entered allmulticast mode [ 1976.019313][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1976.062139][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1976.079682][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1976.102174][ T2345] pvrusb2: Device being rendered inoperable [ 1976.124499][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1976.144111][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1976.172342][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1976.216780][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1976.244446][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1976.883893][T12127] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1977.215656][T12127] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1977.232620][T12127] usb 3-1: config 0 has no interface number 0 [ 1977.242826][T12127] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1977.334043][T12127] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1977.368261][T12127] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1977.384157][T12127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.415249][T12127] usb 3-1: Product: syz [ 1977.434270][T12127] usb 3-1: Manufacturer: syz [ 1977.449033][T12127] usb 3-1: SerialNumber: syz [ 1977.503617][T12127] usb 3-1: config 0 descriptor?? [ 1977.520708][T22165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1977.538198][T12127] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1978.617975][T22178] netlink: 'syz.4.3117': attribute type 2 has an invalid length. [ 1978.643514][T17222] usb 2-1: USB disconnect, device number 82 [ 1978.775723][T22178] : entered promiscuous mode [ 1979.859846][T12127] usb 3-1: USB disconnect, device number 75 [ 1979.869075][T12127] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1980.271818][T22194] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1980.393905][T12127] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1980.591835][T12127] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1980.739681][T12127] usb 1-1: config 0 has no interface number 0 [ 1980.759383][T22194] bridge_slave_1: left allmulticast mode [ 1980.767958][T12127] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1980.783327][T22194] bridge_slave_1: left promiscuous mode [ 1980.801598][T22194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.814117][T12127] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1980.907981][T22194] bridge_slave_0: left allmulticast mode [ 1980.920559][T12127] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1980.941289][T22194] bridge_slave_0: left promiscuous mode [ 1980.948876][T22194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.954375][T12127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.044133][T12127] usb 1-1: Product: syz [ 1981.051272][T22200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3121'. [ 1981.065498][T12127] usb 1-1: Manufacturer: syz [ 1981.070339][T12127] usb 1-1: SerialNumber: syz [ 1981.151162][T12127] usb 1-1: config 0 descriptor?? [ 1981.202950][T22193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1981.311570][T12127] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1981.415799][T22194] bridge0 (unregistering): left promiscuous mode [ 1981.699571][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.706623][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.304379][T22212] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1982.390588][T22211] syzkaller1: entered promiscuous mode [ 1982.424249][T22211] syzkaller1: entered allmulticast mode [ 1983.639304][T22225] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3126'. [ 1983.668259][T22225] syzkaller1: entered promiscuous mode [ 1983.674180][T22225] syzkaller1: entered allmulticast mode [ 1984.023669][T17222] usb 1-1: USB disconnect, device number 77 [ 1984.036687][T17222] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1985.421833][T12127] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1985.593892][T12127] usb 1-1: Using ep0 maxpacket: 16 [ 1985.684096][T12127] usb 1-1: config 0 has no interfaces? [ 1985.715644][T12127] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1985.753589][T12127] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1985.804060][T12127] usb 1-1: Manufacturer: syz [ 1985.884211][T12127] usb 1-1: config 0 descriptor?? [ 1986.436705][T22235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.452243][T22235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.535657][T12127] usb 1-1: USB disconnect, device number 78 [ 1989.133698][T22272] vhci_hcd vhci_hcd.0: port 0 already used [ 1989.169186][T22272] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 1989.175857][T22272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.263870][T22272] vhci_hcd vhci_hcd.0: Device attached [ 1989.277311][T22279] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 1989.283994][T22279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.294467][T22279] vhci_hcd vhci_hcd.0: Device attached [ 1989.300248][T22277] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 1989.306991][T22277] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1989.314702][T22272] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 1989.321367][T22272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.330660][T22272] vhci_hcd vhci_hcd.0: Device attached [ 1989.344810][T22272] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 1989.351561][T22272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1989.361775][T22277] vhci_hcd vhci_hcd.0: Device attached [ 1989.368209][T22272] vhci_hcd vhci_hcd.0: Device attached [ 1989.383228][T22272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.410870][T22272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.441052][T22272] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 1989.447759][T22272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.476635][T22272] vhci_hcd vhci_hcd.0: Device attached [ 1989.496059][T22277] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.513435][T22272] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(32) [ 1989.520148][T22272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1989.532743][T22272] vhci_hcd vhci_hcd.0: Device attached [ 1989.722195][T22287] vhci_hcd: connection closed [ 1989.722912][T22285] vhci_hcd: connection closed [ 1989.728213][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1989.743236][T22283] vhci_hcd: connection closed [ 1989.743639][T22280] vhci_hcd: connection closed [ 1989.748949][T22278] vhci_hcd: connection closed [ 1989.754062][T22275] vhci_hcd: connection closed [ 1989.761660][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1989.779008][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1989.786632][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1989.791904][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1989.805716][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1989.808280][T22294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3136'. [ 1989.811918][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1989.828516][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1989.838779][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1989.845511][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1989.850924][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1989.866510][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1990.052763][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1990.060904][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1990.067963][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1990.077996][ T5937] vhci_hcd vhci_hcd.1: stop threads [ 