last executing test programs: 19m27.950223304s ago: executing program 32 (id=2534): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) 18m51.282080069s ago: executing program 33 (id=2848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="99755e6c437d71d09b32eff379619d30543a0464beddae6cc8cb192531fc66dd51c007261f4a4f7fdba55acd5dee09f0e3e06ffb1140f65be8cf87d4300cd5", 0x3f}, {&(0x7f0000000440)="7bc686807bd59673cb069acfe5dff2dccf080f77ec112ff239914f3eeeca925a22750efd6c000071c93f642855270eb7f5ec40b16e9017030000dea9a775614624d7484f2a9aef9b8d307d092b99f79725612f9225fb79ba443e7a5cb23f86b547456700000081811e118801cbe09058f11bf03d3068d4d107746086d8106861", 0x80}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) recvmsg$qrtr(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/191, 0xbf}], 0x1, 0x0, 0x0, 0x12042}, 0x38, 0x120) 18m49.483103384s ago: executing program 34 (id=2867): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15m42.666983514s ago: executing program 35 (id=4466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020644600000000002020207b1af8ff00000000bfa10100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000785a04d2a0001007063690011003f00303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4048880}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m26.312844597s ago: executing program 36 (id=4577): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) dup3(r1, r0, 0x0) 15m20.419046633s ago: executing program 37 (id=4598): syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) 14m42.777493544s ago: executing program 38 (id=4865): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 14m2.454480007s ago: executing program 1 (id=5161): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) write(r2, &(0x7f0000000240)="bd", 0x1) write(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m2.208306249s ago: executing program 1 (id=5164): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) 14m2.090094668s ago: executing program 1 (id=5165): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 14m1.826625457s ago: executing program 1 (id=5170): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 14m0.823976472s ago: executing program 1 (id=5181): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x703) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m0.096852989s ago: executing program 1 (id=5191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa, 0x0, 0x7, 0x0, 0x101, 0x4, 0x3, 0x1, 0xce, 0xb2, 0xf3, 0x5, 0x0, 0x3, 0x5, 0xa6, 0x0, 0x9, 0x11, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m59.300769859s ago: executing program 39 (id=5191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa, 0x0, 0x7, 0x0, 0x101, 0x4, 0x3, 0x1, 0xce, 0xb2, 0xf3, 0x5, 0x0, 0x3, 0x5, 0xa6, 0x0, 0x9, 0x11, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m20.102827717s ago: executing program 3 (id=5449): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)="bb", 0x1}], 0x2, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 13m18.857922156s ago: executing program 3 (id=5454): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13m18.297534815s ago: executing program 3 (id=5458): socket(0x10, 0x3, 0x0) unshare(0x2a020400) socket$alg(0x26, 0x5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfc, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000040)={0xf5, 0x0, 0x0, 0xffffffffffffffff, 0x800000, 0x200000000000}, 0x0, 0x0, 0x0, 0x0) 13m17.910539459s ago: executing program 3 (id=5461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 13m17.629647999s ago: executing program 3 (id=5463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x2001) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 13m17.22589291s ago: executing program 3 (id=5466): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x40, 0x0, 0xfd, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 13m16.302835173s ago: executing program 40 (id=5466): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x40, 0x0, 0xfd, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 12m46.448834756s ago: executing program 2 (id=5636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 12m44.372959679s ago: executing program 2 (id=5648): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m44.100296291s ago: executing program 2 (id=5651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x6, 0x4, 0x7, 0x40}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x5, 0x29, 0x66, 0x0, 0x7f, 0x11, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x2}]}}, {0x4e26, 0x4e20, 0x11, 0x0, @opaque="906bd2ff9a6ba66e8f"}}}, 0x37) 12m43.62385677s ago: executing program 2 (id=5653): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 12m42.231458958s ago: executing program 2 (id=5659): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x100, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0xb, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x56508552244c89ab, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x28, 0x5, 0x8c0020, 0x0, 0xfff9, 0x80000000, 0x8000}}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unlink(&(0x7f0000000100)='./file0/file0\x00') 12m41.523897969s ago: executing program 2 (id=5667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 12m40.767635222s ago: executing program 41 (id=5667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 4m49.032437046s ago: executing program 7 (id=7930): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m48.602145978s ago: executing program 7 (id=7934): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x50b441) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0x1b, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) 4m48.371804003s ago: executing program 7 (id=7935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) poll(&(0x7f0000000600)=[{r1, 0x2198}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m47.437814581s ago: executing program 7 (id=7937): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m46.48096189s ago: executing program 7 (id=7942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 4m45.103696044s ago: executing program 7 (id=7944): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4008040) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xc, 0x8, 0x7, 0x7ffffffffffffffe, 0x8000005, 0x1, 0x1041, 0x0, 0xfffffffffffffffe, 0x3, 0x4000000000000003, 0x100000006, 0x8200000000000000, 0x3, 0x2, 0x10000000000401], 0x2, 0x212510}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m44.396739028s ago: executing program 42 (id=7944): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4008040) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xc, 0x8, 0x7, 0x7ffffffffffffffe, 0x8000005, 0x1, 0x1041, 0x0, 0xfffffffffffffffe, 0x3, 0x4000000000000003, 0x100000006, 0x8200000000000000, 0x3, 0x2, 0x10000000000401], 0x2, 0x212510}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m43.056335257s ago: executing program 5 (id=7950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m41.88322434s ago: executing program 5 (id=7958): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m39.840159784s ago: executing program 5 (id=7965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x800, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r5, 0x0, 0x0, 0x0, 0x40000222, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m31.38662708s ago: executing program 5 (id=7987): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x1b19, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) 4m29.298415297s ago: executing program 5 (id=7992): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b2084063f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b18ebef230a3373685fba6e9624bd117a9bfcf08f6700"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_create(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m27.990768081s ago: executing program 5 (id=7996): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 4m12.785671571s ago: executing program 43 (id=7996): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 11.301545545s ago: executing program 6 (id=8740): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(0xffffffffffffffff) io_uring_setup(0x5755, &(0x7f0000000a80)={0x0, 0x84d1, 0x40, 0x3, 0x21b, 0x0, r2}) read(r1, &(0x7f0000000380)=""/144, 0x90) pwrite64(r1, 0x0, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x48}}, 0x1020) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000280), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) close_range(r5, 0xffffffffffffffff, 0x0) 10.504276969s ago: executing program 9 (id=8742): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xae23}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000008, 0x204031, r0, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) io_setup(0x8000f260, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = request_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r1) 8.981986592s ago: executing program 9 (id=8744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x3, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x2, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0x7, 0xe648, 0x2, 0x2, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x40003, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0xfffffffffffffffe, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.374804541s ago: executing program 0 (id=8748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 7.213090286s ago: executing program 6 (id=8749): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0x8, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = gettid() read(0xffffffffffffffff, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r1, 0x7) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.900927549s ago: executing program 4 (id=8750): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165cc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0xffffffff, @remote, 0xe3}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$kcm(0xa, 0x2, 0x0) 6.876925744s ago: executing program 6 (id=8751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x3f}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$kcm(0x29, 0x5, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) 6.875435417s ago: executing program 0 (id=8752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x8, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x0, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffd, 0x3, 0x1, 0x200]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c0dc}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.666487886s ago: executing program 4 (id=8753): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) epoll_create1(0x80000) fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) memfd_secret(0x80000) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 6.622354518s ago: executing program 0 (id=8754): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0) dup2(0xffffffffffffffff, r1) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x26801, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x4c8380) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) 6.521116918s ago: executing program 8 (id=8755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 6.330911598s ago: executing program 4 (id=8756): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x101002, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, r0, 0x0, 0x0, 0x28, 0x0, 0x2, r6}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x100000000, 0x80000000) timer_settime(0x0, 0x1, 0x0, 0x0) 6.193662286s ago: executing program 9 (id=8757): rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 6.03723932s ago: executing program 9 (id=8758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) 5.855058376s ago: executing program 0 (id=8759): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118f7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) 5.637797771s ago: executing program 8 (id=8760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0xfffc, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)="d0e16f4fecfa73bc330b2b945bb67360e49336c08a006caaf8ae0524267ca62a360fa56334db5f0725252ce9d941ef16baeff0ceeac3d69bd4eb00011f58c69d529537a68c2a77d9dc26ce2833bdb6af64225bd15fda1cece7262861bb04ed779ba03f78aa5f1911cd09abe80506fc27f76fce0bbd311c1b95ee9f5b1b3aeab0c0957428a7f324c40b1e515e7f9bbb68768a1a67fc12fb596591a0260916be9c74", 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) 5.595990708s ago: executing program 4 (id=8761): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0xf132, 0x4) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040040}, 0x4000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7c, 0x1, 0x4, 0x5, 0x3, 0x2, 0x6b9cae00, 0x9}, &(0x7f00000000c0)={0x2, 0x3ff, 0x0, 0x9e9, 0x4, 0x4, 0xba}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000552a5920240401c05faa010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.72406847s ago: executing program 0 (id=8762): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) syz_usb_connect(0x5, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf20000020602", @ANYBLOB="cba9"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xd231c4f95da94448) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) dup(0xffffffffffffffff) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000b, 0x30, r2, 0xc6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3.502492146s ago: executing program 9 (id=8763): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x201f01) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 3.489334675s ago: executing program 8 (id=8764): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2.723737376s ago: executing program 6 (id=8765): prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.309896446s ago: executing program 4 (id=8766): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 1.528798681s ago: executing program 9 (id=8767): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1.078949756s ago: executing program 4 (id=8768): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 979.510059ms ago: executing program 8 (id=8769): rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 869.594532ms ago: executing program 8 (id=8770): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 648.108282ms ago: executing program 8 (id=8771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000040) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019800800"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000170a01020000ddffffff00000700000a0900010740000000000c0005400000000000000004"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x31f07beb2700b496) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x20}) syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006060309050710000201020704f99fbb0905"], 0x0) 437.749764ms ago: executing program 0 (id=8772): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118f7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) 202.088586ms ago: executing program 6 (id=8773): socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0xfeb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x6) 0s ago: executing program 6 (id=8774): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) semop(0x0, &(0x7f0000000440)=[{0x3, 0xffff, 0x1000}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): dor=0471, idProduct=0304, bcdDevice=e4.df [ 1236.386349][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.421616][ T1209] usb 9-1: config 0 descriptor?? [ 1236.656479][ T10] usb 9-1: USB disconnect, device number 4 [ 1236.976035][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7983'. [ 1237.029757][T31755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7983'. [ 