last executing test programs: 17m28.939867363s ago: executing program 2 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xf, 0x1, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x5, 0x3, 0x6, 0xa}, {0x5, 0x5, 0xe, 0xa}, {0x1, 0x2, 0xb, 0x1}], 0x10, 0x4914}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, 0xffffffffffffffff, 0x63, 0x0, @val=@tracing={0x0, 0x40}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)=ANY=[], 0x2354}}, 0x8c0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x13, 0x9, 0x5, 0x4, 0x0, 0xfffffdffffffffff, 0x3, 0x1d74bd00}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r10, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r12, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r11, r10, 0x0, 0x578410eb) 17m28.257286491s ago: executing program 3 (id=609): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x104, 0x2, 0x3b0, 0x0, 0x0, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xbc, 0x10c, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3fc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}}], 0x1, 0x102, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0xe, 0x4048000, &(0x7f0000000140)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @local}, 0x14) 17m28.256720958s ago: executing program 3 (id=610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x4c, 0x31, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xee6}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x8, 0x8000, 0x4}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 17m27.939250005s ago: executing program 2 (id=613): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') write$cgroup_pressure(r0, &(0x7f0000000040)={'full', 0x20, 0xffffffffffffffff, 0x20, 0x8}, 0x2f) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000180)={0xe, 0x1, 0x4, 0x10000, 0x2, {r2, r3/1000+10000}, {0x1, 0x2, 0x9, 0x80, 0xe9, 0x8, "e6567f2b"}, 0xffff, 0x4, {0xffffffffffffffff}, 0x81, 0x0, r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x969, &(0x7f0000000200)=0x0) io_getevents(r6, 0x6, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x0, 0x3938700}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) connect$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x401, 0x6}}, './file0\x00'}) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f00000003c0)=':[#\\[$}!+\x00', 0xa) write$P9_RREADLINK(r7, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000440)) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80404060}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@delnexthop={0x40, 0x69, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20c0) r8 = io_uring_setup(0x51ce, &(0x7f0000000600)={0x0, 0x19fc, 0x20, 0x3, 0x144, 0x0, r7}) syz_io_uring_setup(0x481e, &(0x7f0000000680)={0x0, 0x354d, 0x40, 0x2, 0xf4, 0x0, r8}, &(0x7f0000000700), &(0x7f0000000740)) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r9, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xdcb3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008004) r10 = openat$ipvs(0xffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xc2, 0x60, 0x0, 0x1, 0x2, 0x3e, 0x401, 0x39b, 0x34, 0x34c, 0xf45c, 0x10, 0x20, 0x2, 0x71, 0x6}, [{0x60000000, 0x180, 0x6, 0x9, 0x5, 0x2, 0xe, 0xff}, {0x6474e551, 0x9fe7, 0x6, 0x3, 0x8, 0x100, 0x7ff, 0x7f}], "ab851ff794c8cd50f1e560b81ccc27abcf8af4b9efd80a951002c54dd4bc48f2a2688bbf60daaa4358b034f2c1f2323b9876893151dfcbc0415874ecfb7bea133eb2ba1fb336be9bc263c2192c41f1d3fb908f05522c2009073fbc83ca89b8dec3c4e631c38a780ec1bb2e73effeda3082e079a513f32a7431ac", ['\x00', '\x00']}, 0x2ee) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000c80)={&(0x7f0000000c00)=""/103, 0x101000, 0x2000, 0x9, 0x1}, 0x1c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) setns(r0, 0x0) r11 = openat$nmem0(0xffffff9c, &(0x7f0000000cc0), 0x185800, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000d00)={@empty, 0x1, 0x1, 0x0, 0x1, 0xe1a, 0x1}, 0x20) sendmsg$NL80211_CMD_GET_POWER_SAVE(r11, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb8, 0x3f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040}, 0x4000000) 17m27.793410136s ago: executing program 2 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$tun(r4, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r7, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@can_newroute={0x1c, 0x18, 0x276d793c29a3c3b7, 0x70bd31, 0x25dfdbff, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfc, 0x2, 0x6, 0xf6}}]}, 0x1c}}, 0x0) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x0) mmap(&(0x7f0000148000/0x13000)=nil, 0x13000, 0x300000b, 0x10, 0xffffffffffffffff, 0x9529c000) 17m26.731268102s ago: executing program 3 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r4 = eventfd2(0x8000000b, 0x80001) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) write$eventfd(r4, &(0x7f0000000080)=0x430f, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 17m26.694535814s ago: executing program 2 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r0, &(0x7f0000000380)=""/69, 0x45) 17m26.620699725s ago: executing program 2 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r0, &(0x7f0000000380)=""/69, 0x45) (fail_nth: 1) 17m26.620299348s ago: executing program 3 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1fd9a8, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={r1, 0x0, 0x0, 0x2, 0xe4c5, 0x75c, 0x5, 0x0, 0xfffffffb, 0xf22, 0x7fffffff, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r2, &(0x7f0000000380)=""/69, 0x45) 17m26.510072115s ago: executing program 3 (id=628): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x140, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f00000001c0)={0x1, 0x80, 0x80, 0x828f, 0x180, 0x8001, 0x10, 0x3, 0x80, 0x0, 0x4, 0x5, &(0x7f0000000180)=[0x6], 0x1, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r2, &(0x7f0000000080)=""/38, 0x26) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x341, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x11e, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r8, &(0x7f0000000240)) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0x8, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40086439, &(0x7f00000000c0)={0x6, r11}) 17m26.227465789s ago: executing program 2 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000f45393b5e478d64888af76c2b9220000020901040000000000000000000000031b0002002c000180000300fe880000000000000019000000000101140004000000000000000000000000009af100000c0002800500010001000000ae6e70be3091bd095ff28b9732db2b1e9a7ca4c36d2e02ccec2568b2983df0c741fd94004cd2441d183d97312c992d901db2f6f2be5cf30b"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) r3 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x64, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @loopback}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x20, 0x8, 0x0, 0x1, "42d87f5d5b7d1d78bd7471b35d8eef2866c33dc66700b7e80842d72d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010004b0400000000e5ff00007a001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100627269646765000034000280050016000200000008001d000900000008000100090000000c00220002000000000000000c001e000500000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000640)={0x5, @sliced={0x100, [0x3, 0x4, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xd336, 0x6, 0x8, 0x8, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xf, 0x4, 0x200, 0x2, 0x6, 0x1b67, 0x4, 0x3ff, 0xc15e, 0x3, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0xdffb, 0xfff, 0x8, 0x15c6], 0x3}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x111201) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x32, 0x2}) r9 = dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17m26.153049178s ago: executing program 32 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000f45393b5e478d64888af76c2b9220000020901040000000000000000000000031b0002002c000180000300fe880000000000000019000000000101140004000000000000000000000000009af100000c0002800500010001000000ae6e70be3091bd095ff28b9732db2b1e9a7ca4c36d2e02ccec2568b2983df0c741fd94004cd2441d183d97312c992d901db2f6f2be5cf30b"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) r3 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x64, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @loopback}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x20, 0x8, 0x0, 0x1, "42d87f5d5b7d1d78bd7471b35d8eef2866c33dc66700b7e80842d72d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010004b0400000000e5ff00007a001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100627269646765000034000280050016000200000008001d000900000008000100090000000c00220002000000000000000c001e000500000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000640)={0x5, @sliced={0x100, [0x3, 0x4, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xd336, 0x6, 0x8, 0x8, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xf, 0x4, 0x200, 0x2, 0x6, 0x1b67, 0x4, 0x3ff, 0xc15e, 0x3, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0xdffb, 0xfff, 0x8, 0x15c6], 0x3}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x111201) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x32, 0x2}) r9 = dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17m26.126329317s ago: executing program 3 (id=632): syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x0, [0x6e, 0x7]}}) 17m26.03315228s ago: executing program 33 (id=632): syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x0, [0x6e, 0x7]}}) 16m20.224302697s ago: executing program 5 (id=1084): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000001200000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) 16m19.234005426s ago: executing program 5 (id=1089): openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xc3f7, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000010, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0xd254, 0x12}, 0x18, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) connect$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x24) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) close(r4) r5 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0xe595, 0x1, 0x6, 0xae}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$caif_stream(0x25, 0x1, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x24088001}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000500)=ANY=[@ANYBLOB="00fbe502098ff180362f4e3a0a4ca4e488b806b7d05331d2f8a1d1adf3f498e3b0a209b8c0bb47f7fafaa91aad7d0fde53f150a368567affa7af73d0f7725d734b053b6c4bb3b23bd7d0113aa7573da727493789351eb30447195a140c28d9dc68fc8ef438703e6ce3829a689c94bafe165ca27d3c8b881cc3475677b1832bcd122916920860b2173d9bac8121d4eabd054a40fb6283949d15ff5fd41f64324818fcca044a20c267538f0193a3825aed81bcc9bab1a9ba304bdb7806b893e46844fa7e2bfa93b96a7ccd231cdec696b8c134a1e6aa237cb3af375e081235e71c8fa03a166fb8e7ccb6e5219fe8647bcc85af65300c"], 0xe5, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_io_uring_setup(0x24dd, &(0x7f0000000180)={0x0, 0x2, 0x20, 0x4}, &(0x7f0000000300), &(0x7f0000000100)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a0601010000e85cba58000000000500f6ff0600f1ff080015b49422000504000880"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) pidfd_send_signal(r11, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) 16m18.888244489s ago: executing program 5 (id=1092): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16m17.875563183s ago: executing program 5 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') 16m17.797272995s ago: executing program 5 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x3, "a9dbe752dc90377303d9dcf728869a4c36f4e22bff59d0762b0a765863b9cae8", 0x100000000, 0x3, 0x401, 0x700000000, 0x8, 0x7f, 0xc, 0x3, [0x1, 0x7ffffffe, 0x6, 0xfffffffe]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x101000) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x1}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r6, 0x80045113, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="4000ccb3569329f5e304fa2202803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000004a40ee56f8aefff08494060000000400040008000600953f78d353ae524ea030b9808b31a855a8107ceb806e05b8ec203e7a8db02c3ee48357", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0xf000, 0x0, 0x40c0}, 0x35aa2dae0099c8e0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="9e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xa604) 16m17.57945815s ago: executing program 5 (id=1099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, 0x0, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) 16m17.459823339s ago: executing program 34 (id=1099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, 0x0, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) 4.628801206s ago: executing program 0 (id=4983): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x13c, 0x0, 0x3ca3, {0x0, 0xfffffff7, 0x0, '\x00', {0x7ff, 0x803, 0xadf, 0x804, r2, r3, 0x4000, '\x00', 0x7, 0x81, 0xffffffff, 0x3, {0x8, 0x8}, {0x4000000000006, 0x3}, {0x2f, 0x7}, {0x1000000000, 0xa03}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0xfffb, 0x7}}, 0x50) 4.520005856s ago: executing program 0 (id=4985): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r1, 0xa7deb000) dup(0xffffffffffffffff) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140)) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x30004084) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) unshare(0x20000400) r6 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) 3.09993642s ago: executing program 6 (id=4994): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x13c, 0x0, 0x3ca3, {0x0, 0xfffffff7, 0x0, '\x00', {0x7ff, 0x803, 0xadf, 0x804, r2, r3, 0x4000, '\x00', 0x7, 0x81, 0xffffffff, 0x3, {0x8, 0x8}, {0x4000000000006, 0x3}, {0x2f, 0x7}, {0x1000000000, 0xa03}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0xfffb, 0x7}}, 0x50) 3.09956006s ago: executing program 6 (id=4995): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x42}}}}}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000008440)=[{&(0x7f0000000240)=@in={0x2, 0x4e24, @local}, 0xffffffffffffff9d, &(0x7f0000000580)=[{&(0x7f0000000780)="a3", 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x4}}], 0x14, 0x8080}], 0x1, 0x4c044) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvfrom$inet6(r5, &(0x7f0000000000)=""/61, 0x3d, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @mcast1, 0x9}, 0x1c) recvmmsg(r8, &(0x7f0000000480), 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback, 0x0, r10}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000020000007b8a80fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000080007040000f0ffffffb702000000000000182300"/92, @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r10, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.329137557s ago: executing program 4 (id=4998): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000180)=0x80) (async) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r2, &(0x7f00000000c0), 0x2a) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{0x0, 0xdd12}, {0x0}], 0x2}, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000100000000000000000000850000002f000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async) r5 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x8cdb, 0x10100, 0x400000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) (async) io_uring_enter(r5, 0x53d1, 0x0, 0x4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x1, 0x10000, 0x2, 0x3}}) 2.327724475s ago: executing program 0 (id=4999): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.229145358s ago: executing program 4 (id=5001): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)="5802000000adbcb1d770dc898c190f", 0xf, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x10000, 0x7f, {0xffffffffffffffff}, {0xee00}, 0x4, 0x80000001}) process_vm_writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f00000005c0)=""/209, 0xd1}], 0x4, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000880)=""/136, 0x88}], 0x5, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x3, 0x8, 0x1, 0x1}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setreuid(0x0, 0xee00) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 2.159236968s ago: executing program 6 (id=5002): socket$inet6(0xa, 0x80003, 0xff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x40000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="554b00000000deff000008000008060001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.99990162s ago: executing program 6 (id=5003): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB='\b\x00']) 1.950294481s ago: executing program 6 (id=5004): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x0, 0x3, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r1, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/2:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r4, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x6, &(0x7f0000000140)="14b0d9f0eb69", 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x20, 0x0, 0xeb}) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x6, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, r3, 0x5, 0x2}}}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02, 0x40282}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x310, 0x30, 0xffff, 0x0, 0x0, {}, [{0x2fc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_nat={0x164, 0xc, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x0, 0x4, 0x40}, @multicast2, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x350, 0xa, 0x4, 0x4}, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x80000001, 0x2, 0x5, 0x80000001}, @rand_addr=0x64010101, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x8, 0x0, 0x7d, 0x1}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x5, 0x1ff, 0xffffffff}, @empty, @empty, 0xff000000, 0x1}}]}, {0x73, 0x6, "8e1d0307d783f388e547448086b88ca3f319f209cf529bb8acd804a77cda679340db74aca325c16bc8b98f57e239c9e4ae866968d2083e10570bd6c6a9f46358b8420da6c2e6328cdb4f68272cd134b15961de81c65004608156428772cbb5bf58123eb86a953d02117997c4f1caa7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffa}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0xffffffffffffffff, 0x7fffffff, 0x1ff}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x4, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x20000000, 