1990.083534][ T5937] vhci_hcd vhci_hcd.1: release socket [ 1990.100752][ T5937] vhci_hcd vhci_hcd.1: disconnect device [ 1990.504635][T22291] vhci_hcd: connection closed [ 1990.513854][ T68] vhci_hcd vhci_hcd.1: stop threads [ 1990.524624][ T68] vhci_hcd vhci_hcd.1: release socket [ 1990.530417][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 1992.638976][T22319] netlink: 'syz.3.3143': attribute type 4 has an invalid length. [ 1992.703530][T22320] netlink: 'syz.3.3143': attribute type 4 has an invalid length. [ 1996.651229][T22362] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3154'. [ 1996.720884][T22362] syzkaller1: entered promiscuous mode [ 1996.752233][T22362] syzkaller1: entered allmulticast mode [ 1996.880363][T22363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1999.214244][T17222] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1999.327434][T22398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3155'. [ 1999.673876][T17222] usb 4-1: Using ep0 maxpacket: 8 [ 1999.697585][T17222] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1999.706736][T17222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.714782][T17222] usb 4-1: Product: syz [ 1999.718948][T17222] usb 4-1: Manufacturer: syz [ 1999.728774][T17222] usb 4-1: SerialNumber: syz [ 2000.069775][T17222] usb 4-1: config 0 descriptor?? [ 2000.359747][T17222] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2001.278260][T17222] gspca_sonixj: reg_r err -32 [ 2001.283116][T17222] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 2001.293081][T22383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.326935][T22383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.624933][T22408] random: crng reseeded on system resumption [ 2002.543617][T18146] usb 4-1: USB disconnect, device number 78 [ 2002.721285][T22425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3163'. [ 2002.733214][T22425] syzkaller1: entered promiscuous mode [ 2002.739469][T22425] syzkaller1: entered allmulticast mode [ 2004.678396][T22443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3166'. [ 2004.805892][T22444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3165'. [ 2004.871108][T22445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3165'. [ 2004.882314][T22444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3165'. [ 2006.115653][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2006.276814][T22455] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2006.341678][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2006.362081][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 2006.417980][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2006.439635][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.449817][ T10] usb 4-1: Product: syz [ 2006.557638][ T10] usb 4-1: Manufacturer: syz [ 2006.565790][ T10] usb 4-1: SerialNumber: syz [ 2006.582392][ T10] usb 4-1: config 0 descriptor?? [ 2006.600687][T22447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2006.634429][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input53 [ 2007.009575][T17222] usb 4-1: USB disconnect, device number 79 [ 2007.009736][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2008.663971][T17222] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 2008.842569][T17222] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2008.851990][T17222] usb 4-1: config 0 has no interface number 0 [ 2008.883675][T17222] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2008.928649][T22486] random: crng reseeded on system resumption [ 2008.936596][T17222] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2008.960323][T17222] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2008.969745][T17222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.978442][T17222] usb 4-1: Product: syz [ 2008.987229][T17222] usb 4-1: Manufacturer: syz [ 2008.992145][T17222] usb 4-1: SerialNumber: syz [ 2009.004527][T17222] usb 4-1: config 0 descriptor?? [ 2009.193101][T22481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2009.223931][T17222] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 2009.347256][T22492] QAT: failed to copy from user cfg_data. [ 2010.882221][T22500] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3176'. [ 2011.027713][T22500] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3176'. [ 2013.278635][T17222] usb 4-1: USB disconnect, device number 80 [ 2013.308986][T17222] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 2013.867136][T22519] netlink: 'syz.3.3180': attribute type 13 has an invalid length. [ 2017.280377][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3187'. [ 2017.583571][T22560] delete_channel: no stack [ 2018.049193][T22564] random: crng reseeded on system resumption [ 2018.984137][T17222] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 2019.074851][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2019.164566][T17222] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2019.173048][T17222] usb 1-1: config 0 has no interface number 0 [ 2019.183393][T17222] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2019.195408][T17222] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2019.235070][T17222] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2019.253942][T17222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.265451][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.268910][T17222] usb 1-1: Product: syz [ 2019.283974][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2019.285226][T17222] usb 1-1: Manufacturer: syz [ 2019.293143][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2019.350269][T17222] usb 1-1: SerialNumber: syz [ 2019.350283][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.371872][ T10] usb 2-1: config 0 descriptor?? [ 2019.374636][T17222] usb 1-1: config 0 descriptor?? [ 2020.018596][T22572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2020.137287][T17222] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 2021.170368][T17222] usb 2-1: USB disconnect, device number 83 [ 2021.878996][ T10] usb 1-1: USB disconnect, device number 79 [ 2021.905249][ T10] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 2022.246875][T22592] netlink: 'syz.3.3195': attribute type 4 has an invalid length. [ 2022.297804][T22592] netlink: 'syz.3.3195': attribute type 4 has an invalid length. [ 2022.404096][T22599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3194'. [ 2022.653915][T17222] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2022.813902][T17222] usb 4-1: Using ep0 maxpacket: 8 [ 2022.865283][T17222] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2022.874743][T17222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.907964][T17222] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2022.916732][T17222] pvrusb2: ********** [ 2022.920749][T17222] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2022.933874][T17222] pvrusb2: Important functionality might not be entirely working. [ 2022.941853][T17222] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2022.953609][T17222] pvrusb2: ********** [ 2023.143489][ T2345] pvrusb2: Invalid write control endpoint [ 2023.263282][ T2345] pvrusb2: Invalid write control endpoint [ 2023.321338][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2023.339983][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2023.347922][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2023.358372][ T2345] pvrusb2: Device being rendered inoperable [ 2023.364905][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2023.380935][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_p) [ 