last executing test programs: 11m46.924654877s ago: executing program 2 (id=10): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000002640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11m46.344771976s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003680)={0x50, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "482c308dc2f95be91e41e8c55e"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 11m45.559536824s ago: executing program 2 (id=16): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x10020004, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 11m39.866068226s ago: executing program 2 (id=24): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000200)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, 0x0, 0x0, 0x34000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="a787000000ff000000000b000004040001"], 0x18}}, 0x0) 11m39.008829175s ago: executing program 2 (id=27): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 11m37.345300279s ago: executing program 2 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_setup(0x8, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 11m21.842411114s ago: executing program 32 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_setup(0x8, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 5m32.080756104s ago: executing program 5 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvfrom(r0, 0x0, 0x0, 0x40000103, 0x0, 0x0) 5m30.641754185s ago: executing program 5 (id=1093): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="88df41", 0x3, 0x0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m29.454526821s ago: executing program 5 (id=1098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0a00180003030303030300000800a10008000000050019010a0000000500190107000000080026006c0900000800a18002000000080027"], 0x58}}, 0x0) 5m28.798244188s ago: executing program 5 (id=1100): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}]}}]}, 0x48}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x11a, 0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) io_uring_enter(r1, 0x53d1, 0x0, 0x4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 5m26.506489266s ago: executing program 5 (id=1106): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) readlinkat(r1, &(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000180)=""/215, 0xd7) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, {0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m25.242649754s ago: executing program 5 (id=1114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) socket$packet(0x11, 0x2, 0x300) 5m9.804321431s ago: executing program 33 (id=1114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) socket$packet(0x11, 0x2, 0x300) 2m36.772734154s ago: executing program 4 (id=1678): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x5, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4}) 2m36.270457644s ago: executing program 4 (id=1680): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x8]}}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xb, 0x919]}) 2m35.709373973s ago: executing program 4 (id=1683): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 2m35.198120929s ago: executing program 4 (id=1685): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0xfffffffffffffff9, {0x7, 0x29, 0x41, 0x7c51d4b6c039e852, 0x67e, 0x4, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c6700002c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bd6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287eda920fe0f7cfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de132cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f5b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4786c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x2000000000008, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x80000001, 0x26, 0xffffffffffffff0c, 0x2, 0x35741060, 0x9, 0x8000, 0x9ea, 0x0, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 2m34.737476222s ago: executing program 4 (id=1687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, [@algo_aead={0x4c, 0x12, {{'ccm-aes-ce\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) 2m34.243803213s ago: executing program 4 (id=1689): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x220202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 2m18.536199137s ago: executing program 34 (id=1689): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x220202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m14.200722634s ago: executing program 6 (id=1931): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/100, 0x64}, {0x0}], 0x2}, 0x8}], 0x2, 0x40010002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0xfffffe67, &(0x7f0000000200)={&(0x7f0000000240)=@can={{}, 0x0, 0x0, 0x0, 0x0, "f201001600000003"}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) 1m12.733113332s ago: executing program 6 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f00)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x200, 0x7, 0x1}, {{0x1, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}]}]}}]}, 0x58}}, 0x0) 1m11.722370725s ago: executing program 6 (id=1941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m10.949394267s ago: executing program 6 (id=1945): write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x0) 1m8.830848064s ago: executing program 6 (id=1953): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x4040801) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x20}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1m7.0093488s ago: executing program 6 (id=1960): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) close(0xffffffffffffffff) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 51.532975512s ago: executing program 35 (id=1960): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) close(0xffffffffffffffff) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.089079342s ago: executing program 1 (id=2104): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 6.822471395s ago: executing program 7 (id=2106): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000411000400000000006e6ad9ba00442f01000000000000002000d76b1369000001ff020000000000000000000000000001042022eb"], 0x7a) 6.613205851s ago: executing program 0 (id=2107): writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000140)="d50b5828b243079a7b6ed73a44be8f744669d4664c0231060ad3905ec508c097dc0789846275b2e34a56f1664a37686e84d5c1625fd55a1d34b4a959473e738e5e0f11a17be61b92cd0e932c80d887b2fd818afb3571f77ff9dbf7d29bbb954e06be3b1a475873c4398f39adeb839625335d99b178f895cce6f79c987e718db064de81dc0f8380385c65826e390732749065d749e2158e8fcd589b71b81ae58223688aeb37435a94d7bb6aee392b8429b7df4416a49ec3db3c9209c631ff7153de01e410342429616f50845498966f4600b93dc57d2e08172f1fca49264dfb15d51ac47f15e19d74b1b42cb6496fad1b28f4", 0xf2}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 5.862204001s ago: executing program 7 (id=2109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfff1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xf}, {0xf, 0xfff1}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 5.792356709s ago: executing program 8 (id=2110): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x3, "7e0efeac3d4fd6e0c46a2ca55aab2500b482b200f475a8f64100", 0x47425247}) 5.679250711s ago: executing program 1 (id=2112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 5.525271979s ago: executing program 0 (id=2113): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.236811519s ago: executing program 3 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x190, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x160, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x114, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.107868475s ago: executing program 8 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x28000440, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xfffffffffffffffe, 0x1, {0x8, 0x4, 0x1, 0xc, 0x8, 0x9, {0x0, 0x3, 0x6, 0x9, 0x2, 0x1000000000000003, 0x8, 0xab, 0x200006, 0x8000, 0x2, r2, r3, 0x2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.823684348s ago: executing program 7 (id=2116): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') lseek(r1, 0xce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 4.177858106s ago: executing program 3 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4008a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404cc05}, 0x4040140) 3.992931258s ago: executing program 0 (id=2118): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54500337ff4aeeec57e7bad23bd08e3a32497221c27e8f868c7fdbc813aee7562641b7849344ecc5de145e200c42c361ef7e5e135836af8c35709e45f34d9ccedf052b3cb1ee1aa71640bec13d11cacb3dbdb2fd8a23f6f65aaeb834974c24cbfc632dc64f7e7f55e05f9b925a046c5d611ffea50be87d1c2145", 0xba}], 0x1}, 0x810) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.903675956s ago: executing program 8 (id=2119): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000411000400000000006e6ad9ba00442f01000000000000002000d76b1369000001ff020000000000000000000000000001042022eb"], 0x7a) 3.313022913s ago: executing program 7 (id=2120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.26341987s ago: executing program 1 (id=2121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3.240722528s ago: executing program 3 (id=2122): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 3.233432017s ago: executing program 0 (id=2123): writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000140)="d50b5828b243079a7b6ed73a44be8f744669d4664c0231060ad3905ec508c097dc0789846275b2e34a56f1664a37686e84d5c1625fd55a1d34b4a959473e738e5e0f11a17be61b92cd0e932c80d887b2fd818afb3571f77ff9dbf7d29bbb954e06be3b1a475873c4398f39adeb839625335d99b178f895cce6f79c987e718db064de81dc0f8380385c65826e390732749065d749e2158e8fcd589b71b81ae58223688aeb37435a94d7bb6aee392b8429b7df4416a49ec3db3c9209c631ff7153de01e410342429616f50845498966f4600b93dc57d2e08172f1fca49264dfb15d51ac47f15e19d74b1b42cb6496fad1b28f4", 0xf2}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.749462076s ago: executing program 8 (id=2124): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 2.224746367s ago: executing program 1 (id=2125): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x3, "7e0efeac3d4fd6e0c46a2ca55aab2500b482b200f475a8f64100", 0x47425247}) 2.188665872s ago: executing program 0 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfff1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xf}, {0xf, 0xfff1}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 2.182479915s ago: executing program 7 (id=2127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x190, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x160, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x114, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.868393771s ago: executing program 8 (id=2128): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.791175499s ago: executing program 3 (id=2129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.421001178s ago: executing program 1 (id=2130): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') lseek(r1, 0xce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1.129684009s ago: executing program 7 (id=2131): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 883.797542ms ago: executing program 0 (id=2132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') fallocate(r2, 0x10, 0x200000000000000, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xd7, 0x4, &(0x7f0000000040)={0x8, "80051fa603b5678bdb1a00db17702fb9a7f77d0404007100000000e400"}}) 648.683739ms ago: executing program 3 (id=2133): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x80, 0x1010, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e07", 0xdd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 375.145902ms ago: executing program 1 (id=2134): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, 0x0, &(0x7f0000000140)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}]}}]}, 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x11a, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x2, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) io_uring_enter(r0, 0x53d1, 0x0, 0x4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 286.395271ms ago: executing program 8 (id=2135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 0s ago: executing program 3 (id=2136): writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000140)="d50b5828b243079a7b6ed73a44be8f744669d4664c0231060ad3905ec508c097dc0789846275b2e34a56f1664a37686e84d5c1625fd55a1d34b4a959473e738e5e0f11a17be61b92cd0e932c80d887b2fd818afb3571f77ff9dbf7d29bbb954e06be3b1a475873c4398f39adeb839625335d99b178f895cce6f79c987e718db064de81dc0f8380385c65826e390732749065d749e2158e8fcd589b71b81ae58223688aeb37435a94d7bb6aee392b8429b7df4416a49ec3db3c9209c631ff7153de01e410342429616f50845498966f4600b93dc57d2e08172f1fca49264dfb15d51ac47f15e19d74b1b42cb6496fad1b28f4", 0xf2}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) kernel console output (not intermixed with test programs): evice found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.515408][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.523670][ T5851] usb 2-1: Product: syz [ 558.527919][ T5851] usb 2-1: Manufacturer: syz [ 558.532713][ T5851] usb 2-1: SerialNumber: syz [ 558.619340][ T5851] usb 2-1: config 0 descriptor?? [ 558.903451][ T5851] usb 2-1: USB disconnect, device number 14 [ 559.102935][ T5463] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 559.982642][ T5844] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 560.161618][ T9169] fuse: Unknown parameter '0x0000000000000003' [ 560.193974][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 560.236530][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 560.317039][ T5844] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.326732][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.335427][ T5844] usb 1-1: Product: syz [ 560.339790][ T5844] usb 1-1: Manufacturer: syz [ 560.345216][ T5844] usb 1-1: SerialNumber: syz [ 560.455772][ T5844] usb 1-1: config 0 descriptor?? [ 560.506614][ T5844] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 560.516693][ T5844] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 561.243448][ T5844] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 562.517796][ T5844] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 562.526435][ T5844] em28xx 1-1:0.0: board has no eeprom [ 562.682669][ T5844] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 562.690881][ T5844] em28xx 1-1:0.0: dvb set to bulk mode. [ 562.699341][ T5849] em28xx 1-1:0.0: Binding DVB extension [ 562.818269][ T5844] usb 1-1: USB disconnect, device number 21 [ 562.826089][ T5844] em28xx 1-1:0.0: Disconnecting em28xx [ 563.144539][ T5849] em28xx 1-1:0.0: Registering input extension [ 563.202808][ T5844] em28xx 1-1:0.0: Closing input extension [ 563.266484][ T5844] em28xx 1-1:0.0: Freeing device [ 564.168874][ T5463] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 564.281911][ T9210] fuse: Unknown parameter 'fd0x0000000000000003' [ 564.419290][ T5463] usb 6-1: config 0 has no interfaces? [ 564.518604][ T5463] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 564.528397][ T5463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.537264][ T5463] usb 6-1: Product: syz [ 564.541528][ T5463] usb 6-1: Manufacturer: syz [ 564.546682][ T5463] usb 6-1: SerialNumber: syz [ 564.635725][ T5463] usb 6-1: config 0 descriptor?? [ 564.946299][ T5463] usb 6-1: USB disconnect, device number 17 [ 566.614827][ T9241] fuse: Unknown parameter 'fd0x0000000000000003' [ 567.063262][ T5463] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 567.305487][ T5463] usb 1-1: config 65 has an invalid interface number: 95 but max is 0 [ 567.314356][ T5463] usb 1-1: config 65 has no interface number 0 [ 567.392822][ T5463] usb 1-1: string descriptor 0 read error: -22 [ 567.399666][ T5463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 567.409178][ T5463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.501515][ T5463] usbtest 1-1:65.95: Linux gadget zero [ 567.507223][ T5463] usbtest 1-1:65.95: low-speed {control in/out} tests (+alt) [ 567.709958][ T5463] usb 1-1: USB disconnect, device number 22 [ 568.372842][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 568.572869][ T5844] usb 2-1: config 0 has no interfaces? [ 568.602244][ T5844] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 568.612173][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.620666][ T5844] usb 2-1: Product: syz [ 568.625086][ T5844] usb 2-1: Manufacturer: syz [ 568.629815][ T5844] usb 2-1: SerialNumber: syz [ 568.696510][ T5844] usb 2-1: config 0 descriptor?? [ 568.963126][ T5844] usb 2-1: USB disconnect, device number 15 [ 570.199498][ T9290] fuse: Unknown parameter 'fd0x0000000000000003' [ 570.328974][ T9289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 571.214766][ T9297] loop5: detected capacity change from 0 to 7 [ 571.273517][ T9297] Dev loop5: unable to read RDB block 7 [ 571.279340][ T9297] loop5: AHDI p1 p2 p3 [ 571.284413][ T9297] loop5: partition table partially beyond EOD, truncated [ 571.292195][ T9297] loop5: p1 start 1601398130 is beyond EOD, truncated [ 571.299382][ T9297] loop5: p2 start 1702059890 is beyond EOD, truncated [ 572.322757][ T5463] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 572.552222][ T5463] usb 6-1: config 65 has an invalid interface number: 95 but max is 0 [ 572.561048][ T5463] usb 6-1: config 65 has no interface number 0 [ 572.640148][ T5463] usb 6-1: string descriptor 0 read error: -22 [ 572.646873][ T5463] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 572.656546][ T5463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.729213][ T5463] usbtest 6-1:65.95: Linux gadget zero [ 572.735151][ T5463] usbtest 6-1:65.95: low-speed {control in/out} tests (+alt) [ 572.930190][ T5463] usb 6-1: USB disconnect, device number 18 [ 573.106237][ T9315] futex_wake_op: syz.1.1104 tries to shift op by 32; fix this program [ 575.167392][ T9340] loop5: detected capacity change from 0 to 7 [ 575.199783][ T9340] Dev loop5: unable to read RDB block 7 [ 575.206332][ T9340] loop5: AHDI p1 p2 p3 [ 575.210794][ T9340] loop5: partition table partially beyond EOD, truncated [ 575.221747][ T9340] loop5: p1 start 1601398130 is beyond EOD, truncated [ 575.229712][ T9340] loop5: p2 start 1702059890 is beyond EOD, truncated [ 577.058874][ T9362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1118'. [ 578.146683][ T9385] loop5: detected capacity change from 0 to 7 [ 578.159352][ T9385] Dev loop5: unable to read RDB block 7 [ 578.166076][ T9385] loop5: AHDI p1 p2 p3 [ 578.170799][ T9385] loop5: partition table partially beyond EOD, truncated [ 578.179350][ T9385] loop5: p1 start 1601398130 is beyond EOD, truncated [ 578.186599][ T9385] loop5: p2 start 1702059890 is beyond EOD, truncated [ 579.602956][ T5463] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 579.846597][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.858186][ T5463] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 579.867744][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.928189][ T5463] usb 2-1: config 0 descriptor?? [ 580.172622][ T5851] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 580.199533][ T5463] usbhid 2-1:0.0: can't add hid device: -71 [ 580.206343][ T5463] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 580.243277][ T5463] usb 2-1: USB disconnect, device number 16 [ 580.361444][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 580.374987][ T5851] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.384564][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.495174][ T5851] usb 4-1: config 0 descriptor?? [ 580.530866][ T5851] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 580.713352][ T5463] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 580.902588][ T5463] usb 2-1: Using ep0 maxpacket: 32 [ 580.955660][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.967964][ T5463] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 580.977590][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.005083][ T5463] usb 2-1: config 0 descriptor?? [ 581.024655][ T5463] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 581.061048][ T5463] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 581.275384][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 581.586241][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 582.902303][ T5463] usb 2-1: USB disconnect, device number 17 [ 582.923541][ T5463] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 582.933908][ T5844] usb 4-1: USB disconnect, device number 19 [ 583.257450][ T9454] netlink: 'syz.3.1147': attribute type 3 has an invalid length. [ 584.322904][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 584.505098][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.516987][ T5844] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 584.526504][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.613694][ T5844] usb 1-1: config 0 descriptor?? [ 584.867218][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 584.874407][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 584.962195][ T5844] usb 1-1: USB disconnect, device number 23 [ 585.434427][ T5844] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 585.654173][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 585.682847][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.694389][ T5844] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 585.703891][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.730339][ T5844] usb 1-1: config 0 descriptor?? [ 585.769989][ T5844] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 585.802082][ T5086] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 585.829749][ T5844] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 585.989808][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 586.727785][ T9487] netlink: 'syz.1.1159': attribute type 3 has an invalid length. [ 586.805523][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.815786][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.370574][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 587.535320][ T9489] nlmon0: Master is either lo or non-ether device [ 587.892874][ T5463] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 588.248651][ T5463] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 588.257454][ T5463] usb 4-1: config 65 has no interface number 0 [ 588.340104][ T5463] usb 4-1: string descriptor 0 read error: -22 [ 588.347484][ T5463] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 588.357230][ T5463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.450913][ T5463] usbtest 4-1:65.95: Linux gadget zero [ 588.456778][ T5463] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 588.636284][ T5463] usb 4-1: USB disconnect, device number 20 [ 588.643780][ T5844] usb 1-1: USB disconnect, device number 24 [ 588.657530][ T5844] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 589.832689][ T5086] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 589.841449][ T5086] Bluetooth: hci4: Injecting HCI hardware error event [ 589.849315][ T5086] Bluetooth: hci4: hardware error 0x00 [ 590.258761][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 590.473004][ T9523] netlink: 'syz.1.1170': attribute type 3 has an invalid length. [ 591.137130][ T9529] netlink: 'syz.0.1173': attribute type 3 has an invalid length. [ 591.774045][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.786381][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.797817][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.824711][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.854205][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 591.925352][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 592.892972][ T5463] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 593.225011][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.236678][ T5463] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 593.246148][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.307180][ T5463] usb 1-1: config 0 descriptor?? [ 593.342702][ T9533] chnl_net:caif_netlink_parms(): no params data found [ 593.386890][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.393741][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.674331][ T5463] usbhid 1-1:0.0: can't add hid device: -71 [ 593.680925][ T5463] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 593.794046][ T5463] usb 1-1: USB disconnect, device number 25 [ 593.912980][ T5086] Bluetooth: hci1: command tx timeout [ 594.226300][ T5463] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 594.482933][ T5463] usb 1-1: Using ep0 maxpacket: 32 [ 594.495383][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.508256][ T5463] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 594.517685][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.638380][ T5463] usb 1-1: config 0 descriptor?? [ 594.705103][ T5463] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 594.799543][ T5463] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 595.487376][ T9533] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.494812][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.503659][ T9533] bridge_slave_0: entered allmulticast mode [ 595.512071][ T9533] bridge_slave_0: entered promiscuous mode [ 595.647323][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.655180][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.663233][ T9533] bridge_slave_1: entered allmulticast mode [ 595.671777][ T9533] bridge_slave_1: entered promiscuous mode [ 595.977097][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.003673][ T5086] Bluetooth: hci1: command tx timeout [ 596.014709][ T5844] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 596.034397][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.070942][ T9533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.270949][ T9533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.348975][ T5844] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 596.357659][ T5844] usb 4-1: config 65 has no interface number 0 [ 596.408158][ T5844] usb 4-1: string descriptor 0 read error: -22 [ 596.415258][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 596.425990][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.462093][ T5844] usbtest 4-1:65.95: Linux gadget zero [ 596.468820][ T5844] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 596.668970][ T5844] usb 4-1: USB disconnect, device number 21 [ 596.930465][ T9533] team0: Port device team_slave_0 added [ 596.947286][ T9533] team0: Port device team_slave_1 added [ 597.193245][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.200496][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.227913][ T9533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.258177][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.265754][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.292503][ T9533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.596960][ T5844] usb 1-1: USB disconnect, device number 26 [ 597.677831][ T5844] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 598.072677][ T5086] Bluetooth: hci1: command tx timeout [ 598.268902][ T9533] hsr_slave_0: entered promiscuous mode [ 598.277446][ T9533] hsr_slave_1: entered promiscuous mode [ 598.285331][ T9533] debugfs: 'hsr0' already exists in 'hsr' [ 598.291160][ T9533] Cannot create hsr debugfs directory [ 599.150518][ T9572] netlink: 'syz.0.1185': attribute type 3 has an invalid length. [ 599.940870][ T9533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 599.968188][ T9349] syz.5.1114 (9349): drop_caches: 1 [ 599.988417][ T9533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 600.018569][ T9533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 600.044622][ T9533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 600.161220][ T5086] Bluetooth: hci1: command tx timeout [ 600.802681][ T5463] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 601.074756][ T5463] usb 1-1: config 65 has an invalid interface number: 95 but max is 0 [ 601.083769][ T5463] usb 1-1: config 65 has no interface number 0 [ 601.197443][ T5463] usb 1-1: string descriptor 0 read error: -22 [ 601.204432][ T5463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 601.214732][ T5463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.295885][ T5463] usbtest 1-1:65.95: Linux gadget zero [ 601.301829][ T5463] usbtest 1-1:65.95: low-speed {control in/out} tests (+alt) [ 601.490857][ T5463] usb 1-1: USB disconnect, device number 27 [ 601.780793][ T9533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.906662][ T9533] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.998519][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.006094][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.110773][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.118536][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.367258][ T9533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 602.378960][ T9533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.679083][ T9606] warning: `syz.4.1195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 603.293877][ T9613] fuse: Invalid rootmode [ 603.344836][ T9606] netdevsim netdevsim4: Direct firmware load for / [ 603.344836][ T9606] failed with error -2 [ 603.356168][ T9606] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 603.356168][ T9606] [ 604.007723][ T9621] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 604.110668][ T152] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.188188][ T9533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.238881][ T152] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.428933][ T152] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.588382][ T152] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.238518][ T152] bridge_slave_1: left allmulticast mode [ 605.244905][ T152] bridge_slave_1: left promiscuous mode [ 605.251383][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.295968][ T5463] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 605.343988][ T152] bridge_slave_0: left allmulticast mode [ 605.350137][ T152] bridge_slave_0: left promiscuous mode [ 605.357785][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.507872][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.521079][ T5463] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.530696][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.720634][ T5463] usb 1-1: config 0 descriptor?? [ 606.000565][ T5463] usbhid 1-1:0.0: can't add hid device: -71 [ 606.007186][ T5463] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 606.124599][ T5463] usb 1-1: USB disconnect, device