1237.107780][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1237.323943][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1237.351489][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1237.407780][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1237.473792][ T10] usb 9-1: string descriptor 0 read error: -22 [ 1237.494937][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1237.572047][T31771] syzkaller0: entered promiscuous mode [ 1237.588922][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.884894][ T10] usb 9-1: Can't get UAC3 power state for id 10 [ 1238.568287][ T10] usb 9-1: 2:0: failed to get current value for ch 0 (-32) [ 1238.774335][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.781673][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.622956][ T10] usb 9-1: USB disconnect, device number 5 [ 1240.917500][ T10] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1241.097318][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1241.114775][ T10] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1241.149084][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.179035][ T10] usb 10-1: Product: syz [ 1241.195436][ T10] usb 10-1: Manufacturer: syz [ 1241.215812][ T10] usb 10-1: SerialNumber: syz [ 1241.254310][ T10] usb 10-1: config 0 descriptor?? [ 1241.290670][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1241.740815][T28548] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1241.937655][T28548] usb 5-1: Using ep0 maxpacket: 32 [ 1241.950051][T28548] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1241.964998][T28548] usb 5-1: config 0 has no interface number 0 [ 1241.989167][T28548] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1242.025065][T28548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.054017][T28548] usb 5-1: Product: syz [ 1242.064218][T28548] usb 5-1: Manufacturer: syz [ 1242.128588][T28548] usb 5-1: SerialNumber: syz [ 1242.158172][T28548] usb 5-1: config 0 descriptor?? [ 1242.605704][T28548] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1242.664408][T28548] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1243.566254][ T10] gspca_ov534_9: sccb_write failed [ 1243.977149][ T10] gspca_ov534_9: reg_w failed -71 [ 1244.225423][T31868] netlink: 'syz.8.8002': attribute type 4 has an invalid length. [ 1244.248122][ T10] gspca_ov534_9: Unknown sensor 0000 [ 1244.248260][ T10] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1244.322194][ T10] usb 10-1: USB disconnect, device number 58 [ 1244.771855][T28548] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1244.818202][T28548] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1244.888341][T28548] usb 5-1: USB disconnect, device number 2 [ 1244.938079][ T1225] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1245.132241][ T1225] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1245.159135][ T1225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.184238][ T1225] usb 7-1: Product: syz [ 1245.202020][ T1225] usb 7-1: Manufacturer: syz [ 1245.220168][ T1225] usb 7-1: SerialNumber: syz [ 1245.669277][T31892] IPVS: length: 218 != 24 [ 1245.685880][T31892] bond2: entered allmulticast mode [ 1245.736590][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1245.772894][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1245.793814][T31891] bond2: left allmulticast mode [ 1247.822374][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 1247.865801][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1247.899130][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1247.982009][ T1225] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1248.086278][ T1225] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1248.200532][ T1225] usb 7-1: USB disconnect, device number 61 [ 1248.556651][T31931] syzkaller0: entered promiscuous mode [ 1248.582599][T31931] syzkaller0: entered allmulticast mode [ 1249.257545][T21395] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1249.398350][T31956] bond2: entered allmulticast mode [ 1249.475518][T21395] usb 7-1: Using ep0 maxpacket: 32 [ 1249.494617][T21395] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1249.523532][T21395] usb 7-1: config 0 has no interface number 0 [ 1249.540606][T21395] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1249.606827][T21395] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1249.633519][T21395] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.665113][T21395] usb 7-1: Product: syz [ 1249.687868][T21395] usb 7-1: Manufacturer: syz [ 1249.692553][T21395] usb 7-1: SerialNumber: syz [ 1249.717383][T21395] usb 7-1: config 0 descriptor?? [ 1249.729791][T31945] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1249.807502][ T5943] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1249.959497][T31945] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1249.991707][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 1250.025857][ T5943] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1250.045901][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.076648][ T5943] usb 5-1: config 0 descriptor?? [ 1250.120396][ T5943] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1252.438075][T21395] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1252.475348][T21395] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1252.524667][T21395] usb 7-1: USB disconnect, device number 62 [ 1252.737126][ T5943] gspca_sonixj: reg_w1 err -71 [ 1252.742259][ T5943] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1252.773373][ T5943] usb 5-1: USB disconnect, device number 3 [ 1255.602611][T32053] syzkaller0: entered promiscuous mode [ 1255.615245][T32053] syzkaller0: entered allmulticast mode [ 1255.666518][T32055] syzkaller0: entered promiscuous mode [ 1255.687319][T32055] syzkaller0: entered allmulticast mode [ 1256.830691][T32081] syzkaller0: entered promiscuous mode [ 1256.844017][T32081] syzkaller0: entered allmulticast mode [ 1256.997910][ T5943] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1257.187959][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 1257.227789][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.267604][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.306094][ T5943] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1257.363261][ T5943] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1257.390572][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1257.409223][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1257.418577][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1257.428196][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1257.435914][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1257.453747][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.511590][ T5943] usb 9-1: config 0 descriptor?? [ 1258.081706][ T5943] usbhid 9-1:0.0: can't add hid device: -71 [ 1258.108056][ T5943] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1258.141990][ T5943] usb 9-1: USB disconnect, device number 6 [ 1259.569425][T24002] Bluetooth: hci5: command tx timeout [ 1260.613679][T21395] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 1260.801440][T21395] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.812371][T21395] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1260.834059][T21395] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1260.856600][T21395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.868105][T21395] usb 10-1: config 0 descriptor?? [ 1260.889081][T21395] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1260.907638][T21395] dvb-usb: bulk message failed: -22 (3/0) [ 1260.916847][T21395] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1260.926394][T21395] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1260.948341][T21395] usb 10-1: media controller created [ 1260.955199][T21395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.981054][T21395] dvb-usb: bulk message failed: -22 (6/0) [ 1260.987111][T21395] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1261.011979][T21395] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input146 [ 1261.041144][T21395] dvb-usb: schedule remote query interval to 150 msecs. [ 1261.049132][T21395] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1261.091925][ T5943] usb 10-1: USB disconnect, device number 59 [ 1261.152539][ T5943] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1261.649019][T24002] Bluetooth: hci5: command tx timeout [ 1261.957404][ T5943] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1262.159450][ T5943] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.172327][ T5943] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1262.201368][ T5943] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1262.210889][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.219077][ T5943] usb 10-1: Product: syz [ 1262.223524][ T5943] usb 10-1: Manufacturer: syz [ 1262.228380][ T5943] usb 10-1: SerialNumber: syz [ 1262.433736][T32112] syzkaller0: entered promiscuous mode [ 1262.443173][T32112] syzkaller0: entered allmulticast mode [ 1262.455209][ T5943] cdc_ncm 10-1:1.0: bind() failure [ 1262.472987][ T5943] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1262.481767][ T5943] cdc_ncm 10-1:1.1: bind() failure [ 1262.494838][ T5943] usb 10-1: USB disconnect, device number 60 [ 1262.837711][ T1209] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1262.999851][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 1263.013916][ T1209] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1263.069205][ T1209] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1263.137623][ T1209] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1263.193310][ T1209] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.256054][ T1209] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1263.314940][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.574860][ T1209] usb 5-1: usb_control_msg returned -32 [ 1263.590507][ T1209] usbtmc 5-1:16.0: can't read capabilities [ 1263.738653][T24002] Bluetooth: hci5: command tx timeout [ 1263.991964][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1264.272004][T32092] chnl_net:caif_netlink_parms(): no params data found [ 1264.881252][ T9761] bond0 (unregistering): Released all slaves [ 1264.963641][ T9761] bond1 (unregistering): Released all slaves [ 1265.050464][ T9761] bond2 (unregistering): Released all slaves [ 1265.411122][ T9761] tipc: Left network mode [ 1265.696992][ T10] usb 5-1: USB disconnect, device number 4 [ 1265.807657][T24002] Bluetooth: hci5: command tx timeout [ 1265.898385][T32092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.905578][T32092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.954357][T32092] bridge_slave_0: entered allmulticast mode [ 1266.022969][T32092] bridge_slave_0: entered promiscuous mode [ 1266.104689][T32092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.148648][T32092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.157292][T32092] bridge_slave_1: entered allmulticast mode [ 1266.175424][T32092] bridge_slave_1: entered promiscuous mode [ 1266.482539][T32092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.599511][T32092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.783326][ T30] audit: type=1326 audit(1773841847.995:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1266.991717][ T30] audit: type=1326 audit(1773841847.995:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.135655][T32092] team0: Port device team_slave_0 added [ 1267.176371][T32092] team0: Port device team_slave_1 added [ 1267.185254][ T30] audit: type=1326 audit(1773841848.065:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.387629][ T30] audit: type=1326 audit(1773841848.065:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.517930][ T9761] hsr_slave_0: left promiscuous mode [ 1267.607412][ T30] audit: type=1326 audit(1773841848.065:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.640746][ T9761] hsr_slave_1: left promiscuous mode [ 1267.757990][ T30] audit: type=1326 audit(1773841848.065:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.862820][ T30] audit: type=1326 audit(1773841848.065:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1267.942778][ T30] audit: type=1326 audit(1773841848.065:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1268.030616][ T30] audit: type=1326 audit(1773841848.065:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1268.111525][ T30] audit: type=1326 audit(1773841848.065:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32182 comm="syz.4.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3ad9c799 code=0x7ffc0000 [ 1269.184428][T32219] syzkaller0: entered promiscuous mode [ 1269.204362][T32219] syzkaller0: entered allmulticast mode [ 1269.282184][T32092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.305418][T32092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.339473][T32092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.459382][T32092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.489149][T32092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.617293][T32092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.761338][T32236] netlink: 45 bytes leftover after parsing attributes in process `syz.4.8070'. [ 1269.949867][T32092] hsr_slave_0: entered promiscuous mode [ 1269.990462][T32092] hsr_slave_1: entered promiscuous mode [ 1270.001609][T32092] debugfs: 'hsr0' already exists in 'hsr' [ 1270.010165][T32092] Cannot create hsr debugfs directory [ 1270.033846][ T5906] IPVS: starting estimator thread 0... [ 1270.127399][T32242] IPVS: using max 29 ests per chain, 69600 per kthread [ 1270.148933][ T9761] IPVS: stop unused estimator thread 0... [ 1271.701568][T32092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.848336][T32092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.348839][T32092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.403546][T32092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.599251][T32092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.671655][T32092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.975140][T32092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.022022][T32092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.140635][T32294] syzkaller0: entered promiscuous mode [ 1273.146142][T32294] syzkaller0: entered allmulticast mode [ 1273.724643][T32092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1273.785257][T32092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1273.825152][T32092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1273.894195][T32092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1274.487628][ T5943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1274.679399][ T5943] usb 9-1: config 0 has no interfaces? [ 1274.694338][ T5943] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1274.744587][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.778092][ T5943] usb 9-1: Product: syz [ 1274.782420][ T5943] usb 9-1: Manufacturer: syz [ 1274.819809][ T5943] usb 9-1: SerialNumber: syz [ 1274.838664][ T5943] usb 9-1: config 0 descriptor?? [ 1275.128695][T32092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.229993][T32092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.263575][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.270892][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.337980][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.345214][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.353385][T24002] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1275.516973][T21395] usb 9-1: USB disconnect, device number 7 [ 1275.624734][T32092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.727452][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1275.874584][T32092] veth0_vlan: entered promiscuous