2023.415392][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2023.441475][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2023.457919][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2024.757423][T17222] usb 4-1: USB disconnect, device number 81 [ 2024.887554][T22619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3197'. [ 2026.837743][T22637] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3201'. [ 2026.868153][T22637] syzkaller1: entered promiscuous mode [ 2026.873926][T22637] syzkaller1: entered allmulticast mode [ 2027.643928][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2027.784100][ T5908] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2027.813886][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 2027.821360][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 2027.830585][ T10] usb 5-1: config 0 has no interface number 0 [ 2028.004436][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2028.024218][T22649] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3206'. [ 2028.043031][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2028.052693][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.083063][ T5908] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2028.093937][ T10] usb 5-1: Product: syz [ 2028.102061][ T5908] usb 4-1: config 0 has no interface number 0 [ 2028.108824][ T10] usb 5-1: Manufacturer: syz [ 2028.122889][ T10] usb 5-1: SerialNumber: syz [ 2028.135471][ T5908] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2028.154563][ T10] usb 5-1: config 0 descriptor?? [ 2028.165061][T22642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2028.172701][ T5908] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2028.207146][T22649] syzkaller1: entered promiscuous mode [ 2028.235248][ T5908] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2028.244623][T22649] syzkaller1: entered allmulticast mode [ 2028.282242][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.301393][ T5908] usb 4-1: Product: syz [ 2028.326037][ T5908] usb 4-1: Manufacturer: syz [ 2028.353079][ T5908] usb 4-1: SerialNumber: syz [ 2028.381029][ T5908] usb 4-1: config 0 descriptor?? [ 2028.407253][T22642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2028.416147][T22645] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2028.456131][ T5908] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 2031.010726][T17222] usb 4-1: USB disconnect, device number 82 [ 2031.018522][T22668] delete_channel: no stack [ 2031.056540][T17222] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 2031.085035][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 2031.111392][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2031.128976][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2031.140149][ T10] asix 5-1:0.188: probe with driver asix failed with error -71 [ 2031.189974][T22670] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[22670] [ 2031.237364][ T10] usb 5-1: USB disconnect, device number 75 [ 2031.883880][T17222] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 2032.325737][T17222] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2032.337622][T17222] usb 3-1: config 0 has no interface number 0 [ 2032.351197][T17222] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2032.396848][T17222] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2032.456600][T17222] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2032.476132][T17222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.513815][T17222] usb 3-1: Product: syz [ 2032.518052][T17222] usb 3-1: Manufacturer: syz [ 2032.522647][T17222] usb 3-1: SerialNumber: syz [ 2032.571609][T17222] usb 3-1: config 0 descriptor?? [ 2032.587184][T22678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2032.632832][T17222] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2033.315610][T17222] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2033.553964][T17222] usb 5-1: Using ep0 maxpacket: 8 [ 2033.600745][T17222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.741039][T17222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.774898][T22681] syz.4.3215 (22681): drop_caches: 2 [ 2033.790378][T17222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2033.822821][T17222] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2033.855489][T17222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.923509][T17222] usb 5-1: config 0 descriptor?? [ 2034.503167][T17222] nzxt-kraken2 0003:1E71:170E.000C: item fetching failed at offset 2/5 [ 2034.544654][ T10] usb 3-1: USB disconnect, device number 76 [ 2034.553443][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2034.565612][T17222] nzxt-kraken2 0003:1E71:170E.000C: hid parse failed with -22 [ 2034.582519][T17222] nzxt-kraken2 0003:1E71:170E.000C: probe with driver nzxt-kraken2 failed with error -22 [ 2034.691732][ T5908] usb 5-1: USB disconnect, device number 76 [ 2035.435907][T22706] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3219'. [ 2035.455797][T22706] syzkaller1: entered promiscuous mode [ 2035.461512][T22706] syzkaller1: entered allmulticast mode [ 2036.755705][T22719] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3221'. [ 2036.768665][T22719] syzkaller1: entered promiscuous mode [ 2036.776538][T22719] syzkaller1: entered allmulticast mode [ 2038.853986][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2039.018765][ T10] usb 4-1: config 0 has no interfaces? [ 2039.040648][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2039.050059][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.100489][ T10] usb 4-1: Product: syz [ 2039.105455][ T10] usb 4-1: Manufacturer: syz [ 2039.110590][ T10] usb 4-1: SerialNumber: syz [ 2039.313164][ T10] usb 4-1: config 0 descriptor?? [ 2039.633516][T22739] pimreg: entered allmulticast mode [ 2039.884093][T22739] pimreg: left allmulticast mode [ 2041.109789][T22763] random: crng reseeded on system resumption [ 2041.503921][T18117] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2041.599592][T22769] netlink: 'syz.4.3230': attribute type 4 has an invalid length. [ 2041.665043][T22770] netlink: 'syz.4.3230': attribute type 4 has an invalid length. [ 2041.983929][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2042.016888][T18117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2042.060810][T18117] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2042.125286][T18117] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 2042.159336][T18117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.172090][ T5908] usb 4-1: USB disconnect, device number 83 [ 2042.178220][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 2042.202179][T18117] usb 3-1: config 0 descriptor?? [ 2042.218243][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2042.274409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.352928][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2042.379661][ T10] pvrusb2: ********** [ 2042.394078][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2042.438166][ T10] pvrusb2: Important functionality might not be entirely working. [ 2042.463888][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2042.686772][ T10] pvrusb2: ********** [ 2042.728742][T18117] maltron 0003:058F:9410.000D: item fetching failed at offset 0/7 [ 2042.784742][T18117] maltron 0003:058F:9410.000D: probe with driver maltron failed with error -22 [ 2042.804085][ T2345] pvrusb2: Invalid write control endpoint [ 2042.806278][T22779] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3233'. [ 2042.848839][T22779] syzkaller1: entered promiscuous mode [ 2042.854764][T22779] syzkaller1: entered allmulticast mode [ 2043.031521][ T2345] pvrusb2: Invalid write control endpoint [ 