last executing test programs: 7m58.500020049s ago: executing program 2 (id=517): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x644001, 0x0) rt_sigpending(0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x260203) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000200)=""/38, 0x26) getdents(r2, 0xfffffffffffffffd, 0xbb) 7m57.936302342s ago: executing program 2 (id=523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000640)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4044800) 7m57.915403393s ago: executing program 1 (id=524): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) memfd_create(&(0x7f0000000400)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001030, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000540)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0xc804) sendmmsg(r0, &(0x7f00000008c0), 0x17364151de02ba3, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xb000, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff99, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'pptp\x00'}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 7m57.786122996s ago: executing program 3 (id=525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f50095000400000001"], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a"], 0xfe33) 7m57.60875131s ago: executing program 0 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@private0, @in=@multicast2, 0x1, 0x716, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d8, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x196, 0x1, 0xffff, 0x8253c, 0x800000000002, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x8000000000000000}, {0x3, 0x800008}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7m57.59821647s ago: executing program 3 (id=528): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000900)=ANY=[], 0xc) 7m57.556640151s ago: executing program 1 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002400)=@nat={'nat\x00', 0x19, 0x1, 0x138, [0x200000002200, 0x0, 0x0, 0x200000002230, 0x200000002260], 0x0, 0x0, &(0x7f0000002200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x20, 0x78fe936e12801826, 'veth1_to_bond\x00', 'nr0\x00', 'pim6reg0\x00', 'team_slave_1\x00', @random="27a280318546", [0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 7m57.455844853s ago: executing program 2 (id=530): connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0xc}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) add_key$fscrypt_provisioning(&(0x7f0000000400), 0x0, &(0x7f0000000440)={0x2}, 0x8, 0xfffffffffffffffc) syz_usb_connect(0x2, 0x36, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000480)={0x3}) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000680)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7m57.376082435s ago: executing program 3 (id=531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x3c) syz_usb_ep_write(r0, 0x81, 0x19, &(0x7f0000000b40)="b9425bd02396754b7e172ce23a8706b66c78dd26900030fd10") 7m57.375800415s ago: executing program 1 (id=533): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x644001, 0x0) rt_sigpending(0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x260203) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000200)=""/38, 0x26) getdents(r2, 0xfffffffffffffffd, 0xbb) 7m57.227785979s ago: executing program 4 (id=534): add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror', 0xc, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e0400000000000006000000000000005504000011edfffe2500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4004}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x279, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10, 0x1000004, 0x10000003, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x144, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x2dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 7m57.112499761s ago: executing program 0 (id=535): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7m56.994799294s ago: executing program 4 (id=536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffff94, 0x201, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7m56.668117992s ago: executing program 1 (id=537): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) read$dsp(r0, &(0x7f0000000180)=""/79, 0x4f) readv(r0, 0x0, 0x0) 7m56.389743669s ago: executing program 0 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x400c8c0) 7m55.4641787s ago: executing program 4 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x8, 0xfe, 0x0, 0x200, 0x2, 0xf, 0xd, 0x9, 0x2, 0xe8, 0x6, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m55.450194871s ago: executing program 2 (id=540): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000000, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x42140, 0x41) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000013c0), 0xe0c81) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001a40)={0x16, 0x7e, &(0x7f0000001a80)="5de054039b0f95de676af460baf553ec5de3c71b1594b0b153e8b24946dbbf157bf2954e17e4388d9f4f27d90a4b92e04db2db4e75b61e3293b8bcf835565dd17d370bb5f3b3daa95df61963913a5d69a450978b553ff88926fce3a59395a876e85dc2acb0dd8aae29024b3bc760e1f723ba2579f2f49a22823a99440f72"}) 7m55.417984341s ago: executing program 0 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0xe}], 0x1}, 0x20000885) 7m55.360005882s ago: executing program 1 (id=542): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0x10000, 0x82, &(0x7f0000000300)=""/130}, {0x2000, 0xee, &(0x7f00000005c0)=""/238}, {0xd000, 0xf7, &(0x7f00000006c0)=""/247}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7m55.225580596s ago: executing program 0 (id=543): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0x10000, 0x82, &(0x7f0000000300)=""/130}, {0x2000, 0xee, &(0x7f00000005c0)=""/238}, {0xd000, 0xf7, &(0x7f00000006c0)=""/247}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7m55.0765706s ago: executing program 4 (id=544): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000680)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m54.980080982s ago: executing program 4 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20482, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0xc0010141}]}) 7m54.907866373s ago: executing program 2 (id=546): add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror', 0xc, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e0400000000000006000000000000005504000011edfffe2500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4004}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x279, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10, 0x1000004, 0x10000003, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x144, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x2dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 7m54.851892025s ago: executing program 4 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x982}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000002c0)={0x12, 0x1, 0xde}) 7m54.815358046s ago: executing program 2 (id=548): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="0f01efbaf80c66b882d0178766efbafc0cb8cda5ef66b8090000000f23d80f21f86635400000500f23f8baf80c66b852db098466efbafc0cedf3a50f0d900020f30fe68f0040ba2000b81000ef0f01c2660f768db500", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m54.711133568s ago: executing program 1 (id=549): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200003, 0x801, 0x4, 0xb, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0/file0\x00', 0x400, 0x103) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0x3, "91abc12404cf378042"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f00000006c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000680)={@remote, 0x800, 0x0, 0x3, 0xc, 0x8}, 0x20) close(r3) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, 0x0) 7m54.574747861s ago: executing program 0 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 7m53.621730103s ago: executing program 3 (id=551): r0 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) futex(r0, 0x9, 0x1, 0x0, 0x0, 0x1) futex(r0, 0xb, 0x1, 0x0, 0x0, 0x2) futex(r0, 0x5, 0x1f, 0x0, r0, 0x1) 7m53.384938569s ago: executing program 3 (id=552): r0 = bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc1, &(0x7f0000000380)=""/193, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x4, 0x6, 0x4}, {0x1, 0x1, 0x0, 0x8}], 0x10, 0xffffffff}, 0x94) 7m53.216438003s ago: executing program 3 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0xe}], 0x1}, 0x20000885) 7m39.102034793s ago: executing program 32 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 7m39.010824245s ago: executing program 33 (id=549): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200003, 0x801, 0x4, 0xb, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0/file0\x00', 0x400, 0x103) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0x3, "91abc12404cf378042"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f00000006c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000680)={@remote, 0x800, 0x0, 0x3, 0xc, 0x8}, 0x20) close(r3) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, 0x0) 7m38.930967107s ago: executing program 34 (id=548): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="0f01efbaf80c66b882d0178766efbafc0cb8cda5ef66b8090000000f23d80f21f86635400000500f23f8baf80c66b852db098466efbafc0cedf3a50f0d900020f30fe68f0040ba2000b81000ef0f01c2660f768db500", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m38.843033528s ago: executing program 35 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x982}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000002c0)={0x12, 0x1, 0xde}) 7m37.581768248s ago: executing program 36 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0xe}], 0x1}, 0x20000885) 9.730361972s ago: executing program 7 (id=1337): syz_open_dev$sndpcmc(0x0, 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x12b) write(r0, &(0x7f00000015c0)='8', 0x41) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) keyctl$session_to_parent(0x12) 7.323955048s ago: executing program 7 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e) ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000320000000000000000000000000000000000006d7061") 6.918345718s ago: executing program 7 (id=1344): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000740)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 5.09994025s ago: executing program 8 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000980)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000b80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) 4.658083811s ago: executing program 6 (id=1356): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000440), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000500)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x1) write$dsp(r0, &(0x7f00000005c0), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r3, r1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x801, 0x0) readahead(r4, 0x6, 0x4) write$rfkill(r4, &(0x7f0000000680)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000003c0)={0x2001, 0x1, 0x3, 0x9, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000400)=0x2001) r5 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 4.423193186s ago: executing program 7 (id=1358): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 4.419744186s ago: executing program 8 (id=1359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) 4.364576087s ago: executing program 6 (id=1360): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f00000003c0)="ffffffffffff0011223344554305000f320018", 0x13) 4.220412391s ago: executing program 5 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x88040, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @multicast1}, 0x10) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x40, 0x83) 3.924760938s ago: executing program 8 (id=1362): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, 0x0, 0x0) 3.916136858s ago: executing program 5 (id=1363): syz_emit_ethernet(0x7e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "de6b4cb62068a23b335dbd14843241f556a92defcc06112d", "ba0e27386eb097c0c335c5d3251dc44e6da278647a4acc1ac17c1f8d85aecce1"}}}}}}}, 0x0) 3.698738563s ago: executing program 5 (id=1364): fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='user.incfs.id\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f00)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.40561977s ago: executing program 6 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.38880985s ago: executing program 9 (id=1366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.37428425s ago: executing program 5 (id=1367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,,ers=3.0\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e", 0x94, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3.343687601s ago: executing program 7 (id=1368): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x88440, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.275755233s ago: executing program 8 (id=1369): fremovexattr(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f00)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.159065956s ago: executing program 6 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.999964399s ago: executing program 9 (id=1371): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2.908151901s ago: executing program 8 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f00)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.866378113s ago: executing program 9 (id=1373): userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x88440, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.307627725s ago: executing program 5 (id=1374): userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x88440, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.878781265s ago: executing program 6 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100005000000", @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 1.573537213s ago: executing program 8 (id=1376): userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x88440, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.445442176s ago: executing program 9 (id=1377): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r5, &(0x7f0000000740)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 1.215791571s ago: executing program 6 (id=1378): userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mount(&(0x7f0000000100)=@sg0, 0x0, &(0x7f0000000440)='qnx6\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x88440, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.191482832s ago: executing program 7 (id=1379): r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x4, 0xfffffff9, 0x3, 0x16, "006247f0cb6b4fca210200"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 383.057181ms ago: executing program 9 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a80)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 143.147336ms ago: executing program 5 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c657230000000000000", @ANYRES32=r3], 0x3c}}, 0x0) 0s ago: executing program 9 (id=1382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a80)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][ T6332] libceph: connect (1)[c::]:6789 error -101 [ 234.046287][ T6332] libceph: mon0 (1)[c::]:6789 connect error [ 234.388049][ T50] device hsr_slave_0 left promiscuous mode [ 234.415061][ T50] device hsr_slave_1 left promiscuous mode [ 234.443532][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.484365][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.492624][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.500247][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.513385][ T50] device bridge_slave_1 left promiscuous mode [ 234.521058][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.537913][ T50] device bridge_slave_0 left promiscuous mode [ 234.552987][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.584098][ T50] device hsr_slave_0 left promiscuous mode [ 234.606436][ T50] device hsr_slave_1 left promiscuous mode [ 