number 28 [ 606.333483][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.375892][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.428248][ T152] bond0 (unregistering): Released all slaves [ 606.582819][ T5463] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 606.752624][ T5851] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 606.812611][ T5463] usb 1-1: Using ep0 maxpacket: 32 [ 606.894689][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.906294][ T5463] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 606.915686][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.040489][ T5851] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 607.050128][ T5851] usb 4-1: config 65 has no interface number 0 [ 607.060747][ T5463] usb 1-1: config 0 descriptor?? [ 607.114022][ T5463] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 607.181453][ T5851] usb 4-1: string descriptor 0 read error: -22 [ 607.188330][ T5851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 607.198553][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.224763][ T5463] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 607.271023][ T152] hsr_slave_0: left promiscuous mode [ 607.335066][ T152] hsr_slave_1: left promiscuous mode [ 607.341085][ T5851] usbtest 4-1:65.95: Linux gadget zero [ 607.344030][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.347008][ T5851] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 607.355123][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.495621][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.503531][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.579494][ T5851] usb 4-1: USB disconnect, device number 22 [ 607.668001][ T152] veth1_macvtap: left promiscuous mode [ 607.673950][ T152] veth0_macvtap: left promiscuous mode [ 607.679679][ T152] veth1_vlan: left promiscuous mode [ 607.685966][ T152] veth0_vlan: left promiscuous mode [ 608.498524][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.509838][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.705072][ T152] team0 (unregistering): Port device team_slave_1 removed [ 608.749153][ T152] team0 (unregistering): Port device team_slave_0 removed [ 610.007257][ T9670] fuse: Invalid rootmode [ 610.170078][ T9533] veth0_vlan: entered promiscuous mode [ 610.313256][ T5844] usb 1-1: USB disconnect, device number 29 [ 610.336376][ T9533] veth1_vlan: entered promiscuous mode [ 610.400062][ T5844] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 610.799677][ T9533] veth0_macvtap: entered promiscuous mode [ 610.858501][ T9533] veth1_macvtap: entered promiscuous mode [ 610.914124][ T9682] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 611.103058][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.267626][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.380757][ T1880] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.447127][ T1880] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.496593][ T1880] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.568023][ T1880] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.168528][ T5844] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 613.332732][ T9714] fuse: Invalid rootmode [ 613.398472][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.410379][ T5844] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 613.420576][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.507485][ T5844] usb 1-1: config 0 descriptor?? [ 613.761087][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 613.767794][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 613.820651][ T5844] usb 1-1: USB disconnect, device number 30 [ 614.207430][ T9724] netlink: 'syz.1.1225': attribute type 3 has an invalid length. [ 614.333172][ T5844] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 614.584641][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 614.628604][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.640614][ T5844] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 614.651058][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.770452][ T5844] usb 1-1: config 0 descriptor?? [ 614.848799][ T5844] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 614.890501][ T5844] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 615.034517][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 615.348256][ C1] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 616.208227][ T9743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.218703][ T9743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.427501][ T9767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1232'. [ 617.727349][ T9769] fuse: Bad value for 'rootmode' [ 617.773621][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.782119][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.062652][ T3833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.070747][ T3833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.099183][ T5844] usb 1-1: USB disconnect, device number 31 [ 618.185074][ T5844] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 618.548009][ T9776] netlink: 'syz.0.1236': attribute type 3 has an invalid length. [ 619.372920][ T9789] misc userio: The device must be registered before sending interrupts [ 620.325758][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1243'. [ 620.510473][ T9812] fuse: Bad value for 'rootmode' [ 621.493057][ T9829] netlink: 'syz.0.1249': attribute type 3 has an invalid length. [ 622.821088][ T9854] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1256'. [ 627.151955][ T9850] Set syz1 is full, maxelem 65536 reached [ 627.969334][ T9887] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1266'. [ 627.978967][ T9887] C: renamed from veth0_to_batadv (while UP) [ 628.042253][ T9889] netlink: 'syz.0.1265': attribute type 3 has an invalid length. [ 629.105714][ T5850] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 629.383314][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.398777][ T5850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 629.408561][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.531815][ T5850] usb 2-1: config 0 descriptor?? [ 629.795884][ T5850] usbhid 2-1:0.0: can't add hid device: -71 [ 629.802819][ T5850] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 629.881202][ T5850] usb 2-1: USB disconnect, device number 18 [ 630.332667][ T5850] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 630.534097][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 630.588012][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.599482][ T5850] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 630.608852][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.727634][ T5850] usb 2-1: config 0 descriptor?? [ 630.740668][ T9922] tipc: Started in network mode [ 630.746204][ T9922] tipc: Node identity 3a5e87f99a88, cluster identity 4711 [ 630.754196][ T9922] tipc: Enabled bearer , priority 0 [ 630.775041][ T5850] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 630.838555][ T9922] tipc: Resetting bearer [ 630.854975][ T5850] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 630.910290][ T9919] tipc: Disabling bearer [ 631.022812][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 631.348177][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 632.015243][ T9934] netlink: 'syz.0.1278': attribute type 16 has an invalid length. [ 632.023583][ T9934] netlink: 'syz.0.1278': attribute type 17 has an invalid length. [ 632.197571][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.207141][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.223609][ T9934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.373707][ T9944] netlink: 'syz.4.1281': attribute type 3 has an invalid length. [ 633.825792][ T9675] usb 2-1: USB disconnect, device number 19 [ 633.836518][ T9675] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 635.569624][ T9970] netlink: 'syz.4.1290': attribute type 16 has an invalid length. [ 635.577889][ T9970] netlink: 'syz.4.1290': attribute type 17 has an invalid length. [ 635.696388][ T9970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.843799][ T9675] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 636.913298][ T9986] netlink: 'syz.3.1294': attribute type 3 has an invalid length. [ 637.038588][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.050302][ T9675] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.060051][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.184437][ T9675] usb 1-1: config 0 descriptor?? [ 637.432456][ T9675] usbhid 1-1:0.0: can't add hid device: -71 [ 637.439158][ T9675] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 637.571978][ T9675] usb 1-1: USB disconnect, device number 32 [ 638.018632][ T9675] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 638.309058][T10005] fuse: Unknown parameter '?¬‹ÍÈwÝvŽO©Ÿ­')ç¨Gïb“ߣ' [ 638.362759][ T9675] usb 1-1: Using ep0 maxpacket: 32 [ 638.452190][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.467045][ T9675] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 638.478071][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.577859][ T9675] usb 1-1: config 0 descriptor?? [ 638.613941][ T9675] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 638.851702][ T9675] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 639.110354][T10015] netlink: 'syz.4.1302': attribute type 16 has an invalid length. [ 639.119380][T10015] netlink: 'syz.4.1302': attribute type 17 has an invalid length. [ 639.233137][T10015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.870054][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.880036][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.726378][ T9675] IPVS: starting estimator thread 0... [ 641.831346][ T9675] usb 1-1: USB disconnect, device number 33 [ 641.851822][ T9675] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 641.905181][T10040] IPVS: using max 240 ests per chain, 12000 per kthread [ 644.711585][T10067] netlink: 'syz.4.1314': attribute type 16 has an invalid length. [ 644.719792][T10067] netlink: 'syz.4.1314': attribute type 17 has an invalid length. [ 644.863081][T10067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.587593][ T9675] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 646.856335][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.868158][ T9675] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 646.878439][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.999503][ T9675] usb 1-1: config 0 descriptor?? [ 647.257009][ T9675] usbhid 1-1:0.0: can't add hid device: -71 [ 647.263639][ T9675] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 647.348489][ T9675] usb 1-1: USB disconnect, device number 34 [ 647.717177][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1325'. [ 647.843150][ T9675] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 648.028101][ T9675] usb 1-1: Using ep0 maxpacket: 32 [ 648.103076][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.114441][ T9675] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 648.123855][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.188082][ T9675] usb 1-1: config 0 descriptor?? [ 648.284944][ T9675] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 648.381257][ T9675] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 648.495396][T10111] netlink: 'syz.1.1327': attribute type 16 has an invalid length. [ 648.508967][T10111] netlink: 'syz.1.1327': attribute type 17 has an invalid length. [ 648.625379][T10111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.731125][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.742894][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.042918][ T9675] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 651.255462][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.266900][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.276924][ T9675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.290323][ T9675] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.299835][ T9675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.435420][ T9675] usb 4-1: config 0 descriptor?? [ 651.516943][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 651.527511][T10128] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 651.534133][T10128] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 651.771456][ T5844] usb 1-1: USB disconnect, device number 35 [ 651.808224][ T5844] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 651.878612][ T9675] usbhid 4-1:0.0: can't add hid device: -71 [ 651.886330][ T9675] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 652.038796][ T9675] usb 4-1: USB disconnect, device number 23 [ 652.084799][T10128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.091074][T10128] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 652.126504][T10128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 652.134116][T10128] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 652.207414][T10128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 652.213945][T10128] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 653.637357][T10177] tipc: Enabled bearer , priority 0 [ 653.846920][T10176] tipc: Resetting bearer [ 653.898632][T10176] tipc: Disabling bearer [ 654.198532][ T9675] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 654.393141][ T9675] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 654.401819][ T9675] usb 2-1: config 65 has no interface number 0 [ 654.460708][ T9675] usb 2-1: string descriptor 0 read error: -22 [ 654.468450][ T9675] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 654.479137][ T9675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.535861][ T9675] usbtest 2-1:65.95: Linux gadget zero [ 654.541613][ T9675] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 654.800270][ T9675] usb 2-1: USB disconnect, device number 20 [ 654.827194][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.834154][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.213763][ T5844] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 655.440922][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.452971][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.463244][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.476621][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 655.486442][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.737604][ T5844] usb 4-1: config 0 descriptor?? [ 656.205497][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 656.228710][ T5844] usbhid 4-1:0.0: can't add hid device: -71 [ 656.236264][ T5844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 656.305984][ T5844] usb 4-1: USB disconnect, device number 24 [ 656.970977][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 657.038323][T10232] bond_slave_0: entered promiscuous mode [ 657.044383][T10232] bond_slave_1: entered promiscuous mode [ 657.052068][T10232] macvtap1: entered promiscuous mode [ 657.057852][T10232] bond0: entered promiscuous mode [ 657.065807][T10232] macvtap1: entered allmulticast mode [ 657.071458][T10232] bond0: entered allmulticast mode [ 657.077193][T10232] bond_slave_0: entered allmulticast mode [ 657.083347][T10232] bond_slave_1: entered allmulticast mode [ 657.094680][T10232] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 657.262304][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 