2043.043396][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2043.089638][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2043.118840][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2043.157062][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.164324][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.189706][ T2345] pvrusb2: Device being rendered inoperable [ 2043.407069][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2043.473908][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_p) [ 2043.525131][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2043.530642][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2043.576518][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2044.963714][ T10] usb 5-1: USB disconnect, device number 77 [ 2045.088761][T18117] usb 3-1: USB disconnect, device number 77 [ 2047.468626][T22821] QAT: failed to copy from user cfg_data. [ 2048.006077][T22828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2049.789285][T22841] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2050.611654][T22849] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3247'. [ 2053.487128][T22869] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3250'. [ 2053.498116][T22869] syzkaller1: entered promiscuous mode [ 2053.504087][T22869] syzkaller1: entered allmulticast mode [ 2053.819566][T22870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3251'. [ 2054.020550][T22879] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3252'. [ 2054.030742][T22879] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3252'. [ 2056.054460][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3254'. [ 2056.461653][T22903] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 2056.531890][T22904] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 2056.834456][T22910] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3257'. [ 2056.843932][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2056.853093][T22910] syzkaller1: entered promiscuous mode [ 2056.864650][T22910] syzkaller1: entered allmulticast mode [ 2057.183833][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 2057.352433][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2057.368377][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.401362][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2057.428405][ T10] pvrusb2: ********** [ 2057.434605][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2057.628507][ T10] pvrusb2: Important functionality might not be entirely working. [ 2057.926742][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2057.939204][ T10] pvrusb2: ********** [ 2057.962389][ T2345] pvrusb2: Invalid write control endpoint [ 2058.458156][ T2345] pvrusb2: Invalid write control endpoint [ 2058.495100][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2058.575312][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2058.583219][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2058.603988][ T2345] pvrusb2: Device being rendered inoperable [ 2058.628011][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2058.693657][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_p) [ 2058.771472][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2058.806055][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2058.892353][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2059.558225][T22926] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3260'. [ 2059.569691][T22926] syzkaller1: entered promiscuous mode [ 2059.575717][T22926] syzkaller1: entered allmulticast mode [ 2059.928072][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 2060.768542][T18117] usb 5-1: USB disconnect, device number 78 [ 2061.377869][T22941] input: syz0 as /devices/virtual/input/input54 [ 2062.765059][T22954] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3266'. [ 2063.340496][T22956] syzkaller1: entered promiscuous mode [ 2063.364820][T22956] syzkaller1: entered allmulticast mode [ 2063.990922][T22964] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3268'. [ 2064.000654][T22964] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3268'. [ 2065.439358][T22974] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3270'. [ 2066.628590][T22992] netlink: 'syz.4.3274': attribute type 4 has an invalid length. [ 2066.693269][T22992] netlink: 'syz.4.3274': attribute type 4 has an invalid length. [ 2067.113914][T18117] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2067.172445][T22995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 2067.273870][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 2067.283651][T18117] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2067.313480][T18117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.397990][T18117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2067.412595][T18117] pvrusb2: ********** [ 2067.433148][T18117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2067.478555][T18117] pvrusb2: Important functionality might not be entirely working. [ 2067.494292][T18117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2067.522301][T18117] pvrusb2: ********** [ 2067.635068][T22997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3276'. [ 2067.648745][ T2345] pvrusb2: Invalid write control endpoint [ 2067.797557][ T2345] pvrusb2: Invalid write control endpoint [ 2067.880659][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2067.918922][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2067.942789][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2067.974990][ T2345] pvrusb2: Device being rendered inoperable [ 2068.004347][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2068.025285][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_p) [ 2068.078871][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2068.097611][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2068.179171][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2068.531023][T22995] batman_adv: batadv0: Adding interface: dummy0 [ 2068.537590][T22995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2068.572795][T23008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3277'. [ 2068.594866][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2068.594880][ T30] audit: type=1326 audit(1765663264.515:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2068.639869][T23009] program syz.1.3278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2068.649692][T22995] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2068.748571][ T30] audit: type=1326 audit(1765663264.545:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2068.782707][T23008] syzkaller1: entered promiscuous mode [ 2068.790763][T23008] syzkaller1: entered allmulticast mode [ 2068.904299][ T30] audit: type=1326 audit(1765663264.545:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2068.974533][ T30] audit: type=1326 audit(1765663264.545:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.046905][ T30] audit: type=1326 audit(1765663264.545:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.173891][ T30] audit: type=1326 audit(1765663264.545:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.265094][ T30] audit: type=1326 audit(1765663264.545:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.288873][ T30] audit: type=1326 audit(1765663264.545:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.365506][ T30] audit: type=1326 audit(1765663264.545:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2069.730529][ T30] audit: type=1326 audit(1765663264.545:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23006 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2070.443181][ T10] usb 5-1: USB disconnect, device number 79 [ 