234.620904][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.660490][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.6.641'. [ 234.720331][ T6656] input: syz1 as /devices/virtual/input/input32 [ 234.760268][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.895071][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.014636][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.043342][ T6651] netlink: 128 bytes leftover after parsing attributes in process `syz.7.640'. [ 235.538174][ T50] device bridge_slave_1 left promiscuous mode [ 235.554413][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.597885][ T50] device bridge_slave_0 left promiscuous mode [ 235.641086][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.690353][ T6660] loop9: detected capacity change from 0 to 128 [ 235.725833][ T50] device hsr_slave_0 left promiscuous mode [ 235.766106][ T50] device hsr_slave_1 left promiscuous mode [ 235.813987][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.825974][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.855719][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.890694][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.997934][ T50] device bridge_slave_1 left promiscuous mode [ 236.595018][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.721924][ T6666] syz.9.642: attempt to access beyond end of device [ 236.721924][ T6666] loop9: rw=2049, sector=145, nr_sectors = 560 limit=128 [ 237.016155][ T50] device bridge_slave_0 left promiscuous mode [ 237.022386][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.446306][ T50] device hsr_slave_0 left promiscuous mode [ 237.656194][ T6681] overlayfs: missing 'lowerdir' [ 238.425237][ T50] device hsr_slave_1 left promiscuous mode [ 238.431760][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.466216][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.504601][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.544832][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.553679][ T50] device bridge_slave_1 left promiscuous mode [ 238.564735][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.577290][ T50] device bridge_slave_0 left promiscuous mode [ 238.583643][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.744871][ T50] device veth1_macvtap left promiscuous mode [ 238.755854][ T50] device veth0_macvtap left promiscuous mode [ 238.761927][ T50] device veth1_vlan left promiscuous mode [ 238.776341][ T50] device veth0_vlan left promiscuous mode [ 238.804350][ T50] device veth1_macvtap left promiscuous mode [ 238.811569][ T50] device veth0_macvtap left promiscuous mode [ 238.818653][ T50] device veth1_vlan left promiscuous mode [ 238.824487][ T50] device veth0_vlan left promiscuous mode [ 238.848250][ T50] device veth1_macvtap left promiscuous mode [ 238.854820][ T50] device veth0_macvtap left promiscuous mode [ 238.873370][ T50] device veth1_vlan left promiscuous mode [ 238.883770][ T50] device veth0_vlan left promiscuous mode [ 238.899178][ T50] device veth1_macvtap left promiscuous mode [ 238.922954][ T50] device veth0_macvtap left promiscuous mode [ 238.934037][ T50] device veth1_vlan left promiscuous mode [ 238.947365][ T50] device veth0_vlan left promiscuous mode [ 240.667217][ T50] team0 (unregistering): Port device team_slave_1 removed [ 240.705408][ T50] team0 (unregistering): Port device team_slave_0 removed [ 240.738438][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.779855][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.014459][ T50] bond0 (unregistering): Released all slaves [ 241.388347][ T50] team0 (unregistering): Port device team_slave_1 removed [ 241.439954][ T50] team0 (unregistering): Port device team_slave_0 removed [ 241.474450][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.510480][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.743511][ T50] bond0 (unregistering): Released all slaves [ 242.125462][ T50] team0 (unregistering): Port device team_slave_1 removed [ 242.158914][ T50] team0 (unregistering): Port device team_slave_0 removed [ 242.192135][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.230107][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.464484][ T50] bond0 (unregistering): Released all slaves [ 242.831440][ T50] team0 (unregistering): Port device team_slave_1 removed [ 242.871025][ T50] team0 (unregistering): Port device team_slave_0 removed [ 242.906502][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.945048][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.183618][ T50] bond0 (unregistering): Released all slaves [ 243.225344][ T6644] tc_dump_action: action bad kind [ 243.276728][ T6685] device bridge1 entered promiscuous mode [ 244.470779][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.650'. [ 244.498013][ T6701] input: syz1 as /devices/virtual/input/input33 [ 245.543215][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.550827][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.891085][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.898701][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.062239][ T6725] loop6: detected capacity change from 0 to 128 [ 246.128876][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.7.656'. [ 246.153697][ T6726] input: syz1 as /devices/virtual/input/input34 [ 247.153595][ T6727] syz.6.655: attempt to access beyond end of device [ 247.153595][ T6727] loop6: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 247.202923][ T6731] loop8: detected capacity change from 0 to 128 [ 247.344092][ T6731] syz.8.657: attempt to access beyond end of device [ 247.344092][ T6731] loop8: rw=2049, sector=145, nr_sectors = 576 limit=128 [ 247.649189][ T6737] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 247.702709][ T6737] kvm: pic: single mode not supported [ 247.703227][ T6737] kvm: pic: non byte read [ 247.764810][ T6737] kvm: pic: level sensitive irq not supported [ 247.764887][ T6737] kvm: pic: non byte read [ 247.801979][ T6750] netlink: 128 bytes leftover after parsing attributes in process `syz.6.659'. [ 247.806708][ T6737] kvm: pic: non byte read [ 247.856304][ T6737] kvm: pic: non byte read [ 247.870480][ T6737] kvm: pic: non byte read [ 247.878367][ T6737] kvm: pic: non byte read [ 248.662918][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.5.665'. [ 250.916748][ T6786] loop5: detected capacity change from 0 to 128 [ 251.002674][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.7.668'. [ 251.027216][ T6792] input: syz1 as /devices/virtual/input/input35 [ 251.991546][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.670'. [ 252.016211][ T6799] input: syz1 as /devices/virtual/input/input36 [ 252.965033][ T6798] syz.5.667: attempt to access beyond end of device [ 252.965033][ T6798] loop5: rw=2049, sector=145, nr_sectors = 744 limit=128 [ 253.943811][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.9.676'. [ 253.972322][ T6828] input: syz1 as /devices/virtual/input/input37 [ 254.030688][ T6826] loop2: detected capacity change from 0 to 8 [ 254.114082][ T6691] Dev loop2: unable to read RDB block 8 [ 254.123931][ T6691] loop2: unable to read partition table [ 254.233026][ T6691] loop2: partition table beyond EOD, truncated [ 254.914933][ T6839] loop9: detected capacity change from 0 to 512 [ 254.937572][ T6839] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 255.012255][ T6842] input: syz1 as /devices/virtual/input/input38 [ 255.277995][ T6839] EXT4-fs (loop9): 1 truncate cleaned up [ 255.420073][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.426481][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.446431][ T6839] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 256.488524][ T6114] EXT4-fs (loop9): unmounting filesystem. [ 256.570067][ T6855] netlink: 72 bytes leftover after parsing attributes in process `syz.7.683'. [ 256.774330][ T6865] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 256.783381][ T6865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.765843][ T6873] loop7: detected capacity change from 0 to 1024 [ 259.433395][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.687'. [ 259.960003][ T6873] ext4: Unknown parameter 'uid<00000000000000000000' [ 259.986829][ T6881] input: syz1 as /devices/virtual/input/input39 [ 263.952938][ T6907] loop2: detected capacity change from 0 to 8 [ 264.028818][ T6687] Dev loop2: unable to read RDB block 8 [ 264.059045][ T6687] loop2: unable to read partition table [ 264.129345][ T6687] loop2: partition table beyond EOD, truncated [ 264.170338][ T6907] Dev loop2: unable to read RDB block 8 [ 264.203894][ T6907] loop2: unable to read partition table [ 264.230428][ T6907] loop2: partition table beyond EOD, truncated [ 264.266376][ T6907] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 264.412631][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.420288][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.430513][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.438315][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.857237][ T6918] input: syz1 as /devices/virtual/input/input40 [ 268.231614][ T6931] netlink: 72 bytes leftover after parsing attributes in process `syz.8.699'. [ 268.388897][ T6927] input: syz1 as /devices/virtual/input/input41 [ 269.087029][ T6942] loop9: detected capacity change from 0 to 1024 [ 269.111088][ T6942] ext4: Unknown parameter 'uid<00000000000000000000' [ 271.068836][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.8.703'. [ 271.092585][ T6946] input: syz1 as /devices/virtual/input/input42 [ 271.920463][ T6952] input: syz1 as /devices/virtual/input/input43 [ 273.048793][ T6959] netem: change failed [ 273.890709][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.708'. [ 273.924301][ T6967] input: syz1 as /devices/virtual/input/input44 [ 275.437757][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.7.709'. [ 275.460035][ T6977] input: syz1 as /devices/virtual/input/input45 [ 275.585458][ T4295] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 276.368541][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.710'. [ 276.738374][ T6980] input: syz1 as /devices/virtual/input/input46 [ 276.775260][ T6979] loop6: detected capacity change from 0 to 128 [ 277.039329][ T6987] loop8: detected capacity change from 0 to 128 [ 277.184035][ T6979] syz.6.711: attempt to access beyond end of device [ 277.184035][ T6979] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 277.228524][ T6987] syz.8.712: attempt to access beyond end of device [ 277.228524][ T6987] loop8: rw=2049, sector=145, nr_sectors = 720 limit=128 [ 277.318449][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.7.717'. [ 277.348782][ T7005] input: syz1 as /devices/virtual/input/input47 [ 278.399940][ T7012] netlink: 128 bytes leftover after parsing attributes in process `syz.5.718'. [ 278.471365][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.8.719'. [ 278.495017][ T7019] input: syz1 as /devices/virtual/input/input48 [ 279.403722][ T7023] loop6: detected capacity change from 0 to 128 [ 281.274852][ T7029] loop8: detected capacity change from 0 to 128 [ 281.538563][ T7037] overlayfs: overlapping lowerdir path [ 282.493605][ T36] kworker/u4:2: attempt to access beyond end of device [ 282.493605][ T36] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 282.501170][ T7029] syz.8.722: attempt to access beyond end of device [ 282.501170][ T7029] loop8: rw=2049, sector=145, nr_sectors = 528 limit=128 [ 282.692324][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.724'. [ 282.714392][ T7046] input: syz1 as /devices/virtual/input/input49 [ 283.085194][ T4282] Bluetooth: hci6: command 0x0406 tx timeout [ 283.095360][ T4290] Bluetooth: hci9: command 0x0406 tx timeout [ 283.101385][ T48] Bluetooth: hci7: command 0x0406 tx timeout [ 283.107394][ T4284] Bluetooth: hci8: command 0x0406 tx timeout [ 283.113540][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 283.673663][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.726'. [ 283.696459][ T7050] input: syz1 as /devices/virtual/input/input50 [ 285.009056][ T4393] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 285.465555][ T4393] usb 10-1: Using ep0 maxpacket: 8 [ 285.516487][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.728'. [ 285.545241][ T7060] input: syz1 as /devices/virtual/input/input51 [ 286.489545][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.7.730'. [ 286.520703][ T7065] input: syz1 as /devices/virtual/input/input52 [ 287.414359][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.729'. [ 287.664324][ T7069] input: syz1 as /devices/virtual/input/input53 [ 287.762090][ T4393] usb 10-1: unable to get BOS descriptor or descriptor too short [ 287.785245][ T4393] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 287.822070][ T4393] usb 10-1: can't read configurations, error -71 [ 288.475985][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.8.732'. [ 288.498767][ T7078] input: syz1 as /devices/virtual/input/input54 [ 290.512203][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.735'. [ 290.536554][ T7091] input: syz1 as /devices/virtual/input/input55 [ 293.947343][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.738'. [ 293.979064][ T7102] input: syz1 as /devices/virtual/input/input56 [ 294.611331][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.741'. [ 294.640918][ T7115] input: syz1 as /devices/virtual/input/input57 [ 296.376911][ T7119] loop7: detected capacity change from 0 to 512 [ 296.393750][ T7121] loop6: detected capacity change from 0 to 512 [ 296.452242][ T7121] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 296.468534][ T7119] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 296.539221][ T7119] EXT4-fs (loop7): 1 truncate cleaned up [ 296.544916][ T7119] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 296.560951][ T7121] EXT4-fs (loop6): 1 truncate cleaned up [ 296.569755][ T7121] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 296.916081][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 296.945669][ T7133] input: syz1 as /devices/virtual/input/input58 [ 297.346355][ T6102] EXT4-fs (loop7): unmounting filesystem. [ 297.401690][ T6104] EXT4-fs (loop6): unmounting filesystem. [ 297.854306][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.7.748'. [ 297.874969][ T7141] input: syz1 as /devices/virtual/input/input59 [ 298.680002][ T7140] loop6: detected capacity change from 0 to 128 [ 298.944771][ T7140] syz.6.747: attempt to access beyond end of device [ 298.944771][ T7140] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 299.029591][ T4351] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 299.068097][ T4351] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.157059][ T4354] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 299.345270][ T4354] usb 9-1: Using ep0 maxpacket: 8 [ 299.958153][ T7155] fido_id[7155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.235192][ T14] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 300.325234][ T4354] usb 9-1: unable to get BOS descriptor or descriptor too short [ 300.420441][ T4354] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 300.482298][ T14] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 1024 [ 300.508184][ T14] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 300.518774][ T4354] usb 9-1: can't read configurations, error -71 [ 300.539386][ T14] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 300.560976][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.585221][ T14] usb 10-1: Product: syz [ 300.594782][ T14] usb 10-1: Manufacturer: syz [ 300.623850][ T14] usb 10-1: SerialNumber: syz [ 300.785373][ T7166] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 303.145365][ T14] usb 10-1: failed to execute ARPC: -110 [ 303.151413][ T14] usb 10-1: failed to set connected state for cport 0: -110 [ 303.315330][ T14] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 303.328303][ T14] usb 10-1: failed to send ARPC request 3: -71 [ 303.334739][ T14] usb 10-1: failed to execute ARPC: -71 [ 303.365176][ T14] usb 10-1: failed to clear cport 0: -71 [ 303.371164][ T14] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 