657.274109][T10239] bond0: left allmulticast mode [ 657.279235][T10239] bond_slave_0: left allmulticast mode [ 657.286374][T10239] bond_slave_1: left allmulticast mode [ 657.292622][T10239] bond0: left promiscuous mode [ 657.300203][T10239] bond_slave_0: left promiscuous mode [ 657.305992][T10239] bond_slave_1: left promiscuous mode [ 658.836047][ T5844] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 659.043340][ T5844] usb 7-1: config 65 has an invalid interface number: 95 but max is 0 [ 659.052091][ T5844] usb 7-1: config 65 has no interface number 0 [ 659.103398][ T5844] usb 7-1: string descriptor 0 read error: -22 [ 659.110400][ T5844] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 659.120033][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.226165][ T5844] usbtest 7-1:65.95: Linux gadget zero [ 659.232090][ T5844] usbtest 7-1:65.95: low-speed {control in/out} tests (+alt) [ 659.428877][ T5844] usb 7-1: USB disconnect, device number 2 [ 660.848343][T10289] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1376'. [ 661.200829][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 661.254246][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 661.260483][T10294] bond_slave_0: entered promiscuous mode [ 661.269288][T10294] bond_slave_1: entered promiscuous mode [ 661.275301][T10294] dummy0: entered promiscuous mode [ 661.281166][T10294] macvtap2: entered promiscuous mode [ 661.287073][T10294] bond0: entered promiscuous mode [ 661.295975][T10294] macvtap2: entered allmulticast mode [ 661.301606][T10294] bond0: entered allmulticast mode [ 661.307592][T10294] bond_slave_0: entered allmulticast mode [ 661.313573][T10294] bond_slave_1: entered allmulticast mode [ 661.319401][T10294] dummy0: entered allmulticast mode [ 661.328132][T10294] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 661.545598][T10295] bond0: left allmulticast mode [ 661.551680][T10295] bond_slave_0: left allmulticast mode [ 661.557708][T10295] bond_slave_1: left allmulticast mode [ 661.563428][T10295] dummy0: left allmulticast mode [ 661.568595][T10295] bond0: left promiscuous mode [ 661.576316][T10295] bond_slave_0: left promiscuous mode [ 661.581814][T10295] bond_slave_1: left promiscuous mode [ 661.587504][T10295] dummy0: left promiscuous mode [ 664.152822][ T5844] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 664.372790][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 664.409094][ T5844] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 664.419777][ T5844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.430793][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.441106][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.451357][ T5844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.465372][ T5844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 664.475205][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.935363][ T5844] usb 1-1: GET_CAPABILITIES returned 2f [ 664.941335][ T5844] usbtmc 1-1:16.0: can't read capabilities [ 665.289302][ T5463] usb 1-1: USB disconnect, device number 36 [ 665.318047][T10329] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 667.455195][T10348] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.775443][T10351] tipc: Started in network mode [ 667.780550][T10351] tipc: Node identity e2d00a78e14a, cluster identity 4711 [ 667.789706][T10351] tipc: Enabled bearer , priority 0 [ 667.853294][T10353] syzkaller0: entered promiscuous mode [ 667.859002][T10353] syzkaller0: entered allmulticast mode [ 668.020441][T10351] tipc: Resetting bearer [ 668.113452][T10349] tipc: Resetting bearer [ 668.164691][T10349] tipc: Disabling bearer [ 668.615771][ T5844] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 668.796356][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 668.834356][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.845827][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.856043][ T5844] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 668.865657][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.031739][ T5844] usb 4-1: config 0 descriptor?? [ 669.263404][T10376] fuse: Unknown parameter 'user_id00000000000000000000' [ 669.545077][ T5844] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 669.730201][ T5844] usb 4-1: USB disconnect, device number 25 [ 669.943716][T10385] fuse: Unknown parameter 'group_i00000000000000000000' [ 670.683173][T10383] fido_id[10383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 671.044071][T10394] fuse: Bad value for 'group_id' [ 671.049297][T10394] fuse: Bad value for 'group_id' [ 674.723054][ T5844] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 674.960950][ T5844] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 674.971216][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.981891][ T5844] usb 4-1: config 0 has no interfaces? [ 675.105934][ T5844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.115993][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.124515][ T5844] usb 4-1: Product: syz [ 675.128776][ T5844] usb 4-1: Manufacturer: syz [ 675.133734][ T5844] usb 4-1: SerialNumber: syz [ 675.193582][T10416] fuse: Unknown parameter 'group_i00000000000000000000' [ 675.225220][ T5844] usb 4-1: config 0 descriptor?? [ 677.509934][ T5844] usb 4-1: USB disconnect, device number 26 [ 678.078049][T10433] netdevsim netdevsim4: Direct firmware load for / [ 678.078049][T10433] failed with error -2 [ 678.088997][T10433] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 678.088997][T10433] [ 679.314386][T10444] fuse: Unknown parameter 'group_id00000000000000000000' [ 680.532893][ T5844] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 680.752749][ T9675] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 680.801507][ T5844] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.812921][ T5844] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.826353][ T5844] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.835833][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.014641][ T5844] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.023385][ T5844] usb 4-1: invalid MIDI out EP 0 [ 681.041663][ T9675] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 681.050867][ T9675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.061352][ T9675] usb 2-1: config 0 has no interfaces? [ 681.163676][ T9675] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.176081][ T9675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.184426][ T9675] usb 2-1: Product: syz [ 681.188702][ T9675] usb 2-1: Manufacturer: syz [ 681.194363][ T9675] usb 2-1: SerialNumber: syz [ 681.395634][ T9675] usb 2-1: config 0 descriptor?? [ 681.564928][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.576387][ T5844] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 681.713268][T10455] fuse: Unknown parameter 'rootmod' [ 682.523595][ T5850] usb 4-1: USB disconnect, device number 27 [ 683.902470][ T9675] usb 2-1: USB disconnect, device number 21 [ 685.033896][T10478] fuse: Unknown parameter 'group_id00000000000000000000' [ 685.842672][ T5850] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 686.092704][ T5850] usb 7-1: Using ep0 maxpacket: 16 [ 686.105191][ T5850] usb 7-1: config 0 has no interfaces? [ 686.111115][ T5850] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 686.120524][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.201852][ T5850] usb 7-1: config 0 descriptor?? [ 686.469336][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1450'. [ 686.507480][T10484] batadv0: entered promiscuous mode [ 686.513440][T10484] macvtap2: entered promiscuous mode [ 686.519785][T10484] macvtap2: entered allmulticast mode [ 686.525557][T10484] batadv0: entered allmulticast mode [ 686.537214][T10484] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 686.678125][T10494] batadv0: left allmulticast mode [ 686.684822][T10494] batadv0: left promiscuous mode [ 686.813375][ T9675] usb 7-1: USB disconnect, device number 3 [ 688.397165][T10509] fuse: Unknown parameter 'group_id00000000000000000000' [ 690.084769][T10534] tipc: Enabled bearer , priority 0 [ 690.166369][T10537] syzkaller0: entered promiscuous mode [ 690.171974][T10537] syzkaller0: entered allmulticast mode [ 690.262594][T10534] tipc: Resetting bearer [ 690.371937][T10533] tipc: Resetting bearer [ 690.421910][T10533] tipc: Disabling bearer [ 691.221719][T10548] fuse: Unknown parameter '?¬‹ÍÈwÝvŽO©Ÿ­')ç¨Gïb“ߣ' [ 691.567606][T10551] fuse: Bad value for 'user_id' [ 691.572957][T10551] fuse: Bad value for 'user_id' [ 692.127478][ T5463] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 692.386041][ T5463] usb 7-1: Using ep0 maxpacket: 32 [ 692.425178][ T5463] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 692.433804][ T5463] usb 7-1: config 0 has no interface number 0 [ 692.440101][ T5463] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.566015][ T5463] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 692.577035][ T5463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.585749][ T5463] usb 7-1: Product: syz [ 692.590202][ T5463] usb 7-1: Manufacturer: syz [ 692.595129][ T5463] usb 7-1: SerialNumber: syz [ 692.704466][ T5463] usb 7-1: config 0 descriptor?? [ 692.770045][ T5463] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 692.782815][ T5463] em28xx 7-1:0.132: Video interface 132 found: [ 693.147691][ T5463] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 693.487563][T10564] loop5: detected capacity change from 0 to 7 [ 693.559156][T10564] Dev loop5: unable to read RDB block 7 [ 693.565400][T10564] loop5: unable to read partition table [ 693.620161][T10564] loop5: partition table beyond EOD, truncated [ 693.627327][T10564] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 693.714808][T10566] fuse: Bad value for 'fd' [ 694.333497][ T5463] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 694.343737][ T5463] em28xx 7-1:0.132: board has no eeprom [ 694.432931][ T5463] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 694.441673][ T5463] em28xx 7-1:0.132: analog set to bulk mode. [ 694.452581][ T5850] em28xx 7-1:0.132: Registering V4L2 extension [ 694.575037][ T5463] usb 7-1: USB disconnect, device number 4 [ 694.583397][ T5463] em28xx 7-1:0.132: Disconnecting em28xx [ 695.091706][T10574] tipc: Enabled bearer , priority 0 [ 695.154518][T10575] syzkaller0: entered promiscuous mode [ 695.160218][T10575] syzkaller0: entered allmulticast mode [ 695.265862][T10574] tipc: Resetting bearer [ 695.399218][T10572] tipc: Resetting bearer [ 695.451180][T10572] tipc: Disabling bearer [ 695.773399][ T5850] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 695.780805][ T5850] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 695.788379][ T5850] em28xx 7-1:0.132: No AC97 audio processor [ 695.897465][ T5850] usb 7-1: Decoder not found [ 695.902308][ T5850] em28xx 7-1:0.132: failed to create media graph [ 695.909496][ T5850] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 695.994933][T10585] fuse: Bad value for 'user_id' [ 696.000229][T10585] fuse: Bad value for 'user_id' [ 696.012064][ T5850] em28xx 7-1:0.132: Remote control support is not available for this card. [ 696.054723][ T5463] em28xx 7-1:0.132: Closing input extension [ 696.131319][ T5463] em28xx 7-1:0.132: Freeing device [ 696.938214][T10598] loop5: detected capacity change from 0 to 7 [ 696.983461][T10598] Dev loop5: unable to read RDB block 7 [ 696.989535][T10598] loop5: unable to read partition table [ 697.057657][T10598] loop5: partition table beyond EOD, truncated [ 697.064598][T10598] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 698.005127][ T5463] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 698.202904][ T5463] usb 2-1: Using ep0 maxpacket: 32 [ 698.250955][ T5463] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 698.259899][ T5463] usb 2-1: config 0 has no interface number 0 [ 698.266619][ T5463] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 698.401055][ T5463] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 698.410620][ T5463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.420810][ T5463] usb 2-1: Product: syz [ 698.426475][ T5463] usb 2-1: Manufacturer: syz [ 698.431719][ T5463] usb 2-1: SerialNumber: syz [ 698.549855][ T5463] usb 2-1: config 0 descriptor?? [ 698.612564][ T5463] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 698.625154][ T5463] em28xx 2-1:0.132: Video interface 132 found: [ 699.018221][ T5463] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 699.038822][T10621] tipc: Enabled bearer , priority 0 [ 699.090658][T10622] syzkaller0: entered promiscuous mode [ 699.096880][T10622] syzkaller0: entered allmulticast mode [ 699.130580][ T5463] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 699.140131][ T5463] em28xx 2-1:0.132: board has no eeprom [ 699.175509][T10621] tipc: Resetting bearer [ 699.220750][T10620] tipc: Resetting bearer [ 699.234225][ T5463] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 699.242591][ T5463] em28xx 2-1:0.132: analog set to bulk mode. [ 699.250491][ T5850] em28xx 2-1:0.132: Registering V4L2 extension [ 699.255006][T10620] tipc: Disabling bearer [ 699.310989][ T5463] usb 2-1: USB disconnect, device number 22 [ 699.319005][ T5463] em28xx 2-1:0.132: Disconnecting em28xx [ 699.805675][T10630] fuse: Bad value for 'user_id' [ 699.810954][T10630] fuse: Bad value for 'user_id' [ 700.064011][ T5850] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 700.071432][ T5850] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 700.079136][ T5850] em28xx 2-1:0.132: No AC97 audio processor [ 700.156801][ T5850] usb 2-1: Decoder not found [ 700.161613][ T5850] em28xx 2-1:0.132: failed to create media graph [ 700.168803][ T5850] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 700.216948][ T5850] em28xx 2-1:0.132: Remote control support is not available for this card. [ 700.281165][ T5463] em28xx 2-1:0.132: Closing input extension [ 700.339738][ T5463] em28xx 2-1:0.132: Freeing device [ 700.350036][ T5966] udevd[5966]: setting owner of /dev/bus/usb/002/022 to uid=0, gid=0 failed: No such file or directory [ 700.569462][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 700.651147][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 700.680487][T10643] bond_slave_0: entered promiscuous mode [ 700.686752][T10643] bond_slave_1: entered promiscuous mode [ 700.693224][T10643] macvtap1: entered promiscuous mode [ 700.698708][T10643] bond0: entered promiscuous mode [ 700.706789][T10643] macvtap1: entered allmulticast mode [ 700.712613][T10643] bond0: entered allmulticast mode [ 700.717916][T10643] bond_slave_0: entered allmulticast mode [ 700.724022][T10643] bond_slave_1: entered allmulticast mode [ 700.735044][T10643] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 700.746314][ T9675] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 700.823214][T10646] bond0: left allmulticast mode [ 700.828423][T10646] bond_slave_0: left allmulticast mode [ 700.834650][T10646] bond_slave_1: left allmulticast mode [ 700.840381][T10646] bond0: left promiscuous mode [ 700.848365][T10646] bond_slave_0: left promiscuous mode [ 700.854146][T10646] bond_slave_1: left promiscuous mode [ 700.953492][ T9675] usb 1-1: Using ep0 maxpacket: 16 [ 701.025613][T10651] netlink: 'syz.4.1511': attribute type 21 has an invalid length. [ 701.033352][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.045103][ T9675] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 701.054584][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.165384][ T9675] usb 1-1: config 0 descriptor?? [ 701.204889][T10651] netlink: 'syz.4.1511': attribute type 6 has an invalid length. [ 701.214648][T10651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1511'. [ 701.719426][ T9675] hid_parser_main: 154 callbacks suppressed [ 701.719529][ T9675] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 701.734744][ T9675] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 701.742145][ T9675] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 701.749609][ T9675] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 701.757336][ T9675] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 701.773333][ T5463] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 701.870262][ T9675] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 701.955311][T10661] tipc: Enabled bearer , priority 0 [ 701.989434][ T5463] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 702.000255][ T5463] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.011077][ T5463] usb 7-1: config 0 has no interfaces? [ 702.045497][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.056537][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.071080][T10667] syzkaller0: entered promiscuous mode [ 702.077056][T10667] syzkaller0: entered allmulticast mode [ 702.181041][T10661] tipc: Resetting bearer [ 702.205937][ T5463] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.216821][ T5463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.225372][ T5463] usb 7-1: Product: syz [ 702.229723][ T5463] usb 7-1: Manufacturer: syz [ 702.234603][ T5463] usb 7-1: SerialNumber: syz [ 702.261930][ T5463] usb 7-1: config 0 descriptor?? [ 702.280009][T10660] tipc: Resetting bearer [ 702.294096][T10660] tipc: Disabling bearer [ 702.839152][ T9675] usb 1-1: USB disconnect, device number 37 [ 703.312741][ T5850] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 703.482941][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 703.513089][ T5850] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 703.525316][ T5850] usb 4-1: config 0 has no interface number 0 [ 703.539987][ T5850] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 703.673192][ T5850] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 703.682736][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.691066][ T5850] usb 4-1: Product: syz [ 703.695725][ T5850] usb 4-1: Manufacturer: syz [ 703.700630][ T5850] usb 4-1: SerialNumber: syz [ 703.803762][ T5850] usb 4-1: config 0 descriptor?? [ 703.836487][ T5850] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 703.849162][ T5850] em28xx 4-1:0.132: Video interface 132 found: [ 703.923581][T10678] fuse: Bad value for 'fd' [ 704.254829][ T5850] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 704.413935][ T5850] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 704.423252][ T5850] em28xx 4-1:0.132: board has no eeprom [ 704.540122][ T5850] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 704.548436][ T5850] em28xx 4-1:0.132: analog set to bulk mode. [ 704.563375][ T5851] em28xx 4-1:0.132: Registering V4L2 extension [ 704.605220][ T5463] usb 7-1: USB disconnect, device number 5 [ 704.675960][ T5850] usb 4-1: USB disconnect, device number 28 [ 704.683914][ T5850] em28xx 4-1:0.132: Disconnecting em28xx [ 704.712864][T10684] loop5: detected capacity change from 0 to 7 [ 704.743383][T10684] Dev loop5: unable to read RDB block 7 [ 704.749390][T10684] loop5: unable to read partition table [ 704.833457][T10684] loop5: partition table beyond EOD, truncated [ 704.840090][T10684] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.748662][ T5463] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 705.759313][ T5851] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 705.766863][ T5851] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 705.774425][ T5851] em28xx 4-1:0.132: No AC97 audio processor [ 705.813915][ T5851] usb 4-1: Decoder not found [ 705.818738][ T5851] em28xx 4-1:0.132: failed to create media graph [ 705.825560][ T5851] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 705.866586][ T5851] em28xx 4-1:0.132: Remote control support is not available for this card. [ 705.890015][ T5850] em28xx 4-1:0.132: Closing input extension [ 705.922596][ T5850] em28xx 4-1:0.132: Freeing device [ 705.972972][ T5463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.984297][ T5463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.000514][ T5463] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.016226][ T5463] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.025730][ T5463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.135045][ T5463] usb 7-1: config 0 descriptor?? [ 706.262925][ T9675] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 706.452804][ T9675] usb 1-1: Using ep0 maxpacket: 32 [ 706.493345][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.505990][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.516568][ T9675] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 706.526097][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.590215][ T5463] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 706.598113][ T5463] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 706.608595][ T5463] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 706.616847][ T5463] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 706.624660][ T5463] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 706.665498][ T9675] usb 1-1: config 0 descriptor?? [ 706.771551][ T5463] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 706.864072][ T5463] usb 7-1: USB disconnect, device number 6 [ 707.142183][ T9675] usbhid 1-1:0.0: can't add hid device: -71 [ 707.149412][ T9675] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 707.221715][ T9675] usb 1-1: USB disconnect, device number 38 [ 707.300163][T10702] fido_id[10702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 708.244152][ T9675] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 708.405239][ T9675] usb 1-1: Using ep0 maxpacket: 16 [ 708.433233][ T9675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.445216][ T9675] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 708.456069][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.544059][ T9675] usb 1-1: config 0 descriptor?? [ 708.876393][T10712] fuse: Bad value for 'fd' [ 709.017037][ T9675] hid_parser_main: 2 callbacks suppressed [ 709.017150][ T9675] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 709.030712][ T9675] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 709.038929][ T9675] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 709.046428][ T9675] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 709.053938][ T9675] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 709.233458][ T9675] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 709.272263][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.282701][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.328922][T10720] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1534'. [ 709.904293][ T5463] usb 1-1: USB disconnect, device number 39 [ 709.930193][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1533'. [ 710.243609][T10728] loop5: detected capacity change from 0 to 7 [ 710.299101][T10728] Dev loop5: unable to read RDB block 7 [ 710.305337][T10728] loop5: unable to read partition table [ 710.346723][T10728] loop5: partition table beyond EOD, truncated [ 710.353525][T10728] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 712.955879][T10752] fuse: Bad value for 'fd' [ 713.083872][T10751] loop6: detected capacity change from 0 to 1 [ 713.133160][T10751] Dev loop6: unable to read RDB block 1 [ 713.139179][T10751] loop6: unable to read partition table [ 713.274610][T10751] loop6: partition table beyond EOD, truncated [ 713.281322][T10751] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 713.380184][T10754] loop5: detected capacity change from 0 to 7 [ 713.404334][T10754] Dev loop5: unable to read RDB block 7 [ 713.410219][T10754] loop5: unable to read partition table [ 713.430269][ T5146] Dev loop6: unable to read RDB block 1 [ 713.436357][ T5146] loop6: unable to read partition table [ 713.481381][ T5146] loop6: partition table beyond EOD, truncated [ 713.483614][T10754] loop5: partition table beyond EOD, truncated [ 713.494846][T10754] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 713.775494][ T9675] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 713.981199][ T9675] usb 4-1: Using ep0 maxpacket: 16 [ 714.043715][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.055517][ T9675] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 714.064909][ T9675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.173577][ T9675] usb 4-1: config 0 descriptor?? [ 714.696754][ T9675] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 714.704308][ T9675] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 714.711593][ T9675] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 714.719179][ T9675] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 714.726555][ T9675] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 714.805219][ T9675] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 714.923898][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.933831][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.622844][ T9675] usb 4-1: USB disconnect, device number 29 [ 716.253305][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.260010][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.024659][T10782] fuse: Bad value for 'fd' [ 717.222616][T10788] loop5: detected capacity change from 0 to 7 [ 717.234737][T10788] Dev loop5: unable to read RDB block 7 [ 717.240605][T10788] loop5: unable to read partition table [ 717.300867][T10788] loop5: partition table beyond EOD, truncated [ 717.311439][T10788] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 717.773288][ T5463] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 717.977697][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.992905][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.003520][ T5463] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.021847][ T5463] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.033942][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.051275][ T5463] usb 2-1: config 0 descriptor?? [ 718.102827][ T5850] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 718.290224][ T5850] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.329602][ T5850] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 718.339322][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 718.347899][ T5850] usb 7-1: Product: syz [ 718.352493][ T5850] usb 7-1: Manufacturer: syz [ 718.357370][ T5850] usb 7-1: SerialNumber: syz [ 718.497144][ T5463] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 718.505257][ T5463] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 718.513235][ T5463] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 718.521068][ T5463] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 718.541774][ T5463] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 718.595254][ T5850] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 718.612854][ T5463] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 718.769966][ T5871] usb 2-1: USB disconnect, device number 23 [ 718.809090][ T5463] usb 7-1: USB disconnect, device number 7 [ 718.862588][ T5463] usblp1: removed [ 719.140208][T10810] fido_id[10810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 719.550128][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 719.559738][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 719.741529][T10819] netlink: 'syz.6.1573': attribute type 8 has an invalid length. [ 719.749887][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1573'. [ 719.774705][T10819] bond0: entered promiscuous mode [ 719.779962][T10819] bond_slave_0: entered promiscuous mode [ 719.787118][T10819] bond_slave_1: entered promiscuous mode [ 719.798150][T10819] bond0: left promiscuous mode [ 719.803352][T10819] bond_slave_0: left promiscuous mode [ 719.809907][T10819] bond_slave_1: left promiscuous mode [ 719.885727][T10820] fuse: Bad value for 'fd' [ 720.509774][T10828] syzkaller0: entered promiscuous mode [ 720.516327][T10828] syzkaller0: entered allmulticast mode [ 722.225959][ T5871] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 722.618868][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.630400][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.640790][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 722.654439][ T5871] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.663750][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.823023][ T5871] usb 7-1: config 0 descriptor?? [ 722.893541][T10859] fuse: Bad value for 'fd' [ 723.268552][ T5871] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 723.279199][ T5871] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 723.288954][ T5871] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 723.298292][ T5871] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 723.306473][ T5871] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 723.474169][ T5871] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 723.580712][ T5871] usb 7-1: USB disconnect, device number 8 [ 724.050111][T10864] fido_id[10864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 728.110752][T10890] fuse: Invalid rootmode [ 728.633086][ T5871] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 728.880585][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.892146][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.902264][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.915892][ T5871] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.925283][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.065263][ T5871] usb 1-1: config 0 descriptor?? [ 729.511724][ T5871] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 729.521752][ T5871] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 729.531368][ T5871] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 729.539223][ T5871] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 729.548466][ T5871] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 729.695043][ T5871] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 729.788008][ T5871] usb 1-1: USB disconnect, device number 40 [ 730.519400][T10906] fido_id[10906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 730.947400][T10917] syzkaller0: entered promiscuous mode [ 730.953762][T10917] syzkaller0: entered allmulticast mode [ 731.466777][T10925] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 731.569609][T10923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.627336][T10927] bond_slave_0: entered promiscuous mode [ 731.633446][T10927] bond_slave_1: entered promiscuous mode [ 731.648920][T10927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 731.667654][T10927] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 733.391847][T10960] misc userio: The device must be registered before sending interrupts [ 733.405546][T10959] syzkaller0: entered promiscuous mode [ 733.418249][T10959] syzkaller0: entered allmulticast mode [ 734.502647][ T5463] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 