2071.551426][T23042] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3283'. [ 2071.561169][T23042] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3283'. [ 2074.033919][T18117] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2074.273654][T18117] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2074.284100][T18117] usb 1-1: config 0 has no interface number 0 [ 2074.323012][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2074.365337][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2074.412429][T18117] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2074.486613][T18117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.513887][T18117] usb 1-1: Product: syz [ 2074.533240][T18117] usb 1-1: Manufacturer: syz [ 2074.549790][T18117] usb 1-1: SerialNumber: syz [ 2074.569741][T18117] usb 1-1: config 0 descriptor?? [ 2074.636253][T23057] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2074.757419][T18117] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 2077.024607][ T10] usb 1-1: USB disconnect, device number 80 [ 2077.078169][ T10] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 2079.348880][T23102] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3294'. [ 2079.359829][T23102] syzkaller1: entered promiscuous mode [ 2079.365775][T23102] syzkaller1: entered allmulticast mode [ 2083.118454][T23140] delete_channel: no stack [ 2085.063831][T18117] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2085.886036][T18117] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2085.915304][T18117] usb 1-1: config 0 has no interface number 0 [ 2085.959439][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2086.078551][T18117] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2086.119619][T18117] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2086.163979][T18117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.212811][T18117] usb 1-1: Product: syz [ 2086.246185][T18117] usb 1-1: Manufacturer: syz [ 2086.250827][T18117] usb 1-1: SerialNumber: syz [ 2086.414942][T18117] usb 1-1: config 0 descriptor?? [ 2086.421342][T23153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2086.559085][T18117] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 2086.904102][T23164] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2089.069421][T18117] usb 1-1: USB disconnect, device number 81 [ 2089.111075][T18117] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 2091.345199][T23203] random: crng reseeded on system resumption [ 2092.003030][T18117] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2092.423850][T18117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2092.451294][T18117] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2092.542917][T18117] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 2092.653473][T18117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.691214][T18117] usb 3-1: config 0 descriptor?? [ 2093.128371][T18117] maltron 0003:058F:9410.000E: item fetching failed at offset 0/7 [ 2093.147738][T18117] maltron 0003:058F:9410.000E: probe with driver maltron failed with error -22 [ 2093.520591][T23224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3316'. [ 2093.531833][T23224] syzkaller1: entered promiscuous mode [ 2093.537484][T23224] syzkaller1: entered allmulticast mode [ 2094.745648][T18117] usb 3-1: USB disconnect, device number 78 [ 2096.320607][T23255] random: crng reseeded on system resumption [ 2096.933923][T18117] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2097.146681][T18117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.185771][T18117] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2097.234550][T18117] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 2097.443113][T18117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.525725][T18117] usb 5-1: config 0 descriptor?? [ 2098.089341][T18117] maltron 0003:058F:9410.000F: item fetching failed at offset 0/7 [ 2098.121820][T18117] maltron 0003:058F:9410.000F: probe with driver maltron failed with error -22 [ 2098.264779][T23261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 2099.213896][ T10] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 2099.354144][ T10] usb 3-1: device descriptor read/64, error -71 [ 2099.684454][ T10] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 2099.869728][ T10] usb 3-1: device descriptor read/64, error -71 [ 2099.985416][ T10] usb usb3-port1: attempt power cycle [ 2100.477412][T18117] usb 5-1: USB disconnect, device number 80 [ 2100.526098][ T10] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 2100.554908][ T10] usb 3-1: device descriptor read/8, error -71 [ 2100.814577][ T10] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 2100.834678][ T10] usb 3-1: device descriptor read/8, error -71 [ 2100.963937][ T10] usb usb3-port1: unable to enumerate USB device [ 2101.245284][T23293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3330'. [ 2101.259383][T23293] syzkaller1: entered promiscuous mode [ 2101.265216][T23293] syzkaller1: entered allmulticast mode [ 2102.432067][T18136] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2103.078051][T18136] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2103.160184][T18136] usb 2-1: config 0 has no interface number 0 [ 2103.170348][T18136] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2103.181697][T18136] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2104.375581][T18136] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2104.424034][T18136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.484033][T18136] usb 2-1: Product: syz [ 2104.497364][T18136] usb 2-1: Manufacturer: syz [ 2104.556068][T18136] usb 2-1: SerialNumber: syz [ 2104.577557][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.584082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.613029][T18136] usb 2-1: config 0 descriptor?? [ 2104.652754][T23299] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2104.673361][T18136] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2105.044747][T23322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3336'. [ 2105.055607][T23322] syzkaller1: entered promiscuous mode [ 2105.061215][T23322] syzkaller1: entered allmulticast mode [ 2106.213903][ T10] usb 2-1: USB disconnect, device number 84 [ 2106.225448][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2106.966404][T23339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3340'. [ 2106.979374][T23339] syzkaller1: entered promiscuous mode [ 2106.987177][T23339] syzkaller1: entered allmulticast mode [ 2108.499944][T23333] tipc: Enabled bearer , priority 0 [ 2108.561173][T23333] tipc: Resetting bearer [ 2109.456707][T23365] netlink: 'syz.3.3344': attribute type 4 has an invalid length. [ 2109.647710][T23369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3345'. [ 2109.695280][T23368] syzkaller1: entered promiscuous mode [ 2109.702701][T23368] syzkaller1: entered allmulticast mode [ 2109.808972][T23361] netlink: 'syz.3.3344': attribute type 4 has an invalid length. [ 2110.333887][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2110.483818][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2110.493435][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2110.504274][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.570598][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2110.818173][ T10] pvrusb2: ********** [ 2110.837757][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2110.887153][ T10] pvrusb2: Important functionality might not be entirely working. [ 2110.913864][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2110.933985][ T10] pvrusb2: ********** [ 2110.999368][ T2345] pvrusb2: Invalid write control endpoint [ 