mode [ 1275.927669][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1275.946815][ T29] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 1275.957249][T32092] veth1_vlan: entered promiscuous mode [ 1275.973053][ T29] usb 5-1: config 2 has no interface number 0 [ 1275.988329][ T29] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 27, changing to 8 [ 1276.014375][ T29] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 41505, setting to 1024 [ 1276.039269][T32353] syzkaller0: entered promiscuous mode [ 1276.044793][T32353] syzkaller0: entered allmulticast mode [ 1276.073401][ T29] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1276.117605][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.146770][ T29] usb 5-1: Product: syz [ 1276.166777][ T29] usb 5-1: Manufacturer: syz [ 1276.190421][ T29] usb 5-1: SerialNumber: syz [ 1276.210313][ T29] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 1276.253565][ T29] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1276.450098][T19430] usb 5-1: USB disconnect, device number 5 [ 1276.488039][T19430] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1276.538874][T19430] kobil_sct 5-1:2.45: device disconnected [ 1276.626743][T32360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8093'. [ 1276.909600][T32092] veth0_macvtap: entered promiscuous mode [ 1277.022814][T32092] veth1_macvtap: entered promiscuous mode [ 1277.192394][T32092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.306130][T32092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.444163][ T9757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.489471][ T9757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.634119][ T9757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.697190][ T9757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.971624][T32390] syzkaller0: entered promiscuous mode [ 1278.008785][T32390] syzkaller0: entered allmulticast mode [ 1279.688027][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8104'. [ 1279.918912][ T796] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1280.105979][ T796] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.117154][ T796] usb 10-1: config 0 has no interfaces? [ 1280.129106][ T796] usb 10-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1280.145304][ T796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.162042][ T796] usb 10-1: Product: syz [ 1280.166878][ T796] usb 10-1: Manufacturer: syz [ 1280.171772][ T796] usb 10-1: SerialNumber: syz [ 1280.215911][ T796] usb 10-1: config 0 descriptor?? [ 1280.460248][T19430] usb 10-1: USB disconnect, device number 61 [ 1281.311852][T32449] binder: 32448:32449 ioctl c0306201 200000004a40 returned -22 [ 1282.859344][T32457] loop5: detected capacity change from 0 to 7 [ 1283.172478][T32458] syz_tun: entered allmulticast mode [ 1283.203891][T32457] Dev loop5: unable to read RDB block 7 [ 1283.213021][T32457] loop5: unable to read partition table [ 1283.221926][T32457] loop5: partition table beyond EOD, truncated [ 1283.231222][T32457] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1283.400593][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.427540][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.575287][ T9767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.609735][ T9767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.747329][ T29] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1283.942419][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1283.951956][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.961387][ T29] usb 7-1: Product: syz [ 1283.965774][ T29] usb 7-1: Manufacturer: syz [ 1283.971228][ T29] usb 7-1: SerialNumber: syz [ 1284.512852][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1284.597684][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1284.818750][T32500] syzkaller0: entered promiscuous mode [ 1284.834867][T32500] syzkaller0: entered allmulticast mode [ 1285.862574][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1286.581109][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1286.667772][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1286.781445][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1286.798263][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1286.798279][ T30] audit: type=1800 audit(1773841868.005:1694): pid=32519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8124" name="bus" dev="ramfs" ino=180179 res=0 errno=0 [ 1286.857885][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1286.926913][ T29] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1287.078729][ T29] usb 7-1: USB disconnect, device number 63 [ 1288.411988][T32552] syzkaller0: entered promiscuous mode [ 1288.442964][T32552] syzkaller0: entered allmulticast mode [ 1289.018905][T32560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8130'. [ 1289.292886][T32560] team0: entered promiscuous mode [ 1289.342874][T32560] team_slave_0: entered promiscuous mode [ 1289.414465][T32560] team_slave_1: entered promiscuous mode [ 1289.474517][T32560] macvlan2: entered promiscuous mode [ 1289.531229][T32560] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1289.616149][T32560] team0: left promiscuous mode [ 1289.636969][T32560] team_slave_0: left promiscuous mode [ 1289.706373][T32560] team_slave_1: left promiscuous mode [ 1289.973104][T32580] syzkaller0: entered promiscuous mode [ 1290.007388][T32580] syzkaller0: entered allmulticast mode [ 1290.535453][T32587] syzkaller0: entered promiscuous mode [ 1290.562985][T32587] syzkaller0: entered allmulticast mode [ 1290.669851][ T30] audit: type=1800 audit(1773841871.895:1695): pid=32598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8136" name="bus" dev="tmpfs" ino=1801 res=0 errno=0 [ 1291.534349][T32621] delete_channel: no stack [ 1292.440513][T32625] xt_CT: No such helper "snmp_trap" [ 1294.621199][T32633] netlink: 'syz.6.8144': attribute type 2 has an invalid length. [ 1294.674018][T32634] netlink: 'syz.6.8144': attribute type 2 has an invalid length. [ 1294.884227][T32633] : entered promiscuous mode [ 1294.910103][T32634] : left promiscuous mode [ 1295.124858][T32647] syzkaller0: entered promiscuous mode [ 1295.150966][T32647] syzkaller0: entered allmulticast mode [ 1295.255384][T32647] tipc: Enabled bearer , priority 0 [ 1295.265637][T32645] tipc: Resetting bearer [ 1295.296468][T32645] tipc: Disabling bearer [ 1295.302330][ T5943] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1295.480058][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1295.507666][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.528626][ T5943] usb 5-1: config 0 descriptor?? [ 1295.563017][ T5943] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1297.627716][ T1209] usb 5-1: USB disconnect, device number 6 [ 1297.754133][ T30] audit: type=1326 audit(1773841878.975:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32673 comm="syz.9.8153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f143ff96517 code=0x0 [ 1297.891004][T32677] tipc: Enabled bearer , priority 0 [ 1297.916820][T32677] syzkaller0: entered promiscuous mode [ 1297.950215][T32677] syzkaller0: entered allmulticast mode [ 1298.055759][T32677] tipc: Resetting bearer [ 1298.090463][T32676] tipc: Resetting bearer [ 1298.157741][T32676] tipc: Disabling bearer [ 1298.510306][T32687] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1298.525211][T32687] syzkaller0: entered promiscuous mode [ 1298.542788][T32687] syzkaller0: entered allmulticast mode [ 1299.659304][T32708] syzkaller0: entered promiscuous mode [ 1299.685140][T32708] syzkaller0: entered allmulticast mode [ 1299.737365][ T1209] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1299.907334][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 1299.920193][ T1209] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1299.951737][ T1209] usb 1-1: config 0 has no interface number 0 [ 1299.971126][ T1209] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1299.983503][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.992520][ T1209] usb 1-1: Product: syz [ 1299.996725][ T1209] usb 1-1: Manufacturer: syz [ 1300.002604][ T1209] usb 1-1: SerialNumber: syz [ 1300.025682][ T1209] usb 1-1: config 0 descriptor?? [ 1300.212296][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.219281][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.457264][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1300.497500][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1300.552480][T32719] ptrace attach of "./syz-executor exec"[25430] was attempted by ""[32719] [ 1300.946186][T32730] tipc: Enabled bearer , priority 0 [ 1300.972260][T32730] syzkaller0: entered promiscuous mode [ 1300.997443][T32730] syzkaller0: entered allmulticast mode [ 1301.015012][ T30] audit: type=1326 audit(1773841882.235:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.9.8170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x0 [ 1301.169561][T32733] tipc: Resetting bearer [ 1301.202885][T32728] tipc: Resetting bearer [ 1301.269142][T32728] tipc: Disabling bearer [ 1301.663360][ T30] audit: type=1800 audit(1773841882.885:1698): pid=32739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8172" name="bus" dev="ramfs" ino=180842 res=0 errno=0 [ 1302.368302][T21388] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1302.590915][T21388] usb 10-1: config 0 has an invalid interface number: 99 but max is 0 [ 1302.640188][T21388] usb 10-1: config 0 has no interface number 0 [ 1302.707817][T21388] usb 10-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1302.766134][T21388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.777516][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1302.834274][T21388] usb 10-1: Product: syz [ 1302.858134][ T1209] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1302.866614][T21388] usb 10-1: Manufacturer: syz [ 1302.899040][T21388] usb 10-1: SerialNumber: syz [ 1302.944419][ T1209] usb 1-1: USB disconnect, device number 88 [ 1302.956729][T21388] usb 10-1: config 0 descriptor?? [ 1303.023912][T21388] peak_usb 10-1:0.99: probe with driver peak_usb failed with error 99 [ 1305.428789][ T308] syzkaller0: entered promiscuous mode [ 1305.453552][ T308] syzkaller0: entered allmulticast mode [ 1305.537459][T28552] usb 10-1: USB disconnect, device number 62 [ 1305.937575][ T30] audit: type=1804 audit(1773841887.145:1699): pid=321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8182" name="bus" dev="ramfs" ino=181841 res=1 errno=0 [ 1307.282833][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.290653][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.725036][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.793556][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.287687][ T356] syzkaller0: entered promiscuous mode [ 1308.309110][ T356] syzkaller0: entered allmulticast mode [ 1308.348217][T32572] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.381987][T32572] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.425761][T32572] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.570580][T32572] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.959859][ T365] syzkaller0: entered promiscuous mode [ 1308.998461][ T365] syzkaller0: entered allmulticast mode [ 1310.574759][ T391] netlink: 'syz.4.8197': attribute type 1 has an invalid length. [ 1310.917560][ T391] bond5: entered promiscuous mode [ 1310.967569][ T391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1311.051780][ T393] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1311.140039][ T393] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1311.243130][ T393] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1311.514251][ T393] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1311.615112][ T393] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1313.489345][ T433] syzkaller0: entered promiscuous mode [ 1313.494887][ T433] syzkaller0: entered allmulticast mode [ 1313.831422][ T442] tipc: Enabled bearer , priority 0 [ 1313.869747][ T443] syzkaller0: entered promiscuous mode [ 1313.875263][ T443] syzkaller0: entered allmulticast mode [ 1313.960738][ T440] tipc: Resetting bearer [ 1314.025180][ T437] tipc: Resetting bearer [ 1314.063146][ T452] fuse: Bad value for 'fd' [ 1314.134094][ T437] tipc: Disabling bearer [ 1315.115993][ T481] syzkaller0: entered promiscuous mode [ 1315.134298][ T481] syzkaller0: entered allmulticast mode [ 1315.915481][ T494] syzkaller0: entered promiscuous mode [ 1315.915559][ T494] syzkaller0: entered allmulticast mode [ 1315.940191][ T494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.940255][ T494] tipc: Enabled bearer , priority 0 [ 1315.963326][ T493] tipc: Resetting bearer [ 1316.074611][ T493] tipc: Disabling bearer [ 1316.570808][ T499] syzkaller0: entered promiscuous mode [ 1316.611808][ T499] syzkaller0: entered allmulticast mode [ 1318.657712][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1318.828775][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.865094][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.928297][ T29] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1318.974528][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1319.055183][ T29] usb 9-1: SerialNumber: syz [ 1319.364279][ T29] usb 9-1: 0:2 : does not exist [ 1319.791779][ T29] usb 9-1: USB disconnect, device number 8 [ 1321.909121][ T562] netlink: 'syz.4.8232': attribute type 1 has an invalid length. [ 1322.756783][ T573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1322.836632][ T576] bond6: (slave ip6gretap1): making interface the new active one [ 1322.868832][ T576] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1323.125080][ T577] syzkaller0: entered promiscuous mode [ 1323.136199][ T577] syzkaller0: entered allmulticast mode [ 1323.490685][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8239'. [ 1324.557630][ T29] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1324.797605][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1324.885118][ T29] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1324.971223][ T29] usb 1-1: config 0 has no interface number 0 [ 1324.990417][ T29] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1325.074135][ T29] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1325.105339][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1325.158683][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.206243][ T29] usb 1-1: Product: syz [ 1325.232621][ T29] usb 1-1: Manufacturer: syz [ 1325.243188][ T29] usb 1-1: SerialNumber: syz [ 1325.265322][ T29] usb 1-1: config 0 descriptor?? [ 1325.300874][ T29] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1325.325447][ T29] em28xx 1-1:0.89: Video interface 89 found: [ 1325.932127][ T29] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1327.639130][ T29] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1327.663615][ T29] em28xx 1-1:0.89: board has no eeprom [ 1327.745629][ T29] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1327.767386][ T29] em28xx 1-1:0.89: analog set to bulk mode. [ 1327.774567][ T1209] em28xx 1-1:0.89: Registering V4L2 extension [ 1327.790076][ T29] usb 1-1: USB disconnect, device number 89 [ 1327.797138][ T29] em28xx 1-1:0.89: Disconnecting em28xx [ 1327.908350][ T1209] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1327.916500][ T1209] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1327.936782][ T1209] em28xx 1-1:0.89: No AC97 audio processor [ 1327.963541][ T1209] usb 1-1: Decoder not found [ 1327.984513][ T1209] em28xx 1-1:0.89: failed to create media graph [ 1328.006371][ T1209] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1328.038434][ T1209] em28xx 1-1:0.89: Registering snapshot button... [ 1328.065584][ T1209] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input147 [ 1328.086423][ T1209] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1328.108299][ T29] em28xx 1-1:0.89: Closing input extension [ 1328.114186][ T29] em28xx 1-1:0.89: Deregistering snapshot button [ 1328.307780][ T29] em28xx 1-1:0.89: Freeing device [ 1330.560924][ T629] syzkaller0: entered promiscuous mode [ 1330.575050][ T629] syzkaller0: entered allmulticast mode [ 1330.911354][ T638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.517420][ T29] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1332.715431][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1332.742157][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1332.763272][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1332.773304][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1332.796311][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.809611][T21388] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1332.817614][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1332.839722][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.008271][T21388] usb 1-1: config 0 has no interfaces? [ 1333.014475][T21388] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1333.034700][T21388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.064715][T21388] usb 1-1: config 0 descriptor?? [ 1333.085655][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 1333.091696][ T29] usbtmc 7-1:16.0: can't read capabilities [ 1333.283238][ T5906] usb 1-1: USB disconnect, device number 90 [ 1333.313543][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1333.326772][ T29] usb 7-1: USB disconnect, device number 64 [ 1333.827953][ T5906] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1333.993499][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1334.003727][ T5906] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1334.015935][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1334.038685][ T5906] usb 1-1: string descriptor 0 read error: -22 [ 1334.045212][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1334.057528][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.293201][ T5906] usb 1-1: Can't get UAC3 power state for id 10 [ 1334.929602][ T5906] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1335.653842][ T663] syzkaller0: entered promiscuous mode [ 1335.662370][ T663] syzkaller0: entered allmulticast mode [ 1336.080616][ T1209] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1336.189230][ T5906] usb 1-1: USB disconnect, device number 91 [ 1336.270815][ T1209] usb 9-1: Using ep0 maxpacket: 16 [ 1336.326024][ T1209] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.336577][ T1209] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.348511][ T1209] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1336.358723][ T1209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.366765][ T1209] usb 9-1: Product: syz [ 1336.375896][ T1209] usb 9-1: Manufacturer: syz [ 1336.381011][ T1209] usb 9-1: SerialNumber: syz [ 1336.610532][ T1209] usb 9-1: 0:2 : does not exist [ 1336.670052][ T1209] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1336.730564][ T1209] usb 9-1: USB disconnect, device number 9 [ 1336.804626][T32746] udevd[32746]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.774714][ T5943] IPVS: starting estimator thread 0... [ 1339.898242][ T699] IPVS: using max 29 ests per chain, 69600 per kthread [ 1339.918442][ T704] kernel read not supported for file /¡sxt (pid: 704 comm: syz.0.8271) [ 1339.941158][ T30] audit: type=1800 audit(1773841921.165:1700): pid=704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8271" name=A17378741A dev="mqueue" ino=184010 res=0 errno=0 [ 1343.484261][ T739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.650812][ T743] bond_slave_0: entered promiscuous mode [ 1343.656553][ T743] bond_slave_1: entered promiscuous mode [ 1343.705676][ T743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1343.784309][ T743] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1344.051384][ T750] netlink: 'syz.0.8283': attribute type 1 has an invalid length. [ 1344.226176][ T758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1344.299111][ T750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.388718][ T751] vlan2: entered promiscuous mode [ 1344.440770][ T751] bond2: entered promiscuous mode [ 1344.473596][ T751] vlan2: entered allmulticast mode [ 1344.487300][ T5943] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1344.499873][ T751] bond2: entered allmulticast mode [ 1344.579879][ T758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1344.662953][ T758] bond2: (slave batadv1): making interface the new active one [ 1344.684926][ T758] batadv1: entered promiscuous mode [ 1344.694115][ T758] batadv1: entered allmulticast mode [ 1344.701352][ T758] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1344.782712][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.798466][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.843862][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1344.931917][ T5943] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1344.967358][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.061781][ T5943] usb 5-1: config 0 descriptor?? [ 1345.427632][ T29] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1345.533377][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.617571][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1345.640294][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.658293][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1345.710785][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1345.725741][ T757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.745080][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.784975][ T757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.793701][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.816771][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.862575][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.895070][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.961123][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1345.998033][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1346.032890][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1346.043576][ T29] usb 1-1: usb_control_msg returned -32 [ 1346.077473][ T29] usbtmc 1-1:16.0: can't read capabilities [ 1346.086991][ T5943] nti 0003:0757:0A00.0096: unknown main item tag 0x0 [ 1346.135167][ T5943] nti 0003:0757:0A00.0096: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 1346.228670][ T5943] usb 5-1: USB disconnect, device number 7 [ 1346.514331][ T774] fido_id[774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1346.699604][ T1209] usb 1-1: USB disconnect, device number 92 [ 1348.371047][T24002] Bluetooth: hci3: command 0x0406 tx timeout [ 1350.872414][ T836] syzkaller0: entered promiscuous mode [ 1350.933331][ T836] syzkaller0: entered allmulticast mode [ 1351.002996][ T836] tipc: Started in network mode [ 1351.028468][ T836] tipc: Node identity 3650c5104a25, cluster identity 4711 [ 1351.085435][ T836] tipc: Enabled bearer , priority 0 [ 1351.119642][ T835] tipc: Resetting bearer [ 1351.188451][ T835] tipc: Disabling bearer [ 1352.487749][ T858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1352.520977][ T858] syzkaller0: entered promiscuous mode [ 1352.528095][ T858] syzkaller0: entered allmulticast mode [ 1352.564018][ T858] tipc: Enabled bearer , priority 0 [ 1352.582579][ T857] tipc: Resetting bearer [ 1352.710783][ T857] tipc: Disabling bearer [ 1353.074979][ T865] syzkaller0: entered promiscuous mode [ 1353.094957][ T865] syzkaller0: entered allmulticast mode [ 1353.237361][ T29] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1353.448227][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.490612][ T29] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1353.538007][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.574021][ T29] usb 10-1: config 0 descriptor?? [ 1353.616718][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 1354.042908][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1354.082687][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 1354.112620][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1354.148853][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 1354.194766][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 1354.223924][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 1354.264213][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 1354.324339][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 1354.379103][ T29] pwc: recv_control_msg error -32 req 04 val 1500 [ 1354.416171][ T29] pwc: recv_control_msg error -32 req 02 val 2500 [ 1354.454735][ T29] pwc: recv_control_msg error -32 req 02 val 2400 [ 1354.672837][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1354.721147][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1354.753101][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1354.824258][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1354.898821][ T29] pwc: Registered as video103. [ 1354.930074][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input148 [ 1355.032308][ T29] usb 10-1: USB disconnect, device number 63 [ 1356.992990][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8328'. [ 1357.652197][ T937] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8331'. [ 1357.698868][ T937] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8331'. [ 1359.396295][ T955] syzkaller0: entered promiscuous mode [ 1359.426056][ T955] syzkaller0: entered allmulticast mode [ 1360.127540][ T10] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1360.315106][ T10] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1360.354248][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.402216][ T10] usb 7-1: config 0 descriptor?? [ 1360.796172][ T30] audit: type=1326 audit(1773841942.015:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=971 comm="syz.4.8339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b3ad9c799 code=0x0 [ 1361.661514][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.668179][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.578137][ T10] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 1363.650854][ T10] usb 7-1: USB disconnect, device number 65 [ 1363.886235][ T995] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1363.924774][ T995] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1363.980393][ T995] tipc: Started in network mode [ 1363.985375][ T995] tipc: Node identity 080211, cluster identity 4711 [ 1364.013347][ T995] tipc: Enabled bearer , priority 0 [ 1364.196885][ T1002] tipc: Enabling of bearer rejected, already enabled [ 1364.267778][ T1002] tipc: Resetting bearer [ 1365.135575][ T10] tipc: Node number set to 134353152 [ 1365.224873][ T1027] tipc: Enabled bearer , priority 0 [ 1365.319492][ T1030] syzkaller0: entered promiscuous mode [ 1365.376283][ T1030] syzkaller0: entered allmulticast mode [ 1365.510489][ T1027] tipc: Resetting bearer [ 1365.583369][ T1026] tipc: Resetting bearer [ 1365.695465][ T1026] tipc: Disabling bearer [ 1369.708724][ T1075] tipc: Enabling of bearer rejected, already enabled [ 1369.819501][ T1078] syzkaller0: entered promiscuous mode [ 1369.850655][ T1078] syzkaller0: entered allmulticast mode [ 1372.581976][ T1120] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1374.144516][ T1128] syzkaller0: entered promiscuous mode [ 1374.165756][ T1128] syzkaller0: entered allmulticast mode [ 1374.773837][ T1134] syzkaller0: entered promiscuous mode [ 1374.787423][ T1134] syzkaller0: entered allmulticast mode [ 1375.264358][ T1143] netlink: 'syz.8.8383': attribute type 16 has an invalid length. [ 1375.568626][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1375.860496][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.927646][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1375.983348][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.045358][ T10] usb 7-1: config 0 descriptor?? [ 1376.110845][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1376.535233][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1376.567428][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1376.598764][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1376.645972][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1376.691253][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1376.753950][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1376.789858][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1376.825882][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1376.920123][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1376.950456][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1377.016214][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1377.075946][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1377.290054][ T5943] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1377.328511][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1377.372577][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1377.398006][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1377.428509][ T10] pwc: Registered as video103. [ 1377.453936][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input150 [ 1377.467500][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 1377.490946][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1377.535283][ T10] usb 7-1: USB disconnect, device number 66 [ 1377.552388][ T5943] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1377.588831][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.654937][ T5943] usb 9-1: Product: syz [ 1377.677390][ T5943] usb 9-1: Manufacturer: syz [ 1377.692559][ T5943] usb 9-1: SerialNumber: syz [ 1377.733746][ T5943] usb 9-1: config 0 descriptor?? [ 1377.773569][ T5943] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1377.834412][ T5943] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1378.210067][ T1179] syzkaller0: entered promiscuous mode [ 1378.233436][ T1179] syzkaller0: entered allmulticast mode [ 1378.387053][ T5943] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1378.848627][ T5943] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1378.886827][ T5943] em28xx 9-1:0.0: board has no eeprom [ 1379.042516][ T1190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.204199][ T5943] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1379.234606][ T5943] em28xx 9-1:0.0: dvb set to bulk mode. [ 1379.240609][ T5906] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1379.272839][ T5874] em28xx 9-1:0.0: Binding DVB extension [ 1379.292465][ T5943] usb 9-1: USB disconnect, device number 10 [ 1379.308499][ T5943] em28xx 9-1:0.0: Disconnecting em28xx [ 1379.423986][ T5874] em28xx 9-1:0.0: Registering input extension [ 1379.433632][ T5906] usb 1-1: config 0 has no interfaces? [ 1379.439873][ T5943] em28xx 9-1:0.0: Closing input extension [ 1379.450256][ T5906] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1379.483424][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.511373][ T5906] usb 1-1: Product: syz [ 1379.525823][ T5906] usb 1-1: Manufacturer: syz [ 1379.541825][ T5906] usb 1-1: SerialNumber: syz [ 1379.581133][ T5906] usb 1-1: config 0 descriptor?? [ 1379.598695][ T5943] em28xx 9-1:0.0: Freeing device [ 1380.040349][ T1193] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.275724][ T1209] usb 1-1: USB disconnect, device number 93 [ 1380.752628][ T1207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8399'. [ 1381.077267][ T1209] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1381.259761][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1381.315217][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1381.363016][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1381.397500][ T5943] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1381.415317][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1381.462665][ T1209] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1381.515571][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.556905][ T1209] usb 5-1: config 0 descriptor?? [ 1381.575247][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 1381.611377][ T5943] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.655983][ T5943] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1381.706499][ T5943] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1381.739847][ T5943] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1381.779825][ T5943] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1381.807133][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.840837][ T5943] usb 7-1: Product: syz [ 1381.855203][ T5943] usb 7-1: Manufacturer: syz [ 1381.884947][ T5943] usb 7-1: SerialNumber: syz [ 1381.930403][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1381.966518][ T5943] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input152 [ 1382.063226][ T1209] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1382.187406][ T5943] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1382.221998][ T5943] (id 0x00) [ 1382.429063][ T5943] rc_core: IR keymap rc-imon-pad not found [ 1382.447690][ T5943] Registered IR keymap rc-empty [ 1382.465686][ T5943] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1382.501767][ T5943] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1382.566496][ T5943] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1382.651752][ T5943] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input154 [ 1382.721164][ T5943] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:67> initialized [ 1382.918928][ T29] usb 5-1: USB disconnect, device number 8 [ 1383.522950][ T1259] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 1383.545120][ T1259] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 1384.207435][T24002] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.402548][ T1209] usb 7-1: USB disconnect, device number 67 [ 1384.931016][ T1276] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1385.006193][ T1276] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1387.795088][ T1308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.218371][ T1293] netlink: 'syz.0.8414': attribute type 1 has an invalid length. [ 1388.687287][ T5943] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1388.787317][ T10] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1388.861592][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 1388.893310][ T5943] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1388.940261][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.968425][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1388.991139][ T5943] usb 9-1: config 0 descriptor?? [ 1389.034126][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1389.058915][ T5943] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1389.076522][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1389.106974][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1389.148416][ T10] usb 7-1: Product: syz [ 1389.160343][ T10] usb 7-1: Manufacturer: syz [ 1389.179192][ T10] usb 7-1: SerialNumber: syz [ 1389.204963][ T10] usb 7-1: config 0 descriptor?? [ 1389.228482][ T1324] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1389.381979][ T1331] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1389.975295][ T30] audit: type=1326 audit(1773841971.195:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1313 comm="syz.8.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c0b9c799 code=0x7ffc0000 [ 1390.136762][ T30] audit: type=1326 audit(1773841971.195:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1313 comm="syz.8.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c0b9c799 code=0x7ffc0000 [ 1390.170899][ T5943] gspca_sunplus: reg_w_riv err -110 [ 1390.181943][ T5943] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1390.578158][ T30] audit: type=1326 audit(1773841971.785:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1313 comm="syz.8.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3c0b9c42b code=0x7ffc0000 [ 1391.583902][ T5874] usb 7-1: USB disconnect, device number 68 [ 1391.637778][ T5943] usb 9-1: USB disconnect, device number 11 [ 1392.316986][ T1351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8427'. [ 1392.465274][ T1351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.842721][ T1361] tipc: Enabling of bearer rejected, already enabled [ 1393.437523][ T1209] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1393.642772][ T1209] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1393.705266][ T1209] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1393.791373][ T1209] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1393.866633][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.965458][ T1373] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1394.021414][ T1209] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1394.767081][ T1209] usb 9-1: USB disconnect, device number 12 [ 1396.362096][ T5874] hid_parser_main: 28 callbacks suppressed [ 1396.362122][ T5874] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 1396.508885][ T5874] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1396.847429][ T1209] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1397.018255][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 1397.029296][ T1209] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1397.057364][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.087756][ T1209] usb 5-1: config 0 has no interface number 0 [ 1397.104550][ T1209] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1397.159958][ T1209] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1397.187438][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.231419][ T1209] usb 5-1: Product: syz [ 1397.235656][ T1209] usb 5-1: Manufacturer: syz [ 1397.267386][ T1209] usb 5-1: SerialNumber: syz [ 1397.293070][ T1209] usb 5-1: config 0 descriptor?? [ 1397.334785][ T1209] hub 5-1:0.89: bad descriptor, ignoring hub [ 1397.354058][ T1209] hub 5-1:0.89: probe with driver hub failed with error -5 [ 1397.369705][ T1407] loop6: detected capacity change from 0 to 2640 [ 1397.390747][ T1209] option 5-1:0.89: GSM modem (1-port) converter detected [ 1397.398601][ T1407] buffer_io_error: 11 callbacks suppressed [ 1397.398621][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.445942][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.468075][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.485200][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.520411][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.541495][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.612968][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.635858][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.660495][ T1407] ldm_validate_partition_table(): Disk read failed. [ 1397.680698][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.697515][ T5874] usb 5-1: USB disconnect, device number 9 [ 1397.708694][ T1407] Buffer I/O error on dev loop6, logical block 0, async page read [ 1397.717666][ T5874] option 5-1:0.89: device disconnected [ 1397.738686][ T1407] Dev loop6: unable to read RDB block 0 [ 1397.760972][ T1407] loop6: unable to read partition table [ 1397.774914][ T1407] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1397.925638][ T1413] tipc: Enabled bearer , priority 0 [ 1397.938689][ T1413] syzkaller0: entered promiscuous mode [ 1397.946671][ T1413] syzkaller0: entered allmulticast mode [ 1397.982380][ T1413] tipc: Resetting bearer [ 1398.003141][ T1412] tipc: Resetting bearer [ 1398.043171][ T1412] tipc: Disabling bearer [ 1398.186515][ T1421] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8445'. [ 1398.264302][ T1424] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 1398.312245][ T1424] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 1398.726685][ T1437] netlink: 'syz.0.8450': attribute type 1 has an invalid length. [ 1399.126360][ T1437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1399.196174][ T1438] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1399.275641][ T1438] bond3: entered allmulticast mode [ 1400.019742][ T1464] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1400.019775][ T1464] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1400.113587][ T1464] tipc: Enabling of bearer rejected, already enabled [ 1402.030509][ T1487] tipc: Enabled bearer , priority 0 [ 1402.087607][ T1487] syzkaller0: entered promiscuous mode [ 1402.093208][ T1487] syzkaller0: entered allmulticast mode [ 1402.230133][ T1489] tipc: Resetting bearer [ 1402.266820][ T1486] tipc: Resetting bearer [ 1402.361109][ T1486] tipc: Disabling bearer [ 1402.676140][ T1498] netdevsim netdevsim8 : renamed from netdevsim0 [ 1402.958437][ T1507] netlink: 'syz.4.8467': attribute type 21 has an invalid length. [ 1403.006057][ T1507] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1403.017409][ T1507] netlink: 'syz.4.8467': attribute type 1 has an invalid length. [ 1403.037418][ T1507] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1403.633152][ T1517] syzkaller0: entered promiscuous mode [ 1403.658923][ T1517] syzkaller0: entered allmulticast mode [ 1406.100054][ T30] audit: type=1804 audit(1773841987.325:1705): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8479" name="/newroot/423/file1" dev="tmpfs" ino=2202 res=1 errno=0 [ 1407.045032][ T1564] create_pit_timer: 2 callbacks suppressed [ 1407.045057][ T1564] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1407.196997][ T1564] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 1407.490535][ T1577] TC_ACT_REPEAT abuse ? [ 1407.594491][ T1582] kAFS: unable to lookup cell 'ÿ' [ 1408.196450][ T1586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1408.218909][ T1586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1408.262711][ T1591] syzkaller0: entered promiscuous mode [ 1408.277444][ T1591] syzkaller0: entered allmulticast mode [ 1408.290197][ T1594] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8491'. [ 1408.693001][ T1604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8492'. [ 1408.967451][ T5874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1409.119486][ T1610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.181777][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.227320][ T5874] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1409.256350][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.328791][ T5874] usb 5-1: config 0 descriptor?? [ 1409.389191][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1409.890106][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1409.898171][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 1409.905766][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1409.921051][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 1409.939460][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 1409.965814][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 1409.998473][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 1410.028201][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 1410.078299][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 1410.097434][ T5874] pwc: recv_control_msg error -32 req 02 val 2500 [ 1410.157996][ T5874] pwc: recv_control_msg error -32 req 02 val 2400 [ 1410.179766][ T5874] pwc: recv_control_msg error -32 req 02 val 2600 [ 1410.241010][ T5874] pwc: recv_control_msg error -32 req 02 val 2900 [ 1410.462010][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 1410.479024][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1410.521936][ T5874] pwc: Registered as video103. [ 1410.559908][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input155 [ 1410.641197][ T5874] usb 5-1: USB disconnect, device number 10 [ 1413.927818][ T1209] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1414.133898][ T1209] usb 1-1: config 0 has no interfaces? [ 1414.147303][ T1663] netlink: 'syz.9.8507': attribute type 16 has an invalid length. [ 1414.155571][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8507'. [ 1414.169612][ T1209] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1414.193048][ T1663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.204505][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.236001][ T1209] usb 1-1: Product: syz [ 1414.251043][ T1209] usb 1-1: Manufacturer: syz [ 1414.307318][ T1209] usb 1-1: SerialNumber: syz [ 1414.327773][ T1209] usb 1-1: config 0 descriptor?? [ 1414.652949][ T1671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.708720][ T10] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1414.953493][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1414.970972][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1414.980915][ T10] usb 10-1: can't read configurations, error -71 [ 1415.343068][ T1681] syz.6.8511 (1681): drop_caches: 2 [ 1415.397349][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1415.569613][ T29] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1415.617320][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1415.644621][ T29] usb 9-1: string descriptor 0 read error: -22 [ 1415.667349][ T29] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1415.700639][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.726070][ T1684] TC_ACT_REPEAT abuse ? [ 1416.434941][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.469167][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.492575][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.512925][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.530859][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.560679][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.593158][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.611900][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.621755][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.632268][ T29] lenovo 0003:17EF:6047.0099: unknown main item tag 0x0 [ 1416.698545][ T1688] tipc: Enabled bearer , priority 0 [ 1416.723538][ T1688] syzkaller0: entered promiscuous mode [ 1416.729393][ T10] usb 1-1: USB disconnect, device number 94 [ 1416.748302][ T1688] syzkaller0: entered allmulticast mode [ 1416.821244][ T29] lenovo 0003:17EF:6047.0099: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 1416.907961][ T1691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1416.956177][ T1697] tipc: Resetting bearer [ 1417.072850][ T1687] tipc: Resetting bearer [ 1417.162246][ T1687] tipc: Disabling bearer [ 1417.839547][ T29] usb 9-1: USB disconnect, device number 13 [ 1418.577341][ T30] audit: type=1326 audit(1773841999.765:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1712 comm="syz.8.8520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3c0b9c799 code=0x0 [ 1418.621411][ T1714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8520'. [ 1419.906834][ T1728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1420.685521][ T1736] input: syz1 as /devices/virtual/input/input156 [ 1421.557830][ T5943] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 1421.564089][ T1754] syzkaller0: entered promiscuous mode [ 1421.564109][ T1754] syzkaller0: entered allmulticast mode [ 1421.735246][ T5943] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1421.735278][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.735298][ T5943] usb 10-1: config 0 has no interface