734.527314][ T5850] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 734.664696][ T5463] usb 7-1: device descriptor read/64, error -71 [ 734.703101][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 734.718256][T10983] process 'syz.1.1633' launched '/dev/fd/6' with NULL argv: empty string added [ 734.738635][ T5850] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 734.748197][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.756633][ T5850] usb 4-1: Product: syz [ 734.760978][ T5850] usb 4-1: Manufacturer: syz [ 734.767550][ T5850] usb 4-1: SerialNumber: syz [ 734.798557][ T5850] usb 4-1: config 0 descriptor?? [ 734.835675][ T5850] hub 4-1:0.0: bad descriptor, ignoring hub [ 734.841802][ T5850] hub 4-1:0.0: probe with driver hub failed with error -5 [ 734.858637][ T5850] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 734.943051][ T5463] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 735.093432][ T5463] usb 7-1: device descriptor read/64, error -71 [ 735.171810][ T5871] usb 4-1: USB disconnect, device number 30 [ 735.218742][ T5463] usb usb7-port1: attempt power cycle [ 735.399000][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1638'. [ 735.410518][T10994] netlink: 'syz.0.1638': attribute type 16 has an invalid length. [ 735.418722][T10994] netlink: 'syz.0.1638': attribute type 17 has an invalid length. [ 735.495621][T10994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.582714][ T5463] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 735.614685][ T5463] usb 7-1: device descriptor read/8, error -71 [ 735.863371][ T5463] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 735.919489][T11003] netlink: 'syz.0.1642': attribute type 12 has an invalid length. [ 735.937407][ T5463] usb 7-1: device descriptor read/8, error -71 [ 735.985331][T11003] netlink: 'syz.0.1642': attribute type 4 has an invalid length. [ 736.055387][ T5463] usb usb7-port1: unable to enumerate USB device [ 736.578803][T11010] netlink: 'syz.3.1646': attribute type 3 has an invalid length. [ 739.551942][T11038] netlink: 'syz.3.1657': attribute type 12 has an invalid length. [ 739.569628][T11038] netlink: 'syz.3.1657': attribute type 4 has an invalid length. [ 739.739074][T11007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.678677][T11067] netlink: 'syz.3.1669': attribute type 4 has an invalid length. [ 742.038269][ T5463] IPVS: starting estimator thread 0... [ 742.142795][T11071] IPVS: using max 240 ests per chain, 12000 per kthread [ 742.463451][T11077] fuse: Unknown parameter 'use00000000000000000000' [ 743.541114][ C0] hrtimer: interrupt took 130906 ns [ 744.573450][T11101] netlink: 'syz.0.1682': attribute type 4 has an invalid length. [ 745.963864][T11114] fuse: Unknown parameter 'use00000000000000000000' [ 747.644552][T11127] tipc: Enabled bearer , priority 0 [ 747.684134][T11126] syzkaller0: entered promiscuous mode [ 747.689806][T11126] syzkaller0: entered allmulticast mode [ 747.734423][T11126] tipc: Resetting bearer [ 747.767298][T11125] tipc: Resetting bearer [ 747.909290][T11125] tipc: Disabling bearer [ 749.775872][T11136] netlink: 'syz.0.1694': attribute type 4 has an invalid length. [ 751.623497][T11152] fuse: Unknown parameter 'user_i00000000000000000000' [ 751.991179][T11159] syzkaller0: entered promiscuous mode [ 751.997302][T11159] syzkaller0: entered allmulticast mode [ 752.663593][T11170] netlink: 'syz.3.1707': attribute type 12 has an invalid length. [ 752.692053][T11170] netlink: 'syz.3.1707': attribute type 4 has an invalid length. [ 753.804271][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 753.991782][T11187] fuse: Unknown parameter 'user_i00000000000000000000' [ 754.099634][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 754.099711][ T30] audit: type=1326 audit(1766585365.881:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11184 comm="syz.3.1713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16c958f749 code=0x0 [ 755.090845][T11204] netlink: 'syz.3.1720': attribute type 12 has an invalid length. [ 755.129490][T11204] netlink: 'syz.3.1720': attribute type 4 has an invalid length. [ 756.764490][T11219] fuse: Unknown parameter 'user_i00000000000000000000' [ 759.053286][ T5463] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 759.272794][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.284433][ T5463] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 759.294173][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.375190][ T5463] usb 2-1: config 0 descriptor?? [ 759.619931][ T5463] usbhid 2-1:0.0: can't add hid device: -71 [ 759.626664][ T5463] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 759.729614][ T5463] usb 2-1: USB disconnect, device number 24 [ 760.153491][ T5463] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 760.372699][ T5463] usb 2-1: Using ep0 maxpacket: 32 [ 760.415101][T11261] fuse: Unknown parameter 'user_id00000000000000000000' [ 760.421547][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.433620][ T5463] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 760.443897][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.465285][ T5463] usb 2-1: config 0 descriptor?? [ 760.510947][ T5463] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 760.540490][ T5463] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 760.745478][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 761.059546][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 761.777101][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.787138][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.963582][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 762.983553][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 762.999835][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.031889][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.047677][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.074744][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.091125][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.104815][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.153218][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.181785][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.279179][ T5463] usb 2-1: USB disconnect, device number 25 [ 763.292560][ T5463] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 764.305169][T11293] fuse: Unknown parameter 'user_id00000000000000000000' [ 764.582711][T11283] chnl_net:caif_netlink_parms(): no params data found [ 765.272822][ T5086] Bluetooth: hci5: command tx timeout [ 765.633636][ T5871] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 765.931867][ T5871] usb 7-1: config 65 has an invalid interface number: 95 but max is 0 [ 765.940631][ T5871] usb 7-1: config 65 has no interface number 0 [ 766.090958][ T5871] usb 7-1: string descriptor 0 read error: -22 [ 766.099657][ T5871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 766.109635][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.326774][ T5871] usbtest 7-1:65.95: Linux gadget zero [ 766.332932][ T5871] usbtest 7-1:65.95: low-speed {control in/out} tests (+alt) [ 766.446015][ T5871] usb 7-1: USB disconnect, device number 13 [ 766.597742][T11321] x_tables: duplicate underflow at hook 3 [ 766.920160][ T5463] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 767.226597][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.238050][ T5463] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 767.247734][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.290452][ T5463] usb 2-1: config 0 descriptor?? [ 767.353316][ T5086] Bluetooth: hci5: command tx timeout [ 767.381611][T11283] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.389577][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.397986][T11283] bridge_slave_0: entered allmulticast mode [ 767.407570][T11283] bridge_slave_0: entered promiscuous mode [ 767.448298][T11283] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.456381][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.464761][T11283] bridge_slave_1: entered allmulticast mode [ 767.474187][T11283] bridge_slave_1: entered promiscuous mode [ 767.601695][ T5463] usbhid 2-1:0.0: can't add hid device: -71 [ 767.608377][ T5463] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 767.648140][ T5463] usb 2-1: USB disconnect, device number 26 [ 767.908560][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.965038][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.135038][ T5463] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 768.243399][T11283] team0: Port device team_slave_0 added [ 768.457447][T11283] team0: Port device team_slave_1 added [ 768.502769][ T5463] usb 2-1: Using ep0 maxpacket: 32 [ 768.513830][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.525286][ T5463] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 768.534594][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.576888][ T5463] usb 2-1: config 0 descriptor?? [ 768.664272][ T5463] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 768.789547][ T5463] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 768.938571][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.945887][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.974209][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.023201][ T32] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 769.158773][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.166571][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.195959][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.243603][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 769.310066][ T32] usb 7-1: config 0 has no interfaces? [ 769.340094][ T32] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 769.349719][ T32] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 769.358501][ T32] usb 7-1: Manufacturer: syz [ 769.437375][ T5086] Bluetooth: hci5: command tx timeout [ 769.469608][ T32] usb 7-1: config 0 descriptor?? [ 769.659057][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.668657][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.119055][T11283] hsr_slave_0: entered promiscuous mode [ 770.127978][T11283] hsr_slave_1: entered promiscuous mode [ 770.136308][T11283] debugfs: 'hsr0' already exists in 'hsr' [ 770.142127][T11283] Cannot create hsr debugfs directory [ 770.428368][T11330] netlink: 'syz.6.1761': attribute type 1 has an invalid length. [ 770.436434][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1761'. [ 770.454608][T11339] syzkaller0: entered promiscuous mode [ 770.460203][T11339] syzkaller0: entered allmulticast mode [ 771.523700][ T5086] Bluetooth: hci5: command tx timeout [ 772.143568][ T9675] usb 2-1: USB disconnect, device number 27 [ 772.179368][ T9675] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 772.463566][T11283] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.585567][T11283] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.621907][T11346] fuse: Unknown parameter 'user_id00000000000000000000' [ 772.714488][T11283] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.810139][T11283] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.872847][ T32] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.175800][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.187394][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.199863][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.213594][ T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.222994][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.292055][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.442939][ T32] usb 2-1: config 0 descriptor?? [ 774.646897][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.774880][ T3833] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.782564][ T3833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.926211][ T3833] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.933849][ T3833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.219822][ T32] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 775.397149][ T32] usb 2-1: USB disconnect, device number 28 [ 776.080865][T11360] fido_id[11360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 776.767517][ T5463] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 776.917334][T11372] tipc: Enabled bearer , priority 0 [ 776.948163][T11372] syzkaller0: entered promiscuous mode [ 776.956190][T11372] syzkaller0: entered allmulticast mode [ 777.009093][ T5463] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.017675][ T5463] usb 4-1: config 0 has no interface number 0 [ 777.024112][ T5463] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 777.035575][ T5463] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 777.046609][ T5463] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 777.057142][ T5463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.115529][ T5463] usb 4-1: config 0 descriptor?? [ 777.124098][T11368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 777.184303][ T5463] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 777.306806][T11371] tipc: Resetting bearer [ 777.386991][T11371] tipc: Disabling bearer [ 777.438643][ T5463] usb 4-1: USB disconnect, device number 31 [ 777.705633][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.712701][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.813841][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.713928][T11386] syzkaller0: entered promiscuous mode [ 778.719622][T11386] syzkaller0: entered allmulticast mode [ 779.581201][ T5844] usb 7-1: USB disconnect, device number 14 [ 780.835632][T11283] veth0_vlan: entered promiscuous mode [ 780.960630][T11283] veth1_vlan: entered promiscuous mode [ 781.042787][ T5463] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 781.285361][ T5463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.296804][ T5463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.307325][ T5463] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.327078][ T5463] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.336728][ T5463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.445219][T11283] veth0_macvtap: entered promiscuous mode [ 781.504594][T11283] veth1_macvtap: entered promiscuous mode [ 781.627987][ T5463] usb 7-1: config 0 descriptor?? [ 781.771232][T11283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.828878][T11283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.008718][ T3835] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.111669][ T3835] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.201725][ T3835] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.216131][ T5463] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 782.291353][ T3835] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.450569][ T5844] usb 7-1: USB disconnect, device number 15 [ 783.508758][T11417] fido_id[11417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 784.154670][T11427] syzkaller0: entered promiscuous mode [ 784.160281][T11427] syzkaller0: entered allmulticast mode [ 784.434801][ T30] audit: type=1326 audit(1766585396.191:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.6.