2111.135726][ T2345] pvrusb2: Invalid write control endpoint [ 2111.162065][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2111.187484][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2111.204248][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2111.227004][ T2345] pvrusb2: Device being rendered inoperable [ 2111.240451][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2111.248714][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_p) [ 2111.258402][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2111.265412][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2111.279406][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2112.254990][T18136] usb 4-1: USB disconnect, device number 84 [ 2112.892909][ T10] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 2112.911036][ T5908] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 2113.202121][ T5908] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2113.254383][ T5908] usb 5-1: config 0 has no interface number 0 [ 2113.481444][ T5908] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2113.492930][ T5908] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2113.541263][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2113.551593][ T10] usb 3-1: config 0 has no interface number 0 [ 2113.685248][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2113.698578][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.713957][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2113.725635][ T5908] usb 5-1: Product: syz [ 2113.729830][ T5908] usb 5-1: Manufacturer: syz [ 2113.748889][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2113.760150][ T5908] usb 5-1: SerialNumber: syz [ 2113.777711][ T5908] usb 5-1: config 0 descriptor?? [ 2113.852967][T23389] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2113.893508][ T5908] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2113.913410][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2114.155003][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.175052][ T10] usb 3-1: Product: syz [ 2114.245633][ T10] usb 3-1: Manufacturer: syz [ 2114.260751][ T10] usb 3-1: SerialNumber: syz [ 2114.304152][ T10] usb 3-1: config 0 descriptor?? [ 2114.330022][T23390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2114.405835][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #1 [ 2115.983830][T18117] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2116.289253][T18117] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.303876][T18117] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2116.370500][T18117] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2116.413254][T18117] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2116.435337][T18117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.458486][T18136] usb 3-1: USB disconnect, device number 83 [ 2116.466508][T18136] yurex 3-1:0.50: USB YUREX #1 now disconnected [ 2116.527293][T18117] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2116.541106][T18117] usb 1-1: invalid MIDI out EP 0 [ 2116.668720][ T10] usb 5-1: USB disconnect, device number 81 [ 2116.684624][ T10] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2116.961382][T23433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3353'. [ 2116.971671][T18117] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2117.016974][T23433] syzkaller1: entered promiscuous mode [ 2117.140400][T23433] syzkaller1: entered allmulticast mode [ 2117.179783][T23442] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 2117.225293][T23437] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 2117.526422][T23444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2117.633857][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2118.066769][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 2118.305675][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2118.315017][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.476863][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2118.486981][ T10] pvrusb2: ********** [ 2118.498340][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2118.514128][ T10] pvrusb2: Important functionality might not be entirely working. [ 2118.524345][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2118.606985][ T10] pvrusb2: ********** [ 2118.703816][ T2345] pvrusb2: Invalid write control endpoint [ 2118.889723][ T2345] pvrusb2: Invalid write control endpoint [ 2118.906936][T23453] netlink: 'syz.2.3359': attribute type 4 has an invalid length. [ 2118.923362][T23453] netlink: 'syz.2.3359': attribute type 4 has an invalid length. [ 2118.933630][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2118.943574][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2118.953076][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2118.963901][ T2345] pvrusb2: Device being rendered inoperable [ 2118.972511][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2118.984161][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_q) [ 2119.019230][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2119.136381][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2119.156686][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2119.533908][ T5908] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2119.693976][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 2119.702170][ T5908] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2119.729079][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.754760][T23458] random: crng reseeded on system resumption [ 2119.933248][ T5908] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2119.986392][T18136] usb 2-1: USB disconnect, device number 85 [ 2119.992013][ T5908] pvrusb2: ********** [ 2120.027014][ T5908] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2120.027306][ T5831] usb 1-1: USB disconnect, device number 82 [ 2120.061125][ T5908] pvrusb2: Important functionality might not be entirely working. [ 2120.074011][T18117] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2120.157219][ T5908] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2120.207314][ T5908] pvrusb2: ********** [ 2120.235567][ T2345] pvrusb2: Invalid write control endpoint [ 2120.273428][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 2120.289857][T18117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.364053][T18117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2120.417020][T18117] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 2120.434057][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.475258][T18117] usb 4-1: config 0 descriptor?? [ 2120.506431][ T2345] pvrusb2: Invalid write control endpoint [ 2120.512344][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2120.553430][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2120.581998][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2120.612667][ T2345] pvrusb2: Device being rendered inoperable [ 2120.626020][T23465] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3362'. [ 2120.636462][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2120.658576][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 2120.679752][T23465] syzkaller1: entered promiscuous mode [ 2120.716879][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2120.730363][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2120.760219][T23465] syzkaller1: entered allmulticast mode [ 2120.773436][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2120.962112][T18117] maltron 0003:058F:9410.0010: item fetching failed at offset 0/7 [ 2120.971537][T18117] maltron 0003:058F:9410.0010: probe with driver maltron failed with error -22 [ 2121.992780][ T5908] usb 3-1: USB disconnect, device