0x7, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbd0}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x75, 0x6, "7db0405a3b97f094a154b5fe75eccafc4bc223b0b3f6888cb8e6582ab4a863e425d241077e91c857240ad5aef7aa98358d93acdc3e7e2af12fe473ae576ba92b01724308fcd27a5ce4a9b4371ab82055bd5a87a3e61bce18d4ec7aeaf8a86a6572d7c5ae8dbb401fddc949a28670f82b8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x310}}, 0x0) 1.948138721s ago: executing program 4 (id=5006): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe49, 0x11e41e7a, 0x20000000, 0xfffffffd, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x4000}, &(0x7f0000000340), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x9e7a, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000002c0007012bbd7000ffdbdf25047c0000080015800400dd80b900038004000180c3beb899adffc9c05eb8c1126ae3556958131ed956c5ceb012f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xd8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 1.779423101s ago: executing program 1 (id=5007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r1) (async) ptrace(0x4212, r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async, rerun: 32) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.666664618s ago: executing program 6 (id=5008): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r1, 0xa7deb000) dup(0xffffffffffffffff) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140)) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x30004084) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) unshare(0x20000400) r6 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) 1.459395716s ago: executing program 1 (id=5009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0xd44, 0x0, 0xc, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x5, 0x4a65, {{0x42, 0x4, 0x1, 0x19, 0x108, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local, {[@rr={0x7, 0x1f, 0xb0, [@loopback, @loopback, @remote, @multicast1, @multicast1, @rand_addr=0x64010102, @multicast1]}, @cipso={0x86, 0x28, 0x5, [{0x6, 0x3, "06"}, {0x5, 0x10, "bf48720e1ff97d3b59f71c3aa2a3"}, {0x7, 0xf, "8d25c59b5839604a45ff2519e7"}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x10, "c3f2d250119dd3ddb4fd40bbc454"}, {0x0, 0xe, "ed18859458c601292721126d"}]}, @noop, @generic={0x94, 0xd, "c63e5a54fa08ed135e6d05"}, @cipso={0x86, 0x50, 0x1, [{0x2, 0xc, "a8520553fef3740b7c7b"}, {0x6, 0xd, "fc59448f8538f81692e480"}, {0x7, 0x4, "25a5"}, {0x0, 0xb, "c35fa152dfc8ecb8f9"}, {0x0, 0xc, "bf621bb090af2395dba1"}, {0x6, 0x12, "d7151e0a17f2e0002e8648f5cc86b170"}, {0x6, 0x4, '\x00D'}]}, @timestamp={0x44, 0xc, 0xc4, 0x0, 0x7, [0x4, 0xf]}, @end, @ssrr={0x89, 0x13, 0xdc, [@multicast1, @remote, @loopback, @loopback]}, @generic={0x44, 0xa, "9ed520a71cbc2785"}]}}}}}) r8 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x200e, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r11, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c000180080001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.438134768s ago: executing program 0 (id=5010): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) memfd_secret(0x7c2c44e850a180fd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x289e0cb5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5807ff7f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) (fail_nth: 2) syz_emit_ethernet(0x3a, 0x0, 0x0) 560.115431ms ago: executing program 1 (id=5011): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = timerfd_create(0x0, 0x80000) read(r2, &(0x7f0000000080)=""/149, 0x95) timerfd_settime(r2, 0x3, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) close(r0) 470.296407ms ago: executing program 4 (id=5012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0xfffffffffffffffe, 0x3, 0xf2, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x1000, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x38, 0x5, 0x2, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0xff, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 470.019782ms ago: executing program 4 (id=5013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0xfffffffffffffffe, 0x3, 0xf2, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x1000, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x38, 0x5, 0x2, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0xff, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 390.208498ms ago: executing program 4 (id=5014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1800, 0x0) splice(r2, 0x0, r3, 0x0, 0xf3b, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) write(r1, 0x0, 0x0) 284.777935ms ago: executing program 0 (id=5015): socket$inet6(0xa, 0x80003, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 281.527734ms ago: executing program 0 (id=5016): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0x40505331, &(0x7f0000000300)={0x80000000}) read$char_usb(r5, 0x0, 0x0) 79.07085ms ago: executing program 1 (id=5017): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = syz_io_uring_setup(0x771d, &(0x7f0000000440)={0x0, 0x11ee, 0x10000, 0xa, 0xffffff}, &(0x7f00000001c0), &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f0000529000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0xf, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$802154_dgram(r0, &(0x7f0000000000), 0x14) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) r5 = socket$inet(0xa, 0x802, 0x26) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)="8e", 0x1, 0x8400, &(0x7f0000000080)={0xa, 0x4e22, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x2000000, 0x0) write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000e600000000feffff10850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffc, 0x1, 0x56e4fe38, 0x7fff], 0x0, 0x0, 0x8, 0x1}}, 0x3c) 320.263µs ago: executing program 1 (id=5018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (fail_nth: 2) 0s ago: executing program 1 (id=5019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept4(r1, 0x0, &(0x7f0000000180), 0x80800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x40, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r5) r6 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000b80)=0xfff, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$cdc_ncm(0x2, 0xcf, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x5, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '}Od'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0xffa1, 0x7}, {0x6, 0x24, 0x1a, 0x3ff, 0x28}, [@mdlm_detail={0x9, 0x24, 0x13, 0x4, "3b1dab015f"}, @mdlm_detail={0x51, 0x24, 0x13, 0xfc, "d2754cce2bb8dfc48cf959a9f3fd6ff9f5b42adc86d376ab669753a01907331454168b546f57270ef3630f11e041b800961da78a59da1ffffcb6caa49ce75fe18b5dce7c950d9c3bd31ccd3107"}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xe8, 0xc, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4e, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x0, 0xb}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x84d19a10b297a91d, 0x5, 0x6, 0x4, 0xff, 0x92}, 0x1fe, &(0x7f0000000600)={0x5, 0xf, 0x1fe, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x2, 0x5}, @generic={0xff, 0x10, 0x3, "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"}, @generic={0xe1, 0x10, 0xb, "fd5c947a108361eddf7a568f83d8d65374d8281a25a9c1da72f3547fde33ced32861915cffd725f8441bf1d3adf843e6fe9c6a100c0846473026ec6943c87be151ab8923b0fbb41ee7d5c4556563bd465f62fd1b8ef3b6f968bc1fbcc0dc7d0e39b1dcf0d8ba61b959021711417d39f6eba7a1c25d9f8b5a7ddfbdcc038666388637dbcf49fd0166794c7509062bf7f0696605a13caace659b92128bea66b14848ce3717deaff3ed8751c8e6870dd77690eede498ecff0e637cdd2ba19febce5911af379f4ad2b62b8c074116e9c396bf4e94cffdd04b2192700f5d83e6c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xb, 0x43, 0x7f, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x6, 0x8}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x82c}}, {0x8c, &(0x7f0000000400)=@string={0x8c, 0x3, "29ce7fa44383d63d24aaa89cbd285ebedc11528d610d52f17594c61ddfa3be5fd8f32c5a31078c90bb8a086a074eeeb54a66f1b136aba4465be545effa648d4e2ede1f1f9511d5eaac1a3364b151c8853bc55a674aa6248af7c96bab50175950cf86fd7d684d3bbd015c5b2e64ecb1b3e9a6e1ce7297973e2464f51c624f36984a3aa6eda8fe39f28a34"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xb2fb3a7e65891c6e}}, {0xe7, &(0x7f0000000880)=@string={0xe7, 0x3, "51513f9f53c652242bf54f60aa0e1c2f44cbb17e15facb9dd9411e43c26db014b5efae7761a3c2e8bb625e8c2b1ccdb4002dd9fa6053a13390e6f0a61fcec83e6ab07d5eba624b0c5b2b8c929336a48ae096ed6e04c80c6bff6f7fb78d303d813e024bc2a3c829bdfa80a702542429091721af256fd9bc2e71cde93710f23d8941472b87d6396a478be6078f9fe19ca40cd62bb3554421102bfcd2acececb54a453a0889ed4f0518ed683bce2fa0f675890dfe191f83ff6b98bb3fff41835efd5263e5fd4b3e76323bd64a0da12d99085f8d8d232762da77b3975e8977bcf04145e32f8c68"}}, {0xd6, &(0x7f0000000980)=@string={0xd6, 0x3, "0b9988adfc47322fdef7a1227f841019489f5569f766ca250d73a3662573ba8a37ebd95ad75e768b482a46f489afc3b750cd4067da20b5ab0338b6f1c9159adba7988f3877b73fade017dd6644ff9389c8fa1f3ea8b71bb17521c9976b7fe384d478f7e7b54f4b41260d4d99abdadc4b11c36065f1be899d7c7e88f74200192ad137780242ac1d786e40acefc706c2ac99cf024afd6875624be89ebd1b527e26065cd510020c834e5e1861e1d6b684428340bb6ebba9d717bea750c13a80305441d67b871f4ccada66f3ac896cc6e5d4a8676e95"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42d}}]}) getsockopt$XDP_STATISTICS(r7, 0x6b, 0x7, 0x0, &(0x7f0000000240)) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): macvlan6 [ 1108.479607][T22846] bond5: left promiscuous mode [ 1108.922270][T22856] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1108.924957][T22856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1108.927993][T22856] vhci_hcd vhci_hcd.0: Device attached [ 1108.995771][T22856] loop2: detected capacity change from 0 to 7 [ 1108.998707][T22856] Dev loop2: unable to read RDB block 7 [ 1109.000569][T22856] loop2: unable to read partition table [ 1109.002739][T22856] loop2: partition table beyond EOD, truncated [ 1109.004744][T22856] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.021506][ T843] usb 11-1: new high-speed USB device number 96 using dummy_hcd [ 1109.171592][ T843] usb 11-1: Using ep0 maxpacket: 8 [ 1109.175069][ T843] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1109.178097][ T843] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.201609][T19294] usb 38-1: SetAddress Request (18) to port 0 [ 1109.203216][ T843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1109.203620][T19294] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1109.205851][ T843] pvrusb2: ********** [ 1109.212100][ T843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1109.216606][ T843] pvrusb2: Important functionality might not be entirely working. [ 1109.219091][ T843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1109.222969][ T843] pvrusb2: ********** [ 1109.411750][ T2490] pvrusb2: Invalid write control endpoint [ 1109.420997][T22864] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 1109.423243][T22864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1109.472533][T22864] vhci_hcd vhci_hcd.0: Device attached [ 1109.553235][ T2490] pvrusb2: Invalid write control endpoint [ 1109.555081][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1109.557985][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1109.560412][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1109.563954][ T2490] pvrusb2: Device being rendered inoperable [ 1109.565875][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1109.568117][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1109.570882][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1109.573044][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1109.576303][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1109.616113][ T843] usb 11-1: USB disconnect, device number 96 [ 1109.741557][ T6442] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1109.801524][ T6442] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1109.986711][T22865] vhci_hcd: connection reset by peer [ 1109.988596][T12182] vhci_hcd vhci_hcd.1: stop threads [ 1109.990461][T12182] vhci_hcd vhci_hcd.1: release socket [ 1109.992409][T12182] vhci_hcd vhci_hcd.1: disconnect device [ 1110.027242][T22871] picdev_read: 7 callbacks suppressed [ 1110.027261][T22871] kvm: pic: non byte read [ 1110.032274][T22871] pic_ioport_write: 6 callbacks suppressed [ 1110.032285][T22871] kvm: pic: level sensitive irq not supported [ 1110.034414][T22871] kvm: pic: non byte read [ 1110.038869][T22871] kvm: pic: level sensitive irq not supported [ 1110.039105][T22871] kvm: pic: non byte read [ 1110.043727][T22871] kvm: pic: level sensitive irq not supported [ 1110.043967][T22871] kvm: pic: non byte read [ 1110.048405][T22871] kvm: pic: level sensitive irq not supported [ 1110.048635][T22871] kvm: pic: non byte read [ 1110.053431][T22871] kvm: pic: level sensitive irq not supported [ 1110.053662][T22871] kvm: pic: non byte read [ 1110.058266][T22871] kvm: pic: level sensitive irq not supported [ 1110.058499][T22871] kvm: pic: non byte read [ 1110.063159][T22871] kvm: pic: level sensitive irq not supported [ 1110.063394][T22871] kvm: pic: non byte read [ 1110.067797][T22871] kvm: pic: level sensitive irq not supported [ 1110.068035][T22871] kvm: pic: non byte read [ 1110.073282][T22871] kvm: pic: level sensitive irq not supported [ 1110.073517][T22871] kvm: pic: non byte read [ 1110.078280][T22871] kvm: pic: level sensitive irq not supported [ 1111.226132][T22905] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 1111.230202][T22905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1111.287585][T22909] Bluetooth: MGMT ver 1.23 [ 1111.299594][T22905] vhci_hcd vhci_hcd.0: Device attached [ 1111.569743][T22920] FAULT_INJECTION: forcing a failure. [ 1111.569743][T22920] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.575504][T22920] CPU: 3 UID: 0 PID: 22920 Comm: syz.6.4615 Tainted: G L syzkaller #0 PREEMPT(full) [ 1111.575522][T22920] Tainted: [L]=SOFTLOCKUP [ 1111.575527][T22920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1111.575533][T22920] Call Trace: [ 1111.575545][T22920] [ 1111.575550][T22920] dump_stack_lvl+0x100/0x190 [ 1111.575580][T22920] should_fail_ex.cold+0x5/0xa [ 1111.575599][T22920] should_failslab+0xc2/0x120 [ 1111.575616][T22920] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1111.575632][T22920] ? __alloc_skb+0x156/0x410 [ 1111.575652][T22920] ? __alloc_skb+0x35d/0x410 [ 1111.575669][T22920] ? __alloc_skb+0x156/0x410 [ 1111.575683][T22920] __alloc_skb+0x156/0x410 [ 1111.575697][T22920] ? __alloc_skb+0x35d/0x410 [ 1111.575711][T22920] ? __pfx___alloc_skb+0x10/0x10 [ 1111.575726][T22920] ? process_measurement+0x4c2/0x2400 [ 1111.575747][T22920] ? up_write+0x290/0x4f0 [ 1111.575765][T22920] alloc_skb_with_frags+0xe0/0x810 [ 1111.575779][T22920] sock_alloc_send_pskb+0x801/0x980 [ 1111.575799][T22920] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1111.575842][T22920] unix_dgram_sendmsg+0x3c7/0x1820 [ 1111.575859][T22920] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1111.575873][T22920] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1111.575886][T22920] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1111.575901][T22920] ? __might_fault+0xc5/0x140 [ 1111.575913][T22920] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1111.575930][T22920] ____sys_sendmsg+0xa54/0xc30 [ 1111.575944][T22920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.575956][T22920] ? _parse_integer_limit+0x17f/0x1d0 [ 1111.575971][T22920] ? _kstrtoull+0x13c/0x1f0 [ 1111.575982][T22920] ? __pfx__kstrtoull+0x10/0x10 [ 1111.575996][T22920] ___sys_sendmsg+0x190/0x1e0 [ 1111.576010][T22920] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.576023][T22920] ? __lock_acquire+0x4a5/0x2630 [ 1111.576044][T22920] ? find_held_lock+0x2b/0x80 [ 1111.576063][T22920] __sys_sendmmsg+0x2ff/0x430 [ 1111.576082][T22920] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1111.576103][T22920] ? __fget_files+0x215/0x3d0 [ 1111.576122][T22920] ? fput+0x79/0x100 [ 1111.576137][T22920] ? ksys_write+0x1ac/0x250 [ 1111.576149][T22920] ? __pfx_ksys_write+0x10/0x10 [ 1111.576163][T22920] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1111.576180][T22920] ? lockdep_hardirqs_on+0x78/0x100 [ 1111.576194][T22920] __do_fast_syscall_32+0xde/0x660 [ 1111.576210][T22920] do_fast_syscall_32+0x32/0x70 [ 1111.576225][T22920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1111.576239][T22920] RIP: 0023:0xf7fa7579 [ 1111.576249][T22920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1111.576259][T22920] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1111.576270][T22920] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000ec0 [ 1111.576277][T22920] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1111.576283][T22920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.576289][T22920] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1111.576296][T22920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.576310][T22920] [ 1111.735500][T22906] vhci_hcd: connection closed [ 1111.735882][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 1111.740404][ T1143] vhci_hcd vhci_hcd.1: release socket [ 1111.744778][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 1112.211561][ T843] usb 11-1: new high-speed USB device number 97 using dummy_hcd [ 1112.361540][ T843] usb 11-1: Using ep0 maxpacket: 8 [ 1112.366372][ T843] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1112.370082][ T843] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.382528][ T843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1112.385574][ T843] pvrusb2: ********** [ 1112.387299][ T843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1112.391239][ T843] pvrusb2: Important functionality might not be entirely working. [ 1112.405019][ T843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1112.409797][ T843] pvrusb2: ********** [ 1112.625905][ T2490] pvrusb2: Invalid write control endpoint [ 1112.813578][ T2490] pvrusb2: Invalid write control endpoint [ 1112.815463][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1112.818453][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1112.821025][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1112.826500][T22933] FAULT_INJECTION: forcing a failure. [ 1112.826500][T22933] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.830553][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.6.4622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.830574][T22933] Tainted: [L]=SOFTLOCKUP [ 1112.830578][T22933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1112.830585][T22933] Call Trace: [ 1112.830591][T22933] [ 1112.830596][T22933] dump_stack_lvl+0x100/0x190 [ 1112.830614][T22933] should_fail_ex.cold+0x5/0xa [ 1112.830633][T22933] should_failslab+0xc2/0x120 [ 1112.830649][T22933] ? tomoyo_encode2+0xfb/0x3c0 [ 1112.830661][T22933] __kmalloc_noprof+0xf6/0x9c0 [ 1112.830676][T22933] ? tomoyo_encode2+0xfb/0x3c0 [ 1112.830686][T22933] tomoyo_encode2+0xfb/0x3c0 [ 1112.830699][T22933] tomoyo_encode+0x29/0x50 [ 1112.830709][T22933] tomoyo_realpath_from_path+0x18c/0x690 [ 1112.830724][T22933] tomoyo_path_number_perm+0x23c/0x580 [ 1112.830739][T22933] ? tomoyo_path_number_perm+0x22e/0x580 [ 1112.830756][T22933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1112.830787][T22933] ? find_held_lock+0x2b/0x80 [ 1112.830798][T22933] ? hook_file_ioctl_common+0x146/0x410 [ 1112.830815][T22933] ? __fget_files+0x215/0x3d0 [ 1112.830853][T22933] ? __fget_files+0x21f/0x3d0 [ 1112.830867][T22933] security_file_ioctl_compat+0xd3/0x230 [ 1112.830886][T22933] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1112.830906][T22933] __do_fast_syscall_32+0xde/0x660 [ 1112.830923][T22933] do_fast_syscall_32+0x32/0x70 [ 1112.830938][T22933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.830952][T22933] RIP: 0023:0xf7fa7579 [ 1112.830962][T22933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1112.830973][T22933] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1112.830984][T22933] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1112.830991][T22933] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1112.830997][T22933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.831004][T22933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.831010][T22933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.831025][T22933] [ 1112.831038][T22933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1112.911102][ T2490] pvrusb2: Device being rendered inoperable [ 1112.913955][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1112.917920][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1112.931014][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1112.938509][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1112.991420][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1113.036490][ T8244] usb 11-1: USB disconnect, device number 97 [ 1113.121675][ T6024] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1113.301646][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 1113.306813][ T6024] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1113.309484][ T6024] usb 5-1: config 0 has no interface number 0 [ 1113.461767][ T843] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1113.542016][ T6024] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1113.544965][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.547745][ T6024] usb 5-1: Product: syz [ 1113.549191][ T6024] usb 5-1: Manufacturer: syz [ 1113.550804][ T6024] usb 5-1: SerialNumber: syz [ 1113.570425][ T6024] usb 5-1: config 0 descriptor?? [ 1113.661566][ T6024] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1113.664821][ T6024] usb 5-1: selecting invalid altsetting 1 [ 1113.667155][ T6024] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1113.691513][ T843] usb 6-1: Using ep0 maxpacket: 32 [ 1113.716096][ T6024] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1113.726341][ T6024] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1113.730212][ T6024] usb 5-1: media controller created [ 1113.823740][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.012587][ T843] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1114.015413][ T843] usb 6-1: config 0 has no interface number 0 [ 1114.077917][ T843] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1114.089361][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.117078][ T843] usb 6-1: Product: syz [ 1114.119059][ T843] usb 6-1: Manufacturer: syz [ 1114.120606][ T843] usb 6-1: SerialNumber: syz [ 1114.130866][ T843] usb 6-1: config 0 descriptor?? [ 1114.134526][ T843] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1114.137291][ T843] usb 6-1: selecting invalid altsetting 1 [ 1114.139102][ T843] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1114.150702][ T843] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1114.156011][ T843] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1114.158758][ T843] usb 6-1: media controller created [ 1114.165219][ T843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.881480][ T8244] usb 11-1: new full-speed USB device number 98 using dummy_hcd [ 1114.931588][ T6442] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1114.951645][ T6024] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1114.954250][ T6024] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1114.982013][T22950] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1115.011691][T22953] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1115.032995][ T8244] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.036745][ T8244] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.042050][ T8244] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.045689][ T8244] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.255776][ T8244] usb 11-1: usb_control_msg returned -32 [ 1115.257635][ T8244] usbtmc 11-1:16.0: can't read capabilities [ 1115.271669][ T843] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1115.274018][ T843] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1116.171740][ T6024] usb 5-1: USB disconnect, device number 118 [ 1116.290257][ T6005] usb 6-1: USB disconnect, device number 102 [ 1116.751701][T22997] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 1116.753950][T22997] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1116.761904][T22997] vhci_hcd vhci_hcd.0: Device attached [ 1116.977059][T23004] vhci_hcd: connection closed [ 1116.977318][ T1230] vhci_hcd vhci_hcd.0: stop threads [ 1116.981213][ T1230] vhci_hcd vhci_hcd.0: release socket [ 1116.983642][ T1230] vhci_hcd vhci_hcd.0: disconnect device [ 1117.653549][ T6024] usb 11-1: USB disconnect, device number 98 [ 1117.785021][T23030] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1117.964051][T23036] picdev_read: 24 callbacks suppressed [ 1117.964069][T23036] kvm: pic: non byte read [ 1117.970041][T23036] pic_ioport_write: 22 callbacks suppressed [ 1117.970056][T23036] kvm: pic: level sensitive irq not supported [ 1117.974507][T23036] kvm: pic: non byte read [ 1117.979525][T23036] kvm: pic: level sensitive irq not supported [ 1117.979783][T23036] kvm: pic: non byte read [ 1117.986237][T23036] kvm: pic: level sensitive irq not supported [ 1117.986472][T23036] kvm: pic: non byte read [ 1117.991317][T23036] kvm: pic: level sensitive irq not supported [ 1117.991896][T23036] kvm: pic: non byte read [ 1117.997924][T23036] kvm: pic: level sensitive irq not supported [ 1117.998161][T23036] kvm: pic: non byte read [ 1118.004013][T23036] kvm: pic: level sensitive irq not supported [ 1118.004249][T23036] kvm: pic: non byte read [ 1118.008990][T23036] kvm: pic: level sensitive irq not supported [ 1118.009230][T23036] kvm: pic: non byte read [ 1118.014364][T23036] kvm: pic: level sensitive irq not supported [ 1118.014598][T23036] kvm: pic: non byte read [ 1118.019681][T23036] kvm: pic: level sensitive irq not supported [ 1118.019969][T23036] kvm: pic: non byte read [ 1118.026439][T23036] kvm: pic: level sensitive irq not supported [ 1118.361222][T23048] overlayfs: overlapping lowerdir path [ 1118.421517][ T6024] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1118.571578][ T6024] usb 5-1: Using ep0 maxpacket: 8 [ 1118.577857][ T6024] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1118.585405][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1118.588891][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.593567][ T6024] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.598398][ T6024] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.602380][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.825311][T23046] Can't find a SQUASHFS superblock on nullb0 [ 1118.937468][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.941142][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.011528][ T843] usb 11-1: new high-speed USB device number 99 using dummy_hcd [ 1119.295984][ T843] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1119.299171][ T843] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1119.323664][ T843] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1119.326794][ T843] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1119.329767][ T843] usb 11-1: Product: syz [ 1119.331309][ T843] usb 11-1: Manufacturer: syz [ 1119.333000][ T843] usb 11-1: SerialNumber: syz [ 1119.339581][ T843] usb 11-1: config 0 descriptor?? [ 1119.358981][ T843] usb 11-1: selecting invalid altsetting 0 [ 1119.601878][ T843] usb 11-1: USB disconnect, device number 99 [ 1120.251649][ T843] usb 11-1: new full-speed USB device number 100 using dummy_hcd [ 1120.395623][T23068] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1120.403446][ T843] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1120.407433][ T843] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1120.417158][ T843] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.420576][ T843] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.424493][ T843] usb 11-1: Product: á±® [ 1120.427067][ T843] usb 11-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1120.435338][ T843] usb 11-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1120.458617][T23058] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1120.549270][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.552349][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.678735][ T843] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 1120.683107][ T843] cdc_ncm 11-1:1.0: bind() failure [ 1120.688788][ T843] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1120.692184][ T843] cdc_ncm 11-1:1.1: bind() failure [ 1120.702416][ T843] usb 11-1: USB disconnect, device number 100 [ 1121.234366][T23077] syzkaller0: entered promiscuous mode [ 1121.236402][T23077] syzkaller0: entered allmulticast mode [ 1121.286844][ T6024] usb 5-1: usb_control_msg returned -71 [ 1121.288647][ T6024] usbtmc 5-1:16.0: can't read capabilities [ 1121.294561][ T6024] usb 5-1: USB disconnect, device number 119 [ 1121.701950][T23086] input: syz1 as /devices/virtual/input/input35 [ 1121.926535][T23093] netlink: 'syz.1.4669': attribute type 2 has an invalid length. [ 1122.140187][T23099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4678'. [ 1122.221519][ T6024] usb 11-1: new high-speed USB device number 101 using dummy_hcd [ 1122.392651][ T6024] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1122.396429][ T6024] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1122.406078][ T6024] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1122.409192][ T6024] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1122.419608][ T6024] usb 11-1: Product: syz [ 1122.421066][ T6024] usb 11-1: Manufacturer: syz [ 1122.431824][ T6024] usb 11-1: SerialNumber: syz [ 1122.441743][ T6024] usb 11-1: config 0 descriptor?? [ 1122.447513][ T6024] usb 11-1: selecting invalid altsetting 0 [ 1122.759300][T14418] usb 11-1: USB disconnect, device number 101 [ 1123.191560][ T6005] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1123.373499][ T6005] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1123.376672][ T6005] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1123.382461][ T6005] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1123.385385][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1123.388038][ T6005] usb 6-1: Product: syz [ 1123.389911][ T6005] usb 6-1: Manufacturer: syz [ 1123.401458][ T6005] usb 6-1: SerialNumber: syz [ 1123.404303][ T6005] usb 6-1: config 0 descriptor?? [ 1123.425980][ T6005] usb 6-1: selecting invalid altsetting 0 [ 1123.591504][T14418] usb 11-1: new full-speed USB device number 102 using dummy_hcd [ 1123.689200][ T6005] usb 6-1: USB disconnect, device number 103 [ 1123.714267][T21490] udevd[21490]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.816419][T23131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4682'. [ 1123.853455][T14418] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1123.857736][T14418] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1123.864252][T14418] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.867839][T14418] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.870431][T14418] usb 11-1: Product: á±® [ 1123.874013][T14418] usb 11-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1123.882772][T14418] usb 11-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1123.901298][T23090] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1123.902115][T23136] overlayfs: failed to clone upperpath [ 1124.225560][T14418] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 1124.227873][T14418] cdc_ncm 11-1:1.0: bind() failure [ 1124.231739][T14418] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1124.234232][T14418] cdc_ncm 11-1:1.1: bind() failure [ 1124.240080][T14418] usb 11-1: USB disconnect, device number 102 [ 1124.281509][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1124.291511][ T6005] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1124.441709][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1124.447372][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1124.453140][ T9] usb 5-1: config 0 has no interface number 0 [ 1124.459154][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1124.464928][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.470455][ T9] usb 5-1: Product: syz [ 1124.473544][ T9] usb 5-1: Manufacturer: syz [ 1124.476783][ T9] usb 5-1: SerialNumber: syz [ 1124.479462][ T6005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1124.487379][ T6005] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1124.491954][ T9] usb 5-1: config 0 descriptor?? [ 1124.496761][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1124.503474][ T9] usb 5-1: selecting invalid altsetting 1 [ 1124.507835][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1124.516752][ T6005] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.522818][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1124.531515][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.531693][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1124.543363][ T9] usb 5-1: media controller created [ 1124.547302][ T6005] usb 6-1: Product: á±® [ 1124.548788][ T6005] usb 6-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1124.557853][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.579109][ T6005] usb 6-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1124.627002][T23114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.810264][T23145] FAULT_INJECTION: forcing a failure. [ 1124.810264][T23145] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.814666][T23145] CPU: 0 UID: 0 PID: 23145 Comm: syz.6.4686 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.814706][T23145] Tainted: [L]=SOFTLOCKUP [ 1124.814712][T23145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1124.814722][T23145] Call Trace: [ 1124.814730][T23145] [ 1124.814738][T23145] dump_stack_lvl+0x100/0x190 [ 1124.814784][T23145] should_fail_ex.cold+0x5/0xa [ 1124.814814][T23145] should_failslab+0xc2/0x120 [ 1124.814833][T23145] ? tomoyo_encode2+0xfb/0x3c0 [ 1124.814855][T23145] __kmalloc_noprof+0xf6/0x9c0 [ 1124.814880][T23145] ? tomoyo_encode2+0xfb/0x3c0 [ 1124.814894][T23145] tomoyo_encode2+0xfb/0x3c0 [ 1124.814910][T23145] tomoyo_encode+0x29/0x50 [ 1124.814923][T23145] tomoyo_realpath_from_path+0x18c/0x690 [ 1124.814946][T23145] tomoyo_path_number_perm+0x23c/0x580 [ 1124.814968][T23145] ? tomoyo_path_number_perm+0x22e/0x580 [ 1124.814991][T23145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1124.815038][T23145] ? find_held_lock+0x2b/0x80 [ 1124.815055][T23145] ? hook_file_ioctl_common+0x146/0x410 [ 1124.815077][T23145] ? __fget_files+0x215/0x3d0 [ 1124.815092][T23145] ? __fget_files+0x21f/0x3d0 [ 1124.815106][T23145] security_file_ioctl_compat+0xd3/0x230 [ 1124.815125][T23145] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1124.815145][T23145] __do_fast_syscall_32+0xde/0x660 [ 1124.815170][T23145] do_fast_syscall_32+0x32/0x70 [ 1124.815185][T23145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1124.815200][T23145] RIP: 0023:0xf7fa7579 [ 1124.815209][T23145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1124.815220][T23145] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1124.815231][T23145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1124.815239][T23145] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.815245][T23145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.815251][T23145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1124.815258][T23145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.815272][T23145] [ 1124.815322][T23145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1124.903669][ T6005] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1124.905793][ T6005] cdc_ncm 6-1:1.0: bind() failure [ 1124.906620][T23145] binder: 23144:23145 ioctl c0306201 80000680 returned -14 [ 1124.923758][ T6005] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1124.925908][ T6005] cdc_ncm 6-1:1.1: bind() failure [ 1124.945640][ T6005] usb 6-1: USB disconnect, device number 104 [ 1125.662045][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1125.665044][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1125.682401][T23139] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1125.821506][T14418] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1126.003469][T14418] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1126.008360][T14418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1126.013609][T14418] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1126.017773][T14418] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1126.020460][T14418] usb 6-1: Product: syz [ 1126.022111][T14418] usb 6-1: Manufacturer: syz [ 1126.023664][T14418] usb 6-1: SerialNumber: syz [ 1126.026608][T14418] usb 