number 0 [ 1421.735340][ T5943] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1421.735368][ T5943] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1421.735392][ T5943] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.735419][ T5943] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1421.739469][ T5943] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1421.739493][ T5943] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1421.739508][ T5943] usb 10-1: Manufacturer: syz [ 1421.741665][ T5943] usb 10-1: config 0 descriptor?? [ 1421.954955][ T1752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.955371][ T1752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.978848][ T5943] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1421.979055][ T5943] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1422.222432][ T1765] tipc: Enabled bearer , priority 0 [ 1422.231421][ T1765] syzkaller0: entered promiscuous mode [ 1422.231449][ T1765] syzkaller0: entered allmulticast mode [ 1422.346789][ T1765] tipc: Resetting bearer [ 1422.363272][ T1764] tipc: Resetting bearer [ 1422.468754][ T1764] tipc: Disabling bearer [ 1422.683238][ T5943] usb 10-1: USB disconnect, device number 66 [ 1422.834830][ T1775] batadv_slave_0: entered promiscuous mode [ 1422.878734][ T1775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8532'. [ 1422.925030][ T1775] hsr_slave_0: left promiscuous mode [ 1422.951033][ T1775] hsr_slave_1: left promiscuous mode [ 1423.093290][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.099881][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1423.108899][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.189037][ T1773] batadv_slave_0: left promiscuous mode [ 1423.283548][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1423.339958][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1423.399886][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1423.449912][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.512029][ T29] usb 5-1: config 0 descriptor?? [ 1423.950074][ T1772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.992554][ T29] ath6kl: Failed to submit usb control message: -71 [ 1424.007935][ T29] ath6kl: unable to send the bmi data to the device: -71 [ 1424.015958][ T29] ath6kl: Unable to send get target info: -71 [ 1424.024936][ T29] ath6kl: Failed to init ath6kl core: -71 [ 1424.074787][ T29] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1424.129200][ T29] usb 5-1: USB disconnect, device number 11 [ 1424.302048][ T1798] IPv6: addrconf: prefix option has invalid lifetime [ 1424.833140][ T1804] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1424.850627][ T1804] syzkaller0: entered promiscuous mode [ 1424.872431][ T1804] syzkaller0: entered allmulticast mode [ 1426.374676][ T1828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8545'. [ 1428.382413][ T1839] netlink: 'syz.9.8549': attribute type 1 has an invalid length. [ 1428.491936][ T1839] bond4: entered promiscuous mode [ 1428.523517][ T1839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1428.608393][ T1842] bond4: (slave bridge0): making interface the new active one [ 1428.629514][ T1842] bridge0: entered promiscuous mode [ 1428.705519][ T1842] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 1428.763209][ T1843] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 1428.804482][ T1839] macvlan2: entered promiscuous mode [ 1428.812722][ T1839] macvlan2: entered allmulticast mode [ 1428.822318][ T1839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1429.478200][ T1852] tipc: Enabled bearer , priority 0 [ 1429.491812][ T1852] syzkaller0: entered promiscuous mode [ 1429.507479][ T1852] syzkaller0: entered allmulticast mode [ 1429.711707][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8552'. [ 1429.820047][ T1856] tipc: Resetting bearer [ 1429.829020][ T1851] tipc: Resetting bearer [ 1429.946770][ T1851] tipc: Disabling bearer [ 1430.102285][ T1861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1430.504701][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.512272][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.686876][ T1861] bond_slave_0: left promiscuous mode [ 1430.697657][ T1861] bond_slave_1: left promiscuous mode [ 1430.877546][ T1209] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1431.153399][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1431.182359][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1431.193549][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.228175][ T1209] usb 5-1: can't read configurations, error -71 [ 1431.285244][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.709871][ T9767] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.766473][ T9767] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.884935][ T9767] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.100749][ T1878] tipc: Enabled bearer , priority 0 [ 1432.150746][ T1878] syzkaller0: entered promiscuous mode [ 1432.166399][ T1878] syzkaller0: entered allmulticast mode [ 1432.249970][ T1888] kAFS: unable to lookup cell 'ÿ' [ 1432.323351][ T1878] tipc: Resetting bearer [ 1432.422717][ T1877] tipc: Resetting bearer [ 1432.493695][ T1877] tipc: Disabling bearer [ 1432.737313][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1432.935643][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.984886][ T5874] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1433.046894][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.097268][T21388] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1433.128581][ T5874] usb 5-1: config 0 descriptor?? [ 1433.165496][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1433.268045][T21388] usb 9-1: Using ep0 maxpacket: 16 [ 1433.361032][ T1890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.378948][T21388] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1433.427940][T21388] usb 9-1: config 0 has no interface number 0 [ 1433.448441][ T1890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.482444][T21388] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.523011][T21388] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.577287][T21388] usb 9-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1433.613693][T21388] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.693410][T21388] usb 9-1: config 0 descriptor?? [ 1434.599992][T21388] holtek_mouse 0003:04D9:A081.009A: item fetching failed at offset 5/8 [ 1434.664955][T21388] holtek_mouse 0003:04D9:A081.009A: hid parse failed: -22 [ 1434.697518][T21388] holtek_mouse 0003:04D9:A081.009A: probe with driver holtek_mouse failed with error -22 [ 1434.954003][ T1907] loop7: detected capacity change from 0 to 16384 [ 1436.328168][ T1920] tipc: Enabling of bearer rejected, already enabled [ 1436.417955][ T1920] tipc: Resetting bearer [ 1436.466357][T27843] tipc: Resetting bearer [ 1436.794877][ T5874] usb 5-1: USB disconnect, device number 14 [ 1437.723053][T21388] usb 9-1: USB disconnect, device number 14 [ 1437.930939][ T1935] netlink: 'syz.8.8572': attribute type 1 has an invalid length. [ 1438.067108][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8572'. [ 1438.088576][ T1935] bond1: entered promiscuous mode [ 1438.116266][ T1935] bond1: entered allmulticast mode [ 1438.146292][ T1935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1438.229093][ T1937] erspan1: entered allmulticast mode [ 1438.332518][ T1942] kvm: pic: single mode not supported [ 1438.332813][ T1942] kvm: pic: single mode not supported [ 1438.338501][ T1942] kvm: pic: level sensitive irq not supported [ 1438.344430][ T1937] bond1: (slave erspan1): making interface the new active one [ 1438.385057][ T1942] kvm: pic: level sensitive irq not supported [ 1438.415106][ T1937] erspan1: entered promiscuous mode [ 1438.434207][ T1942] kvm: pic: single mode not supported [ 1438.434257][ T1942] kvm: pic: single mode not supported [ 1438.448754][ T1942] kvm: pic: level sensitive irq not supported [ 1438.515085][ T1937] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1438.535091][ T1942] kvm: pic: level sensitive irq not supported [ 1438.535363][ T1942] kvm: pic: single mode not supported [ 1438.560397][ T1942] kvm: pic: single mode not supported [ 1438.565900][ T1942] kvm: pic: level sensitive irq not supported [ 1438.583985][T21388] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1438.602607][ T1942] kvm: pic: level sensitive irq not supported [ 1438.602680][ T1942] kvm: pic: level sensitive irq not supported [ 1438.656412][ T1940] bond1 (unregistering): (slave erspan1): Releasing active interface [ 1438.673684][ T1942] kvm: pic: single mode not supported [ 1438.673708][ T1942] kvm: pic: level sensitive irq not supported [ 1438.694999][ T1942] kvm: pic: level sensitive irq not supported [ 1438.738172][ T1942] kvm: pic: level sensitive irq not supported [ 1438.755959][ T1942] kvm: pic: single mode not supported [ 1438.765181][ T1940] erspan1: left promiscuous mode [ 1438.796290][ T1942] kvm: pic: single mode not supported [ 1438.796391][ T1942] kvm: pic: single mode not supported [ 1438.807769][ T29] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1438.838101][T21388] usb 1-1: Using ep0 maxpacket: 16 [ 1438.890006][ T1940] bond1 (unregistering): Released all slaves [ 1438.923241][T21388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.994466][T21388] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1439.029664][T21388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.058096][T21388] usb 1-1: config 0 descriptor?? [ 1439.096374][T21388] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1439.157733][ T29] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1439.166948][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.185234][ T29] usb 10-1: config 0 descriptor?? [ 1439.204030][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1439.309681][ T1945] vlan3: entered promiscuous mode [ 1439.344426][ T1945] bond0: entered promiscuous mode [ 1439.357514][ T1945] bond_slave_0: entered promiscuous mode [ 1439.383122][ T1945] bond_slave_1: entered promiscuous mode [ 1439.508717][T21388] usb 1-1: USB disconnect, device number 95 [ 1439.628058][ T29] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1439.848584][ T1947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.870068][ T1947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.139137][ T1952] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 1440.148905][ T29] gspca_cpia1: usb_control_msg 02, error -32 [ 1440.158879][ T1952] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 1440.166544][ T1952] tipc: Resetting bearer [ 1440.212620][ T29] gspca_cpia1: usb_control_msg 02, error -71 [ 1440.237271][ T29] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1440.253313][ T29] usb 10-1: USB disconnect, device number 67 [ 1440.798948][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1441.195363][ T1971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8582'. [ 1441.447526][ T29] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1442.322978][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 1442.462529][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 1442.529844][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1442.587912][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x81 [ 1442.659768][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x81 [ 1442.717587][ T1980] kvm: kvm [1979]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1442.767692][ T5943] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1442.817367][ T29] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 1442.959447][ T5943] usb 1-1: not running at top speed; connect to a high speed hub [ 1442.979530][ T5943] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 1442.997268][ T5943] usb 1-1: config 95 has no interface number 0 [ 1443.005157][ T5943] usb 1-1: config 95 interface 1 has no altsetting 0 [ 1443.020859][ T29] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1443.030560][ T5943] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1443.034341][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.061318][ T29] usb 10-1: config 0 descriptor?? [ 1443.081040][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.111733][ T5943] usb 1-1: Product: syz [ 1443.115971][ T5943] usb 1-1: Manufacturer: syz [ 1443.144413][ T5943] usb 1-1: SerialNumber: syz [ 1443.278516][ T29] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1443.488536][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.533718][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.602592][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 1443.694129][ T29] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1443.719014][ T29] [drm] Initialized udl on minor 2 [ 1443.746273][ T29] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1443.793199][ T29] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1443.806726][T21388] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1443.886411][T21388] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1443.895183][ T29] usb 10-1: USB disconnect, device number 69 [ 1443.944503][T21388] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1444.232297][ T5943] usb 1-1: USB disconnect, device number 96 [ 1444.444988][T32746] udevd[32746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.490335][ T2077] tipc: Enabled bearer , priority 0 [ 1444.543485][ T2078] syzkaller0: entered promiscuous mode [ 1444.581435][ T2078] syzkaller0: entered allmulticast mode [ 1444.751447][ T2077] tipc: Resetting bearer [ 1444.827469][ T2076] tipc: Resetting bearer [ 1444.959473][ T2076] tipc: Disabling bearer [ 1445.197769][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1445.418752][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 1445.458258][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.543080][ T29] usb 9-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1445.652455][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.739143][ T29] usb 9-1: config 0 descriptor?? [ 1445.747492][ T5943] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1445.832917][ T29] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1445.971598][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.024219][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1446.110975][ T5943] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1446.144990][ T2083] vlan2: entered promiscuous mode [ 1446.173671][ T2083] team0: entered promiscuous mode [ 1446.193832][ T2083] team_slave_0: entered promiscuous mode [ 1446.223127][ T5943] usb 10-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1446.239994][ T2083] team_slave_1: entered promiscuous mode [ 1446.258881][ T5943] usb 10-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1446.286894][ T5943] usb 10-1: Manufacturer: syz [ 1446.330869][ T5943] usb 10-1: config 0 descriptor?? [ 1446.355320][ T5943] smsusb:smsusb_probe: board id=9, interface number 0 [ 1446.393048][ T5943] smsusb:smsusb_probe: Device initialized with return code -19 [ 1446.402551][ T5874] usb 9-1: USB disconnect, device number 15 [ 1448.343933][ T29] usb 10-1: USB disconnect, device number 70 [ 1450.578571][ T2144] syzkaller0: entered promiscuous mode [ 1450.617225][ T2144] syzkaller0: entered allmulticast mode [ 1452.429704][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8615'. [ 1453.164915][ T2176] ALSA: mixer_oss: invalid OSS volume '' [ 1453.799478][ T30] audit: type=1326 audit(1773842035.025:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1453.997544][ T30] audit: type=1326 audit(1773842035.025:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.102102][ T30] audit: type=1326 audit(1773842035.035:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.219592][ T30] audit: type=1326 audit(1773842035.035:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.326400][ T30] audit: type=1326 audit(1773842035.035:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.454411][ T30] audit: type=1326 audit(1773842035.035:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.605580][ T30] audit: type=1326 audit(1773842035.035:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.707264][ T30] audit: type=1326 audit(1773842035.035:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.788480][ T30] audit: type=1326 audit(1773842035.035:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1454.868375][ T30] audit: type=1326 audit(1773842035.035:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2254 comm="syz.9.