303.398119][ T14] es2_ap_driver: probe of 10-1:1.0 failed with error -110 [ 303.431826][ T14] usb 10-1: USB disconnect, device number 5 [ 304.504253][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.6.765'. [ 304.525775][ T7211] input: syz1 as /devices/virtual/input/input60 [ 304.705158][ T954] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 305.515207][ T954] usb 6-1: Using ep0 maxpacket: 8 [ 305.599104][ T954] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.827742][ T954] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 305.861202][ T954] usb 6-1: config 0 interface 0 has no altsetting 0 [ 305.875206][ T954] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 305.901422][ T954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.990664][ T954] usb 6-1: config 0 descriptor?? [ 306.058242][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.768'. [ 306.082268][ T7223] input: syz1 as /devices/virtual/input/input61 [ 306.176208][ T27] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 306.214041][ T954] hub 6-1:0.0: USB hub found [ 306.310912][ T954] hub 6-1:0.0: 9 ports detected [ 306.419917][ T27] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.441157][ T954] hub 6-1:0.0: insufficient power available to use all downstream ports [ 306.654130][ T954] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 306.776915][ T954] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 307.076585][ T954] usb 6-1: USB disconnect, device number 2 [ 307.941108][ T7242] loop6: detected capacity change from 0 to 8 [ 308.081007][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.773'. [ 308.108963][ T7247] input: syz1 as /devices/virtual/input/input62 [ 308.285436][ T14] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 308.555189][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 309.168599][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.8.774'. [ 309.196713][ T7253] input: syz1 as /devices/virtual/input/input63 [ 310.098201][ T14] usb 10-1: unable to get BOS descriptor or descriptor too short [ 310.138600][ T14] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 310.197494][ T14] usb 10-1: can't read configurations, error -71 [ 311.353677][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.778'. [ 311.396408][ T7270] input: syz1 as /devices/virtual/input/input64 [ 313.230313][ T7280] loop5: detected capacity change from 0 to 128 [ 313.354016][ T7289] syz.5.780: attempt to access beyond end of device [ 313.354016][ T7289] loop5: rw=2049, sector=145, nr_sectors = 704 limit=128 [ 313.622865][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.783'. [ 313.654769][ T7296] input: syz1 as /devices/virtual/input/input65 [ 314.624797][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.785'. [ 314.645226][ T7302] input: syz1 as /devices/virtual/input/input66 [ 315.637683][ T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 315.668245][ T14] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.886942][ T4295] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.085192][ T4295] usb 7-1: Using ep0 maxpacket: 16 [ 316.092607][ T4295] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.133720][ T4295] usb 7-1: config 0 interface 0 has no altsetting 0 [ 316.154829][ T4295] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 316.165269][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 316.167955][ T4295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.204448][ T4295] usb 7-1: Product: syz [ 316.208988][ T4295] usb 7-1: Manufacturer: syz [ 316.213616][ T4295] usb 7-1: SerialNumber: syz [ 316.233092][ T4295] usb 7-1: config 0 descriptor?? [ 316.371508][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 316.461168][ T4295] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input67 [ 316.755874][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.9.791'. [ 316.785242][ T7334] input: syz1 as /devices/virtual/input/input69 [ 316.850162][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.856556][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.885378][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 316.904132][ T27] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.976484][ T27] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 317.163426][ T27] usb 6-1: can't read configurations, error -71 [ 317.675234][ T4295] rc_core: IR keymap rc-imon-pad not found [ 317.681100][ T4295] Registered IR keymap rc-empty [ 317.695224][ T4295] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 317.706030][ T4295] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 317.725419][ T4295] imon:send_packet: packet tx failed (-71) [ 317.765266][ T4295] imon 7-1:0.0: remote input dev register failed [ 317.771750][ T4295] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 317.818024][ T4295] imon 7-1:0.0: unable to initialize intf0, err 0 [ 317.834657][ T4295] imon:imon_probe: failed to initialize context! [ 317.854875][ T4295] imon 7-1:0.0: unable to register, err -19 [ 317.887449][ T4295] usb 7-1: USB disconnect, device number 2 [ 318.003592][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.793'. [ 318.030319][ T7349] input: syz1 as /devices/virtual/input/input70 [ 320.411903][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.8.798'. [ 320.465360][ T7364] input: syz1 as /devices/virtual/input/input71 [ 320.809789][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.9.801'. [ 320.823699][ T7367] input: syz1 as /devices/virtual/input/input72 [ 321.088442][ T7380] loop9: detected capacity change from 0 to 1024 [ 321.100418][ T7380] ext4: Unknown parameter 'uid<00000000000000000000' [ 321.168477][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.8.807'. [ 321.189676][ T7383] input: syz1 as /devices/virtual/input/input73 [ 321.325410][ T4295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 323.107620][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.7.806'. [ 323.134550][ T7384] input: syz1 as /devices/virtual/input/input74 [ 323.195455][ T4295] usb 6-1: Using ep0 maxpacket: 16 [ 323.646311][ T4295] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.664777][ T4295] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.674211][ T4295] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 323.683739][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.692122][ T4295] usb 6-1: Product: syz [ 323.697237][ T4295] usb 6-1: Manufacturer: syz [ 323.705305][ T4295] usb 6-1: SerialNumber: syz [ 323.712114][ T4295] usb 6-1: config 0 descriptor?? [ 324.749816][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 324.758882][ T4295] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input75 [ 324.904680][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.8.809'. [ 325.829600][ T4295] imon:send_packet: packet tx failed (-71) [ 325.885436][ T4295] imon 6-1:0.0: panel buttons/knobs setup failed [ 325.931190][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.812'. [ 325.954276][ T7407] input: syz1 as /devices/virtual/input/input77 [ 326.980655][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.8.814'. [ 327.009802][ T7413] input: syz1 as /devices/virtual/input/input78 [ 327.975467][ T4295] rc_core: IR keymap rc-imon-pad not found [ 327.981447][ T4295] Registered IR keymap rc-empty [ 327.994526][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.813'. [ 328.016129][ T7418] input: syz1 as /devices/virtual/input/input79 [ 328.798955][ T4295] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 328.809251][ T4295] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 328.820110][ T4295] imon:send_packet: packet tx failed (-71) [ 328.849029][ T4295] imon 6-1:0.0: remote input dev register failed [ 328.859196][ T4295] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 328.892810][ T4295] imon 6-1:0.0: unable to initialize intf0, err 0 [ 328.900812][ T4295] imon:imon_probe: failed to initialize context! [ 328.915197][ T4295] imon 6-1:0.0: unable to register, err -19 [ 328.937782][ T4295] usb 6-1: USB disconnect, device number 5 [ 329.005913][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.815'. [ 329.098398][ T7426] input: syz1 as /devices/virtual/input/input80 [ 330.061666][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.8.817'. [ 330.094084][ T7435] input: syz1 as /devices/virtual/input/input81 [ 331.026278][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.819'. [ 331.055270][ T7439] input: syz1 as /devices/virtual/input/input82 [ 331.917728][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.820'. [ 331.959964][ T7444] input: syz1 as /devices/virtual/input/input83 [ 332.563174][ T7446] loop9: detected capacity change from 0 to 1024 [ 332.618008][ T7446] ext4: Unknown parameter 'uid<00000000000000000000' [ 334.285387][ T4295] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 334.530481][ T4295] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.631823][ T4295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.764638][ T4295] usb 9-1: Product: syz [ 334.812453][ T4295] usb 9-1: Manufacturer: syz [ 334.863200][ T4295] usb 9-1: SerialNumber: syz [ 334.958926][ T4295] usb 9-1: config 0 descriptor?? [ 335.292437][ T4295] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.797697][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.826'. [ 335.824285][ T7466] input: syz1 as /devices/virtual/input/input84 [ 337.674049][ T4295] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 337.804056][ T4295] usb 9-1: USB disconnect, device number 4 [ 338.740749][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.9.827'. [ 338.765676][ T7472] input: syz1 as /devices/virtual/input/input85 [ 339.406492][ T7478] netlink: 72 bytes leftover after parsing attributes in process `syz.6.829'. [ 339.560654][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.830'. [ 340.561417][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.9.832'. [ 340.587928][ T7496] input: syz1 as /devices/virtual/input/input87 [ 342.583774][ T7501] device bridge1 entered promiscuous mode [ 344.049497][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.8.836'. [ 344.072715][ T7509] input: syz1 as /devices/virtual/input/input88 [ 345.032926][ T7514] loop9: detected capacity change from 0 to 1024 [ 345.079809][ T7514] ext4: Unknown parameter 'uid<00000000000000000000' [ 346.709610][ T7518] input: syz1 as /devices/virtual/input/input89 [ 346.833405][ T7530] input: syz1 as /devices/virtual/input/input90 [ 348.861395][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.7.843'. [ 348.884413][ T7549] input: syz1 as /devices/virtual/input/input91 [ 349.643892][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.844'. [ 350.215147][ T7555] input: syz1 as /devices/virtual/input/input92 [ 350.577355][ T7560] loop8: detected capacity change from 0 to 512 [ 350.647342][ T7560] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 350.720493][ T7560] EXT4-fs (loop8): 1 truncate cleaned up [ 350.735186][ T7560] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 351.000684][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.846'. [ 351.027575][ T7570] input: syz1 as /devices/virtual/input/input93 [ 351.753321][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.848'. [ 351.778112][ T7579] input: syz1 as /devices/virtual/input/input94 [ 352.452073][ T7587] input: syz1 as /devices/virtual/input/input95 [ 353.684732][ T6105] EXT4-fs (loop8): unmounting filesystem. [ 354.789884][ T7605] input: syz1 as /devices/virtual/input/input96 [ 354.975163][ T4354] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 356.526494][ T7614] loop6: detected capacity change from 0 to 512 [ 356.570793][ T7614] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 356.657834][ T7614] EXT4-fs (loop6): 1 truncate cleaned up [ 356.691438][ T7614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 357.037637][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.860'. [ 357.046964][ T6332] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 357.071334][ T7629] input: syz1 as /devices/virtual/input/input97 [ 357.306991][ T6332] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 357.384201][ T6332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.515217][ T6332] usb 10-1: Product: syz [ 357.582023][ T6332] usb 10-1: Manufacturer: syz [ 357.650191][ T6332] usb 10-1: SerialNumber: syz [ 357.775761][ T6332] usb 10-1: config 0 descriptor?? [ 357.966683][ T6104] EXT4-fs (loop6): unmounting filesystem. [ 357.985943][ T6332] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 358.320868][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.863'. [ 358.360802][ T7646] input: syz1 as /devices/virtual/input/input98 [ 358.731594][ T7644] nvmet_tcp: malformed ip/port passed: :4420 [ 360.459449][ T6332] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 360.654564][ T6258] usb 10-1: USB disconnect, device number 8 [ 363.058761][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.9.871'. [ 363.081500][ T7690] input: syz1 as /devices/virtual/input/input99 [ 363.572470][ T7692] loop7: detected capacity change from 0 to 512 [ 363.663841][ T7692] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 363.782640][ T7692] EXT4-fs (loop7): 1 truncate cleaned up [ 363.815918][ T7692] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 363.964953][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.873'. [ 363.995905][ T7698] input: syz1 as /devices/virtual/input/input100 [ 366.092029][ T7705] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.140903][ T7705] kvm: pic: single mode not supported [ 366.141008][ T7705] kvm: pic: non byte read [ 366.165700][ T7705] kvm: pic: level sensitive irq not supported [ 366.165766][ T7705] kvm: pic: non byte read [ 366.219294][ T7705] kvm: pic: level sensitive irq not supported [ 366.221350][ T7705] kvm: pic: non byte read [ 366.264311][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.6.876'. [ 366.296297][ T7713] input: syz1 as /devices/virtual/input/input101 [ 367.406080][ T7705] kvm: pic: level sensitive irq not supported [ 367.406149][ T7705] kvm: pic: non byte read [ 367.546565][ T7705] kvm: pic: level sensitive irq not supported [ 367.546679][ T7705] kvm: pic: non byte read [ 367.558154][ T7705] kvm: pic: level sensitive irq not supported [ 367.558245][ T7705] kvm: pic: non byte read [ 367.569598][ T7705] kvm: pic: level sensitive irq not supported [ 367.569689][ T7705] kvm: pic: non byte read [ 367.581790][ T7705] kvm: pic: level sensitive irq not supported [ 367.581962][ T7705] kvm: pic: non byte read [ 367.761375][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.9.878'. [ 367.792678][ T7722] input: syz1 as /devices/virtual/input/input102 [ 368.716946][ T7725] loop8: detected capacity change from 0 to 512 [ 368.795558][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.880'. [ 368.819084][ T7730] input: syz1 as /devices/virtual/input/input103 [ 369.612432][ T7725] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 369.653502][ T6102] EXT4-fs (loop7): unmounting filesystem. [ 369.763676][ T7725] EXT4-fs (loop8): 1 truncate cleaned up [ 369.795178][ T7725] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 369.831143][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.883'. [ 369.856302][ T7737] input: syz1 as /devices/virtual/input/input104 [ 370.415256][ T14] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 370.625195][ T14] usb 10-1: Using ep0 maxpacket: 16 [ 370.637868][ T14] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.747633][ T14] usb 10-1: config 0 interface 0 has no altsetting 0 [ 370.788915][ T14] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 370.821866][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.880857][ T14] usb 10-1: Product: syz [ 370.897061][ T14] usb 10-1: Manufacturer: syz [ 370.925331][ T14] usb 10-1: SerialNumber: syz [ 370.967415][ T14] usb 10-1: config 0 descriptor?? [ 371.127114][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'. [ 371.154702][ T7752] input: syz1 as /devices/virtual/input/input105 [ 371.961623][ T14] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input106 [ 372.044967][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.885'. [ 