6-1: config 0 descriptor?? [ 1126.035105][T14418] usb 6-1: selecting invalid altsetting 0 [ 1126.260870][T14418] usb 6-1: USB disconnect, device number 105 [ 1127.385104][T23183] overlayfs: failed to clone upperpath [ 1127.880759][T23196] input: syz0 as /devices/virtual/input/input36 [ 1127.904221][T23196] fuseblk: Bad value for 'group_id' [ 1127.905948][T23196] fuseblk: Bad value for 'group_id' [ 1127.924243][T20269] udevd[20269]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1128.045015][ T9] usb 5-1: USB disconnect, device number 120 [ 1129.371528][ T1458] usb 11-1: new high-speed USB device number 103 using dummy_hcd [ 1129.521480][ T1458] usb 11-1: Using ep0 maxpacket: 16 [ 1129.524762][ T1458] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1129.529237][ T1458] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.532778][ T1458] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.535436][ T1458] usb 11-1: Product: syz [ 1129.536869][ T1458] usb 11-1: Manufacturer: syz [ 1129.538394][ T1458] usb 11-1: SerialNumber: syz [ 1129.541711][ T1458] usb 11-1: config 0 descriptor?? [ 1129.545468][ T1458] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.548472][ T1458] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1129.611908][T14418] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1129.761491][T14418] usb 5-1: Using ep0 maxpacket: 32 [ 1129.779652][T14418] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1129.783209][T14418] usb 5-1: config 0 has no interface number 0 [ 1129.797682][T14418] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1129.801683][T14418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.804923][T14418] usb 5-1: Product: syz [ 1129.806614][T14418] usb 5-1: Manufacturer: syz [ 1129.808588][T14418] usb 5-1: SerialNumber: syz [ 1129.817867][T14418] usb 5-1: config 0 descriptor?? [ 1129.824185][T14418] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1129.827915][T14418] usb 5-1: selecting invalid altsetting 1 [ 1129.831153][T14418] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1129.837666][T14418] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1129.847038][T14418] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1129.851682][T14418] usb 5-1: media controller created [ 1129.863218][T14418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1130.043183][T23274] fuse: Bad value for 'fd' [ 1130.180593][ T1458] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1130.942478][T14418] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1130.945380][T14418] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1130.971776][T23266] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1130.991837][T23260] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1130.996421][ T1458] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1131.001332][ T1458] em28xx 11-1:0.0: board has no eeprom [ 1131.061535][ T1458] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1131.064211][ T1458] em28xx 11-1:0.0: dvb set to bulk mode. [ 1131.066378][ T6442] em28xx 11-1:0.0: Binding DVB extension [ 1131.072717][ T1458] usb 11-1: USB disconnect, device number 103 [ 1131.075822][ T1458] em28xx 11-1:0.0: Disconnecting em28xx [ 1131.099890][ T6442] em28xx 11-1:0.0: Registering input extension [ 1131.102816][ T1458] em28xx 11-1:0.0: Closing input extension [ 1131.113812][ T1458] em28xx 11-1:0.0: Freeing device [ 1131.871800][T23295] fuse: Unknown parameter 'grou00000000000000000000' [ 1132.331499][ T6107] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1132.491522][ T6107] usb 6-1: Using ep0 maxpacket: 16 [ 1132.509568][ T6107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1132.516207][ T6107] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1132.520083][ T6107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.524471][ T6107] usb 6-1: Product: syz [ 1132.526279][ T6107] usb 6-1: Manufacturer: syz [ 1132.528201][ T6107] usb 6-1: SerialNumber: syz [ 1132.533123][ T6107] usb 6-1: config 0 descriptor?? [ 1132.538665][ T6107] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1132.544742][ T6107] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1132.817256][ T6107] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1132.895215][ T6107] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1132.897641][ T6107] em28xx 6-1:0.0: board has no eeprom [ 1132.961531][ T6107] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1132.964247][ T6107] em28xx 6-1:0.0: dvb set to bulk mode. [ 1132.966572][ T843] em28xx 6-1:0.0: Binding DVB extension [ 1132.972175][ T6107] usb 6-1: USB disconnect, device number 106 [ 1132.993535][ T6107] em28xx 6-1:0.0: Disconnecting em28xx [ 1133.028515][ T843] em28xx 6-1:0.0: Registering input extension [ 1133.033805][ T6107] em28xx 6-1:0.0: Closing input extension [ 1133.045847][ T6107] em28xx 6-1:0.0: Freeing device [ 1133.134386][T23311] picdev_read: 7 callbacks suppressed [ 1133.134407][T23311] kvm: pic: non byte read [ 1133.140218][T23311] pic_ioport_write: 6 callbacks suppressed [ 1133.140237][T23311] kvm: pic: level sensitive irq not supported [ 1133.143851][T23311] kvm: pic: non byte read [ 1133.150795][T23311] kvm: pic: level sensitive irq not supported [ 1133.151131][T23311] kvm: pic: non byte read [ 1133.159029][T23311] kvm: pic: level sensitive irq not supported [ 1133.159325][T23311] kvm: pic: non byte read [ 1133.165435][T23311] kvm: pic: level sensitive irq not supported [ 1133.165767][T23311] kvm: pic: non byte read [ 1133.171720][T23311] kvm: pic: level sensitive irq not supported [ 1133.172060][T23311] kvm: pic: non byte read [ 1133.178110][T23311] kvm: pic: level sensitive irq not supported [ 1133.178427][T23311] kvm: pic: non byte read [ 1133.185654][T23311] kvm: pic: level sensitive irq not supported [ 1133.186022][T23311] kvm: pic: non byte read [ 1133.192314][T23311] kvm: pic: level sensitive irq not supported [ 1133.192717][T23311] kvm: pic: non byte read [ 1133.244905][T23311] kvm: pic: level sensitive irq not supported [ 1133.245256][T23311] kvm: pic: non byte read [ 1133.253266][T23311] kvm: pic: level sensitive irq not supported [ 1133.722531][T14418] usb 5-1: USB disconnect, device number 121 [ 1133.788376][T23322] fuse: Unknown parameter 'grou00000000000000000000' [ 1134.717385][T23356] fuse: Unknown parameter 'grou00000000000000000000' [ 1134.845094][T23364] FAULT_INJECTION: forcing a failure. [ 1134.845094][T23364] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.849644][T23364] CPU: 1 UID: 0 PID: 23364 Comm: syz.0.4749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.849679][T23364] Tainted: [L]=SOFTLOCKUP [ 1134.849683][T23364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1134.849690][T23364] Call Trace: [ 1134.849704][T23364] [ 1134.849709][T23364] dump_stack_lvl+0x100/0x190 [ 1134.849741][T23364] should_fail_ex.cold+0x5/0xa [ 1134.849759][T23364] should_failslab+0xc2/0x120 [ 1134.849777][T23364] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1134.849793][T23364] ? __alloc_skb+0x156/0x410 [ 1134.849813][T23364] ? __alloc_skb+0x35d/0x410 [ 1134.849829][T23364] ? __alloc_skb+0x156/0x410 [ 1134.849843][T23364] __alloc_skb+0x156/0x410 [ 1134.849857][T23364] ? __alloc_skb+0x35d/0x410 [ 1134.849871][T23364] ? __pfx___alloc_skb+0x10/0x10 [ 1134.849887][T23364] ? netlink_autobind.isra.0+0xa0/0x370 [ 1134.849909][T23364] netlink_alloc_large_skb+0x69/0x150 [ 1134.849927][T23364] netlink_sendmsg+0x680/0xda0 [ 1134.849947][T23364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.849966][T23364] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1134.849988][T23364] ____sys_sendmsg+0xa54/0xc30 [ 1134.850002][T23364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.850020][T23364] ___sys_sendmsg+0x190/0x1e0 [ 1134.850034][T23364] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.850063][T23364] __sys_sendmsg+0x170/0x220 [ 1134.850080][T23364] ? __pfx___sys_sendmsg+0x10/0x10 [ 1134.850101][T23364] ? __pfx_ksys_write+0x10/0x10 [ 1134.850118][T23364] __do_fast_syscall_32+0xde/0x660 [ 1134.850134][T23364] do_fast_syscall_32+0x32/0x70 [ 1134.850149][T23364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1134.850164][T23364] RIP: 0023:0xf7ff4579 [ 1134.850173][T23364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1134.850183][T23364] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1134.850195][T23364] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800014c0 [ 1134.850202][T23364] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.850208][T23364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.850215][T23364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.850221][T23364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.850235][T23364] [ 1134.997925][T23373] vivid-007: ================= START STATUS ================= [ 1135.002620][T23373] vivid-007: Generate PTS: true [ 1135.004709][T23373] vivid-007: Generate SCR: true [ 1135.006916][T23373] tpg source WxH: 320x240 (Y'CbCr) [ 1135.009103][T23373] tpg field: 1 [ 1135.010533][T23373] tpg crop: (0,0)/320x240 [ 1135.013892][T23373] tpg compose: (0,0)/320x240 [ 1135.016005][T23373] tpg colorspace: 8 [ 1135.017986][T23373] tpg transfer function: 0/0 [ 1135.020074][T23373] tpg Y'CbCr encoding: 0/0 [ 1135.022938][T23373] tpg quantization: 0/0 [ 1135.025054][T23373] tpg RGB range: 0/2 [ 1135.026413][T23373] vivid-007: ================== END STATUS ================== [ 1135.523857][ T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1135.716830][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1135.735005][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1135.788221][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1135.815157][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1135.850353][ T9] usb 6-1: Product: syz [ 1135.865461][ T9] usb 6-1: Manufacturer: syz [ 1135.879367][ T9] usb 6-1: SerialNumber: syz [ 1136.095986][ T9] usb 6-1: config 0 descriptor?? [ 1136.151117][ T9] usb 6-1: selecting invalid altsetting 0 [ 1136.770326][ T9] usb 6-1: USB disconnect, device number 107 [ 1136.891650][T14418] usb 11-1: new high-speed USB device number 104 using dummy_hcd [ 1137.042657][T14418] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1137.045831][T14418] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1137.053891][T14418] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1137.056878][T14418] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1137.059815][T14418] usb 11-1: Product: syz [ 1137.061187][T14418] usb 11-1: Manufacturer: syz [ 1137.071649][T14418] usb 11-1: SerialNumber: syz [ 1137.074931][T14418] usb 11-1: config 0 descriptor?? [ 1137.082989][T14418] usb 11-1: selecting invalid altsetting 0 [ 1137.336178][T17073] block nbd0: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 120 seconds [ 1137.339806][T17073] block nbd0: Possible stuck request ffff888026800200: control (read@1024,1024B). Runtime 120 seconds [ 1137.343531][T17073] block nbd0: Possible stuck request ffff888026800400: control (read@2048,1024B). Runtime 120 seconds [ 1137.347042][ T6005] usb 11-1: USB disconnect, device number 104 [ 1137.350350][T17073] block nbd0: Possible stuck request ffff888026800600: control (read@3072,1024B). Runtime 120 seconds [ 1138.285767][T22857] vhci_hcd: connection reset by peer [ 1138.294551][T11792] vhci_hcd vhci_hcd.0: stop threads [ 1138.296830][T11792] vhci_hcd vhci_hcd.0: release socket [ 1138.314319][T11792] vhci_hcd vhci_hcd.0: disconnect device [ 1138.318550][T19294] usb 38-1: device descriptor read/8, error -110 [ 1138.519147][T22330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1138.533350][T22330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1138.542046][T22330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1138.547059][T22330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1138.549872][T22330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1138.611798][T23117] bond0: (slave syz_tun): Releasing backup interface [ 1138.715110][T19294] usb usb38-port1: attempt power cycle [ 1138.757947][T11185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.773567][T23433] chnl_net:caif_netlink_parms(): no params data found [ 1138.819304][T23433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.821734][T23433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.824253][T23433] bridge_slave_0: entered allmulticast mode [ 1138.828362][T23433] bridge_slave_0: entered promiscuous mode [ 1138.833183][T23433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.836359][T23433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.839569][T23433] bridge_slave_1: entered allmulticast mode [ 1138.843757][T23433] bridge_slave_1: entered promiscuous mode [ 1138.864519][T19600] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1138.882879][T11185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.915995][T23433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.921536][ T6005] usb 11-1: new full-speed USB device number 105 using dummy_hcd [ 1138.922442][T23433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.971909][T11185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.980226][T23433] team0: Port device team_slave_0 added [ 1138.983966][T23433] team0: Port device team_slave_1 added [ 1138.998075][T23433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.000323][T23433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.008540][T23433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.012973][T23433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.015393][T23433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.026363][T23433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.054500][T11185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.088003][ T6005] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1139.092041][ T6005] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1139.104525][ T6005] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.108395][ T6005] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.111058][ T6005] usb 11-1: Product: á±® [ 1139.113080][ T6005] usb 11-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1139.120136][ T6005] usb 11-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1139.130510][T20703] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1139.141954][T23392] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1139.226048][T23433] hsr_slave_0: entered promiscuous mode [ 1139.233200][T23433] hsr_slave_1: entered promiscuous mode [ 1139.304459][ T6005] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 1139.306688][ T6005] cdc_ncm 11-1:1.0: bind() failure [ 1139.325331][ T6005] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1139.327938][ T6005] cdc_ncm 11-1:1.1: bind() failure [ 1139.443601][T20703] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1139.446864][ T6005] usb 11-1: USB disconnect, device number 105 [ 1139.450292][T20703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1139.455748][T20703] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1139.458660][T20703] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1139.461216][T20703] usb 6-1: Product: syz [ 1139.462736][T20703] usb 6-1: Manufacturer: syz [ 1139.464246][T20703] usb 6-1: SerialNumber: syz [ 1139.469883][T20703] usb 6-1: config 0 descriptor?? [ 1139.477617][T20703] usb 6-1: selecting invalid altsetting 0 [ 1139.485192][T11185] bridge_slave_1: left allmulticast mode [ 1139.487516][T11185] bridge_slave_1: left promiscuous mode [ 1139.489958][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.496288][T11185] bridge_slave_0: left allmulticast mode [ 1139.498522][T11185] bridge_slave_0: left promiscuous mode [ 1139.500848][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.545755][T11185] bond_slave_0: left promiscuous mode [ 1139.547656][T11185] bond_slave_1: left promiscuous mode [ 1139.750874][ T8244] usb 6-1: USB disconnect, device number 108 [ 1139.884003][T11185] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1139.887892][T11185] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1139.919448][T11185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.936885][T11185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.957241][T11185] bond0 (unregistering): Released all slaves [ 1140.048579][T11185] bond1 (unregistering): Released all slaves [ 1140.142429][T11185] bond2 (unregistering): Released all slaves [ 1140.202279][T14418] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1140.298979][T23459] fuse: Unknown parameter 'group_i00000000000000000000' [ 1140.299216][T11185] bond3 (unregistering): Released all slaves [ 1140.353057][T14418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1140.357490][T14418] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1140.391256][T14418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.399121][T14418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.402253][T23462] picdev_read: 24 callbacks suppressed [ 1140.402265][T23462] kvm: pic: non byte read [ 1140.403369][T23462] pic_ioport_write: 22 callbacks suppressed [ 1140.403377][T23462] kvm: pic: level sensitive irq not supported [ 1140.404416][T14418] usb 6-1: Product: á±® [ 1140.406043][T23462] kvm: pic: non byte read [ 1140.407843][T14418] usb 6-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1140.407860][T14418] usb 6-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1140.414702][T23444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1140.432293][T19294] usb usb38-port1: unable to enumerate USB device [ 1140.454825][T23462] kvm: pic: level sensitive irq not supported [ 1140.455155][T23462] kvm: pic: non byte read [ 1140.461048][T23462] kvm: pic: level sensitive irq not supported [ 1140.461359][T23462] kvm: pic: non byte read [ 1140.474048][T23462] kvm: pic: level sensitive irq not supported [ 1140.474365][T23462] kvm: pic: non byte read [ 1140.480039][T23462] kvm: pic: level sensitive irq not supported [ 1140.480354][T23462] kvm: pic: non byte read [ 1140.486810][T23462] kvm: pic: level sensitive irq not supported [ 1140.487153][T23462] kvm: pic: non byte read [ 1140.494013][T23462] kvm: pic: level sensitive irq not supported [ 1140.494332][T23462] kvm: pic: non byte read [ 1140.503053][T23462] kvm: pic: level sensitive irq not supported [ 1140.503377][T23462] kvm: pic: non byte read [ 1140.509843][T23462] kvm: pic: level sensitive irq not supported [ 1140.510163][T23462] kvm: pic: non byte read [ 1140.517060][T23462] kvm: pic: level sensitive irq not supported [ 1140.623489][ T5951] Bluetooth: hci1: command tx timeout [ 1140.698364][T14418] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1140.701126][T14418] cdc_ncm 6-1:1.0: bind() failure [ 1140.715455][T14418] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1140.718117][T14418] cdc_ncm 6-1:1.1: bind() failure [ 1140.725279][T14418] usb 6-1: USB disconnect, device number 109 [ 1140.949535][T23433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1140.956402][T23433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1140.963793][T23433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1141.065981][T23433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1141.138859][T23433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.159892][T23495] fuse: Unknown parameter 'group_id00000000000000000000' [ 1141.171366][T23433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.184165][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.187229][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.192972][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.195519][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.498171][T23433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.536597][T23433] veth0_vlan: entered promiscuous mode [ 1141.543518][T23433] veth1_vlan: entered promiscuous mode [ 1141.603861][T23433] veth0_macvtap: entered promiscuous mode [ 1141.613340][T23433] veth1_macvtap: entered promiscuous mode [ 1141.627400][T23433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.633207][T23433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.638579][T11792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.644748][T11792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.647385][T11792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.650703][T11792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.675886][T11185] hsr_slave_0: left promiscuous mode [ 1141.678237][T11185] hsr_slave_1: left promiscuous mode [ 1141.680566][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.683302][T11185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.686317][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.688681][T11185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.700626][T11185] veth1_macvtap: left promiscuous mode [ 1141.703023][T11185] veth0_macvtap: left promiscuous mode [ 1141.704774][T11185] veth1_vlan: left promiscuous mode [ 1141.706463][T11185] veth0_vlan: left promiscuous mode [ 1141.787063][T23520] fuse: Unknown parameter 'group_id00000000000000000000' [ 1142.141606][ T8244] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1142.293991][ T8244] usb 6-1: Using ep0 maxpacket: 32 [ 1142.304508][ T8244] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1142.308819][ T8244] usb 6-1: config 0 has no interface number 0 [ 1142.315385][ T8244] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1142.318250][ T8244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.320722][ T8244] usb 6-1: Product: syz [ 1142.322733][ T8244] usb 6-1: Manufacturer: syz [ 1142.324293][ T8244] usb 6-1: SerialNumber: syz [ 1142.371640][ T6024] usb 11-1: new high-speed USB device number 106 using dummy_hcd [ 1142.648344][ T6024] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1142.657059][ T6024] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1142.681098][ T6024] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1142.685086][ T6024] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1142.687928][ T6024] usb 11-1: Product: syz [ 1142.689307][ T6024] usb 11-1: Manufacturer: syz [ 1142.690964][ T6024] usb 11-1: SerialNumber: syz [ 1142.751518][ T5951] Bluetooth: hci1: command tx timeout [ 1142.759601][ T8244] usb 6-1: config 0 descriptor?? [ 1142.761738][ T6024] usb 11-1: config 0 descriptor?? [ 1142.768568][ T6024] usb 11-1: selecting invalid altsetting 0 [ 1142.775857][ T8244] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1142.778584][ T8244] usb 6-1: selecting invalid altsetting 1 [ 1142.780404][ T8244] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1142.796429][ T8244] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1142.799923][ T8244] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1142.807310][ T8244] usb 6-1: media controller created [ 1142.822923][ T8244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.122331][ T6024] usb 11-1: USB disconnect, device number 106 [ 1143.274200][T11185] team0 (unregistering): Port device team_slave_1 removed [ 1143.303275][T11185] team0 (unregistering): Port device team_slave_0 removed [ 1143.581514][T19294] usb 11-1: new full-speed USB device number 107 using dummy_hcd [ 1143.704229][T11792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.706690][T11792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.729011][T11792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.731659][T11792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.733100][T19294] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1143.738711][T19294] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1143.744817][T19294] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.747691][T19294] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.750642][T19294] usb 11-1: Product: á±® [ 1143.752376][T19294] usb 11-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1143.759130][T19294] usb 11-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1143.776135][T23527] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1143.902040][ T8244] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1143.904343][ T8244] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1143.921875][T23518] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1143.988905][T11185] IPVS: stop unused estimator thread 0... [ 1144.006345][T19294] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 1144.008535][T19294] cdc_ncm 11-1:1.0: bind() failure [ 1144.012685][T19294] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1144.014817][T19294] cdc_ncm 11-1:1.1: bind() failure [ 1144.025283][T19294] usb 11-1: USB disconnect, device number 107 [ 1144.781629][ T5951] Bluetooth: hci1: command tx timeout [ 1144.811541][ T6005] usb 11-1: new high-speed USB device number 108 using dummy_hcd [ 1144.962112][ T6005] usb 11-1: Using ep0 maxpacket: 8 [ 1144.965119][ T6005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1144.967803][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1144.971220][ T6005] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1144.975334][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1144.978856][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1144.984437][ T6005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1144.986767][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1144.990259][ T6005] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1144.994283][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1144.997739][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1145.002037][ T6005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1145.004464][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1145.008373][ T6005] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1145.012199][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1145.015666][ T6005] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1145.021012][ T6005] usb 11-1: string descriptor 0 read error: -22 [ 1145.031579][ T6005] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1145.034444][ T6005] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.040842][ T6005] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1145.065860][ T8244] usb 6-1: USB disconnect, device number 110 [ 1145.145366][T23570] fuse: Bad value for 'user_id' [ 1145.147712][T23570] fuse: Bad value for 'user_id' [ 1145.558901][ T8244] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1145.723721][ T8244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1145.727367][ T8244] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1145.734697][ T8244] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.737627][ T8244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.740400][ T8244] usb 5-1: Product: á±® [ 1145.742315][ T8244] usb 5-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1145.749482][ T8244] usb 5-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1145.800513][T23562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1146.013028][ T8244] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1146.021102][ T8244] cdc_ncm 5-1:1.0: bind() failure [ 1146.025986][ T8244] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1146.031407][ T8244] cdc_ncm 5-1:1.1: bind() failure [ 1146.046283][ T8244] usb 5-1: USB disconnect, device number 122 [ 1146.871114][ T5951] Bluetooth: hci1: command tx timeout [ 1147.262489][ T6005] usb 11-1: USB disconnect, device number 108 [ 1147.491339][T23606] fuse: Bad value for 'user_id' [ 1147.493067][T23606] fuse: Bad value for 'user_id' [ 1148.809621][ T6005] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1148.969740][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 1148.973951][ T6005] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1148.977047][T23633] fuse: Bad value for 'fd' [ 1148.979258][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.987968][ T6005] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1148.992944][ T6005] pvrusb2: ********** [ 1148.995567][ T6005] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1149.000669][ T6005] pvrusb2: Important functionality might not be entirely working. [ 1149.004093][ T6005] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1149.007818][ T6005] pvrusb2: ********** [ 1149.058445][T23639] fuse: Bad value for 'fd' [ 1149.495121][ T8244] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1149.581315][T23647] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1149.583794][T23647] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1149.586349][T23647] overlayfs: missing 'lowerdir' [ 1149.661379][ T8244] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1149.665818][ T8244] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1149.673528][ T8244] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1149.677420][ T8244] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1149.681972][ T8244] usb 6-1: Product: syz [ 1149.683719][ T8244] usb 6-1: Manufacturer: syz [ 1149.685621][ T8244] usb 6-1: SerialNumber: syz [ 1149.693344][ T8244] usb 6-1: config 0 descriptor?? [ 1149.703123][ T8244] usb 6-1: selecting invalid altsetting 0 [ 1149.800439][ T2490] pvrusb2: Invalid write control endpoint [ 1149.804895][ T6005] usb 5-1: USB disconnect, device number 123 [ 1149.846795][ T2490] pvrusb2: Invalid write control endpoint [ 1149.862656][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1149.867788][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1149.879554][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1149.884988][ T2490] pvrusb2: Device being rendered inoperable [ 1149.889091][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1149.891302][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1149.904776][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1149.906547][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1149.914803][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1150.307162][ T6442] usb 6-1: USB disconnect, device number 111 [ 1150.953134][T23669] fuse: Bad value for 'fd' [ 1150.973014][ T6442] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1151.176641][ T6442] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1151.213714][ T6442] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1151.284151][ T6442] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.326010][ T6442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.359369][ T6442] usb 6-1: Product: á±® [ 1151.371134][ T6442] usb 6-1: Manufacturer: 츩ꑿèƒã·–ꨤ鲨⢽빞ᇜ赒ൡ鑵᷆êŸå¾¾ï˜å¨¬Ü±é‚Œèª»æ¨ˆä¸‡ë—®æ™Šë‡±ê¬¶äš¤î•›î½…擺äºá¼Ÿá†•î«•áª¬æ³å†±è—ˆì”»æšê™Šè¨¤ì§·ê­«áå™è›ç·½äµ¨ë´»å°â¹›î±¤ëŽ±ê›©ì»¡é²ãº—æ¤á³µä½¢é ¶ã©Šî¶¦ïº¨ïˆ¹ã’Š [ 1151.399830][ T6442] usb 6-1: SerialNumber: 兑鼿왓⑒æສ⼜쭄纱凞鷋䇙䌞淂ᒰ瞮ê¡î£‚抻豞ᰫë“ⴀ龎å ãŽ¡îšê›°ì¸Ÿã»ˆëªå¹½æŠºà±‹â­›éŠŒãš“誤雠滭전欌濿ë¿ã‚脽Ⱦ쉋좣봩胺ʧ⑔ऩ℗▯⺼쵱㟩ïˆè¤½ä蜫㧖äªîš‹è¼‡î†Ÿê’œí˜ŒëŒ«ä‘•á€¡ï°«ê³’䪵㩅褈俭᠅棭츻ꀯ痶ඉ᧾茟毿뮘＿èﵞæ’﷥㹋㉶혻ൊⶡ࢙赟âŽæˆ§çŸšéž³è¥žë±·ä‡°î…è°¯ [ 1151.423985][T23640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1151.548333][ T843] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1151.708228][ T843] usb 5-1: Using ep0 maxpacket: 8 [ 1151.712303][ T6442] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1151.714920][ T6442] cdc_ncm 6-1:1.0: bind() failure [ 1151.718492][T19294] usb 11-1: new high-speed USB device number 109 using dummy_hcd [ 1151.725950][ T6442] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1151.731674][ T6442] cdc_ncm 6-1:1.1: bind() failure [ 1151.737010][ T843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1151.737904][ T6442] usb 6-1: USB disconnect, device number 112 [ 1151.744172][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.751161][ T843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1151.753454][ T843] pvrusb2: ********** [ 1151.754836][ T843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1151.757981][ T843] pvrusb2: Important functionality might not be entirely working. [ 1151.770099][ T843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1151.773957][ T843] pvrusb2: ********** [ 1151.878277][T19294] usb 11-1: Using ep0 maxpacket: 8 [ 1151.881314][T19294] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1151.883652][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1151.886939][T19294] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1151.890421][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1151.893734][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1151.897601][T19294] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1151.900026][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1151.903308][T19294] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1151.906737][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1151.910918][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1151.914581][T19294] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1151.916830][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1151.920996][T19294] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1151.925550][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1151.929113][T19294] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1151.934651][T19294] usb 11-1: string descriptor 0 read error: -22 [ 1151.936631][T19294] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1151.939434][T19294] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.949095][T19294] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1152.154164][T14418] usb 11-1: USB disconnect, device number 109 [ 1152.509334][ T843] usb 5-1: USB disconnect, device number 124 [ 1152.511803][ T843] pvrusb2: Device being rendered inoperable [ 1152.585866][T23703] fuse: Bad value for 'fd' [ 1152.719199][T23711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4851'. [ 1152.724727][T23711] bond0: left promiscuous mode [ 1152.726850][T23711] syz_tun: left promiscuous mode [ 1152.730424][T23711] mac80211_hwsim hwsim77 wlan1: left promiscuous mode [ 1152.734756][T23711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.504102][T22330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1153.510014][T22330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1153.513873][T22330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1153.517903][T22330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1153.527990][T22330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1153.619181][T23731] fuse: Bad value for 'fd' [ 1153.621191][T14323] bond0: (slave syz_tun): Releasing backup interface [ 1153.682304][T23722] chnl_net:caif_netlink_parms(): no params data found [ 1153.732768][T23722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.735807][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.739098][T23722] bridge_slave_0: entered allmulticast mode [ 1153.742474][T23722] bridge_slave_0: entered promiscuous mode [ 1153.753710][T23722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.756492][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.762808][T23722] bridge_slave_1: entered allmulticast mode [ 1153.766521][T23722] bridge_slave_1: entered promiscuous mode [ 1153.965503][T23722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.970332][T23722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.986324][T23722] team0: Port device team_slave_0 added [ 1153.989832][T23722] team0: Port device team_slave_1 added [ 1154.003974][T23722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.006250][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.015597][T23722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.022144][T23722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.025305][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.035881][T23722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.047119][T23536] usb 11-1: new high-speed USB device number 110 using dummy_hcd [ 1154.071497][T23722] hsr_slave_0: entered promiscuous mode [ 1154.074236][T23722] hsr_slave_1: entered promiscuous mode [ 1154.076571][T23722] debugfs: 'hsr0' already exists in 'hsr' [ 1154.078419][T23722] Cannot create hsr debugfs directory [ 1154.189002][T23722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.207373][T23536] usb 11-1: Using ep0 maxpacket: 8 [ 1154.218366][T23536] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1154.222325][T23536] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.229421][T23536] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1154.236919][T23536] pvrusb2: ********** [ 1154.238276][T23536] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1154.241446][T23536] pvrusb2: Important functionality might not be entirely working. [ 1154.258031][T23536] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1154.261465][T23536] pvrusb2: ********** [ 1154.316310][T23722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.333951][T23748] pic_ioport_write: 6 callbacks suppressed [ 