number 84 [ 2123.924176][T18117] usb 4-1: USB disconnect, device number 85 [ 2124.154467][ T5831] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2124.602330][ T5831] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2124.610684][ T5831] usb 2-1: config 0 has no interface number 0 [ 2124.618147][ T5831] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2124.633118][ T5831] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2124.804588][T18117] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 2124.903952][ T5831] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2124.926460][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.958295][ T5831] usb 2-1: Product: syz [ 2124.962512][ T5831] usb 2-1: Manufacturer: syz [ 2125.245635][ T5831] usb 2-1: SerialNumber: syz [ 2125.266946][ T5831] usb 2-1: config 0 descriptor?? [ 2125.283092][T18117] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2125.301579][T18117] usb 4-1: config 0 has no interface number 0 [ 2125.323830][T18117] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2125.350049][T23496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2125.364009][T18117] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2125.430050][ T5831] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2125.541280][T18117] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2125.551330][T18117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.576468][T18117] usb 4-1: Product: syz [ 2125.588659][T18117] usb 4-1: Manufacturer: syz [ 2125.595785][T18117] usb 4-1: SerialNumber: syz [ 2125.614131][T18117] usb 4-1: config 0 descriptor?? [ 2125.717792][T23504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2125.804465][T18117] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 2127.356505][ T5908] usb 2-1: USB disconnect, device number 86 [ 2127.367308][ T5908] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2127.534013][T23519] netlink: 'syz.4.3371': attribute type 4 has an invalid length. [ 2127.614407][T23522] netlink: 'syz.4.3371': attribute type 4 has an invalid length. [ 2127.627973][T18117] usb 4-1: USB disconnect, device number 86 [ 2127.636856][T18117] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 2128.058867][T23536] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3375'. [ 2128.174117][ T5908] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2128.193444][T23540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3374'. [ 2128.214499][T23540] syzkaller1: entered promiscuous mode [ 2128.220135][T23540] syzkaller1: entered allmulticast mode [ 2128.579619][T23536] syzkaller1: entered promiscuous mode [ 2128.585512][T23536] syzkaller1: entered allmulticast mode [ 2128.644008][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 2128.692707][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2128.705028][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.742919][ T5908] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2128.766450][ T5908] pvrusb2: ********** [ 2128.824161][ T5908] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2128.843018][ T5908] pvrusb2: Important functionality might not be entirely working. [ 2128.860945][ T5908] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2128.911156][ T5908] pvrusb2: ********** [ 2128.944569][ T2345] pvrusb2: Invalid write control endpoint [ 2129.097334][ T2345] pvrusb2: Invalid write control endpoint [ 2129.112406][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2129.163973][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2129.172012][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2129.182779][ T2345] pvrusb2: Device being rendered inoperable [ 2129.190421][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2129.371831][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 2129.451253][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2130.318410][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2130.453882][ T5908] usb 5-1: USB disconnect, device number 82 [ 2130.522519][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2130.999374][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 2132.603800][T23581] program syz.3.3381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2134.163840][ T5831] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2134.332345][ T5831] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2134.341194][ T5831] usb 3-1: config 0 has no interface number 0 [ 2134.403302][ T5831] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2134.446083][ T5831] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2134.487266][ T5831] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2134.502259][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.668519][ T5831] usb 3-1: Product: syz [ 2134.678591][ T5831] usb 3-1: Manufacturer: syz [ 2134.692389][ T5831] usb 3-1: SerialNumber: syz [ 2134.723255][ T5831] usb 3-1: config 0 descriptor?? [ 2134.741401][T23590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2134.809141][ T5831] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2136.500754][ T10] usb 3-1: USB disconnect, device number 85 [ 2136.509357][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2137.304116][ T31] INFO: task kworker/0:2:12127 blocked for more than 143 seconds. [ 2137.592777][ T31] Tainted: G L syzkaller #0 [ 2137.606138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2137.625154][ T31] task:kworker/0:2 state:D stack:21632 pid:12127 tgid:12127 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2137.784361][ T31] Workqueue: usb_hub_wq hub_event [ 2137.794057][ T31] Call Trace: [ 2137.797400][ T31] [ 2137.875523][T23617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3387'. [ 2137.918597][T23617] syzkaller1: entered promiscuous mode [ 2137.935254][T23617] syzkaller1: entered allmulticast mode [ 2138.171771][ T31] __schedule+0x14bc/0x5000 [ 2138.185515][ T31] ? __pfx___schedule+0x10/0x10 [ 2138.224328][ T31] ? schedule+0x91/0x360 [ 2138.231492][ T31] schedule+0x165/0x360 [ 2138.240863][ T31] schedule_preempt_disabled+0x13/0x30 [ 2138.261630][ T31] __mutex_lock+0x7e6/0x1350 [ 2138.274761][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2138.288913][ T31] ? hub_event+0x2182/0x4ef0 [ 2138.303593][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2138.322801][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2138.347002][ T31] hub_event+0x2182/0x4ef0 [ 2138.373198][ T31] ? __pfx_hub_event+0x10/0x10 [ 2138.397657][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2138.468443][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2138.493941][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2138.513834][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2138.520100][ T31] process_scheduled_works+0xad1/0x1770 [ 2138.541974][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2138.561456][ T31] worker_thread+0x8a0/0xda0 [ 2138.570576][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2138.578507][ T31] ? __kthread_parkme+0x7b/0x200 [ 2138.593051][ T31] kthread+0x711/0x8a0 [ 2138.624562][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2138.648511][ T31] ? __pfx_kthread+0x10/0x10 [ 2138.668777][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2138.689346][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2138.705861][ T31] ? __pfx_kthread+0x10/0x10 [ 2138.728886][ T31] ret_from_fork+0x599/0xb30 [ 2138.743783][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2138.758147][ T31] ? __switch_to_asm+0x39/0x70 [ 2138.771669][ T31] ? __switch_to_asm+0x33/0x70 [ 2138.789655][ T31] ? __pfx_kthread+0x10/0x10 [ 2138.802110][ T31] ret_from_fork_asm+0x1a/0x30 [ 2138.815759][ T31] [ 2138.830233][ T31] [ 2138.830233][ T31] Showing all locks held in the system: [ 2138.863148][ T31] 5 locks held by kworker/1:0/24: [ 2138.880300][ T31] #0: ffff8880202d8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2138.903592][ T31] #1: ffffc900001e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2138.930521][ T31] #2: ffff888029cac198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2138.940380][ T31] #3: ffff8881443d9518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2138.950441][ T31] #4: ffff888029acda68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2138.960384][ T31] 1 lock held by khungtaskd/31: [ 2138.965395][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2138.975654][ T31] 3 locks held by kworker/u8:5/68: [ 2138.980783][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2138.992744][ T31] #1: ffffc9000215fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2139.004117][ T31] #2: ffffffff8f30fc48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2139.013156][ T31] 2 locks held by getty/5594: [ 2139.017972][ T31] #0: ffff88814d36d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2139.027866][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2139.038095][ T31] 3 locks held by kworker/0:5/5908: [ 2139.043333][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2139.054976][ T31] #1: ffffc9000458fb80 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2139.067155][ T31] #2: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2139.077390][ T31] 5 locks held by kworker/0:2/12127: [ 2139.082708][ T31] #0: ffff8880202d8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2139.094250][ T31] #1: ffffc9001a8c7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2139.106341][ T31] #2: ffff888029e79198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2139.115552][ T31] #3: ffff888029e7b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2139.125644][ T31] #4: ffff888029acda68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2139.135460][ T31] 2 locks held by syz.3.3385/23602: [ 2139.140693][ T31] #0: ffffffff8f302bb0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 2139.150233][ T31] #1: ffffffff8f30fc48 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 2139.159826][ T31] 2 locks held by syz.2.3387/23608: [ 2139.165432][ T31] #0: ffffffff8f30fc48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2139.174899][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2139.186380][ T31] 1 lock held by syz.4.3388/23614: [ 2139.191526][ T31] #0: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2139.201620][ T31] [ 2139.206450][ T31] ============================================= [ 2139.206450][ T31] [ 2139.215211][ T31] NMI backtrace for cpu 0 [ 2139.215251][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2139.215280][ T31] Tainted: [L]=SOFTLOCKUP [ 2139.215297][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2139.215311][ T31] Call Trace: [ 2139.215320][ T31] [ 2139.215330][ T31] dump_stack_lvl+0x189/0x250 [ 2139.215365][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.215391][ T31] ? __pfx__printk+0x10/0x10 [ 2139.215435][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2139.215464][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2139.215493][ T31] ? __pfx__printk+0x10/0x10 [ 2139.215531][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2139.215568][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2139.215597][ T31] sys_info+0x135/0x170 [ 2139.215618][ T31] watchdog+0xf95/0xfe0 [ 2139.215655][ T31] ? watchdog+0x20a/0xfe0 [ 2139.215693][ T31] kthread+0x711/0x8a0 [ 2139.215726][ T31] ? __pfx_watchdog+0x10/0x10 [ 2139.215774][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.215805][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2139.215835][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2139.215865][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.215895][ T31] ret_from_fork+0x599/0xb30 [ 2139.215919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2139.215952][ T31] ? __switch_to_asm+0x39/0x70 [ 2139.215981][ T31] ? __switch_to_asm+0x33/0x70 [ 2139.216009][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.216038][ T31] ret_from_fork_asm+0x1a/0x30 [ 2139.216083][ T31] [ 2139.216091][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2139.372727][ C1] NMI backtrace for cpu 1 [ 2139.372750][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2139.372775][ C1] Tainted: [L]=SOFTLOCKUP [ 2139.372783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2139.372808][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2139.372842][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 00 0d 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2139.372860][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2139.372878][ C1] RAX: b08d1fc7cb782400 RBX: ffffffff81978eba RCX: b08d1fc7cb782400 [ 2139.372894][ C1] RDX: 0000000000000001 RSI: ffffffff8d790513 RDI: ffffffff8bc07be0 [ 2139.372908][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 2139.372922][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f81fb70 [ 2139.372937][ C1] R13: 1ffff11003956b70 R14: 0000000000000001 R15: 0000000000000001 [ 2139.372950][ C1] FS: 0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 2139.372965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.372979][ C1] CR2: 00000000f73fc208 CR3: 0000000073800000 CR4: 00000000003526f0 [ 2139.372995][ C1] DR0: 0000000000000a09 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.373007][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2139.373019][ C1] Call Trace: [ 2139.373029][ C1] [ 2139.373037][ C1] default_idle+0x13/0x20 [ 2139.373056][ C1] default_idle_call+0x73/0xb0 [ 2139.373075][ C1] do_idle+0x1ea/0x520 [ 2139.373097][ C1] ? irqentry_exit+0x5ba/0x660 [ 2139.373132][ C1] ? __pfx_do_idle+0x10/0x10 [ 2139.373162][ C1] cpu_startup_entry+0x44/0x60 [ 2139.373183][ C1] start_secondary+0x101/0x110 [ 2139.373212][ C1] common_startup_64+0x13e/0x147 [ 2139.373245][ C1] [ 2139.376024][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2139.376052][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2139.376088][ T31] Tainted: [L]=SOFTLOCKUP [ 2139.376099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2139.376116][ T31] Call Trace: [ 2139.376128][ T31] [ 2139.376140][ T31] dump_stack_lvl+0x99/0x250 [ 2139.376182][ T31] ? __asan_memcpy+0x40/0x70 [ 2139.376207][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.376240][ T31] ? __pfx__printk+0x10/0x10 [ 2139.376300][ T31] vpanic+0x237/0x6d0 [ 2139.376330][ T31] ? __pfx_vpanic+0x10/0x10 [ 2139.376364][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2139.376407][ T31] panic+0xb9/0xc0 [ 2139.376437][ T31] ? __pfx_panic+0x10/0x10 [ 2139.376471][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2139.376502][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2139.376538][ T31] watchdog+0xfdf/0xfe0 [ 2139.376582][ T31] ? watchdog+0x20a/0xfe0 [ 2139.376628][ T31] kthread+0x711/0x8a0 [ 2139.376668][ T31] ? __pfx_watchdog+0x10/0x10 [ 2139.376703][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.376739][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2139.376773][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2139.376810][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.376843][ T31] ret_from_fork+0x599/0xb30 [ 2139.376872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2139.376909][ T31] ? __switch_to_asm+0x39/0x70 [ 2139.376943][ T31] ? __switch_to_asm+0x33/0x70 [ 2139.376975][ T31] ? __pfx_kthread+0x10/0x10 [ 2139.377010][ T31] ret_from_fork_asm+0x1a/0x30 [ 2139.377064][ T31] [ 2139.718965][ T31] Kernel Offset: disabled [ 2139.723292][ T31] Rebooting in 86400 seconds..