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1455.924224][ T2313] tipc: Enabling of bearer rejected, already enabled [ 1455.952080][ T2313] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1455.977380][ T2313] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1456.012336][ T2313] tipc: Resetting bearer [ 1457.802004][ T2331] openvswitch: netlink: IP tunnel dst address not specified [ 1459.617305][ T5874] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1459.810902][ T5874] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1459.843988][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.886191][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1459.915736][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.965755][ T5874] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1460.011929][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1460.038559][ T5874] usb 1-1: Product: syz [ 1460.059775][ T5874] usb 1-1: Manufacturer: syz [ 1460.091954][ T5874] cdc_wdm 1-1:1.0: skipping garbage [ 1460.117248][ T5874] cdc_wdm 1-1:1.0: skipping garbage [ 1460.148384][ T5874] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1460.170813][ T5874] cdc_wdm 1-1:1.0: Unknown control protocol [ 1460.327297][ T29] usb 1-1: USB disconnect, device number 97 [ 1460.837331][ T29] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1461.030399][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1461.059679][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.137314][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1461.156996][ T2364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1461.195594][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.240940][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1461.295142][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1461.337484][ T29] usb 1-1: Product: syz [ 1461.341689][ T29] usb 1-1: Manufacturer: syz [ 1461.394195][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 1461.420048][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 1461.445689][ T29] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1461.486701][ T29] cdc_wdm 1-1:1.0: Unknown control protocol [ 1462.082069][ T2374] syzkaller0: entered promiscuous mode [ 1462.106639][ T2374] syzkaller0: entered allmulticast mode [ 1462.476211][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1462.481865][ T29] usb 1-1: USB disconnect, device number 98 [ 1462.482871][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1462.482893][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1462.837698][ T5874] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1463.021590][ T5874] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1463.055497][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.059393][ T29] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1463.103031][ T5874] usb 10-1: config 0 descriptor?? [ 1463.143677][ T5874] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1463.270089][T21388] IPVS: starting estimator thread 0... [ 1463.281016][ T2391] bridge_slave_0: left allmulticast mode [ 1463.303477][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1463.319879][ T2391] bridge_slave_0: left promiscuous mode [ 1463.333263][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.347799][ T2391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.387594][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1463.398825][ T2392] IPVS: using max 39 ests per chain, 93600 per kthread [ 1463.433213][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1463.464200][ T2391] bridge_slave_1: left allmulticast mode [ 1463.503686][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 101, setting to 64 [ 1463.515913][ T2391] bridge_slave_1: left promiscuous mode [ 1463.534793][ T2391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.565775][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1463.620122][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1463.639625][ T2391] bond0: (slave bond_slave_0): Releasing backup interface [ 1463.666035][ T29] usb 1-1: Product: syz [ 1463.685277][ T2391] bond0: (slave bond_slave_1): Releasing backup interface [ 1463.695982][ T29] usb 1-1: Manufacturer: syz [ 1463.746670][ T2391] team_slave_0: left promiscuous mode [ 1463.805870][ T2391] team0: Port device team_slave_0 removed [ 1463.845730][ T2391] team_slave_1: left promiscuous mode [ 1463.892300][ T29] usb 1-1: can't set config #1, error -71 [ 1463.945597][ T2391] team0: Port device team_slave_1 removed [ 1463.970855][ T29] usb 1-1: USB disconnect, device number 99 [ 1463.994159][ T2391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.048376][ T2391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1465.036498][ T5874] gspca_stv06xx: Photobit pb0100 sensor detected [ 1465.520613][ T2411] netlink: 'syz.4.8649': attribute type 13 has an invalid length. [ 1466.063471][ T5874] input: STV06xx as /devices/platform/dummy_hcd.9/usb10/10-1/input/input158 [ 1466.167789][ T5874] usb 10-1: USB disconnect, device number 71 [ 1466.551271][ T2426] syzkaller0: entered promiscuous mode [ 1466.589583][ T2426] syzkaller0: entered allmulticast mode [ 1466.918346][ T2437] ip6t_srh: unknown srh invflags 4000 [ 1468.014765][ T2456] SET target dimension over the limit! [ 1469.602647][ T2476] syzkaller0: entered promiscuous mode [ 1469.628849][ T2476] syzkaller0: entered allmulticast mode [ 1471.327811][ T2508] tipc: Enabled bearer , priority 0 [ 1471.371784][ T2508] syzkaller0: entered promiscuous mode [ 1471.417367][ T2508] syzkaller0: entered allmulticast mode [ 1471.686678][ T2522] tipc: Resetting bearer [ 1471.969869][ T2524] syzkaller0: entered promiscuous mode [ 1472.017370][ T2524] syzkaller0: entered allmulticast mode [ 1472.085483][ T2507] tipc: Resetting bearer [ 1472.175448][ T2507] tipc: Disabling bearer [ 1473.747964][ T5943] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1473.930404][ T5874] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1473.973672][ T5943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1473.994238][ T5943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1474.057281][ T5943] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1474.087746][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.121456][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.137212][ T5943] usb 1-1: Product: syz [ 1474.165060][ T5943] usb 1-1: Manufacturer: syz [ 1474.169814][ T5874] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1474.184643][ T5943] usb 1-1: SerialNumber: syz [ 1474.204394][ T5874] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1474.247472][ T5943] usb 1-1: config 0 descriptor?? [ 1474.253709][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.288311][ T2537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.312539][ T5874] usb 7-1: Product: syz [ 1474.319065][ T2537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.351370][ T5874] usb 7-1: Manufacturer: syz [ 1474.367435][ T5874] usb 7-1: SerialNumber: syz [ 1474.395644][ T5874] usb 7-1: config 0 descriptor?? [ 1474.612730][ T2537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.653528][ T5874] usb 7-1: USB disconnect, device number 69 [ 1474.671334][ T2537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1475.130900][ T5943] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1475.172921][ T2549] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8677'. [ 1475.427343][ T5943] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1475.465989][ T5943] usb 1-1: USB disconnect, device number 100 [ 1476.244283][ T2566] kvm: kvm [2565]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 1477.429252][ T2571] kvm: kvm [2570]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 1478.584001][ T29] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1478.757307][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 1478.764726][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.775481][ T29] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1478.786743][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.816975][ T29] usb 1-1: config 0 descriptor?? [ 1478.836777][ T29] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1479.664784][ T2586] vlan3: entered promiscuous mode [ 1479.681956][ T2586] dummy0: entered promiscuous mode [ 1479.810734][ T5943] usb 1-1: USB disconnect, device number 101 [ 1479.907325][ T5874] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1480.067267][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 1480.075332][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.088732][ T5874] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1480.117406][ T5874] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1480.143787][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.171415][ T5874] usb 7-1: config 0 descriptor?? [ 1481.251108][ T2626] input: syz1 as /devices/virtual/input/input159 [ 1482.604039][ T2641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.027459][T21388] usb 7-1: USB disconnect, device number 70 [ 1483.607403][ T5874] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1483.819136][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 1483.837108][ T5874] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.867425][ T5874] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.923644][ T5874] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1484.011591][ T5874] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.077304][ T5874] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1484.112407][ T5874] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1484.140040][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.170505][ T5874] usb 7-1: Product: syz [ 1484.174728][ T5874] usb 7-1: Manufacturer: syz [ 1484.210024][ T5874] usb 7-1: SerialNumber: syz [ 1484.260286][ T5874] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1484.289046][ T5874] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1484.371407][ T5874] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1484.524033][T21388] usb 7-1: USB disconnect, device number 71 [ 1484.536859][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.546101][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.237576][T21388] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1485.454117][T21388] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1485.490340][T21388] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1485.553919][T21388] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1485.583557][T21388] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1485.621199][T21388] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1485.665284][T21388] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1485.684692][T21388] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1485.715802][T21388] usb 9-1: Product: syz [ 1485.730502][T21388] usb 9-1: Manufacturer: syz [ 1485.770259][T21388] cdc_wdm 9-1:1.0: skipping garbage [ 1485.781670][T21388] cdc_wdm 9-1:1.0: skipping garbage [ 1485.826624][T21388] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1485.863054][T21388] cdc_wdm 9-1:1.0: Unknown control protocol [ 1486.027159][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.033825][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.040202][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.046833][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.053389][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.060027][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.066293][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.072931][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.079209][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.085823][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.092248][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.098955][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.105243][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.111851][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.118759][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.125469][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.131777][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.138382][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.147240][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1486.153880][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1486.160246][ T5874] usb 9-1: USB disconnect, device number 16 [ 1486.166178][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1486.868252][ T2698] syzkaller0: entered promiscuous mode [ 1486.876000][ T2698] syzkaller0: entered allmulticast mode [ 1491.380811][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1491.380826][ T30] audit: type=1326 audit(1773842072.605:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1491.539924][ T30] audit: type=1326 audit(1773842072.635:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1491.693098][ T30] audit: type=1326 audit(1773842072.645:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1491.740026][ T29] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1491.850961][ T30] audit: type=1326 audit(1773842072.645:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1491.926057][ T30] audit: type=1326 audit(1773842072.645:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1491.964655][ T30] audit: type=1326 audit(1773842072.655:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1492.003136][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1492.045208][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 1492.055655][ T30] audit: type=1326 audit(1773842072.655:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1492.097260][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1492.127265][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1492.137581][ T30] audit: type=1326 audit(1773842072.655:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1492.167462][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1492.199175][ T29] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1492.212807][ T30] audit: type=1326 audit(1773842072.655:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1492.235272][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.258203][ T29] usb 10-1: Product: syz [ 1492.262530][ T29] usb 10-1: Manufacturer: syz [ 1492.280411][ T29] usb 10-1: SerialNumber: syz [ 1492.295393][ T30] audit: type=1326 audit(1773842072.655:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2774 comm="syz.9.