1154.333970][T23748] kvm: pic: level sensitive irq not supported [ 1154.336759][T23748] picdev_read: 7 callbacks suppressed [ 1154.336776][T23748] kvm: pic: non byte read [ 1154.352164][T23748] kvm: pic: level sensitive irq not supported [ 1154.352511][T23748] kvm: pic: non byte read [ 1154.361428][T23748] kvm: pic: level sensitive irq not supported [ 1154.361814][T23748] kvm: pic: non byte read [ 1154.367104][T23746] overlayfs: failed to clone upperpath [ 1154.370605][T23748] kvm: pic: level sensitive irq not supported [ 1154.370952][T23748] kvm: pic: non byte read [ 1154.375002][T23746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1154.379236][T23746] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1154.383060][T23746] overlayfs: missing 'lowerdir' [ 1154.410755][T23748] kvm: pic: level sensitive irq not supported [ 1154.411081][T23748] kvm: pic: non byte read [ 1154.418092][T23748] kvm: pic: level sensitive irq not supported [ 1154.418427][T23748] kvm: pic: non byte read [ 1154.491805][T23722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.654313][T23722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.944537][T23722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1154.953714][T23722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1154.967255][T23722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1154.975028][T23722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1155.081195][T23722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.102242][T23722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.117182][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.119771][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.152235][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.155252][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.452669][T23773] fuse: Bad value for 'fd' [ 1155.466448][T23770] FAULT_INJECTION: forcing a failure. [ 1155.466448][T23770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.471910][T23770] CPU: 3 UID: 0 PID: 23770 Comm: syz.0.4865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.471939][T23770] Tainted: [L]=SOFTLOCKUP [ 1155.471945][T23770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1155.471956][T23770] Call Trace: [ 1155.471963][T23770] [ 1155.471970][T23770] dump_stack_lvl+0x100/0x190 [ 1155.471997][T23770] should_fail_ex.cold+0x5/0xa [ 1155.472026][T23770] _copy_to_user+0x32/0xd0 [ 1155.472062][T23770] simple_read_from_buffer+0xcb/0x170 [ 1155.472083][T23770] proc_fail_nth_read+0x1af/0x230 [ 1155.472108][T23770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1155.472131][T23770] ? rw_verify_area+0xce/0x6d0 [ 1155.472148][T23770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1155.472168][T23770] vfs_read+0x1e4/0xb30 [ 1155.472190][T23770] ? __pfx_vfs_read+0x10/0x10 [ 1155.472206][T23770] ? find_held_lock+0x2b/0x80 [ 1155.472225][T23770] ? __fget_files+0x215/0x3d0 [ 1155.472249][T23770] ? __fget_files+0x21f/0x3d0 [ 1155.472276][T23770] ksys_read+0x12a/0x250 [ 1155.472295][T23770] ? __pfx_ksys_read+0x10/0x10 [ 1155.472322][T23770] do_int80_emulation+0x101/0x470 [ 1155.472354][T23770] asm_int80_emulation+0x1a/0x20 [ 1155.472372][T23770] RIP: 0023:0xf71f572b [ 1155.472387][T23770] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1155.472403][T23770] RSP: 002b:00000000f54954bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1155.472421][T23770] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54955d0 [ 1155.472432][T23770] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.472442][T23770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.472452][T23770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.472462][T23770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.472486][T23770] [ 1155.496858][T23722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.586593][T22330] Bluetooth: hci4: command tx timeout [ 1155.735893][T23722] veth0_vlan: entered promiscuous mode [ 1155.787931][T23722] veth1_vlan: entered promiscuous mode [ 1155.832733][T23722] veth0_macvtap: entered promiscuous mode [ 1155.840441][T23722] veth1_macvtap: entered promiscuous mode [ 1155.856844][T23722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.880471][T23722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.900154][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.903778][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.907752][ T2490] pvrusb2: Invalid write control endpoint [ 1155.933947][T23536] usb 11-1: USB disconnect, device number 110 [ 1155.950923][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.955928][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.991477][ T2490] pvrusb2: Invalid write control endpoint [ 1155.993337][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1156.006181][ T6442] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1156.008982][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1156.016735][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1156.023230][ T2490] pvrusb2: Device being rendered inoperable [ 1156.030480][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1156.033485][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1156.042286][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1156.046390][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.048892][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.052843][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1156.070276][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1156.138881][ T6442] usb 5-1: device descriptor read/64, error -71 [ 1156.271469][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.274685][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.387383][ T6442] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1156.525877][ T6442] usb 5-1: device descriptor read/64, error -71 [ 1156.665827][T23814] fuse: Invalid rootmode [ 1156.676566][ T6442] usb usb5-port1: attempt power cycle [ 1156.826900][T23819] fuse: Invalid rootmode [ 1157.025554][ T6442] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1157.137004][T23536] usb 11-1: new high-speed USB device number 111 using dummy_hcd [ 1157.172968][ T6005] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1157.285582][T23536] usb 11-1: Using ep0 maxpacket: 8 [ 1157.290866][T23536] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1157.294068][T23536] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.344525][T23536] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1157.347561][T23536] pvrusb2: ********** [ 1157.349247][T23536] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1157.354393][T23536] pvrusb2: Important functionality might not be entirely working. [ 1157.362537][T23536] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1157.368252][T23536] pvrusb2: ********** [ 1157.494789][T23821] ªªªªª»: renamed from hsr0 (while UP) [ 1157.655008][ T6442] usb 5-1: device descriptor read/8, error -71 [ 1157.656810][T22330] Bluetooth: hci4: command tx timeout [ 1157.779178][T23824] netlink: 'syz.4.4881': attribute type 3 has an invalid length. [ 1157.782610][T23824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1157.905122][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 1158.489155][ T6005] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1158.492823][ T6442] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1158.704994][ T6442] usb 5-1: device descriptor read/8, error -71 [ 1158.779354][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.793289][ T6005] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1158.799801][ T6005] pvrusb2: ********** [ 1158.806084][ T6005] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1158.814686][ T6005] pvrusb2: Important functionality might not be entirely working. [ 1158.814782][ T6442] usb usb5-port1: unable to enumerate USB device [ 1158.817335][ T6005] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1158.817346][ T6005] pvrusb2: ********** [ 1159.463866][ T2490] pvrusb2: Invalid write control endpoint [ 1159.464634][T23536] usb 11-1: USB disconnect, device number 111 [ 1159.488501][ T2490] pvrusb2: Invalid write control endpoint [ 1159.490993][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1159.495845][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1159.498886][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1159.502400][ T2490] pvrusb2: Device being rendered inoperable [ 1159.508436][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1159.510745][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1159.514542][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1159.516420][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1159.520540][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1159.533230][T23845] fuse: Bad value for 'rootmode' [ 1159.563218][ T2490] pvrusb2: Invalid write control endpoint [ 1159.567041][ T6005] usb 6-1: USB disconnect, device number 113 [ 1159.601233][ T2490] pvrusb2: Invalid write control endpoint [ 1159.603641][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1159.608159][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1159.610978][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1159.615144][ T2490] pvrusb2: Device being rendered inoperable [ 1159.617681][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1159.621109][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1159.625743][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1159.628072][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1159.631951][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1159.735779][T22330] Bluetooth: hci4: command tx timeout [ 1160.154011][ T6005] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1160.264028][T23536] usb 11-1: new high-speed USB device number 112 using dummy_hcd [ 1160.303905][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 1160.307002][ T6005] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1160.309955][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.318332][ T6005] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1160.321131][ T6005] pvrusb2: ********** [ 1160.322516][ T6005] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1160.332705][ T6005] pvrusb2: Important functionality might not be entirely working. [ 1160.336820][ T6005] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1160.340519][ T6005] pvrusb2: ********** [ 1160.426010][T23536] usb 11-1: Using ep0 maxpacket: 8 [ 1160.429872][T23536] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1160.432733][T23536] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.438501][T23536] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1160.440799][T23536] pvrusb2: ********** [ 1160.442077][T23536] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1160.445445][T23536] pvrusb2: Important functionality might not be entirely working. [ 1160.447951][T23536] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1160.451479][T23536] pvrusb2: ********** [ 1160.556480][ T2490] pvrusb2: Invalid write control endpoint [ 1160.557344][ T6005] usb 6-1: USB disconnect, device number 114 [ 1160.600188][ T2490] pvrusb2: Invalid write control endpoint [ 1160.602089][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1160.605151][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1160.607579][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1160.610739][ T2490] pvrusb2: Device being rendered inoperable [ 1160.612754][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1160.616499][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1160.619298][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1160.621291][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1160.624578][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1161.090862][T23888] fuse: Bad value for 'rootmode' [ 1161.465737][ T2490] pvrusb2: Invalid write control endpoint [ 1161.466749][T23536] usb 11-1: USB disconnect, device number 112 [ 1161.494645][ T6107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1161.686759][ T2490] pvrusb2: Invalid write control endpoint [ 1161.697664][ T6107] usb 5-1: Using ep0 maxpacket: 8 [ 1161.700338][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1161.717320][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1161.728567][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1161.739752][ T6107] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1161.743057][ T6107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.750874][ T2490] pvrusb2: Device being rendered inoperable [ 1161.757084][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1161.766237][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1161.804450][ T6107] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1161.807478][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1161.813285][T22330] Bluetooth: hci4: command tx timeout [ 1161.829934][ T6107] pvrusb2: ********** [ 1161.834706][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1161.861339][ T6107] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1161.864971][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1161.890193][ T6107] pvrusb2: Important functionality might not be entirely working. [ 1161.913830][ T6107] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1161.932273][ T6107] pvrusb2: ********** [ 1161.961984][T23906] netlink: 'syz.4.4903': attribute type 10 has an invalid length. [ 1161.994159][T23906] team0: Cannot enslave team device to itself [ 1162.213352][T23536] usb 11-1: new high-speed USB device number 113 using dummy_hcd [ 1162.342894][T23536] usb 11-1: device descriptor read/64, error -71 [ 1162.582985][T23536] usb 11-1: new high-speed USB device number 114 using dummy_hcd [ 1162.598640][ T2490] pvrusb2: Invalid write control endpoint [ 1162.608948][ T6107] usb 5-1: USB disconnect, device number 3 [ 1162.743001][T23536] usb 11-1: device descriptor read/64, error -71 [ 1162.872067][T23536] usb usb11-port1: attempt power cycle [ 1162.964576][ T10] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1163.142489][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1163.148726][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1163.160604][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.262751][T23536] usb 11-1: new high-speed USB device number 115 using dummy_hcd [ 1163.293477][T23536] usb 11-1: device descriptor read/8, error -71 [ 1163.338941][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1163.344387][ T2490] pvrusb2: Invalid write control endpoint [ 1163.360609][ T10] pvrusb2: ********** [ 1163.367451][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1163.375070][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1163.397982][ T10] pvrusb2: Important functionality might not be entirely working. [ 1163.398301][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1163.412159][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1163.417732][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1163.419744][ T2490] pvrusb2: Device being rendered inoperable [ 1163.429565][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1163.431972][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1163.434380][ T10] pvrusb2: ********** [ 1163.440020][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1163.443205][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1163.446413][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1163.480895][T23921] fuse: Bad value for 'rootmode' [ 1163.532534][T23536] usb 11-1: new high-speed USB device number 116 using dummy_hcd [ 1163.553282][T23536] usb 11-1: device descriptor read/8, error -71 [ 1163.663987][T23536] usb usb11-port1: unable to enumerate USB device [ 1164.364291][T23929] kvm: pic: non byte read [ 1164.367034][T23929] kvm: pic: level sensitive irq not supported [ 1164.367359][T23929] kvm: pic: non byte read [ 1164.371869][T23929] kvm: pic: level sensitive irq not supported [ 1164.372103][T23929] kvm: pic: non byte read [ 1164.377882][T23929] kvm: pic: level sensitive irq not supported [ 1164.378133][T23929] kvm: pic: non byte read [ 1164.383077][T23929] kvm: pic: level sensitive irq not supported [ 1164.383316][T23929] kvm: pic: non byte read [ 1164.387926][T23929] kvm: pic: level sensitive irq not supported [ 1164.388157][T23929] kvm: pic: non byte read [ 1164.394110][T23929] kvm: pic: level sensitive irq not supported [ 1164.394354][T23929] kvm: pic: non byte read [ 1164.399030][T23929] kvm: pic: level sensitive irq not supported [ 1164.399265][T23929] kvm: pic: non byte read [ 1164.404119][T23929] kvm: pic: level sensitive irq not supported [ 1164.404355][T23929] kvm: pic: non byte read [ 1164.529674][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1164.540331][T23935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1164.540933][ T2490] pvrusb2: Invalid write control endpoint [ 1164.542136][ T10] usb 6-1: USB disconnect, device number 115 [ 1164.616261][ T2490] pvrusb2: Invalid write control endpoint [ 1164.618279][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1164.621287][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1164.624512][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1164.627762][ T2490] pvrusb2: Device being rendered inoperable [ 1164.629876][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1164.632150][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1164.637772][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1164.639689][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1164.644512][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1164.902316][T19600] usb 11-1: new low-speed USB device number 117 using dummy_hcd [ 1165.077328][T19600] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1165.080277][T19600] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1165.084368][T19600] usb 11-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1165.088714][T19600] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1165.091160][T19600] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1165.096308][T19600] usb 11-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1165.100427][T19600] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1165.103033][T19600] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1165.106401][T19600] usb 11-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1165.111999][T19600] usb 11-1: string