372.067391][ T7754] input: syz1 as /devices/virtual/input/input107 [ 372.519197][ T6105] EXT4-fs (loop8): unmounting filesystem. [ 372.613840][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.886'. [ 372.729521][ C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 373.140854][ T7755] input: syz1 as /devices/virtual/input/input109 [ 373.255288][ T14] rc_core: IR keymap rc-imon-pad not found [ 373.263478][ T14] Registered IR keymap rc-empty [ 373.282006][ T14] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 373.337152][ T14] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 373.355465][ T14] imon:send_packet: packet tx failed (-71) [ 373.581926][ T4446] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 373.635204][ T14] imon 10-1:0.0: remote input dev register failed [ 373.655188][ T14] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 373.702073][ T14] imon 10-1:0.0: unable to initialize intf0, err 0 [ 373.718312][ T14] imon:imon_probe: failed to initialize context! [ 373.740678][ T7775] nvmet_tcp: malformed ip/port passed: :4420 [ 373.746040][ T14] imon 10-1:0.0: unable to register, err -19 [ 373.776318][ T4446] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.800753][ T4446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.805780][ T14] usb 10-1: USB disconnect, device number 9 [ 373.830863][ T4446] usb 6-1: Product: syz [ 373.836129][ T4446] usb 6-1: Manufacturer: syz [ 373.840905][ T4446] usb 6-1: SerialNumber: syz [ 373.862548][ T4446] usb 6-1: config 0 descriptor?? [ 373.868903][ T6328] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 373.938852][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.9.893'. [ 373.974714][ T7777] input: syz1 as /devices/virtual/input/input110 [ 374.062058][ T6328] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.228571][ T6328] usb 9-1: config 0 has no interfaces? [ 374.238180][ T4446] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 374.335984][ T6328] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 374.459972][ T6328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.639394][ T6328] usb 9-1: config 0 descriptor?? [ 374.937023][ T6328] usb 9-1: USB disconnect, device number 5 [ 375.014863][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.9.895'. [ 375.036005][ T7787] input: syz1 as /devices/virtual/input/input111 [ 375.085753][ T4354] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 375.337176][ T4354] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 375.371066][ T4354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.427998][ T4354] usb 7-1: Product: syz [ 375.444280][ T4354] usb 7-1: Manufacturer: syz [ 375.539811][ T4354] usb 7-1: SerialNumber: syz [ 375.640520][ T4354] usb 7-1: config 0 descriptor?? [ 375.941378][ T4354] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 376.366188][ T4446] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 376.428474][ T4446] usb 6-1: USB disconnect, device number 7 [ 376.435623][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.9.899'. [ 377.154405][ T7807] loop7: detected capacity change from 0 to 128 [ 377.164347][ T7806] input: syz1 as /devices/virtual/input/input112 [ 377.396867][ T7807] syz.7.900: attempt to access beyond end of device [ 377.396867][ T7807] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 377.821937][ T7830] input: syz1 as /devices/virtual/input/input113 [ 377.965811][ T4364] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 378.288262][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.294712][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.715669][ T4354] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 378.756073][ T4354] usb 7-1: USB disconnect, device number 3 [ 378.824556][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.5.906'. [ 378.847028][ T7836] input: syz1 as /devices/virtual/input/input114 [ 378.965782][ T4364] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.974602][ T4364] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.634913][ T4364] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.644155][ T4364] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.655275][ T4364] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.668290][ T4364] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.677495][ T4364] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.685717][ T4364] usb 10-1: Product: syz [ 379.690009][ T4364] usb 10-1: Manufacturer: syz [ 379.699004][ T4364] cdc_wdm 10-1:1.0: skipping garbage [ 379.704355][ T4364] cdc_wdm 10-1:1.0: skipping garbage [ 379.718228][ T4364] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 379.724353][ T4364] cdc_wdm 10-1:1.0: Unknown control protocol [ 379.987324][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.6.909'. [ 380.014812][ T7845] input: syz1 as /devices/virtual/input/input115 [ 380.047879][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 380.054656][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 380.061131][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 380.067852][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 380.069746][ T4351] usb 10-1: USB disconnect, device number 10 [ 380.074017][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 380.691285][ T7849] loop8: detected capacity change from 0 to 512 [ 380.844023][ T7849] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 380.873935][ T7849] EXT4-fs (loop8): 1 truncate cleaned up [ 380.879856][ T7849] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 380.968848][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.5.911'. [ 380.995195][ T7854] input: syz1 as /devices/virtual/input/input116 [ 382.133300][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.9.913'. [ 382.157395][ T7867] input: syz1 as /devices/virtual/input/input117 [ 382.299368][ T6105] EXT4-fs (loop8): unmounting filesystem. [ 383.117240][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.8.916'. [ 384.073246][ T7879] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 384.159239][ T7879] kvm: pic: single mode not supported [ 384.159313][ T7879] kvm: pic: non byte read [ 384.188418][ T7879] kvm: pic: level sensitive irq not supported [ 384.188478][ T7879] kvm: pic: non byte read [ 384.248657][ T7879] kvm: pic: level sensitive irq not supported [ 384.249968][ T7879] kvm: pic: non byte read [ 384.274115][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.8.920'. [ 384.300072][ T7895] input: syz1 as /devices/virtual/input/input119 [ 385.430601][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.438247][ T7904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.595364][ T6328] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 385.736111][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.743799][ T7904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.170783][ T6328] usb 9-1: config 127 has an invalid interface number: 57 but max is 0 [ 387.181831][ T7906] input: syz1 as /devices/virtual/input/input120 [ 387.234153][ T6328] usb 9-1: config 127 has no interface number 0 [ 387.359418][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.923'. [ 388.047878][ T6328] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 388.076469][ T6328] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.084605][ T6328] usb 9-1: Product: syz [ 388.089880][ T6328] usb 9-1: Manufacturer: syz [ 388.094520][ T6328] usb 9-1: SerialNumber: syz [ 388.335213][ T6328] asix: probe of 9-1:127.57 failed with error -22 [ 388.355221][ T6328] usb 9-1: USB disconnect, device number 6 [ 389.372235][ T4351] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 389.404244][ T4351] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.508447][ T7931] input: syz1 as /devices/virtual/input/input121 [ 390.422083][ T7934] loop8: detected capacity change from 0 to 128 [ 391.118634][ T7948] syz.8.930: attempt to access beyond end of device [ 391.118634][ T7948] loop8: rw=2049, sector=145, nr_sectors = 752 limit=128 [ 394.652952][ T7951] sched: RT throttling activated [ 394.927483][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.9.926'. [ 394.950173][ T7957] input: syz1 as /devices/virtual/input/input122 [ 395.946099][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.936'. [ 395.977788][ T7966] input: syz1 as /devices/virtual/input/input123 [ 396.005185][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 396.975103][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 396.982242][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.005129][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 397.040029][ T7973] loop9: detected capacity change from 0 to 128 [ 397.048085][ T22] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 397.118715][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.166069][ T22] usb 7-1: Product: syz [ 397.170303][ T22] usb 7-1: Manufacturer: syz [ 397.174935][ T22] usb 7-1: SerialNumber: syz [ 397.215264][ T22] usb 7-1: config 0 descriptor?? [ 397.313927][ T7973] syz.9.938: attempt to access beyond end of device [ 397.313927][ T7973] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 397.454536][ T22] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 397.467384][ T22] imon 7-1:0.0: unable to initialize intf0, err -19 [ 397.481900][ T22] imon:imon_probe: failed to initialize context! [ 397.494176][ T22] imon 7-1:0.0: unable to register, err -19 [ 397.525139][ T14] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 397.564161][ T7983] nvmet_tcp: malformed ip/port passed: :4420 [ 397.728778][ T14] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.753505][ T7989] loop8: detected capacity change from 0 to 1024 [ 397.755482][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.801483][ T7989] ext4: Unknown parameter 'uid<00000000000000000000' [ 397.803153][ T14] usb 6-1: Product: syz [ 397.842824][ T14] usb 6-1: Manufacturer: syz [ 397.868303][ T14] usb 6-1: SerialNumber: syz [ 397.904665][ T14] usb 6-1: config 0 descriptor?? [ 398.130162][ T14] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.739290][ T8010] loop8: detected capacity change from 0 to 8 [ 399.299311][ T8012] loop9: detected capacity change from 0 to 128 [ 399.401322][ T126] usb 7-1: USB disconnect, device number 4 [ 399.830076][ T14] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 400.348859][ T8020] syz.9.947: attempt to access beyond end of device [ 400.348859][ T8020] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 400.930375][ T126] usb 6-1: USB disconnect, device number 8 [ 402.011915][ T8053] loop7: detected capacity change from 0 to 1024 [ 402.046215][ T8053] ext4: Unknown parameter 'uid<00000000000000000000' [ 402.117622][ T8057] loop5: detected capacity change from 0 to 8 [ 402.875688][ T8055] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 402.918473][ T8052] kvm: pic: single mode not supported [ 402.919008][ T8052] kvm: pic: non byte read [ 406.844769][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.9.959'. [ 406.877439][ T8082] input: syz1 as /devices/virtual/input/input124 [ 407.339665][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.961'. [ 407.361910][ T8090] input: syz1 as /devices/virtual/input/input125 [ 408.276880][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.962'. [ 408.307519][ T8093] input: syz1 as /devices/virtual/input/input126 [ 409.199902][ T8097] loop5: detected capacity change from 0 to 512 [ 409.244834][ T8098] loop9: detected capacity change from 0 to 128 [ 409.265668][ T8097] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 409.398434][ T8097] EXT4-fs (loop5): 1 truncate cleaned up [ 409.404126][ T8097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 409.677005][ T8098] syz.9.963: attempt to access beyond end of device [ 409.677005][ T8098] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 410.232946][ T6097] EXT4-fs (loop5): unmounting filesystem. [ 410.246204][ T6338] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 410.318603][ T6258] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 410.356606][ T6258] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.424950][ T8136] loop5: detected capacity change from 0 to 128 [ 410.450348][ T6338] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.482648][ T6338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.515733][ T6338] usb 9-1: Product: syz [ 410.519936][ T6338] usb 9-1: Manufacturer: syz [ 410.559316][ T6338] usb 9-1: SerialNumber: syz [ 410.589689][ T6338] usb 9-1: config 0 descriptor?? [ 410.848857][ T8146] loop7: detected capacity change from 0 to 8 [ 411.078809][ T6338] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 411.418138][ T8136] syz.5.971: attempt to access beyond end of device [ 411.418138][ T8136] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 411.914496][ T8162] loop5: detected capacity change from 0 to 128 [ 411.921253][ T6332] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 411.993202][ T8165] loop9: detected capacity change from 0 to 512 [ 412.046334][ T8165] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 412.115147][ T6332] usb 7-1: Using ep0 maxpacket: 32 [ 412.122297][ T6332] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 412.144923][ T8167] syz.5.976: attempt to access beyond end of device [ 412.144923][ T8167] loop5: rw=2049, sector=145, nr_sectors = 768 limit=128 [ 412.160877][ T8165] EXT4-fs (loop9): 1 truncate cleaned up [ 412.164154][ T6332] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 412.177383][ T8165] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 412.186347][ T6332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.215116][ T6332] usb 7-1: Product: syz [ 412.219459][ T6332] usb 7-1: Manufacturer: syz [ 412.224131][ T6332] usb 7-1: SerialNumber: syz [ 412.439823][ T6332] usb 7-1: selecting invalid altsetting 1 [ 412.649530][ T6332] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 412.650058][ T6332] dvb_usb_lmedm04: probe of 7-1:2.0 failed with error -22 [ 412.819734][ T6332] usb 7-1: USB disconnect, device number 5 [ 413.140001][ T6338] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 413.184840][ T6338] usb 9-1: USB disconnect, device number 7 [ 413.674419][ T6114] EXT4-fs (loop9): unmounting filesystem. [ 413.910677][ T8189] loop9: detected capacity change from 0 to 512 [ 413.996734][ T8189] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 414.040782][ T8189] EXT4-fs (loop9): 1 truncate cleaned up [ 414.052256][ T8189] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 414.458663][ T6114] EXT4-fs (loop9): unmounting filesystem. [ 414.466974][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.8.983'. [ 414.495506][ T8199] input: syz1 as /devices/virtual/input/input127 [ 415.381699][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.9.984'. [ 415.414519][ T8208] input: syz1 as /devices/virtual/input/input128 [ 417.287451][ T8228] loop8: detected capacity change from 0 to 512 [ 417.346552][ T8228] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 417.372448][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.988'. [ 417.402316][ T8231] input: syz1 as /devices/virtual/input/input129 [ 417.876739][ T8228] EXT4-fs (loop8): 1 truncate cleaned up [ 417.960768][ T8228] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 417.970614][ T6258] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 418.215285][ T6258] usb 7-1: Using ep0 maxpacket: 16 [ 418.281440][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.9.991'. [ 418.380841][ T8239] input: syz1 as /devices/virtual/input/input130 [ 419.020167][ T6258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.030277][ T6258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 419.042050][ T6258] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 419.058346][ T6258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.066630][ T6258] usb 7-1: Product: syz [ 419.070930][ T6258] usb 7-1: Manufacturer: syz [ 419.078757][ T6258] usb 7-1: SerialNumber: syz [ 419.104359][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.992'. [ 419.261412][ T8240] input: syz1 as /devices/virtual/input/input131 [ 419.304181][ T6258] usb 7-1: config 