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143ff9c799 code=0x7ffc0000 [ 1492.324654][ T29] usb 10-1: config 0 descriptor?? [ 1492.339680][ T2776] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1492.370760][ T29] usb 10-1: ucan: probing device on interface #0 [ 1492.407052][ T29] usb 10-1: ucan: invalid endpoint configuration [ 1492.417343][ T29] usb 10-1: ucan: probe failed; try to update the device firmware [ 1492.599767][ T29] usb 10-1: USB disconnect, device number 72 [ 1492.736285][ T2789] netlink: 'syz.0.8724': attribute type 1 has an invalid length. [ 1492.831881][ T2792] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1492.883198][ T2789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1492.895482][ T3504] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1492.978709][ T2789] veth3: entered promiscuous mode [ 1492.989942][ T2789] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 1493.071840][ T3504] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1494.099328][ T2806] loop6: detected capacity change from 0 to 2640 [ 1494.143666][ T2809] loop6: detected capacity change from 2640 to 524288000 [ 1494.169725][T25430] buffer_io_error: 11 callbacks suppressed [ 1494.169743][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.232996][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.261695][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.289666][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.314733][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.366758][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.405544][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.431710][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.457293][T25430] ldm_validate_partition_table(): Disk read failed. [ 1494.477216][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.522164][T25430] Buffer I/O error on dev loop6, logical block 0, async page read [ 1494.547079][T25430] Dev loop6: unable to read RDB block 0 [ 1494.563595][T25430] loop6: unable to read partition table [ 1494.586795][ T2806] ldm_validate_partition_table(): Disk read failed. [ 1494.600086][ T2806] Dev loop6: unable to read RDB block 0 [ 1494.617007][ T2806] loop6: unable to read partition table [ 1494.638212][ T2806] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1497.146840][ T2863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8737'. [ 1497.837302][ T5874] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1498.019780][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.060305][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1498.087169][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.121940][ T5874] usb 1-1: config 0 descriptor?? [ 1498.158118][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1498.574377][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1498.599326][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 1498.628140][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1498.648326][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 1498.665660][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 1498.682976][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 1498.703276][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 1498.725567][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 1498.751130][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 1498.776762][ T5874] pwc: recv_control_msg error -32 req 02 val 2500 [ 1498.799266][ T5874] pwc: recv_control_msg error -32 req 02 val 2400 [ 1498.807226][ T5906] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 1498.822255][ T5874] pwc: recv_control_msg error -32 req 02 val 2600 [ 1498.863103][ T5874] pwc: recv_control_msg error -32 req 02 val 2900 [ 1498.878386][ T5874] pwc: recv_control_msg error -32 req 02 val 2800 [ 1499.018498][ T5906] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1499.040636][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1499.071930][ T5906] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1499.091658][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1499.111458][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1499.151835][ T5874] pwc: Registered as video103. [ 1499.168700][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1499.216158][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input160 [ 1499.254446][ T5906] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1499.296078][ T5874] usb 1-1: USB disconnect, device number 102 [ 1499.308753][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1499.390294][ T5906] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1499.491470][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1499.574978][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1499.651585][ T5906] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1499.699984][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1499.781980][ T5906] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1499.856786][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1499.920171][ T5906] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1499.984108][ T5906] usb 7-1: string descriptor 0 read error: -22 [ 1500.004383][ T5906] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1500.058997][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.147463][ T5906] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1500.287677][ T29] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1500.501955][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1500.575144][ T29] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1500.628323][ T29] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1500.678294][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1500.728343][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1500.779403][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1500.824144][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1500.875489][ T29] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1500.912308][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.982441][ T29] usb 1-1: config 0 descriptor?? [ 1501.275986][ T29] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1501.571839][ T2890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.626554][ T2890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.691163][ T29] usb 1-1: USB disconnect, device number 103 [ 1501.733089][ T29] usblp1: removed [ 1502.276054][ T5874] usb 7-1: USB disconnect, device number 72 [ 1503.337859][ T2931] syzkaller0: entered promiscuous mode [ 1503.348420][ T29] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1503.379131][ T2931] syzkaller0: entered allmulticast mode [ 1503.528121][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1503.546286][ T29] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1503.575242][ T29] usb 7-1: config 0 has no interface number 0 [ 1503.634153][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1503.671917][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.703908][ T29] usb 7-1: Product: syz [ 1503.731406][ T29] usb 7-1: Manufacturer: syz [ 1503.746955][ T29] usb 7-1: SerialNumber: syz [ 1503.781750][ T29] usb 7-1: config 0 descriptor?? [ 1503.803106][ T29] hub 7-1:0.132: bad descriptor, ignoring hub [ 1503.830368][ T29] hub 7-1:0.132: probe with driver hub failed with error -5 [ 1503.905619][ T29] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input161 [ 1504.598714][T21388] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1504.844850][T21388] usb 5-1: Using ep0 maxpacket: 32 [ 1504.894463][T21388] usb 5-1: config 0 has no interfaces? [ 1504.918945][T21388] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1504.937680][T21388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.961997][T21388] usb 5-1: Product: syz [ 1504.977035][T21388] usb 5-1: Manufacturer: syz [ 1504.982917][T21388] usb 5-1: SerialNumber: syz [ 1504.995089][T21388] usb 5-1: config 0 descriptor?? [ 1505.255502][ T2955] netlink: 'syz.4.8761': attribute type 10 has an invalid length. [ 1505.307403][ T2955] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1506.337720][ T29] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1506.517652][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 1506.549594][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1506.576069][ T29] usb 1-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1506.600948][ T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1506.663810][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1506.724927][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1506.791489][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1506.840164][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1506.889502][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1506.945131][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1506.996200][ T29] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1507.046096][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.071919][ T29] usb 1-1: Product: syz [ 1507.094386][ T29] usb 1-1: Manufacturer: syz [ 1507.099845][T21388] usb 7-1: USB disconnect, device number 73 [ 1507.119553][ T29] usb 1-1: SerialNumber: syz [ 1507.135791][ T29] usb 1-1: config 0 descriptor?? [ 1507.173777][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.359181][T21388] usb 5-1: USB disconnect, device number 15 [ 1507.522641][ T29] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1507.674599][T32637] udevd[32637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.701740][ T2976] syzkaller0: entered promiscuous mode [ 1507.707714][ T2976] syzkaller0: entered allmulticast mode [ 1508.612748][T21388] usb 1-1: USB disconnect, device number 104 [ 1509.233992][ T2995] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8771'. [ 1509.308789][ T2995] loop2: detected capacity change from 0 to 7 [ 1509.339171][ T2995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1509.395697][ T2995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1509.422872][ T2995] Dev loop2: unable to read RDB block 7 [ 1509.454338][ T2995] loop2: unable to read partition table [ 1509.478476][ T2995] loop2: partition table beyond EOD, truncated [ 1509.546072][ T2995] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1509.607371][T21388] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1509.792735][T21388] usb 9-1: config 8 has an invalid interface number: 223 but max is 0 [ 1509.842066][T21388] usb 9-1: config 8 has no interface number 0 [ 1509.871440][T21388] usb 9-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1509.898833][ T84] ------------[ cut here ]------------ [ 1509.905444][ T84] time_after(jiffies, timeout) [ 1509.905471][ T84] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x4a3/0x960, CPU#1: kworker/u8:5/84 [ 1509.920770][ T84] Modules linked in: [ 1509.925581][ T84] CPU: 1 UID: 0 PID: 84 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.936503][ T84] Tainted: [L]=SOFTLOCKUP [ 1509.940886][ T84] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.951002][ T84] Workqueue: iou_exit io_ring_exit_work [ 1509.957339][ T84] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1509.963126][ T84] Code: c6 05 57 74 d0 0e 01 48 c7 c7 c0 67 26 8c be 25 00 00 00 48 c7 c2 e0 62 26 8c e8 58 d2 76 00 e9 88 fe ff ff e8 2e 9f 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1509.983117][ T84] RSP: 0018:ffffc900025ef940 EFLAGS: 00010293 [ 1509.989258][ T84] RAX: ffffffff812b01b2 RBX: 000000010001d7e9 RCX: ffff88801d779e80 [ 1509.997369][ T84] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1510.005355][ T84] RBP: ffffc900025efad0 R08: ffffc900025ef8c7 R09: 1ffff920004bdf18 [ 1510.013578][ T84] R10: dffffc0000000000 R11: fffff520004bdf19 R12: dffffc0000000000 [ 1510.021690][ T84] R13: 000000010001d7e4 R14: 0000000000002000 R15: ffff888075862000 [ 1510.029771][ T84] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 1510.038843][ T84] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1510.045445][ T84] CR2: 000020000003e030 CR3: 00000000851cc000 CR4: 00000000003526f0 [ 1510.053505][ T84] Call Trace: [ 1510.056796][ T84] [ 1510.059800][ T84] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1510.065298][ T84] ? process_scheduled_works+0xa8d/0x18c0 [ 1510.071124][ T84] ? process_scheduled_works+0xa8d/0x18c0 [ 1510.076866][ T84] process_scheduled_works+0xb6e/0x18c0 [ 1510.082603][ T84] ? __pfx_process_scheduled_works+0x10/0x10 [ 1510.088762][ T84] ? assign_work+0x3d5/0x5e0 [ 1510.093376][ T84] worker_thread+0xa53/0xfc0 [ 1510.098119][ T84] kthread+0x388/0x470 [ 1510.102199][ T84] ? __pfx_worker_thread+0x10/0x10 [ 1510.107400][ T84] ? __pfx_kthread+0x10/0x10 [ 1510.112003][ T84] ret_from_fork+0x51e/0xb90 [ 1510.116605][ T84] ? __pfx_ret_from_fork+0x10/0x10 [ 1510.121810][ T84] ? __switch_to+0xc7d/0x1450 [ 1510.126530][ T84] ? __pfx_kthread+0x10/0x10 [ 1510.131361][ T84] ret_from_fork_asm+0x1a/0x30 [ 1510.136172][ T84] [ 1510.139338][ T84] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1510.146676][ T84] CPU: 1 UID: 0 PID: 84 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1510.157530][ T84] Tainted: [L]=SOFTLOCKUP [ 1510.161851][ T84] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.171908][ T84] Workqueue: iou_exit io_ring_exit_work [ 1510.177467][ T84] Call Trace: [ 1510.180745][ T84] [ 1510.183673][ T84] vpanic+0x56c/0xa60 [ 1510.187691][ T84] ? __pfx__printk+0x10/0x10 [ 1510.192278][ T84] ? __pfx_vpanic+0x10/0x10 [ 1510.196781][ T84] ? is_bpf_text_address+0x292/0x2b0 [ 1510.202068][ T84] ? is_bpf_text_address+0x26/0x2b0 [ 1510.207277][ T84] panic+0xc5/0xd0 [ 1510.211004][ T84] ? __pfx_panic+0x10/0x10 [ 1510.215433][ T84] ? ret_from_fork_asm+0x1a/0x30 [ 1510.220381][ T84] __warn+0x315/0x4f0 [ 1510.224371][ T84] ? io_ring_exit_work+0x4a3/0x960 [ 1510.229485][ T84] ? io_ring_exit_work+0x4a3/0x960 [ 1510.234605][ T84] __report_bug+0x29a/0x540 [ 1510.239185][ T84] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1510.245092][ T84] ? io_ring_exit_work+0x4a3/0x960 [ 1510.250213][ T84] ? __pfx___report_bug+0x10/0x10 [ 1510.255239][ T84] ? __mutex_lock+0x319/0x1300 [ 1510.260018][ T84] ? io_ring_exit_work+0x41b/0x960 [ 1510.265140][ T84] ? io_ring_exit_work+0x4a3/0x960 [ 1510.270257][ T84] report_bug+0x16a/0x220 [ 1510.274591][ T84] ? io_ring_exit_work+0x4a3/0x960 [ 1510.279711][ T84] ? io_ring_exit_work+0x4a5/0x960 [ 1510.284828][ T84] handle_bug+0x9c/0x200 [ 1510.289077][ T84] exc_invalid_op+0x1a/0x50 [ 1510.293589][ T84] asm_exc_invalid_op+0x1a/0x20 [ 1510.298454][ T84] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1510.304185][ T84] Code: c6 05 57 74 d0 0e 01 48 c7 c7 c0 67 26 8c be 25 00 00 00 48 c7 c2 e0 62 26 8c e8 58 d2 76 00 e9 88 fe ff ff e8 2e 9f 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1510.323794][ T84] RSP: 0018:ffffc900025ef940 EFLAGS: 00010293 [ 1510.329868][ T84] RAX: ffffffff812b01b2 RBX: 000000010001d7e9 RCX: ffff88801d779e80 [ 1510.337856][ T84] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1510.345837][ T84] RBP: ffffc900025efad0 R08: ffffc900025ef8c7 R09: 1ffff920004bdf18 [ 1510.353823][ T84] R10: dffffc0000000000 R11: fffff520004bdf19 R12: dffffc0000000000 [ 1510.361810][ T84] R13: 000000010001d7e4 R14: 0000000000002000 R15: ffff888075862000 [ 1510.369811][ T84] ? io_ring_exit_work+0x4a2/0x960 [ 1510.374966][ T84] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1510.380555][ T84] ? process_scheduled_works+0xa8d/0x18c0 [ 1510.386283][ T84] ? process_scheduled_works+0xa8d/0x18c0 [ 1510.392012][ T84] process_scheduled_works+0xb6e/0x18c0 [ 1510.397594][ T84] ? __pfx_process_scheduled_works+0x10/0x10 [ 1510.403613][ T84] ? assign_work+0x3d5/0x5e0 [ 1510.408213][ T84] worker_thread+0xa53/0xfc0 [ 1510.412832][ T84] kthread+0x388/0x470 [ 1510.416904][ T84] ? __pfx_worker_thread+0x10/0x10 [ 1510.422021][ T84] ? __pfx_kthread+0x10/0x10 [ 1510.426709][ T84] ret_from_fork+0x51e/0xb90 [ 1510.431313][ T84] ? __pfx_ret_from_fork+0x10/0x10 [ 1510.436430][ T84] ? __switch_to+0xc7d/0x1450 [ 1510.441134][ T84] ? __pfx_kthread+0x10/0x10 [ 1510.445798][ T84] ret_from_fork_asm+0x1a/0x30 [ 1510.450618][ T84] [ 1510.454285][ T84] Kernel Offset: disabled [ 1510.458641][ T84] Rebooting in 86400 seconds..