descriptor 0 read error: -22 [ 1165.114384][T19600] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1165.117293][T19600] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.123213][T19600] adutux 11-1:168.0: interrupt endpoints not found [ 1165.326030][T19600] usb 11-1: USB disconnect, device number 117 [ 1166.070788][ T6005] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1166.202270][ T6005] usb 5-1: device descriptor read/64, error -71 [ 1166.273588][T23978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1166.462565][ T6005] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1166.592275][ T6005] usb 5-1: device descriptor read/64, error -71 [ 1166.706310][ T6005] usb usb5-port1: attempt power cycle [ 1167.168630][ T6005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1167.320790][ T6005] usb 5-1: device descriptor read/8, error -71 [ 1167.360370][T24002] kvm: pic: non byte read [ 1167.365856][T24002] kvm: pic: level sensitive irq not supported [ 1167.367432][T24002] kvm: pic: level sensitive irq not supported [ 1167.572370][ T6005] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1167.593038][ T6005] usb 5-1: device descriptor read/8, error -71 [ 1167.702519][ T6005] usb usb5-port1: unable to enumerate USB device [ 1167.902330][ T6107] usb 11-1: new high-speed USB device number 118 using dummy_hcd [ 1167.925147][T17073] block nbd0: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 150 seconds [ 1167.929053][T17073] block nbd0: Possible stuck request ffff888026800200: control (read@1024,1024B). Runtime 150 seconds [ 1167.935048][T17073] block nbd0: Possible stuck request ffff888026800400: control (read@2048,1024B). Runtime 150 seconds [ 1167.938669][T17073] block nbd0: Possible stuck request ffff888026800600: control (read@3072,1024B). Runtime 150 seconds [ 1168.109664][ T6107] usb 11-1: Using ep0 maxpacket: 8 [ 1168.146412][ T6107] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1168.167214][ T6107] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.308039][ T6107] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1168.330182][ T6107] pvrusb2: ********** [ 1168.351410][ T6107] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1168.383689][ T6107] pvrusb2: Important functionality might not be entirely working. [ 1168.394156][ T6107] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1168.397828][ T6107] pvrusb2: ********** [ 1168.682247][ T6005] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1168.842211][ T6005] usb 6-1: Using ep0 maxpacket: 32 [ 1168.845131][ T6005] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.847656][ T6005] usb 6-1: config 0 has no interface number 0 [ 1168.851768][ T6005] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1168.855327][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.858267][ T6005] usb 6-1: Product: syz [ 1168.859777][ T6005] usb 6-1: Manufacturer: syz [ 1168.861388][ T6005] usb 6-1: SerialNumber: syz [ 1168.867356][ T6005] usb 6-1: config 0 descriptor?? [ 1168.872151][ T6005] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1168.877391][ T6005] usb 6-1: selecting invalid altsetting 1 [ 1168.879341][ T6005] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1168.890411][ T6005] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1168.894228][ T6005] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1168.897010][ T6005] usb 6-1: media controller created [ 1168.922910][ T6005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.112731][ T2490] pvrusb2: Invalid write control endpoint [ 1169.117398][ T6107] usb 11-1: USB disconnect, device number 118 [ 1169.269239][ T2490] pvrusb2: Invalid write control endpoint [ 1169.276680][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1169.291574][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1169.295211][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1169.298881][ T2490] pvrusb2: Device being rendered inoperable [ 1169.301180][ T2490] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1169.303991][ T2490] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1169.311855][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1169.316858][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1169.320386][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1169.512270][ T6024] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1169.673118][ T6024] usb 5-1: Using ep0 maxpacket: 8 [ 1169.678856][ T6024] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1169.681872][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.735636][ T6024] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1169.745187][ T6024] pvrusb2: ********** [ 1169.752785][ T6024] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1169.772668][ T6024] pvrusb2: Important functionality might not be entirely working. [ 1169.791832][ T6024] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1169.805441][ T6024] pvrusb2: ********** [ 1170.238463][ T6005] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1170.240815][ T6005] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1170.262448][T24014] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1170.568700][ T6024] usb 5-1: USB disconnect, device number 8 [ 1170.568744][ T2490] pvrusb2: Invalid write control endpoint [ 1170.634722][ T2490] pvrusb2: Invalid write control endpoint [ 1170.636737][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1170.640582][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1170.646387][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1170.649601][ T2490] pvrusb2: Device being rendered inoperable [ 1170.651578][ T2490] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1170.654636][ T2490] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1170.660115][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1170.661876][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1170.666033][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1170.824741][T24067] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1170.826974][T24067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1170.843560][T24067] vhci_hcd vhci_hcd.0: Device attached [ 1170.862628][T24070] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1170.864889][T24070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1170.874445][T24070] vhci_hcd vhci_hcd.0: Device attached [ 1170.889597][T24067] random: crng reseeded on system resumption [ 1170.948739][T24070] netlink: 'syz.0.4943': attribute type 12 has an invalid length. [ 1171.123816][ T6442] usb 50-1: SetAddress Request (2) to port 0 [ 1171.125855][ T6442] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1171.182411][T19294] usb 38-1: SetAddress Request (22) to port 0 [ 1171.185089][T19294] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1171.271048][T11792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.273735][T11792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.467747][T24068] vhci_hcd: connection reset by peer [ 1171.469730][T11185] vhci_hcd vhci_hcd.6: stop threads [ 1171.471546][T11185] vhci_hcd vhci_hcd.6: release socket [ 1171.473756][T11185] vhci_hcd vhci_hcd.6: disconnect device [ 1171.501609][T24074] vhci_hcd: connection reset by peer [ 1171.503824][ T1143] vhci_hcd vhci_hcd.0: stop threads [ 1171.505647][ T1143] vhci_hcd vhci_hcd.0: release socket [ 1171.507973][ T1143] vhci_hcd vhci_hcd.0: disconnect device [ 1171.944393][ T6005] usb 6-1: USB disconnect, device number 116 [ 1172.468636][T24103] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1173.351354][T24124] fuse: Unknown parameter 'user_i00000000000000000000' [ 1173.853391][T19315] usb 11-1: new high-speed USB device number 119 using dummy_hcd [ 1173.999752][T19315] usb 11-1: device descriptor read/64, error -71 [ 1174.253185][T19315] usb 11-1: new high-speed USB device number 120 using dummy_hcd [ 1174.407683][T19315] usb 11-1: device descriptor read/64, error -71 [ 1174.546060][T19315] usb usb11-port1: attempt power cycle [ 1174.916103][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1174.922334][T19315] usb 11-1: new high-speed USB device number 121 using dummy_hcd [ 1174.941595][T24139] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1174.945864][T19315] usb 11-1: device descriptor read/8, error -71 [ 1174.949484][T24139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1175.037094][T24143] FAULT_INJECTION: forcing a failure. [ 1175.037094][T24143] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.042690][T24143] CPU: 3 UID: 0 PID: 24143 Comm: syz.0.4961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.042719][T24143] Tainted: [L]=SOFTLOCKUP [ 1175.042725][T24143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1175.042736][T24143] Call Trace: [ 1175.042741][T24143] [ 1175.042748][T24143] dump_stack_lvl+0x100/0x190 [ 1175.042772][T24143] should_fail_ex.cold+0x5/0xa [ 1175.042800][T24143] should_failslab+0xc2/0x120 [ 1175.042823][T24143] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1175.042846][T24143] ? __alloc_skb+0x156/0x410 [ 1175.042867][T24143] ? __alloc_skb+0x35d/0x410 [ 1175.042892][T24143] ? __alloc_skb+0x156/0x410 [ 1175.042911][T24143] __alloc_skb+0x156/0x410 [ 1175.042931][T24143] ? __alloc_skb+0x35d/0x410 [ 1175.042967][T24143] ? __pfx___alloc_skb+0x10/0x10 [ 1175.042991][T24143] ? __pfx___might_resched+0x10/0x10 [ 1175.043021][T24143] netlink_alloc_large_skb+0x69/0x150 [ 1175.043047][T24143] netlink_sendmsg+0x680/0xda0 [ 1175.043077][T24143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.043104][T24143] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1175.043127][T24143] ____sys_sendmsg+0xa54/0xc30 [ 1175.043146][T24143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.043173][T24143] ___sys_sendmsg+0x190/0x1e0 [ 1175.043194][T24143] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.043269][T24143] __sys_sendmsg+0x170/0x220 [ 1175.043293][T24143] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.043322][T24143] ? __pfx_ksys_write+0x10/0x10 [ 1175.043337][T24143] ? fput+0x79/0x100 [ 1175.043359][T24143] __do_fast_syscall_32+0xde/0x660 [ 1175.043380][T24143] do_fast_syscall_32+0x32/0x70 [ 1175.043398][T24143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1175.043417][T24143] RIP: 0023:0xf7ff3579 [ 1175.043429][T24143] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1175.043445][T24143] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1175.043461][T24143] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000bc0 [ 1175.043470][T24143] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1175.043485][T24143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.043495][T24143] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1175.043505][T24143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.043526][T24143] [ 1175.206170][T24151] fuse: Unknown parameter 'user_i00000000000000000000' [ 1175.323326][T19315] usb 11-1: new high-speed USB device number 122 using dummy_hcd [ 1175.374640][T19315] usb 11-1: device descriptor read/8, error -71 [ 1175.483346][T19315] usb usb11-port1: unable to enumerate USB device [ 1176.222293][T19294] usb 38-1: device descriptor read/8, error -110 [ 1176.389413][T23536] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1176.451369][ T6442] usb 50-1: device descriptor read/8, error -110 [ 1176.542254][T23536] usb 6-1: Using ep0 maxpacket: 8 [ 1176.549151][T23536] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1176.552702][T23536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.576053][T23536] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1176.579035][T23536] pvrusb2: ********** [ 1176.580759][T23536] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1176.584780][T23536] pvrusb2: Important functionality might not be entirely working. [ 1176.588187][T23536] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1177.065792][ T6442] usb usb50-port1: attempt power cycle [ 1177.119076][T23536] pvrusb2: ********** [ 1177.183107][T19294] usb usb38-port1: attempt power cycle [ 1177.229595][T24188] bridge0: port 3(erspan0) entered blocking state [ 1177.232509][T24188] bridge0: port 3(erspan0) entered disabled state [ 1177.235573][T24188] erspan0: entered allmulticast mode [ 1177.240079][T24188] erspan0: entered promiscuous mode [ 1177.243341][T24188] bridge0: port 3(erspan0) entered blocking state [ 1177.246223][T24188] bridge0: port 3(erspan0) entered forwarding state [ 1177.252839][T24188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1177.428008][T24191] fuse: Unknown parameter 'user_id00000000000000000000' [ 1177.471648][ T2490] pvrusb2: Invalid write control endpoint [ 1177.474924][T23536] usb 6-1: USB disconnect, device number 117 [ 1177.598833][ T2490] pvrusb2: Invalid write control endpoint [ 1177.600659][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1177.608537][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1177.612846][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1177.617912][ T2490] pvrusb2: Device being rendered inoperable [ 1177.621136][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1177.625123][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1177.633322][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1177.636360][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1177.641753][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1177.652768][ T6442] usb usb50-port1: unable to enumerate USB device [ 1177.752809][T19294] usb usb38-port1: unable to enumerate USB device [ 1177.941610][T24232] fuse: Unknown parameter 'user_id00000000000000000000' [ 1178.672676][T19315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1179.072228][T19315] usb 5-1: Using ep0 maxpacket: 8 [ 1179.076161][T19315] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1179.081043][T19315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.173332][T19315] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1179.175934][T19315] pvrusb2: ********** [ 1179.177368][T19315] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1179.181004][T19315] pvrusb2: Important functionality might not be entirely working. [ 1179.220449][T19315] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1179.225586][T19315] pvrusb2: ********** [ 1179.273570][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 1179.311753][T24273] FAULT_INJECTION: forcing a failure. [ 1179.311753][T24273] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.316070][T24273] CPU: 3 UID: 0 PID: 24273 Comm: syz.6.4993 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.316089][T24273] Tainted: [L]=SOFTLOCKUP [ 1179.316093][T24273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1179.316100][T24273] Call Trace: [ 1179.316104][T24273] [ 1179.316109][T24273] dump_stack_lvl+0x100/0x190 [ 1179.316136][T24273] should_fail_ex.cold+0x5/0xa [ 1179.316158][T24273] should_failslab+0xc2/0x120 [ 1179.316174][T24273] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1179.316190][T24273] ? __alloc_skb+0x156/0x410 [ 1179.316209][T24273] ? __alloc_skb+0x35d/0x410 [ 1179.316225][T24273] ? __alloc_skb+0x156/0x410 [ 1179.316240][T24273] __alloc_skb+0x156/0x410 [ 1179.316253][T24273] ? __alloc_skb+0x35d/0x410 [ 1179.316268][T24273] ? __pfx___alloc_skb+0x10/0x10 [ 1179.316283][T24273] ? netlink_autobind.isra.0+0xa0/0x370 [ 1179.316304][T24273] netlink_alloc_large_skb+0x69/0x150 [ 1179.316322][T24273] netlink_sendmsg+0x680/0xda0 [ 1179.316342][T24273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.316361][T24273] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1179.316378][T24273] ____sys_sendmsg+0xa54/0xc30 [ 1179.316392][T24273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1179.316411][T24273] ___sys_sendmsg+0x190/0x1e0 [ 1179.316424][T24273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.316454][T24273] __sys_sendmsg+0x170/0x220 [ 1179.316471][T24273] ? __pfx___sys_sendmsg+0x10/0x10 [ 1179.316492][T24273] ? __pfx_ksys_write+0x10/0x10 [ 1179.316504][T24273] ? fput+0x79/0x100 [ 1179.316521][T24273] __do_fast_syscall_32+0xde/0x660 [ 1179.316537][T24273] do_fast_syscall_32+0x32/0x70 [ 1179.316551][T24273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1179.316565][T24273] RIP: 0023:0xf7fa7579 [ 1179.316575][T24273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1179.316585][T24273] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1179.316596][T24273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1179.316603][T24273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.316609][T24273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.316615][T24273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1179.316622][T24273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.316635][T24273] [ 1179.434749][T24277] fuse: Unknown parameter 'user_id00000000000000000000' [ 1179.529923][T24280] netlink: 'syz.6.4995': attribute type 13 has an invalid length. [ 1179.533731][T24280] netlink: 'syz.6.4995': attribute type 17 has an invalid length. [ 1179.778766][T24280] net_ratelimit: 5266 callbacks suppressed [ 1179.778819][T24280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1180.181877][T19315] usb 5-1: USB disconnect, device number 9 [ 1180.184672][ T2490] pvrusb2: Invalid write control endpoint [ 1180.185529][T24287] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1180.346454][ T2490] pvrusb2: Invalid write control endpoint [ 1180.348927][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1180.358820][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1180.361778][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1180.367928][ T2490] pvrusb2: Device being rendered inoperable [ 1180.370519][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1180.375102][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1180.381941][ T2490] pvrusb2: Attached sub-driver cx25840 [ 1180.387360][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1180.390620][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1180.624988][T24316] FAULT_INJECTION: forcing a failure. [ 1180.624988][T24316] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.628997][T24316] CPU: 3 UID: 0 PID: 24316 Comm: syz.1.5005 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.629016][T24316] Tainted: [L]=SOFTLOCKUP [ 1180.629020][T24316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1180.629027][T24316] Call Trace: [ 1180.629031][T24316] [ 