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7848f8f749 code=0x0 [ 784.812650][ T5844] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 785.169296][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.180628][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.190800][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.204558][ T5844] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.216577][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.528817][ T5844] usb 2-1: config 0 descriptor?? [ 786.157351][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 786.164002][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.245074][ T5844] usb 2-1: USB disconnect, device number 29 [ 786.535983][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1793'. [ 786.816624][T11452] netlink: 'syz.6.1793': attribute type 16 has an invalid length. [ 786.824813][T11452] netlink: 'syz.6.1793': attribute type 17 has an invalid length. [ 786.986831][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.841302][T11459] loop7: detected capacity change from 0 to 16384 [ 788.077509][T11463] loop7: detected capacity change from 16384 to 16376 [ 789.324731][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 791.210998][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.219292][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.408927][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.417359][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.873959][T11490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 795.225448][T11522] misc userio: The device must be registered before sending interrupts [ 796.118281][T11530] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 798.021364][ T5844] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 798.276969][ T5844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 798.286470][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.385211][ T5844] usb 2-1: config 0 descriptor?? [ 798.845721][ T5844] ath6kl: Unsupported hardware version: 0x8 [ 798.880171][ T5844] ath6kl: Failed to init ath6kl core: -22 [ 798.888254][ T5844] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 799.073327][T11547] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 799.218405][ T5463] usb 2-1: USB disconnect, device number 30 [ 799.304952][T11567] misc userio: The device must be registered before sending interrupts [ 799.654721][T11569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 799.787097][ T30] audit: type=1326 audit(1766585411.551:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.1834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x0 [ 802.298057][T11605] misc userio: The device must be registered before sending interrupts [ 803.384015][ T30] audit: type=1326 audit(1766585415.151:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.6.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7848f8f749 code=0x0 [ 805.646389][T11639] misc userio: The device must be registered before sending interrupts [ 806.334887][T11654] netlink: 'syz.3.1863': attribute type 16 has an invalid length. [ 806.345579][T11654] netlink: 'syz.3.1863': attribute type 17 has an invalid length. [ 806.493118][ T5850] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 806.550095][T11654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 806.783727][ T5850] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 806.793595][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.801789][ T5850] usb 1-1: Product: syz [ 806.806442][ T5850] usb 1-1: Manufacturer: syz [ 806.811198][ T5850] usb 1-1: SerialNumber: syz [ 807.111056][ T5850] usb 1-1: config 0 descriptor?? [ 807.173281][ T5850] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 807.285155][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.329285][T11648] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 807.339696][T11648] dvb-usb: bulk message failed: -22 (7/0) [ 807.384197][ T5850] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 807.393775][ T5850] usb 1-1: media controller created [ 807.587598][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.486594][ T5850] DVB: Unable to find symbol mt352_attach() [ 809.063274][ T5850] DVB: Unable to find symbol nxt6000_attach() [ 809.069666][ T5850] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 809.151900][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 809.418459][ T5850] dvb-usb: schedule remote query interval to 1000 msecs. [ 809.426015][ T5850] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 809.437113][ T5850] dvb-usb: bulk message failed: -22 (7/0) [ 809.443163][ T5850] dvb-usb: bulk message failed: -22 (7/0) [ 809.541623][ T5850] usb 1-1: USB disconnect, device number 41 [ 809.916222][ T5850] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 810.503062][T11684] misc userio: The device must be registered before sending interrupts [ 811.054434][ T5850] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 811.125132][T11694] fuse: Bad value for 'fd' [ 811.308238][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.319593][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.330246][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.343612][ T5850] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.353182][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.647195][ T5850] usb 7-1: config 0 descriptor?? [ 812.224740][ T5850] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 812.350737][ T5850] usb 7-1: USB disconnect, device number 16 [ 813.058476][T11704] fido_id[11704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 814.954430][T11724] misc userio: The device must be registered before sending interrupts [ 815.320838][T11727] fuse: Bad value for 'fd' [ 817.247606][ T5850] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 817.515069][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.526495][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.536718][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 817.550207][ T5850] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 817.559620][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.863740][ T5850] usb 7-1: config 0 descriptor?? [ 818.472191][ T5850] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 818.628078][ T5850] usb 7-1: USB disconnect, device number 17 [ 819.372913][T11772] misc userio: The device must be registered before sending interrupts [ 819.538262][T11769] fido_id[11769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 819.567896][T11778] fuse: Unknown parameter '0x0000000000000003' [ 823.324805][T11825] misc userio: The device must be registered before sending interrupts [ 824.096201][T11829] fuse: Unknown parameter '0x0000000000000003' [ 824.700950][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'. [ 824.830551][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'. [ 825.600282][T11851] netlink: 'syz.3.1925': attribute type 21 has an invalid length. [ 825.608488][T11851] netlink: 'syz.3.1925': attribute type 6 has an invalid length. [ 825.616656][T11851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1925'. [ 826.369535][T11861] misc userio: The device must be registered before sending interrupts [ 827.457079][T11872] fuse: Unknown parameter '0x0000000000000003' [ 827.789230][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1936'. [ 827.923933][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1936'. [ 828.668433][ T5844] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 829.002868][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.014957][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.025230][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 829.038719][ T5844] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 829.048251][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.273181][ T5844] usb 2-1: config 0 descriptor?? [ 829.868513][ T5844] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 830.050740][ T5844] usb 2-1: USB disconnect, device number 31 [ 830.796855][T11914] fido_id[11914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 830.945478][T11920] fuse: Unknown parameter '0x0000000000000003' [ 831.443455][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1950'. [ 831.563450][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1950'. [ 833.065790][T11946] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 835.023160][T11965] fuse: Unknown parameter '0x0000000000000003' [ 836.661373][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 836.731883][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 838.877327][T11993] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 839.178536][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.185420][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.113877][T12004] fuse: Unknown parameter '0x0000000000000003' [ 841.729943][T12021] »»»»»»: renamed from vlan0 (while UP) [ 844.717917][T12053] fuse: Unknown parameter 'fd0x0000000000000003' [ 847.196781][ T30] audit: type=1326 audit(1766585458.971:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965cd8f749 code=0x0 [ 849.213735][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1999'. [ 849.440898][T12082] fuse: Unknown parameter 'fd0x0000000000000003' [ 850.070856][ T30] audit: type=1326 audit(1766585461.821:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12079 comm="syz.1.1999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f965cd8f749 code=0x0 [ 851.335936][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 851.350388][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 851.381271][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 851.403303][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 851.422154][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 853.512610][ T5086] Bluetooth: hci6: command tx timeout [ 853.710965][T12090] chnl_net:caif_netlink_parms(): no params data found [ 855.149708][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.325811][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.351034][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.362149][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.370746][T12090] bridge_slave_0: entered allmulticast mode [ 855.382182][T12090] bridge_slave_0: entered promiscuous mode [ 855.403528][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.411658][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.421338][T12090] bridge_slave_1: entered allmulticast mode [ 855.433437][T12090] bridge_slave_1: entered promiscuous mode [ 855.513837][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.602865][ T5086] Bluetooth: hci6: command tx timeout [ 855.713717][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.847285][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'. [ 855.985290][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.127417][ T30] audit: type=1326 audit(1766585467.911:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.2012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55d258f749 code=0x0 [ 856.200726][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.526055][ T1152] bridge_slave_1: left allmulticast mode [ 856.533474][ T1152] bridge_slave_1: left promiscuous mode [ 856.540494][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.657531][ T1152] bridge_slave_0: left allmulticast mode [ 856.663859][ T1152] bridge_slave_0: left promiscuous mode [ 856.670158][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.426144][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.454860][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.558137][ T1152] bond0 (unregistering): Released all slaves [ 857.672700][ T5086] Bluetooth: hci6: command tx timeout [ 857.718801][T12139] netlink: 'syz.7.2015': attribute type 16 has an invalid length. [ 857.727931][T12139] netlink: 'syz.7.2015': attribute type 17 has an invalid length. [ 857.972950][T12090] team0: Port device team_slave_0 added [ 858.107582][ T5844] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 858.203084][T12139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.219254][ T1152] tipc: Left network mode [ 858.248788][T12090] team0: Port device team_slave_1 added [ 858.294678][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.306820][ T5844] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 858.316186][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.365387][ T5844] usb 2-1: config 0 descriptor?? [ 858.595006][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 858.601786][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 858.683815][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.690945][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.717649][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.760011][ T5844] usb 2-1: USB disconnect, device number 32 [ 859.204486][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.211754][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.238464][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.284584][ T5844] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 859.483254][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 859.531734][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.543273][ T5844] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 859.555222][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.566573][ T1152] hsr_slave_0: left promiscuous mode [ 859.576687][ T1152] hsr_slave_1: left promiscuous mode [ 859.585953][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.596664][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.665489][ T5844] usb 2-1: config 0 descriptor?? [ 859.682790][ T5844] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 859.705454][ T5844] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 859.752586][ T5086] Bluetooth: hci6: command tx timeout [ 859.814794][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.822484][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.996085][ T1152] veth1_macvtap: left promiscuous mode [ 860.004154][ T1152] veth0_macvtap: left promiscuous mode [ 860.010007][ T1152] veth1_vlan: left promiscuous mode [ 860.015751][ T1152] veth0_vlan: left promiscuous mode [ 860.888323][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.898362][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.504136][T12176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 861.958239][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 862.071726][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 862.266184][ T30] audit: type=1326 audit(1766585474.031:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.0.2025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55d258f749 code=0x0 [ 862.659388][T12180] tipc: Enabled bearer , priority 0 [ 862.825867][T12171] tipc: Resetting bearer [ 863.047443][T12171] tipc: Disabling bearer [ 863.540081][T12090] hsr_slave_0: entered promiscuous mode [ 863.550728][T12090] hsr_slave_1: entered promiscuous mode [ 863.559427][T12090] debugfs: 'hsr0' already exists in 'hsr' [ 863.565488][T12090] Cannot create hsr debugfs directory [ 863.618346][ T1152] IPVS: stop unused estimator thread 0... [ 863.943953][T12197] capability: warning: `syz.7.2027' uses 32-bit capabilities (legacy support in use) [ 864.091207][T12197] UHID_CREATE from different security context by process 112 (syz.7.2027), this is not allowed. [ 864.859353][ T5844] usb 2-1: USB disconnect, device number 33 [ 864.917637][ T5844] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 865.470816][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 865.560590][T12090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 865.632991][ T5844] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 865.706098][T12090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 865.853900][T12090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 865.893789][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 865.965115][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.978495][ T5844] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 865.987794][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.996704][T12090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 866.031410][ T5844] usb 2-1: config 0 descriptor?? [ 866.070264][ T5844] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 867.105373][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2037'. [ 867.190489][T12090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.491234][T12090] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.510813][ T30] audit: type=1326 audit(1766585479.291:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.0.