0 descriptor?? [ 419.616338][ T6258] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 419.658892][ T6258] imon 7-1:0.0: unable to initialize intf0, err -19 [ 419.689296][ T6258] imon:imon_probe: failed to initialize context! [ 419.705171][ T6258] imon 7-1:0.0: unable to register, err -19 [ 419.946912][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.996'. [ 419.971394][ T8256] input: syz1 as /devices/virtual/input/input132 [ 420.860330][ T6105] EXT4-fs (loop8): unmounting filesystem. [ 420.928783][ T6258] usb 7-1: USB disconnect, device number 6 [ 421.030871][ T8265] loop8: detected capacity change from 0 to 512 [ 421.053361][ T8265] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 421.179706][ T8265] EXT4-fs (loop8): 1 truncate cleaned up [ 421.198203][ T8265] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 422.685131][ T6105] EXT4-fs (loop8): unmounting filesystem. [ 422.715417][ T4351] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 422.927406][ T4351] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.966764][ T4351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.017581][ T4351] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.235188][ T8289] loop8: detected capacity change from 0 to 1024 [ 423.260032][ T8289] ext4: Unknown parameter 'uid<00000000000000000000' [ 423.770521][ T4351] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.781488][ T4351] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.832785][ T4351] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.879599][ T4351] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.967564][ T4351] usb 6-1: Product: syz [ 424.174887][ T4351] usb 6-1: Manufacturer: syz [ 424.184753][ T4351] cdc_wdm 6-1:1.0: skipping garbage [ 424.190337][ T4351] cdc_wdm 6-1:1.0: skipping garbage [ 424.196940][ T4351] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 424.202953][ T4351] cdc_wdm 6-1:1.0: Unknown control protocol [ 424.546181][ T6332] usb 6-1: USB disconnect, device number 9 [ 425.784936][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1011'. [ 425.818721][ T8311] input: syz1 as /devices/virtual/input/input133 [ 426.900038][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1012'. [ 426.932296][ T8319] input: syz1 as /devices/virtual/input/input134 [ 428.068073][ T8325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1015'. [ 428.090627][ T8325] input: syz1 as /devices/virtual/input/input135 [ 429.721848][ T8329] nvmet: Invalid value 'ipv' for adrfam [ 429.731178][ T8329] nvmet_tcp: malformed ip/port passed: :4420 [ 430.901895][ T8340] loop7: detected capacity change from 0 to 128 [ 431.346823][ T8349] loop5: detected capacity change from 0 to 8 [ 432.745839][ T8351] loop8: detected capacity change from 0 to 1024 [ 433.038432][ T8351] ext4: Unknown parameter 'uid<00000000000000000000' [ 433.185519][ T8350] syz.7.1019: attempt to access beyond end of device [ 433.185519][ T8350] loop7: rw=2049, sector=145, nr_sectors = 816 limit=128 [ 434.101717][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1023'. [ 434.124352][ T8372] input: syz1 as /devices/virtual/input/input136 [ 434.355124][ T126] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 435.125229][ T126] usb 9-1: Using ep0 maxpacket: 32 [ 435.132186][ T126] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 435.151083][ T126] usb 9-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 435.172980][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.181636][ T126] usb 9-1: Product: syz [ 435.186115][ T126] usb 9-1: Manufacturer: syz [ 435.190746][ T126] usb 9-1: SerialNumber: syz [ 435.413655][ T126] usb 9-1: selecting invalid altsetting 1 [ 435.622366][ T126] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 435.622444][ T126] dvb_usb_lmedm04: probe of 9-1:2.0 failed with error -22 [ 435.659974][ T126] usb 9-1: USB disconnect, device number 8 [ 435.935850][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1031'. [ 435.958657][ T8406] input: syz1 as /devices/virtual/input/input137 [ 436.856031][ T8410] loop8: detected capacity change from 0 to 1024 [ 436.872216][ T8410] ext4: Unknown parameter 'uid<00000000000000000000' [ 437.112296][ T126] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 437.426750][ T126] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.445891][ T126] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 437.464476][ T126] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.476592][ T126] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 437.488036][ T126] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 437.510373][ T126] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.536033][ T126] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.553347][ T126] usb 10-1: Product: syz [ 437.562676][ T126] usb 10-1: Manufacturer: syz [ 437.628665][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1038'. [ 437.658551][ T8427] input: syz1 as /devices/virtual/input/input138 [ 438.505118][ T126] cdc_wdm 10-1:1.0: skipping garbage [ 438.510498][ T126] cdc_wdm 10-1:1.0: skipping garbage [ 438.516153][ T126] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 438.536060][ T126] usb 10-1: USB disconnect, device number 11 [ 439.728149][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.734592][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.805091][ T22] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 439.977291][ T6258] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 439.996644][ T22] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.015454][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.036203][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.065131][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.087087][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.106514][ T22] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.125078][ T22] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.143645][ T22] usb 6-1: Product: syz [ 440.148093][ T22] usb 6-1: Manufacturer: syz [ 440.171977][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 440.181777][ T8459] loop7: detected capacity change from 0 to 1024 [ 440.185291][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 440.193885][ T6258] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.204938][ T22] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 440.213773][ T6258] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 440.218636][ T22] cdc_wdm 6-1:1.0: Unknown control protocol [ 440.234626][ T8459] ext4: Unknown parameter 'uid<00000000000000000000' [ 440.251113][ T6258] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.270661][ T6258] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 440.295966][ T6258] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 440.427212][ T8435] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 440.486599][ T8435] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 440.529324][ T27] usb 6-1: USB disconnect, device number 10 [ 443.049365][ T6258] usb 10-1: string descriptor 0 read error: -71 [ 443.055891][ T6258] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.065111][ T6258] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.159126][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1049'. [ 443.183005][ T6258] usb 10-1: can't set config #1, error -71 [ 443.183232][ T8506] input: syz1 as /devices/virtual/input/input139 [ 443.278955][ T6258] usb 10-1: USB disconnect, device number 12 [ 443.968207][ T8510] loop6: detected capacity change from 0 to 128 [ 444.013051][ T8513] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1050'. [ 444.204877][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1053'. [ 445.203929][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1055'. [ 446.092392][ T8519] syz.6.1051: attempt to access beyond end of device [ 446.092392][ T8519] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 446.518210][ T22] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 446.545142][ T6332] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 446.708241][ T22] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 446.735264][ T22] usb 6-1: config 127 has no interface number 0 [ 446.744945][ T6332] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 446.764506][ T6332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.772868][ T22] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 446.794701][ T6332] usb 9-1: Product: syz [ 446.804884][ T6332] usb 9-1: Manufacturer: syz [ 446.811634][ T22] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 446.822576][ T6332] usb 9-1: SerialNumber: syz [ 446.832607][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.850732][ T6332] usb 9-1: config 0 descriptor?? [ 446.862567][ T22] usb 6-1: Product: syz [ 446.873609][ T22] usb 6-1: Manufacturer: syz [ 446.879900][ T22] usb 6-1: SerialNumber: syz [ 446.908158][ T8533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.077024][ T6332] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 447.143992][ T22] asix: probe of 6-1:127.57 failed with error -71 [ 447.174605][ T22] usb 6-1: USB disconnect, device number 11 [ 447.356495][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1064'. [ 447.385218][ T8569] input: syz1 as /devices/virtual/input/input141 [ 448.689464][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1067'. [ 448.718131][ T8578] input: syz1 as /devices/virtual/input/input142 [ 449.825906][ T6332] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 449.841665][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1070'. [ 450.698824][ T6332] usb 9-1: USB disconnect, device number 9 [ 450.754340][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1071'. [ 450.772404][ T8595] input: syz1 as /devices/virtual/input/input144 [ 450.865164][ T4346] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 451.232874][ T6332] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 451.249290][ T4346] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 451.266565][ T6332] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.277713][ T4346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.303358][ T4346] usb 10-1: Product: syz [ 451.325409][ T4346] usb 10-1: Manufacturer: syz [ 451.333729][ T4346] usb 10-1: SerialNumber: syz [ 451.360344][ T4346] usb 10-1: config 0 descriptor?? [ 451.585995][ T4346] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 455.087883][ T4346] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -110 [ 456.221148][ T4354] usb 10-1: USB disconnect, device number 13 [ 456.845207][ T4346] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 457.085118][ T4346] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.151660][ T4346] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 457.318617][ T4346] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.449062][ T4346] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 457.647657][ T4346] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 457.793697][ T4346] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.952667][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 458.039257][ T4346] usb 6-1: Product: syz [ 458.091882][ T4346] usb 6-1: Manufacturer: syz [ 458.281856][ T4346] cdc_wdm 6-1:1.0: skipping garbage [ 458.296988][ T4346] cdc_wdm 6-1:1.0: skipping garbage [ 458.316188][ T4346] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 458.484477][ T4393] usb 6-1: USB disconnect, device number 12 [ 459.335071][ T4393] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 459.365227][ T14] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 459.540365][ T4393] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.555222][ T14] usb 9-1: Using ep0 maxpacket: 16 [ 459.557561][ T4393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.564290][ T14] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.581948][ T4393] usb 6-1: Product: syz [ 459.596861][ T4393] usb 6-1: Manufacturer: syz [ 459.601863][ T14] usb 9-1: config 0 interface 0 has no altsetting 0 [ 459.605636][ T4393] usb 6-1: SerialNumber: syz [ 459.631208][ T14] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 459.635192][ T4393] usb 6-1: config 0 descriptor?? [ 459.661873][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.682088][ T14] usb 9-1: Product: syz [ 459.692202][ T14] usb 9-1: Manufacturer: syz [ 459.702317][ T14] usb 9-1: SerialNumber: syz [ 459.717628][ T14] usb 9-1: config 0 descriptor?? [ 459.743290][ T8700] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1094'. [ 459.816600][ T4346] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 459.855190][ T4393] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.019581][ T4346] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 460.033459][ T4346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.054394][ T4346] usb 10-1: Product: syz [ 460.065910][ T4346] usb 10-1: Manufacturer: syz [ 460.088400][ T4346] usb 10-1: SerialNumber: syz [ 460.114476][ T4346] usb 10-1: config 0 descriptor?? [ 460.149060][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 460.160386][ T14] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input145 [ 460.200173][ T14] imon:send_packet: packet tx failed (-71) [ 460.235141][ T14] imon 9-1:0.0: panel buttons/knobs setup failed [ 460.334109][ T4346] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.405235][ T14] rc_core: IR keymap rc-imon-pad not found [ 460.411209][ T14] Registered IR keymap rc-empty [ 460.425110][ T14] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 460.443502][ T14] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 460.465306][ T14] imon:send_packet: packet tx failed (-71) [ 460.485201][ T14] imon 9-1:0.0: remote input dev register failed [ 460.491678][ T14] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 460.521006][ T14] imon 9-1:0.0: unable to initialize intf0, err 0 [ 460.536007][ T14] imon:imon_probe: failed to initialize context! [ 460.542411][ T14] imon 9-1:0.0: unable to register, err -19 [ 460.578648][ T14] usb 9-1: USB disconnect, device number 10 [ 461.610944][ T4393] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 461.900453][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1098'. [ 461.924432][ T8730] input: syz1 as /devices/virtual/input/input147 [ 462.754085][ T4346] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 462.767580][ T4346] usb 10-1: USB disconnect, device number 14 [ 462.799192][ T4446] usb 6-1: USB disconnect, device number 13 [ 463.325188][ T4446] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 463.468812][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1106'. [ 463.495307][ T8767] input: syz1 as /devices/virtual/input/input148 [ 463.575143][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.391674][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.401734][ T4446] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.414821][ T4446] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.424075][ T4446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.435450][ T4446] usb 7-1: config 0 descriptor?? [ 466.458560][ T4446] usb 7-1: can't set config #0, error -71 [ 466.484061][ T4446] usb 7-1: USB disconnect, device number 7 [ 466.496924][ T7394] udevd[7394]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=0 failed: No such file or directory [ 466.933754][ T8786] input: syz1 as /devices/virtual/input/input149 [ 467.785429][ T4393] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 468.084685][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1110'. [ 468.105765][ T8794] input: syz1 as /devices/virtual/input/input150 [ 468.155398][ T4393] usb 6-1: Using ep0 maxpacket: 16 [ 468.389505][ T4393] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.461497][ T4393] usb 6-1: config 0 interface 0 has no altsetting 0 [ 469.379419][ T4393] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 469.398821][ T4393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.415217][ T4393] usb 6-1: Product: syz [ 469.419571][ T4393] usb 6-1: Manufacturer: syz [ 469.424189][ T4393] usb 6-1: SerialNumber: syz [ 469.433691][ T4393] usb 6-1: config 0 descriptor?? [ 469.553322][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1113'. [ 469.585319][ T8806] input: syz1 as /devices/virtual/input/input151 [ 470.464318][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 470.503138][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1115'. [ 471.045351][ T8813] input: syz1 as /devices/virtual/input/input153 [ 471.076146][ T4393] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input152 [ 471.435228][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1117'. [ 471.463047][ T8818] input: syz1 as /devices/virtual/input/input155 [ 471.947450][ T4393] imon:send_packet: packet tx failed (-71) [ 473.195141][ T4393] imon 6-1:0.0: panel buttons/knobs setup failed [ 473.345255][ T4393] rc_core: IR keymap rc-imon-pad not found [ 473.351154][ T4393] Registered IR keymap rc-empty [ 473.432387][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1121'. [ 473.461814][ T8830] input: syz1 as /devices/virtual/input/input156 [ 474.282340][ T4393] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 474.292638][ T4393] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 474.309924][ T4393] imon:send_packet: packet tx failed (-71) [ 474.335137][ T4393] imon 6-1:0.0: remote input dev register failed [ 474.343168][ T4393] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 474.413918][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1120'. [ 474.448535][ T8837] input: syz1 as /devices/virtual/input/input157 [ 475.217471][ T4393] imon 6-1:0.0: unable to initialize intf0, err 0 [ 475.224003][ T4393] imon:imon_probe: failed to initialize context! [ 475.256020][ T4393] imon 6-1:0.0: unable to register, err -19 [ 475.284780][ T4393] usb 6-1: USB disconnect, device number 14 [ 475.585079][ T4346] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 476.363672][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1124'. [ 476.395309][ T8855] input: syz1 as /devices/virtual/input/input158 [ 476.418460][ T4346] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 477.265182][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.293673][ T4346] usb 7-1: Product: syz [ 477.314604][ T4346] usb 7-1: Manufacturer: syz [ 477.328972][ T4346] usb 7-1: SerialNumber: syz [ 477.423712][ T4346] usb 7-1: config 0 descriptor?? [ 477.873858][ T4346] usb 7-1: can't set config #0, error -71 [ 477.896872][ T4346] usb 7-1: USB disconnect, device number 8 [ 478.425189][ T4346] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 478.635226][ T4346] usb 7-1: Using ep0 maxpacket: 16 [ 478.642299][ T4346] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.695327][ T4346] usb 7-1: config 0 interface 0 has no altsetting 0 [ 478.736683][ T4346] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 478.783217][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.797713][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1131'. [ 478.916171][ T4346] usb 7-1: Product: syz [ 478.983146][ T4346] usb 7-1: Manufacturer: syz [ 479.052171][ T4346] usb 7-1: SerialNumber: syz [ 479.263612][ T4346] usb 7-1: config 0 descriptor?? [ 479.710489][ T4346] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input159 [ 480.037824][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1133'. [ 480.064772][ T8892] input: syz1 as /devices/virtual/input/input161 [ 481.145335][ T4346] rc_core: IR keymap rc-imon-pad not found [ 481.194001][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1129'. [ 481.227893][ T8903] input: syz1 as /devices/virtual/input/input162 [ 481.984144][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 482.016016][ T4346] Registered IR keymap rc-empty [ 482.021164][ T4346] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 482.031504][ T4346] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 482.058553][ T4346] imon:send_packet: packet tx failed (-71) [ 482.085205][ T4346] imon 7-1:0.0: remote input dev register failed [ 482.091791][ T4346] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 482.221679][ T4346] imon 7-1:0.0: unable to initialize intf0, err 0 [ 482.235138][ T4346] imon:imon_probe: failed to initialize context! [ 482.251840][ T4346] imon 7-1:0.0: unable to register, err -19 [ 483.612458][ T4346] usb 7-1: USB disconnect, device number 9 [ 483.861176][ T8920] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 484.241195][ T8920] kvm: pic: single mode not supported [ 484.251836][ T8920] kvm: pic: non byte read [ 484.662680][ T8920] kvm: pic: non byte read [ 485.321056][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1142'. [ 485.355251][ T8936] input: syz1 as /devices/virtual/input/input163 [ 485.485101][ T4346] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 486.336577][ T4346] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.427632][ T4346] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 486.438304][ T4346] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.447946][ T4346] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.463309][ T4346] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.472655][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.482365][ T4346] usb 7-1: Product: syz [ 486.623024][ T4346] usb 7-1: Manufacturer: syz [ 486.706556][ T4346] cdc_wdm 7-1:1.0: skipping garbage [ 486.725113][ T4346] cdc_wdm 7-1:1.0: skipping garbage [ 486.730376][ T4346] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 486.938683][ T4346] usb 7-1: USB disconnect, device number 10 [ 487.862666][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 487.862681][ T26] audit: type=1326 audit(1792368128.004:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 487.954922][ T26] audit: type=1326 audit(1792368128.044:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.022474][ T26] audit: type=1326 audit(1792368128.044:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.097490][ T26] audit: type=1326 audit(1792368128.044:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.125360][ T4351] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 488.163710][ T26] audit: type=1326 audit(1792368128.044:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.218819][ T26] audit: type=1326 audit(1792368128.044:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.294485][ T26] audit: type=1326 audit(1792368128.054:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.351662][ T26] audit: type=1326 audit(1792368128.054:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.382535][ T4351] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.395115][ T4351] usb 10-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 488.426161][ T4351] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.445228][ T26] audit: type=1326 audit(1792368128.054:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.470860][ T4351] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.506469][ T4351] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 488.525180][ T4351] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.533560][ T26] audit: type=1326 audit(1792368128.054:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.6.1147" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb013d9e559 code=0x7ffc0000 [ 488.565159][ T4351] usb 10-1: Product: syz [ 488.575295][ T4351] usb 10-1: Manufacturer: syz [ 488.598247][ T4351] cdc_wdm 10-1:1.0: skipping garbage [ 488.614094][ T4351] cdc_wdm 10-1:1.0: skipping garbage [ 488.623918][ T4351] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 488.825765][ T4351] usb 10-1: USB disconnect, device number 15 [ 488.934217][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1148'. [ 490.773171][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1153'. [ 490.797488][ T8988] input: syz1 as /devices/virtual/input/input165 [ 493.311171][ T4364] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 493.511732][ T4364] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 493.523899][ T4364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.585116][ T4364] usb 7-1: Product: syz [ 493.589398][ T4364] usb 7-1: Manufacturer: syz [ 493.616958][ T4364] usb 7-1: SerialNumber: syz [ 494.955622][ T4364] usb 7-1: config 0 descriptor?? [ 495.076366][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 495.254893][ T4364] usb 7-1: can't set config #0, error -71 [ 495.344417][ T4364] usb 7-1: USB disconnect, device number 11 [ 497.319821][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1165'. [ 497.875471][ T6258] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 498.087538][ T6258] usb 9-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 498.095294][ T22] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 498.108331][ T6258] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64 [ 498.140130][ T6258] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 498.188345][ T6258] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 498.207735][ T6258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.225077][ T6258] usb 9-1: Product: syz [ 498.235489][ T6258] usb 9-1: Manufacturer: syz [ 498.245205][ T6258] usb 9-1: SerialNumber: syz [ 498.298693][ T22] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.328472][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.357613][ T22] usb 10-1: Product: syz [ 498.373373][ T22] usb 10-1: Manufacturer: syz [ 498.383478][ T22] usb 10-1: SerialNumber: syz [ 498.411880][ T22] usb 10-1: config 0 descriptor?? [ 498.482923][ T6258] snd-usb-caiaq 9-1:1.0: can't set alt interface. [ 498.496843][ T6258] usb 9-1: unable to init card! (ret=-5) [ 498.513412][ T6258] snd-usb-caiaq: probe of 9-1:1.0 failed with error -5 [ 498.543120][ T6258] usb 9-1: USB disconnect, device number 11 [ 498.635223][ T7461] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 498.647455][ T22] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 498.845232][ T7461] usb 6-1: Using ep0 maxpacket: 32 [ 498.851877][ T7461] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 498.875072][ T4351] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 498.884840][ T7461] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 498.905076][ T7461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.913103][ T7461] usb 6-1: Product: syz [ 498.925194][ T7461] usb 6-1: Manufacturer: syz [ 498.929847][ T7461] usb 6-1: SerialNumber: syz [ 499.075091][ T4351] usb 7-1: Using ep0 maxpacket: 8 [ 499.161312][ T7461] usb 6-1: selecting invalid altsetting 1 [ 499.363220][ T7461] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 499.363291][ T7461] dvb_usb_lmedm04: probe of 6-1:2.0 failed with error -22 [ 499.402333][ T7461] usb 6-1: USB disconnect, device number 16 [ 499.608318][ T4351] usb 7-1: unable to get BOS descriptor or descriptor too short [ 499.621379][ T4351] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 499.644969][ T4351] usb 7-1: can't read configurations, error -71 [ 499.761997][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1171'. [ 499.788990][ T9089] input: syz1 as /devices/virtual/input/input168 [ 500.193857][ T22] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 502.327185][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.333597][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.420670][ T4354] usb 10-1: USB disconnect, device number 16 [ 502.956109][ T4354] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 503.253275][ T4354] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 503.575328][ T4354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.583684][ T4354] usb 10-1: Product: syz [ 503.590032][ T4354] usb 10-1: Manufacturer: syz [ 503.594888][ T4354] usb 10-1: SerialNumber: syz [ 503.607889][ T4354] usb 10-1: config 0 descriptor?? [ 503.636765][ T9130] input: syz1 as /devices/virtual/input/input169 [ 503.823084][ T4354] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 503.987962][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1182'. [ 504.022387][ T9141] input: syz1 as /devices/virtual/input/input170 [ 505.274698][ T4354] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 507.064479][ T6328] usb 10-1: USB disconnect, device number 17 [ 508.225704][ T27] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 508.345805][ T4446] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 508.428101][ T27] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 508.457481][ T27] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 508.476386][ T27] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.510662][ T27] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 508.536474][ T4446] usb 9-1: Using ep0 maxpacket: 8 [ 508.543420][ T27] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 508.573072][ T27] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 508.596198][ T27] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 508.604612][ T27] usb 10-1: Product: syz [ 508.609564][ T27] usb 10-1: Manufacturer: syz [ 508.653765][ T27] cdc_wdm 10-1:1.0: skipping garbage [ 508.669606][ T27] cdc_wdm 10-1:1.0: skipping garbage [ 508.697815][ T27] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 508.705216][ T27] cdc_wdm 10-1:1.0: Unknown control protocol [ 508.905095][ T27] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 508.912844][ T4346] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 508.989000][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 509.095184][ T4346] usb 6-1: Using ep0 maxpacket: 16 [ 509.109534][ T27] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.119754][ T4346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.140366][ T27] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 509.161898][ T4346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 509.169967][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.182423][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 509.200930][ T4346] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 509.210352][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 509.224651][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.233152][ T4346] usb 6-1: Product: syz [ 509.249411][ T27] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.264432][ T4346] usb 6-1: Manufacturer: syz [ 509.277873][ T4346] usb 6-1: SerialNumber: syz [ 509.282747][ T27] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.300832][ T4446] usb 9-1: unable to get BOS descriptor or descriptor too short [ 509.328782][ T4346] usb 6-1: config 0 descriptor?? [ 509.334016][ T27] usb 7-1: Product: syz [ 509.340007][ T4446] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 509.350591][ T27] usb 7-1: Manufacturer: syz [ 509.356700][ T4446] usb 9-1: can't read configurations, error -71 [ 509.379364][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 509.404691][ T27] cdc_wdm 7-1:1.0: skipping garbage [ 509.443859][ T27] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 509.458682][ T27] cdc_wdm 7-1:1.0: Unknown control protocol [ 509.561874][ T4346] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input171 [ 509.876184][ T27] usb 7-1: USB disconnect, device number 14 [ 510.286259][ T4346] rc_core: IR keymap rc-imon-pad not found [ 510.292589][ T4346] Registered IR keymap rc-empty [ 510.310915][ T4346] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 510.338383][ T4346] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 510.386952][ T4346] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 510.412441][ T4346] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input172 [ 510.443132][ T4346] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:17> initialized [ 510.604541][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 510.614255][ T4346] usb 6-1: USB disconnect, device number 17 [ 511.224020][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 511.224697][ T6328] usb 10-1: USB disconnect, device number 18 [ 511.230824][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 511.230842][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 511.471706][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1198'. [ 511.500686][ T9236] input: syz1 as /devices/virtual/input/input173 [ 511.845136][ T6328] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 512.498485][ T6328] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.515045][ T6328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.533672][ T6328] usb 10-1: Product: syz [ 512.567750][ T6328] usb 10-1: Manufacturer: syz [ 512.575240][ T6328] usb 10-1: SerialNumber: syz [ 512.589042][ T6328] usb 10-1: config 0 descriptor?? [ 512.736537][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1199'. [ 512.760135][ T9241] input: syz1 as /devices/virtual/input/input174 [ 512.836022][ T6328] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.014628][ T6328] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 514.095149][ T4446] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 514.281418][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.465042][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.475525][ T4446] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.491300][ T4446] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.518271][ T4446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.555535][ T4446] usb 7-1: config 0 descriptor?? [ 515.128754][ T6328] usb 10-1: USB disconnect, device number 19 [ 515.301308][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1203'. [ 515.321844][ T9269] input: syz1 as /devices/virtual/input/input175 [ 516.169206][ T4446] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 516.195226][ T4446] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 517.795121][ T954] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 518.166776][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1207'. [ 518.190717][ T9291] input: syz1 as /devices/virtual/input/input176 [ 518.998344][ T6328] usb 7-1: USB disconnect, device number 15 [ 522.191302][ T4346] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 522.301760][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1212'. [ 522.329349][ T9318] input: syz1 as /devices/virtual/input/input177 [ 524.667492][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1216'. [ 524.697184][ T9328] input: syz1 as /devices/virtual/input/input178 [ 524.715100][ T4346] usb 9-1: device not accepting address 14, error -71 [ 526.127287][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1218'. [ 526.155189][ T9341] input: syz1 as /devices/virtual/input/input179 [ 527.556378][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 527.556393][ T26] audit: type=1326 audit(1792368166.294:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 527.823721][ T26] audit: type=1326 audit(1792368167.704:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 527.946037][ T26] audit: type=1326 audit(1792368167.814:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 528.240099][ T26] audit: type=1326 audit(1792368167.814:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 529.709488][ T26] audit: type=1326 audit(1792368167.834:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 529.803406][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1214'. [ 529.828046][ T9357] input: syz1 as /devices/virtual/input/input180 [ 531.146642][ T26] audit: type=1326 audit(1792368167.834:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 531.226010][ T26] audit: type=1326 audit(1792368167.864:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 531.364279][ T26] audit: type=1326 audit(1792368167.884:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 531.390930][ T26] audit: type=1326 audit(1792368167.884:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 531.565183][ T26] audit: type=1326 audit(1792368167.884:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.041442][ T26] audit: type=1326 audit(1792368167.884:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.085521][ T26] audit: type=1326 audit(1792368167.884:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.308131][ T26] audit: type=1326 audit(1792368167.884:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.335568][ T26] audit: type=1326 audit(1792368167.884:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.405066][ T4446] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 533.438944][ T26] audit: type=1326 audit(1792368167.884:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.753280][ T26] audit: type=1326 audit(1792368167.884:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 533.889277][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.052288][ T4446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.062217][ T4446] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.075135][ T4446] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.084195][ T4446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.105884][ T4446] usb 7-1: config 0 descriptor?? [ 534.111210][ T26] audit: type=1326 audit(1792368167.884:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 534.141915][ T26] audit: type=1326 audit(1792368167.894:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 534.166097][ T26] audit: type=1326 audit(1792368167.904:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 534.190430][ T26] audit: type=1326 audit(1792368167.904:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.8.1219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943739e559 code=0x7ffc0000 [ 535.802988][ T4446] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 535.899978][ T4446] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 536.774966][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1226'. [ 536.804025][ T9400] input: syz1 as /devices/virtual/input/input181 [ 537.265089][ T4351] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 537.775073][ T4351] usb 7-1: device descriptor read/64, error -32 [ 540.659284][ T7461] usb 7-1: USB disconnect, device number 16 [ 542.263486][ T9428] input: syz1 as /devices/virtual/input/input182 [ 547.200474][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1237'. [ 547.224033][ T9454] input: syz1 as /devices/virtual/input/input183 [ 548.274895][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1242'. [ 548.295277][ T9474] input: syz1 as /devices/virtual/input/input184 [ 554.292679][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1249'. [ 554.324311][ T9512] input: syz1 as /devices/virtual/input/input185 [ 558.015097][ T3600] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 558.022883][ T9430] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 558.236940][ T9430] usb 10-1: device descriptor read/all, error -71 [ 558.306574][ T3600] usb 7-1: device descriptor read/all, error -71 [ 563.470826][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.477189][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.515200][ T126] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 565.838493][ T126] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 565.852725][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.869790][ T126] usb 10-1: Product: syz [ 565.882882][ T126] usb 10-1: Manufacturer: syz [ 566.029259][ T126] usb 10-1: SerialNumber: syz [ 566.049834][ T126] usb 10-1: config 0 descriptor?? [ 566.962949][ T126] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 568.756952][ T126] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 570.976496][ T126] usb 10-1: USB disconnect, device number 22 [ 574.317648][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1263'. [ 574.344760][ T9641] input: syz1 as /devices/virtual/input/input186 [ 577.870062][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1270'. [ 577.901215][ T9658] input: syz1 as /devices/virtual/input/input187 [ 579.746078][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1277'. [ 579.769032][ T9675] input: syz1 as /devices/virtual/input/input188 [ 589.122928][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1283'. [ 589.145400][ T9717] input: syz1 as /devices/virtual/input/input189 [ 595.591729][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1299'. [ 595.637483][ T9760] input: syz1 as /devices/virtual/input/input190 [ 595.835220][ T4354] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 596.071428][ T4354] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 596.154795][ T4354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.270958][ T4354] usb 7-1: Product: syz [ 596.338409][ T4354] usb 7-1: Manufacturer: syz [ 596.401061][ T4354] usb 7-1: SerialNumber: syz [ 596.489653][ T4354] usb 7-1: config 0 descriptor?? [ 596.723359][ T4354] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 597.759156][ T4354] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 599.408313][ T9795] usb 7-1: USB disconnect, device number 19 [ 599.597278][ T9805] syz.6.1306 uses obsolete (PF_INET,SOCK_PACKET) [ 604.634134][ T9850] netlink: 'syz.6.1314': attribute type 1 has an invalid length. [ 604.737971][ T9850] device bond1 entered promiscuous mode [ 604.758214][ T9850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.785750][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1314'. [ 604.863063][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 605.687566][ T9887] hub 8-0:1.0: USB hub found [ 605.720372][ T9887] hub 8-0:1.0: 1 port detected [ 605.985062][ T4346] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 606.177482][ T4346] usb 7-1: Using ep0 maxpacket: 16 [ 606.186157][ T4346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.251866][ T4346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.283643][ T4346] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.321113][ T4346] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.346147][ T4346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.375660][ T4346] usb 7-1: config 0 descriptor?? [ 606.516031][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 606.535081][ T27] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 606.655064][ T9430] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 606.709035][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 606.716252][ T14] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 606.725111][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 606.732347][ T27] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 606.756029][ T14] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.761784][ T27] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.775109][ T14] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.789864][ T9795] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 606.795259][ T27] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.825036][ T14] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.838057][ T27] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.848604][ T9430] usb 9-1: Using ep0 maxpacket: 8 [ 606.855319][ T9430] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 606.873698][ T14] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.884501][ T9430] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.896881][ T27] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.911990][ T14] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.926966][ T9430] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.937478][ T27] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.941769][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.947944][ T9430] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.965845][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.001988][ T4346] usbhid 7-1:0.0: can't add hid device: -71 [ 607.013798][ T9430] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.015462][ T9795] usb 6-1: Using ep0 maxpacket: 16 [ 607.037904][ T4346] usbhid: probe of 7-1:0.0 failed with error -71 [ 607.053858][ T4346] usb 7-1: USB disconnect, device number 20 [ 607.060448][ T9430] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.076256][ T9795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.081750][ T9430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.127780][ T9795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.187105][ T9795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.206871][ T14] usb 8-1: GET_CAPABILITIES returned 0 [ 607.212478][ T14] usbtmc 8-1:16.0: can't read capabilities [ 607.224426][ T27] usb 10-1: usb_control_msg returned -71 [ 607.241377][ T27] usbtmc 10-1:16.0: can't read capabilities [ 607.263216][ T9795] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 607.311106][ T9795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.321562][ T27] usb 10-1: USB disconnect, device number 23 [ 607.337397][ T9795] usb 6-1: config 0 descriptor?? [ 607.350899][ T9430] usb 9-1: GET_CAPABILITIES returned 0 [ 607.360073][ T9430] usbtmc 9-1:16.0: can't read capabilities [ 607.431105][ T14] usb 8-1: USB disconnect, device number 2 [ 607.590410][ T4396] usb 9-1: USB disconnect, device number 16 [ 607.792025][ T9795] usbhid 6-1:0.0: can't add hid device: -71 [ 607.805497][ T9795] usbhid: probe of 6-1:0.0 failed with error -71 [ 607.832928][ T9795] usb 6-1: USB disconnect, device number 18 [ 609.348787][ T9950] FAULT_INJECTION: forcing a failure. [ 609.348787][ T9950] name failslab, interval 1, probability 0, space 0, times 1 [ 609.388794][ T9950] CPU: 1 PID: 9950 Comm: syz.7.1337 Not tainted syzkaller #0 [ 609.396214][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.406305][ T9950] Call Trace: [ 609.409600][ T9950] [ 609.412550][ T9950] dump_stack_lvl+0x188/0x24e [ 609.417260][ T9950] ? show_regs_print_info+0x12/0x12 [ 609.422474][ T9950] ? load_image+0x410/0x410 [ 609.426993][ T9950] ? __might_sleep+0xd0/0xd0 [ 609.431632][ T9950] ? __lock_acquire+0x7ea0/0x7ea0 [ 609.436712][ T9950] should_fail_ex+0x390/0x4c0 [ 609.441447][ T9950] should_failslab+0x5/0x20 [ 609.445982][ T9950] slab_pre_alloc_hook+0x59/0x300 [ 609.451054][ T9950] ? __lock_acquire+0x7ea0/0x7ea0 [ 609.456113][ T9950] ? security_prepare_creds+0x47/0x130 [ 609.461729][ T9950] __kmem_cache_alloc_node+0x4f/0x270 [ 609.467149][ T9950] ? security_prepare_creds+0x47/0x130 [ 609.472643][ T9950] __kmalloc+0xa3/0x240 [ 609.476841][ T9950] security_prepare_creds+0x47/0x130 [ 609.482173][ T9950] prepare_creds+0x450/0x610 [ 609.486907][ T9950] lookup_user_key+0x3a9/0x1110 [ 609.491841][ T9950] ? futex_unqueue+0xc7/0xf0 [ 609.496515][ T9950] ? lookup_user_key_possessed+0x40/0x40 [ 609.502192][ T9950] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 609.508223][ T9950] keyctl_session_to_parent+0x24/0xa00 [ 609.513731][ T9950] __se_sys_keyctl+0x4f9/0x870 [ 609.518538][ T9950] ? __x64_sys_keyctl+0xc0/0xc0 [ 609.523426][ T9950] ? do_futex+0x310/0x320 [ 609.527833][ T9950] ? unshare_sighand+0x1a0/0x1a0 [ 609.532882][ T9950] ? __ia32_sys_get_robust_list+0x100/0x100 [ 609.538838][ T9950] ? key_fsgid_changed+0xb5/0xf0 [ 609.543823][ T9950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 609.549875][ T9950] ? lock_chain_count+0x20/0x20 [ 609.554779][ T9950] ? lockdep_hardirqs_on+0x94/0x140 [ 609.560051][ T9950] ? __x64_sys_keyctl+0x1c/0xc0 [ 609.564966][ T9950] do_syscall_64+0x4c/0xa0 [ 609.569418][ T9950] ? clear_bhb_loop+0x60/0xb0 [ 609.574170][ T9950] ? clear_bhb_loop+0x60/0xb0 [ 609.578890][ T9950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.584828][ T9950] RIP: 0033:0x7fab4fb9e559 [ 609.589275][ T9950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.608913][ T9950] RSP: 002b:00007fab4ddf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 609.617368][ T9950] RAX: ffffffffffffffda RBX: 00007fab4fe25fa0 RCX: 00007fab4fb9e559 [ 609.625364][ T9950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 609.633336][ T9950] RBP: 00007fab4fc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 609.641322][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.649340][ T9950] R13: 00007fab4fe26038 R14: 00007fab4fe25fa0 R15: 00007fff115acb58 [ 609.657349][ T9950] [ 609.676213][ T9955] FAULT_INJECTION: forcing a failure. [ 609.676213][ T9955] name failslab, interval 1, probability 0, space 0, times 1 [ 609.709069][ T9955] CPU: 1 PID: 9955 Comm: syz.8.1340 Not tainted syzkaller #0 [ 609.716492][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.726571][ T9955] Call Trace: [ 609.729857][ T9955] [ 609.732793][ T9955] dump_stack_lvl+0x188/0x24e [ 609.737481][ T9955] ? show_regs_print_info+0x12/0x12 [ 609.742695][ T9955] ? load_image+0x410/0x410 [ 609.747210][ T9955] ? __might_sleep+0xd0/0xd0 [ 609.751819][ T9955] ? __lock_acquire+0x7ea0/0x7ea0 [ 609.756861][ T9955] should_fail_ex+0x390/0x4c0 [ 609.761548][ T9955] should_failslab+0x5/0x20 [ 609.766063][ T9955] slab_pre_alloc_hook+0x59/0x300 [ 609.771109][ T9955] ? handler_new_ref+0x240/0x920 [ 609.776150][ T9955] __kmem_cache_alloc_node+0x4f/0x270 [ 609.781540][ T9955] ? handler_new_ref+0x240/0x920 [ 609.786485][ T9955] __kmalloc+0xa3/0x240 [ 609.790683][ T9955] handler_new_ref+0x240/0x920 [ 609.795484][ T9955] ? cur_to_new+0x127/0x1d0 [ 609.800037][ T9955] ? cur_to_new+0x127/0x1d0 [ 609.804549][ T9955] ? v4l2_ctrl_type_op_equal+0x210/0x210 [ 609.810210][ T9955] v4l2_ctrl_new+0xf85/0x1490 [ 609.814899][ T9955] v4l2_ctrl_new_std+0x247/0x300 [ 609.819846][ T9955] ? handler_new_ref+0x920/0x920 [ 609.824785][ T9955] ? __kmem_cache_alloc_node+0x19d/0x270 [ 609.830421][ T9955] ? rcu_is_watching+0x11/0xa0 [ 609.835237][ T9955] ? kvmalloc_node+0x6c/0x180 [ 609.839921][ T9955] ? __kmalloc_node+0xe3/0x240 [ 609.844707][ T9955] ? media_request_object_init+0x88/0xe0 [ 609.850370][ T9955] ? v4l2_ctrl_handler_init_class+0x204/0x2d0 [ 609.856444][ T9955] vicodec_open+0x288/0xc30 [ 609.861038][ T9955] v4l2_open+0x201/0x340 [ 609.865296][ T9955] chrdev_open+0x585/0x5f0 [ 609.869743][ T9955] ? cd_forget+0x160/0x160 [ 609.874205][ T9955] ? fsnotify_perm+0x39b/0x550 [ 609.879000][ T9955] ? cd_forget+0x160/0x160 [ 609.883425][ T9955] do_dentry_open+0x7dd/0x10b0 [ 609.888272][ T9955] path_openat+0x2674/0x2f10 [ 609.892872][ T9955] ? kasan_set_track+0x60/0x70 [ 609.897640][ T9955] ? verify_lock_unused+0x140/0x140 [ 609.902837][ T9955] ? do_sys_openat2+0xdd/0x4f0 [ 609.907621][ T9955] ? do_filp_open+0x420/0x420 [ 609.912321][ T9955] do_filp_open+0x1ee/0x420 [ 609.916847][ T9955] ? vfs_tmpfile+0x470/0x470 [ 609.921457][ T9955] ? _raw_spin_unlock+0x24/0x40 [ 609.926317][ T9955] ? alloc_fd+0x590/0x640 [ 609.930667][ T9955] do_sys_openat2+0x14b/0x4f0 [ 609.935349][ T9955] ? do_sys_open+0xe0/0xe0 [ 609.939782][ T9955] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 609.945767][ T9955] ? lock_chain_count+0x20/0x20 [ 609.950621][ T9955] __x64_sys_openat+0x135/0x160 [ 609.955497][ T9955] do_syscall_64+0x4c/0xa0 [ 609.959953][ T9955] ? clear_bhb_loop+0x60/0xb0 [ 609.964628][ T9955] ? clear_bhb_loop+0x60/0xb0 [ 609.969342][ T9955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.975251][ T9955] RIP: 0033:0x7f943735ed8e [ 609.979678][ T9955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.999324][ T9955] RSP: 002b:00007f9438351b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.007786][ T9955] RAX: ffffffffffffffda RBX: 00007f94383526c0 RCX: 00007f943735ed8e [ 610.015795][ T9955] RDX: 0000000000000002 RSI: 00007f9438351c00 RDI: ffffffffffffff9c [ 610.023777][ T9955] RBP: 00007f9438351c00 R08: 0000000000000000 R09: 0000000000000000 [ 610.031748][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 610.039717][ T9955] R13: 00007f9437626038 R14: 00007f9437625fa0 R15: 00007ffdd9bc3418 [ 610.047702][ T9955] [ 610.150244][ T9958] FAULT_INJECTION: forcing a failure. [ 610.150244][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 610.186001][ T9958] CPU: 1 PID: 9958 Comm: syz.6.1341 Not tainted syzkaller #0 [ 610.193458][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.203543][ T9958] Call Trace: [ 610.206851][ T9958] [ 610.209821][ T9958] dump_stack_lvl+0x188/0x24e [ 610.214554][ T9958] ? show_regs_print_info+0x12/0x12 [ 610.219800][ T9958] ? load_image+0x410/0x410 [ 610.224358][ T9958] ? __might_sleep+0xd0/0xd0 [ 610.228980][ T9958] ? __lock_acquire+0x7ea0/0x7ea0 [ 610.234043][ T9958] should_fail_ex+0x390/0x4c0 [ 610.238770][ T9958] should_failslab+0x5/0x20 [ 610.243312][ T9958] slab_pre_alloc_hook+0x59/0x300 [ 610.248366][ T9958] ? handler_new_ref+0x240/0x920 [ 610.253316][ T9958] __kmem_cache_alloc_node+0x4f/0x270 [ 610.258706][ T9958] ? handler_new_ref+0x240/0x920 [ 610.263661][ T9958] __kmalloc+0xa3/0x240 [ 610.267827][ T9958] handler_new_ref+0x240/0x920 [ 610.272596][ T9958] ? cur_to_new+0x127/0x1d0 [ 610.277103][ T9958] ? cur_to_new+0x127/0x1d0 [ 610.281604][ T9958] ? v4l2_ctrl_type_op_equal+0x210/0x210 [ 610.287270][ T9958] v4l2_ctrl_new+0xf85/0x1490 [ 610.291977][ T9958] v4l2_ctrl_new_std+0x247/0x300 [ 610.296941][ T9958] ? handler_new_ref+0x920/0x920 [ 610.301883][ T9958] ? __kmem_cache_alloc_node+0x19d/0x270 [ 610.307516][ T9958] ? rcu_is_watching+0x11/0xa0 [ 610.312280][ T9958] ? kvmalloc_node+0x6c/0x180 [ 610.316952][ T9958] ? __kmalloc_node+0xe3/0x240 [ 610.321723][ T9958] ? media_request_object_init+0x88/0xe0 [ 610.327362][ T9958] ? v4l2_ctrl_handler_init_class+0x204/0x2d0 [ 610.333452][ T9958] vicodec_open+0x288/0xc30 [ 610.338001][ T9958] v4l2_open+0x201/0x340 [ 610.342265][ T9958] chrdev_open+0x585/0x5f0 [ 610.346701][ T9958] ? cd_forget+0x160/0x160 [ 610.351185][ T9958] ? fsnotify_perm+0x39b/0x550 [ 610.355979][ T9958] ? cd_forget+0x160/0x160 [ 610.360432][ T9958] do_dentry_open+0x7dd/0x10b0 [ 610.365205][ T9958] path_openat+0x2674/0x2f10 [ 610.369805][ T9958] ? kasan_set_track+0x60/0x70 [ 610.374600][ T9958] ? verify_lock_unused+0x140/0x140 [ 610.379812][ T9958] ? do_sys_openat2+0xdd/0x4f0 [ 610.384587][ T9958] ? do_filp_open+0x420/0x420 [ 610.389275][ T9958] do_filp_open+0x1ee/0x420 [ 610.393795][ T9958] ? vfs_tmpfile+0x470/0x470 [ 610.398423][ T9958] ? _raw_spin_unlock+0x24/0x40 [ 610.403306][ T9958] ? alloc_fd+0x590/0x640 [ 610.407682][ T9958] do_sys_openat2+0x14b/0x4f0 [ 610.412422][ T9958] ? do_sys_open+0xe0/0xe0 [ 610.416936][ T9958] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 610.422979][ T9958] ? lock_chain_count+0x20/0x20 [ 610.427878][ T9958] __x64_sys_openat+0x135/0x160 [ 610.432768][ T9958] do_syscall_64+0x4c/0xa0 [ 610.437218][ T9958] ? clear_bhb_loop+0x60/0xb0 [ 610.441932][ T9958] ? clear_bhb_loop+0x60/0xb0 [ 610.446646][ T9958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.452571][ T9958] RIP: 0033:0x7fb013d5ed8e [ 610.457016][ T9958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 610.476643][ T9958] RSP: 002b:00007fb014d0cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.485058][ T9958] RAX: ffffffffffffffda RBX: 00007fb014d0d6c0 RCX: 00007fb013d5ed8e [ 610.493040][ T9958] RDX: 0000000000000002 RSI: 00007fb014d0cc00 RDI: ffffffffffffff9c [ 610.501015][ T9958] RBP: 00007fb014d0cc00 R08: 0000000000000000 R09: 0000000000000000 [ 610.509004][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 610.516976][ T9958] R13: 00007fb014026038 R14: 00007fb014025fa0 R15: 00007fff77a898b8 [ 610.524993][ T9958] [ 611.479768][ T9983] FAULT_INJECTION: forcing a failure. [ 611.479768][ T9983] name fail_futex, interval 1, probability 0, space 0, times 1 [ 611.532547][ T9983] CPU: 1 PID: 9983 Comm: syz.8.1345 Not tainted syzkaller #0 [ 611.540076][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.550158][ T9983] Call Trace: [ 611.553468][ T9983] [ 611.556430][ T9983] dump_stack_lvl+0x188/0x24e [ 611.561156][ T9983] ? show_regs_print_info+0x12/0x12 [ 611.566407][ T9983] ? load_image+0x410/0x410 [ 611.570966][ T9983] ? cgroup_rstat_updated+0xce/0x350 [ 611.576408][ T9983] ? rcu_read_lock_sched_held+0x86/0x110 [ 611.582079][ T9983] ? sched_slice+0x430/0x430 [ 611.586735][ T9983] should_fail_ex+0x390/0x4c0 [ 611.591462][ T9983] get_futex_key+0x1b1/0x1000 [ 611.596168][ T9983] ? futex_setup_timer+0xc0/0xc0 [ 611.601121][ T9983] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 611.607116][ T9983] ? __lock_acquire+0x7ea0/0x7ea0 [ 611.612157][ T9983] ? lock_chain_count+0x20/0x20 [ 611.617060][ T9983] futex_wait_setup+0xb8/0x270 [ 611.621841][ T9983] ? futex_wait_multiple+0x920/0x920 [ 611.627139][ T9983] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 611.633046][ T9983] ? _raw_spin_unlock+0x40/0x40 [ 611.637911][ T9983] futex_wait+0x1b8/0x5c0 [ 611.642258][ T9983] ? futex_wait_setup+0x270/0x270 [ 611.647340][ T9983] ? __se_sys_keyctl+0x4f9/0x870 [ 611.652313][ T9983] do_futex+0x310/0x320 [ 611.656489][ T9983] ? __ia32_sys_get_robust_list+0x100/0x100 [ 611.662403][ T9983] __se_sys_futex+0x381/0x410 [ 611.667093][ T9983] ? __x64_sys_futex+0xf0/0xf0 [ 611.671902][ T9983] ? __x64_sys_futex+0x1d/0xf0 [ 611.676678][ T9983] do_syscall_64+0x4c/0xa0 [ 611.681105][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 611.685798][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 611.690487][ T9983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.696392][ T9983] RIP: 0033:0x7f943739e559 [ 611.700816][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.720433][ T9983] RSP: 002b:00007f94383520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 611.728863][ T9983] RAX: ffffffffffffffda RBX: 00007f9437625fa8 RCX: 00007f943739e559 [ 611.736853][ T9983] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9437625fa8 [ 611.744835][ T9983] RBP: 00007f9437625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 611.752829][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.760819][ T9983] R13: 00007f9437626038 R14: 00007ffdd9bc3330 R15: 00007ffdd9bc3418 [ 611.768822][ T9983] [ 613.417326][T10036] netlink: 'syz.8.1359': attribute type 1 has an invalid length. [ 613.601067][T10045] overlayfs: failed to resolve './bus': -2 [ 613.617055][T10036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.952826][T10055] batman_adv: batadv0: Adding interface: syzkaller0 [ 613.991331][T10055] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.096158][T10055] batman_adv: batadv0: Interface activated: syzkaller0 [ 614.188450][T10053] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 614.319352][T10053] batman_adv: batadv0: Removing interface: syzkaller0 [ 614.449751][T10069] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 614.534077][T10069] CIFS: Attempting to mount \\127.0.0.1\share [ 615.289879][T10069] CIFS: VFS: cifs_mount failed w/return code = -112 [ 616.003285][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1375'. [ 617.745983][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1381'. [ 617.927237][T10147] ------------[ cut here ]------------ [ 617.932867][T10147] WARNING: CPU: 0 PID: 10147 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 617.943399][T10147] Modules linked in: [ 617.947352][T10147] CPU: 0 PID: 10147 Comm: syz.9.1382 Not tainted syzkaller #0 [ 617.954827][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.964932][T10147] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 617.971464][T10147] Code: e8 71 98 c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 98 c3 00 e9 29 e6 ff ff e8 6c 3c 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec [ 617.991269][T10147] RSP: 0018:ffffc90005aa7c98 EFLAGS: 00010287 [ 617.997432][T10147] RAX: ffffffff81100a14 RBX: ffff88802895cf80 RCX: 0000000000080000 [ 618.005484][T10147] RDX: ffffc90026e6e000 RSI: 00000000000003dc RDI: 00000000000003dd [ 618.013514][T10147] RBP: ffff888055057000 R08: dffffc0000000000 R09: 1ffffffff232686a [ 618.021575][T10147] R10: dffffc0000000000 R11: fffffbfff232686b R12: ffffc90005b8b7f0 [ 618.029625][T10147] R13: ffff88802895cfb0 R14: ffff88802895d14a R15: dffffc0000000000 [ 618.037674][T10147] FS: 00007f6bd8ba86c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 618.046661][T10147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.053266][T10147] CR2: 00007fb014cebff8 CR3: 0000000062edd000 CR4: 00000000003526f0 [ 618.061313][T10147] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.069328][T10147] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.077354][T10147] Call Trace: [ 618.080677][T10147] [ 618.083608][T10147] ? get_task_pid+0x1e/0x300 [ 618.088307][T10147] ? get_task_pid+0x1e/0x300 [ 618.092953][T10147] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 618.098761][T10147] kvm_vcpu_ioctl+0x986/0xd00 [ 618.103535][T10147] ? xa_release+0x50/0x50 [ 618.107981][T10147] ? __fget_files+0x28/0x460 [ 618.112618][T10147] ? bpf_lsm_file_ioctl+0x5/0x10 [ 618.117691][T10147] ? security_file_ioctl+0x7c/0xa0 [ 618.122831][T10147] ? xa_release+0x50/0x50 [ 618.127225][T10147] __se_sys_ioctl+0xfa/0x170 [ 618.131853][T10147] do_syscall_64+0x4c/0xa0 [ 618.136329][T10147] ? clear_bhb_loop+0x60/0xb0 [ 618.141053][T10147] ? clear_bhb_loop+0x60/0xb0 [ 618.145794][T10147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.151717][T10147] RIP: 0033:0x7f6bd7d9e559 [ 618.156211][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.175872][T10147] RSP: 002b:00007f6bd8ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.184301][T10147] RAX: ffffffffffffffda RBX: 00007f6bd8025fa0 RCX: 00007f6bd7d9e559 [ 618.192346][T10147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 618.200345][T10147] RBP: 00007f6bd7e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 618.208367][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.216397][T10147] R13: 00007f6bd8026038 R14: 00007f6bd8025fa0 R15: 00007ffea782d3a8 [ 618.224399][T10147] [ 618.227466][T10147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.234752][T10147] CPU: 0 PID: 10147 Comm: syz.9.1382 Not tainted syzkaller #0 [ 618.242202][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.252297][T10147] Call Trace: [ 618.255571][T10147] [ 618.258503][T10147] dump_stack_lvl+0x188/0x24e [ 618.263182][T10147] ? memcpy+0x3c/0x60 [ 618.267197][T10147] ? show_regs_print_info+0x12/0x12 [ 618.272394][T10147] ? load_image+0x410/0x410 [ 618.276936][T10147] panic+0x2d3/0x710 [ 618.280850][T10147] ? bpf_jit_dump+0xd0/0xd0 [ 618.285402][T10147] __warn+0x2f8/0x4f0 [ 618.289414][T10147] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.295243][T10147] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.301061][T10147] report_bug+0x2ba/0x4f0 [ 618.305456][T10147] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.311337][T10147] handle_bug+0x3a/0x70 [ 618.315532][T10147] exc_invalid_op+0x16/0x40 [ 618.320082][T10147] asm_exc_invalid_op+0x16/0x20 [ 618.324953][T10147] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.331389][T10147] Code: e8 71 98 c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 98 c3 00 e9 29 e6 ff ff e8 6c 3c 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec [ 618.350997][T10147] RSP: 0018:ffffc90005aa7c98 EFLAGS: 00010287 [ 618.357063][T10147] RAX: ffffffff81100a14 RBX: ffff88802895cf80 RCX: 0000000000080000 [ 618.365042][T10147] RDX: ffffc90026e6e000 RSI: 00000000000003dc RDI: 00000000000003dd [ 618.373018][T10147] RBP: ffff888055057000 R08: dffffc0000000000 R09: 1ffffffff232686a [ 618.380986][T10147] R10: dffffc0000000000 R11: fffffbfff232686b R12: ffffc90005b8b7f0 [ 618.388955][T10147] R13: ffff88802895cfb0 R14: ffff88802895d14a R15: dffffc0000000000 [ 618.396944][T10147] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.402770][T10147] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 618.408578][T10147] ? get_task_pid+0x1e/0x300 [ 618.413166][T10147] ? get_task_pid+0x1e/0x300 [ 618.417764][T10147] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 618.423486][T10147] kvm_vcpu_ioctl+0x986/0xd00 [ 618.428170][T10147] ? xa_release+0x50/0x50 [ 618.432502][T10147] ? __fget_files+0x28/0x460 [ 618.437108][T10147] ? bpf_lsm_file_ioctl+0x5/0x10 [ 618.442079][T10147] ? security_file_ioctl+0x7c/0xa0 [ 618.447198][T10147] ? xa_release+0x50/0x50 [ 618.451534][T10147] __se_sys_ioctl+0xfa/0x170 [ 618.456130][T10147] do_syscall_64+0x4c/0xa0 [ 618.460547][T10147] ? clear_bhb_loop+0x60/0xb0 [ 618.465223][T10147] ? clear_bhb_loop+0x60/0xb0 [ 618.469901][T10147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.475790][T10147] RIP: 0033:0x7f6bd7d9e559 [ 618.480202][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.499801][T10147] RSP: 002b:00007f6bd8ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.508227][T10147] RAX: ffffffffffffffda RBX: 00007f6bd8025fa0 RCX: 00007f6bd7d9e559 [ 618.516196][T10147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 618.524161][T10147] RBP: 00007f6bd7e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 618.532128][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.540094][T10147] R13: 00007f6bd8026038 R14: 00007f6bd8025fa0 R15: 00007ffea782d3a8 [ 618.548070][T10147] [ 618.551267][T10147] Kernel Offset: disabled [ 618.555663][T10147] Rebooting in 86400 seconds..