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55d258f749 code=0x0 [ 867.597586][ T3860] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.605072][ T3860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.747242][ T3860] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.754652][ T3860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.704332][ T9675] usb 2-1: USB disconnect, device number 34 [ 869.443118][ T5844] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 869.696219][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 869.776385][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.787714][ T5844] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 869.797050][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.886536][ T5844] usb 2-1: config 0 descriptor?? [ 870.534402][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.544687][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.053021][ T9675] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 871.306443][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.317952][ T9675] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 871.327409][ T9675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.409652][ T9675] usb 4-1: config 0 descriptor?? [ 871.505371][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.667087][ T9675] usbhid 4-1:0.0: can't add hid device: -71 [ 871.676911][ T9675] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 871.856162][ T9675] usb 4-1: USB disconnect, device number 32 [ 871.881665][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 871.888137][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 871.972769][ T5844] usb 2-1: USB disconnect, device number 35 [ 873.044671][ T5463] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 873.293855][ T5463] usb 4-1: Using ep0 maxpacket: 32 [ 873.354725][ T5463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.368561][ T5463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.378832][ T5463] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 873.388408][ T5463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.670060][ T5463] usb 4-1: config 0 descriptor?? [ 874.195220][ T5463] usb 4-1: can't set config #0, error -71 [ 874.295127][ T5463] usb 4-1: USB disconnect, device number 33 [ 875.030693][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 875.042884][T12303] tipc: Enabled bearer , priority 0 [ 875.119611][T12301] tipc: Resetting bearer [ 875.263672][ T5844] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 875.305382][T12301] tipc: Disabling bearer [ 875.414575][ T30] audit: type=1326 audit(1766585487.191:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.3.2052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16c958f749 code=0x0 [ 875.615448][ T5844] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.625892][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 875.632929][ T5844] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 875.642152][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.670267][T12090] veth0_vlan: entered promiscuous mode [ 875.758510][T12090] veth1_vlan: entered promiscuous mode [ 875.787511][ T5844] usb 1-1: config 0 descriptor?? [ 875.851953][ T5844] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 876.249778][T12090] veth0_macvtap: entered promiscuous mode [ 876.358985][T12090] veth1_macvtap: entered promiscuous mode [ 876.371238][ T30] audit: type=1326 audit(1766585488.131:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.489598][ T30] audit: type=1326 audit(1766585488.181:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.513463][ T30] audit: type=1326 audit(1766585488.181:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.536464][ T30] audit: type=1326 audit(1766585488.181:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.559093][ T30] audit: type=1326 audit(1766585488.181:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.582183][ T30] audit: type=1326 audit(1766585488.191:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 876.599100][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.686418][T12321] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 876.745380][T12090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.788563][T12321] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 876.933244][ T1880] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.963786][ T3835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.070869][T12321] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 877.091423][ T3835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.186656][ T3835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.199907][T12321] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 877.293575][T12321] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 877.416986][T12321] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 877.499285][T12321] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 877.557191][T12321] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 877.655409][T12321] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 877.763704][T12321] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 877.977272][ T30] audit: type=1326 audit(1766585489.731:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 878.125170][ T30] audit: type=1326 audit(1766585489.801:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d258f749 code=0x7ffc0000 [ 878.331430][ T9675] usb 1-1: USB disconnect, device number 42 [ 879.955262][T12358] tipc: Enabled bearer , priority 0 [ 879.964855][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'. [ 880.077429][T12357] tipc: Disabling bearer [ 880.298632][ T30] audit: type=1326 audit(1766585492.071:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.1.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f965cd8f749 code=0x0 [ 884.271510][T12404] binder: BINDER_SET_CONTEXT_MGR already set [ 884.277786][T12404] binder: 12401:12404 ioctl 4018620d 200000004a80 returned -16 [ 885.170991][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2075'. [ 885.301891][ T3835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.310533][ T3835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.535506][ T30] audit: type=1326 audit(1766585497.301:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca2258f749 code=0x0 [ 885.621061][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.629403][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.273093][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 888.503605][T12456] tipc: Enabled bearer , priority 0 [ 888.605807][T12454] tipc: Disabling bearer [ 888.952895][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 889.193371][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 889.222199][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.233157][ T5844] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 889.242568][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.320213][ T5844] usb 2-1: config 0 descriptor?? [ 889.390943][ T5844] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 891.922167][ T5844] usb 2-1: USB disconnect, device number 36 [ 892.754626][T12497] tipc: Started in network mode [ 892.760085][T12497] tipc: Node identity cefebd442fcb, cluster identity 4711 [ 892.772668][T12497] tipc: Enabled bearer , priority 0 [ 892.837673][T12494] tipc: Disabling bearer [ 895.389496][ T5463] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 895.633102][ T5463] usb 2-1: Using ep0 maxpacket: 32 [ 895.693997][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.705687][ T5463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.715815][ T5463] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 895.725046][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.823320][ T5463] usb 2-1: config 0 descriptor?? [ 896.314499][ T5463] usbhid 2-1:0.0: can't add hid device: -71 [ 896.321023][ T5463] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 896.436548][T12551] tipc: Enabled bearer , priority 0 [ 896.475646][ T5463] usb 2-1: USB disconnect, device number 37 [ 896.512640][T12550] tipc: Disabling bearer [ 897.566406][T12569] binder: BINDER_SET_CONTEXT_MGR already set [ 897.572762][T12569] binder: 12564:12569 ioctl 4018620d 200000004a80 returned -16 [ 899.426971][T12594] tipc: Enabled bearer , priority 0 [ 899.497636][T12593] tipc: Disabling bearer [ 900.021032][T12601] netlink: 'syz.3.2133': attribute type 4 has an invalid length. [ 900.115199][ T5844] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 900.352985][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 900.421498][ T5844] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 900.431021][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.526981][ T5844] usb 1-1: config 0 descriptor?? [ 900.567698][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.574827][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.785322][ T5844] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 900.840633][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.957762][ T5844] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 900.968358][ T5844] usb 1-1: media controller created [ 900.973006][ T5463] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 901.006248][T12599] ===================================================== [ 901.014417][T12599] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 901.022513][T12599] _copy_to_user+0xcc/0x120 [ 901.027182][T12599] i2cdev_ioctl_smbus+0x586/0x660 [ 901.033397][T12599] i2cdev_ioctl+0xa14/0xf40 [ 901.038077][T12599] __se_sys_ioctl+0x23c/0x400 [ 901.043249][T12599] __x64_sys_ioctl+0x97/0xe0 [ 901.048080][T12599] x64_sys_call+0x18a7/0x3e70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 901.053149][T12599] do_syscall_64+0xd3/0xf80 [ 901.061209][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.069408][T12599] [ 901.071809][T12599] Uninit was stored to memory at: [ 901.078084][T12599] __i2c_smbus_xfer+0x24ba/0x2eb0 [ 901.083419][T12599] i2c_smbus_xfer+0x2cd/0x460 [ 901.088257][T12599] i2cdev_ioctl_smbus+0x4a1/0x660 [ 901.093654][T12599] i2cdev_ioctl+0xa14/0xf40 [ 901.098335][T12599] __se_sys_ioctl+0x23c/0x400 [ 901.104695][T12599] __x64_sys_ioctl+0x97/0xe0 [ 901.109457][T12599] x64_sys_call+0x18a7/0x3e70 [ 901.114761][T12599] do_syscall_64+0xd3/0xf80 [ 901.119436][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.125765][T12599] [ 901.128184][T12599] Local variable msgbuf1.i created at: [ 901.134075][T12599] __i2c_smbus_xfer+0x830/0x2eb0 [ 901.139177][T12599] i2c_smbus_xfer+0x2cd/0x460 [ 901.144282][T12599] [ 901.146673][T12599] Bytes 0-1 of 2 are uninitialized [ 901.151865][T12599] Memory access of size 2 starts at ffff88812c793d06 [ 901.158834][T12599] Data copied to user address 0000200000000040 [ 901.167218][T12599] [ 901.169914][T12599] CPU: 1 UID: 0 PID: 12599 Comm: syz.0.2132 Tainted: G L syzkaller #0 PREEMPT(none) [ 901.181692][T12599] Tainted: [L]=SOFTLOCKUP [ 901.186253][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 901.196724][T12599] ===================================================== [ 901.203886][T12599] Disabling lock debugging due to kernel taint [ 901.210130][T12599] Kernel panic - not syncing: kmsan.panic set ... [ 901.216740][T12599] CPU: 1 UID: 0 PID: 12599 Comm: syz.0.2132 Tainted: G B L syzkaller #0 PREEMPT(none) [ 901.227914][T12599] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 901.233639][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 901.243902][T12599] Call Trace: [ 901.247266][T12599] [ 901.250293][T12599] __dump_stack+0x26/0x30 [ 901.254793][T12599] dump_stack_lvl+0x50/0x1c0 [ 901.259548][T12599] ? dump_stack+0x12/0x25 [ 901.264121][T12599] dump_stack+0x1e/0x25 [ 901.268455][T12599] vpanic+0x435/0xd30 [ 901.272619][T12599] panic+0x15d/0x160 [ 901.276715][T12599] kmsan_report+0x31c/0x320 [ 901.281425][T12599] ? kmsan_internal_check_memory+0x1e1/0x230 [ 901.287584][T12599] ? kmsan_copy_to_user+0xf1/0x190 [ 901.292880][T12599] ? _copy_to_user+0xcc/0x120 [ 901.297717][T12599] ? i2cdev_ioctl_smbus+0x586/0x660 [ 901.303101][T12599] ? i2cdev_ioctl+0xa14/0xf40 [ 901.307957][T12599] ? __se_sys_ioctl+0x23c/0x400 [ 901.312958][T12599] ? __x64_sys_ioctl+0x97/0xe0 [ 901.317874][T12599] ? x64_sys_call+0x18a7/0x3e70 [ 901.322896][T12599] ? do_syscall_64+0xd3/0xf80 [ 901.327746][T12599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.334057][T12599] ? kmsan_get_metadata+0xfb/0x160 [ 901.339367][T12599] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 901.344820][T12599] ? __i2c_transfer+0x1179/0x3110 [ 901.350004][T12599] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 901.356499][T12599] ? kmsan_get_metadata+0xfb/0x160 [ 901.361788][T12599] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 901.367776][T12599] ? __i2c_smbus_xfer+0x1e54/0x2eb0 [ 901.373119][T12599] ? kmsan_get_metadata+0xfb/0x160 [ 901.378405][T12599] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 901.384394][T12599] kmsan_internal_check_memory+0x1e1/0x230 [ 901.390380][T12599] kmsan_copy_to_user+0xf1/0x190 [ 901.395757][T12599] _copy_to_user+0xcc/0x120 [ 901.400441][T12599] i2cdev_ioctl_smbus+0x586/0x660 [ 901.405655][T12599] i2cdev_ioctl+0xa14/0xf40 [ 901.410327][T12599] ? kmsan_get_shadow_origin_ptr+0x87/0xb0 [ 901.416489][T12599] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 901.421685][T12599] __se_sys_ioctl+0x23c/0x400 [ 901.426537][T12599] __x64_sys_ioctl+0x97/0xe0 [ 901.431285][T12599] x64_sys_call+0x18a7/0x3e70 [ 901.436128][T12599] do_syscall_64+0xd3/0xf80 [ 901.440963][T12599] ? clear_bhb_loop+0x40/0x90 [ 901.445787][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.451812][T12599] RIP: 0033:0x7f55d258f749 [ 901.456409][T12599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.476859][T12599] RSP: 002b:00007f55d34b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.485431][T12599] RAX: ffffffffffffffda RBX: 00007f55d27e5fa0 RCX: 00007f55d258f749 [ 901.493524][T12599] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 901.501612][T12599] RBP: 00007f55d2613f91 R08: 0000000000000000 R09: 0000000000000000 [ 901.509694][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.517767][T12599] R13: 00007f55d27e6038 R14: 00007f55d27e5fa0 R15: 00007ffdbd9f2128 [ 901.525972][T12599] [ 901.529416][T12599] Kernel Offset: disabled [ 901.533782][T12599] Rebooting in 86400 seconds..