1180.629036][T24316] dump_stack_lvl+0x100/0x190 [ 1180.629053][T24316] should_fail_ex.cold+0x5/0xa [ 1180.629073][T24316] should_failslab+0xc2/0x120 [ 1180.629088][T24316] ? tomoyo_encode2+0xfb/0x3c0 [ 1180.629098][T24316] __kmalloc_noprof+0xf6/0x9c0 [ 1180.629114][T24316] ? tomoyo_encode2+0xfb/0x3c0 [ 1180.629123][T24316] tomoyo_encode2+0xfb/0x3c0 [ 1180.629135][T24316] tomoyo_encode+0x29/0x50 [ 1180.629146][T24316] tomoyo_realpath_from_path+0x18c/0x690 [ 1180.629160][T24316] tomoyo_path_number_perm+0x23c/0x580 [ 1180.629189][T24316] ? tomoyo_path_number_perm+0x22e/0x580 [ 1180.629207][T24316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1180.629238][T24316] ? find_held_lock+0x2b/0x80 [ 1180.629253][T24316] ? hook_file_ioctl_common+0x146/0x410 [ 1180.629270][T24316] ? __fget_files+0x215/0x3d0 [ 1180.629284][T24316] ? __fget_files+0x21f/0x3d0 [ 1180.629299][T24316] security_file_ioctl_compat+0xd3/0x230 [ 1180.629317][T24316] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1180.629337][T24316] __do_fast_syscall_32+0xde/0x660 [ 1180.629353][T24316] do_fast_syscall_32+0x32/0x70 [ 1180.629368][T24316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1180.629383][T24316] RIP: 0023:0xf741d579 [ 1180.629392][T24316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1180.629403][T24316] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1180.629414][T24316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0189436 [ 1180.629421][T24316] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.629427][T24316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.629434][T24316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1180.629440][T24316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.629454][T24316] [ 1180.630578][T24316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1181.375746][T24355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5009'. [ 1181.402285][T19294] usb 11-1: new high-speed USB device number 123 using dummy_hcd [ 1181.602314][T19294] usb 11-1: Using ep0 maxpacket: 8 [ 1181.609581][T19294] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1181.616899][T19294] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.626122][T19294] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1181.648139][T19294] pvrusb2: ********** [ 1181.650126][T19294] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1181.654707][T24373] FAULT_INJECTION: forcing a failure. [ 1181.654707][T24373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.654966][T19294] pvrusb2: Important functionality might not be entirely working. [ 1181.659363][T24373] CPU: 1 UID: 0 PID: 24373 Comm: syz.0.5010 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.659382][T24373] Tainted: [L]=SOFTLOCKUP [ 1181.659386][T24373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1181.659393][T24373] Call Trace: [ 1181.659397][T24373] [ 1181.659402][T24373] dump_stack_lvl+0x100/0x190 [ 1181.659421][T24373] should_fail_ex.cold+0x5/0xa [ 1181.659446][T24373] _copy_from_iter+0x1f4/0x1690 [ 1181.659467][T24373] ? __pfx__copy_from_iter+0x10/0x10 [ 1181.659484][T24373] ? rcu_is_watching+0x12/0xc0 [ 1181.659496][T24373] ? kfree+0x2a9/0x690 [ 1181.659506][T24373] ? file_tty_write.isra.0+0x64e/0x890 [ 1181.659527][T24373] file_tty_write.isra.0+0x45b/0x890 [ 1181.659547][T24373] vfs_write+0x6ac/0x1070 [ 1181.659561][T24373] ? __pfx_tty_write+0x10/0x10 [ 1181.659578][T24373] ? __pfx_vfs_write+0x10/0x10 [ 1181.659590][T24373] ? find_held_lock+0x2b/0x80 [ 1181.659610][T24373] ksys_write+0x12a/0x250 [ 1181.659622][T24373] ? __pfx_ksys_write+0x10/0x10 [ 1181.659634][T24373] ? __pfx_ksys_write+0x10/0x10 [ 1181.659650][T24373] __do_fast_syscall_32+0xde/0x660 [ 1181.659667][T24373] do_fast_syscall_32+0x32/0x70 [ 1181.659681][T24373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1181.659696][T24373] RIP: 0023:0xf7ff3579 [ 1181.659705][T24373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1181.659715][T24373] RSP: 002b:00000000f547450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1181.659726][T24373] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001980 [ 1181.659733][T24373] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.659740][T24373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1181.659746][T24373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1181.659752][T24373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.659766][T24373] [ 1181.737122][T19294] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1181.747137][T19294] pvrusb2: ********** [ 1181.974557][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.976783][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.498510][T24391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.534060][T24395] FAULT_INJECTION: forcing a failure. [ 1182.534060][T24395] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.538128][T24395] CPU: 1 UID: 0 PID: 24395 Comm: syz.1.5018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.538146][T24395] Tainted: [L]=SOFTLOCKUP [ 1182.538150][T24395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1182.538157][T24395] Call Trace: [ 1182.538163][T24395] [ 1182.538168][T24395] dump_stack_lvl+0x100/0x190 [ 1182.538185][T24395] should_fail_ex.cold+0x5/0xa [ 1182.538204][T24395] should_failslab+0xc2/0x120 [ 1182.538220][T24395] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1182.538244][T24395] ? __alloc_skb+0x156/0x410 [ 1182.538259][T24395] ? __alloc_skb+0x35d/0x410 [ 1182.538276][T24395] ? __alloc_skb+0x156/0x410 [ 1182.538290][T24395] __alloc_skb+0x156/0x410 [ 1182.538308][T24395] ? __alloc_skb+0x35d/0x410 [ 1182.538322][T24395] ? __pfx___alloc_skb+0x10/0x10 [ 1182.538337][T24395] ? netlink_autobind.isra.0+0xa0/0x370 [ 1182.538360][T24395] netlink_alloc_large_skb+0x69/0x150 [ 1182.538378][T24395] netlink_sendmsg+0x680/0xda0 [ 1182.538398][T24395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.538418][T24395] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1182.538434][T24395] ____sys_sendmsg+0xa54/0xc30 [ 1182.538449][T24395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.538467][T24395] ___sys_sendmsg+0x190/0x1e0 [ 1182.538482][T24395] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.538510][T24395] __sys_sendmsg+0x170/0x220 [ 1182.538527][T24395] ? __pfx___sys_sendmsg+0x10/0x10 [ 1182.538548][T24395] ? __pfx_ksys_write+0x10/0x10 [ 1182.538564][T24395] __do_fast_syscall_32+0xde/0x660 [ 1182.538581][T24395] do_fast_syscall_32+0x32/0x70 [ 1182.538596][T24395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1182.538610][T24395] RIP: 0023:0xf741d579 [ 1182.538620][T24395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1182.538631][T24395] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1182.538642][T24395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 1182.538649][T24395] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1182.538655][T24395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1182.538661][T24395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.538668][T24395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.538681][T24395] [ 1182.542424][ T6024] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1182.972236][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 1183.003243][ T6024] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1183.007958][ T6024] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1183.010916][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1183.013642][ T6024] usb 5-1: Product: syz [ 1183.015014][ T6024] usb 5-1: Manufacturer: syz [ 1183.016538][ T6024] usb 5-1: SerialNumber: syz [ 1183.022903][ T6024] usb 5-1: config 0 descriptor?? [ 1183.025751][T24388] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1183.706592][ T1418] ================================================================== [ 1183.709518][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5e0/0x620 [ 1183.711634][ T1418] Read of size 8 at addr ffff888052e0d020 by task aoe_tx0/1418 [ 1183.714765][ T1418] [ 1183.716066][ T1418] CPU: 3 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.716084][ T1418] Tainted: [L]=SOFTLOCKUP [ 1183.716088][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1183.716095][ T1418] Call Trace: [ 1183.716100][ T1418] [ 1183.716105][ T1418] dump_stack_lvl+0x100/0x190 [ 1183.716120][ T1418] print_report+0x156/0x4c9 [ 1183.716135][ T1418] ? __virt_addr_valid+0x81/0x620 [ 1183.716151][ T1418] ? __phys_addr+0xe8/0x180 [ 1183.716167][ T1418] ? handle_tx+0x5e0/0x620 [ 1183.716183][ T1418] kasan_report+0xdf/0x1a0 [ 1183.716203][ T1418] ? handle_tx+0x5e0/0x620 [ 1183.716221][ T1418] handle_tx+0x5e0/0x620 [ 1183.716239][ T1418] dev_hard_start_xmit+0x127/0x6c0 [ 1183.716254][ T1418] __dev_queue_xmit+0x6dd/0x46f0 [ 1183.716270][ T1418] ? finish_task_switch.isra.0+0x204/0xb70 [ 1183.716283][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1183.716298][ T1418] ? __lock_acquire+0x4a5/0x2630 [ 1183.716313][ T1418] ? ref_tracker_free+0x37e/0x6c0 [ 1183.716324][ T1418] ? do_raw_spin_lock+0x128/0x260 [ 1183.716340][ T1418] ? find_held_lock+0x2b/0x80 [ 1183.716351][ T1418] ? skb_dequeue+0x126/0x180 [ 1183.716363][ T1418] ? skb_dequeue+0x126/0x180 [ 1183.716374][ T1418] ? find_held_lock+0x2b/0x80 [ 1183.716384][ T1418] ? tx+0xa4/0x130 [ 1183.716396][ T1418] ? tx+0xa4/0x130 [ 1183.716407][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1183.716418][ T1418] ? __pfx_tx+0x10/0x10 [ 1183.716429][ T1418] tx+0xc4/0x130 [ 1183.716441][ T1418] kthread+0x1d8/0x3c0 [ 1183.716451][ T1418] ? __kthread_parkme+0xbb/0x230 [ 1183.716465][ T1418] ? __pfx_kthread+0x10/0x10 [ 1183.716474][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1183.716485][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 1183.716498][ T1418] ? __kthread_parkme+0x18c/0x230 [ 1183.716512][ T1418] ? __pfx_kthread+0x10/0x10 [ 1183.716521][ T1418] kthread+0x3b3/0x730 [ 1183.716537][ T1418] ? __pfx_kthread+0x10/0x10 [ 1183.716552][ T1418] ? ret_from_fork+0x79/0xaf0 [ 1183.716562][ T1418] ? ret_from_fork+0x79/0xaf0 [ 1183.716572][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1183.716582][ T1418] ? __pfx_kthread+0x10/0x10 [ 1183.716598][ T1418] ret_from_fork+0x754/0xaf0 [ 1183.716608][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.716619][ T1418] ? __switch_to+0x7b9/0x10c0 [ 1183.716632][ T1418] ? __pfx_kthread+0x10/0x10 [ 1183.716648][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1183.716667][ T1418] [ 1183.716671][ T1418] [ 1183.784297][ T1418] Allocated by task 24351: [ 1183.785576][ T1418] kasan_save_stack+0x30/0x50 [ 1183.786930][ T1418] kasan_save_track+0x14/0x30 [ 1183.788323][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 1183.789680][ T1418] alloc_tty_struct+0x96/0x8c0 [ 1183.791047][ T1418] tty_init_dev.part.0+0x20/0x470 [ 1183.792493][ T1418] tty_open+0xa63/0xfa0 [ 1183.793685][ T1418] chrdev_open+0x234/0x6a0 [ 1183.794965][ T1418] do_dentry_open+0x73e/0x1570 [ 1183.796352][ T1418] vfs_open+0x82/0x3f0 [ 1183.797529][ T1418] path_openat+0x21dc/0x3120 [ 1183.798903][ T1418] do_filp_open+0x1f7/0x420 [ 1183.800240][ T1418] do_sys_openat2+0x12e/0x220 [ 1183.801584][ T1418] __ia32_compat_sys_openat+0x12d/0x210 [ 1183.803190][ T1418] __do_fast_syscall_32+0xde/0x660 [ 1183.804654][ T1418] do_fast_syscall_32+0x32/0x70 [ 1183.806047][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1183.807914][ T1418] [ 1183.808612][ T1418] Freed by task 20703: [ 1183.809837][ T1418] kasan_save_stack+0x30/0x50 [ 1183.811228][ T1418] kasan_save_track+0x14/0x30 [ 1183.812578][ T1418] kasan_save_free_info+0x3b/0x70 [ 1183.814012][ T1418] __kasan_slab_free+0x5f/0x80 [ 1183.815389][ T1418] kfree+0x1c7/0x690 [ 1183.816513][ T1418] process_one_work+0x9c2/0x1840 [ 1183.817987][ T1418] worker_thread+0x5da/0xe40 [ 1183.819412][ T1418] kthread+0x3b3/0x730 [ 1183.820584][ T1418] ret_from_fork+0x754/0xaf0 [ 1183.821903][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1183.823282][ T1418] [ 1183.823980][ T1418] Last potentially related work creation: [ 1183.825588][ T1418] kasan_save_stack+0x30/0x50 [ 1183.826933][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 1183.828451][ T1418] insert_work+0x36/0x230 [ 1183.829717][ T1418] __queue_work+0x96f/0x10f0 [ 1183.831021][ T1418] queue_work_on+0x180/0x1e0 [ 1183.832318][ T1418] release_tty+0x4f3/0x5f0 [ 1183.833610][ T1418] tty_release_struct+0xb7/0xe0 [ 1183.835014][ T1418] tty_release+0xd7a/0x1300 [ 1183.836334][ T1418] __fput+0x3ff/0xb40 [ 1183.837491][ T1418] task_work_run+0x150/0x240 [ 1183.838832][ T1418] do_exit+0x829/0x2a30 [ 1183.840056][ T1418] do_group_exit+0xd5/0x2a0 [ 1183.841368][ T1418] get_signal+0x1ec7/0x21e0 [ 1183.842678][ T1418] arch_do_signal_or_restart+0x91/0x770 [ 1183.844271][ T1418] exit_to_user_mode_loop+0x86/0x4b0 [ 1183.845778][ T1418] __do_fast_syscall_32+0x4b6/0x660 [ 1183.847282][ T1418] do_fast_syscall_32+0x32/0x70 [ 1183.848689][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1183.850518][ T1418] [ 1183.851228][ T1418] The buggy address belongs to the object at ffff888052e0d000 [ 1183.851228][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1183.855205][ T1418] The buggy address is located 32 bytes inside of [ 1183.855205][ T1418] freed 2048-byte region [ffff888052e0d000, ffff888052e0d800) [ 1183.859045][ T1418] [ 1183.859805][ T1418] The buggy address belongs to the physical page: [ 1183.861615][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052e0b000 pfn:0x52e08 [ 1183.864443][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1183.866802][ T1418] memcg:ffff88805511d801 [ 1183.868050][ T1418] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 1183.870461][ T1418] page_type: f5(slab) [ 1183.871608][ T1418] raw: 04fff00000000240 ffff88801b84c140 ffffea0001b89810 ffffea0001bf8e10 [ 1183.874017][ T1418] raw: ffff888052e0b000 0000000000080006 00000000f5000000 ffff88805511d801 [ 1183.876553][ T1418] head: 04fff00000000240 ffff88801b84c140 ffffea0001b89810 ffffea0001bf8e10 [ 1183.879057][ T1418] head: ffff888052e0b000 0000000000080006 00000000f5000000 ffff88805511d801 [ 1183.881549][ T1418] head: 04fff00000000003 ffffea00014b8201 00000000ffffffff 00000000ffffffff [ 1183.884016][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1183.886460][ T1418] page dumped because: kasan: bad access detected [ 1183.888320][ T1418] page_owner tracks the page as allocated [ 1183.889939][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 24153, tgid 24152 (syz.4.4965), ts 1175251768683, free_ts 1175195045531 [ 1183.896345][ T1418] post_alloc_hook+0x1e1/0x250 [ 1183.897759][ T1418] get_page_from_freelist+0xe3d/0x2e10 [ 1183.899418][ T1418] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1183.901100][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 1183.902498][ T1418] new_slab+0x2c4/0x440 [ 1183.903708][ T1418] ___slab_alloc+0xda3/0x1ca0 [ 1183.905051][ T1418] __slab_alloc.isra.0+0x63/0x110 [ 1183.906486][ T1418] __kmalloc_cache_noprof+0x531/0x810 [ 1183.908062][ T1418] bpf_prog_alloc_no_stats+0x15f/0x5f0 [ 1183.909621][ T1418] bpf_prog_alloc+0x3b/0x200 [ 1183.910943][ T1418] bpf_prog_load+0x494/0x2bd0 [ 1183.912306][ T1418] __sys_bpf+0x118f/0x5050 [ 1183.913586][ T1418] __ia32_sys_bpf+0x79/0xf0 [ 1183.914885][ T1418] __do_fast_syscall_32+0xde/0x660 [ 1183.916349][ T1418] do_fast_syscall_32+0x32/0x70 [ 1183.917731][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1183.919631][ T1418] page last free pid 16607 tgid 16607 stack trace: [ 1183.921470][ T1418] __free_frozen_pages+0x822/0x1130 [ 1183.922947][ T1418] __put_partials+0x127/0x160 [ 1183.924339][ T1418] qlist_free_all+0x47/0xe0 [ 1183.925648][ T1418] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1183.927236][ T1418] __kasan_slab_alloc+0x69/0x90 [ 1183.928659][ T1418] kmem_cache_alloc_noprof+0x2ad/0x780 [ 1183.930264][ T1418] ptlock_alloc+0x1f/0x70 [ 1183.931515][ T1418] pte_alloc_one+0x84/0x3e0 [ 1183.932828][ T1418] __pte_alloc+0x6d/0x3f0 [ 1183.934078][ T1418] copy_page_range+0x3f17/0x6ba0 [ 1183.935513][ T1418] dup_mmap+0xbea/0x1e20 [ 1183.936737][ T1418] copy_process+0x7451/0x7890 [ 1183.938153][ T1418] kernel_clone+0xfc/0x930 [ 1183.939538][ T1418] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1183.941593][ T1418] __do_fast_syscall_32+0xde/0x660 [ 1183.943376][ T1418] do_fast_syscall_32+0x32/0x70 [ 1183.944789][ T1418] [ 1183.945490][ T1418] Memory state around the buggy address: [ 1183.947100][ T1418] ffff888052e0cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1183.949449][ T1418] ffff888052e0cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1183.951930][ T1418] >ffff888052e0d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1183.954400][ T1418] ^ [ 1183.955879][ T1418] ffff888052e0d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1183.958208][ T1418] ffff888052e0d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1183.960509][ T1418] ================================================================== [ 1183.962844][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1183.964924][ T1418] CPU: 3 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.967934][ T1418] Tainted: [L]=SOFTLOCKUP [ 1183.969213][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1183.972132][ T1418] Call Trace: [ 1183.973135][ T1418] [ 1183.974003][ T1418] dump_stack_lvl+0x100/0x190 [ 1183.975374][ T1418] vpanic+0x20d/0x630 [ 1183.976524][ T1418] panic+0xd1/0xd1 [ 1183.977625][ T1418] ? __pfx_panic+0x10/0x10 [ 1183.978941][ T1418] ? check_panic_on_warn+0x1f/0x90 [ 1183.980463][ T1418] check_panic_on_warn.cold+0x19/0x34 [ 1183.981987][ T1418] end_report.part.0+0x3a/0x90 [ 1183.983375][ T1418] kasan_report.cold+0xe/0x18 [ 1183.984739][ T1418] ? handle_tx+0x5e0/0x620 [ 1183.986036][ T1418] handle_tx+0x5e0/0x620 [ 1183.987297][ T1418] dev_hard_start_xmit+0x127/0x6c0 [ 1183.988783][ T1418] __dev_queue_xmit+0x6dd/0x46f0 [ 1183.990232][ T1418] ? finish_task_switch.isra.0+0x204/0xb70 [ 1183.991902][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1183.993441][ T1418] ? __lock_acquire+0x4a5/0x2630 [ 1183.994866][ T1418] ? ref_tracker_free+0x37e/0x6c0 [ 1183.996320][ T1418] ? do_raw_spin_lock+0x128/0x260 [ 1183.997819][ T1418] ? find_held_lock+0x2b/0x80 [ 1183.999228][ T1418] ? skb_dequeue+0x126/0x180 [ 1184.000518][ T1418] ? skb_dequeue+0x126/0x180 [ 1184.001834][ T1418] ? find_held_lock+0x2b/0x80 [ 1184.003153][ T1418] ? tx+0xa4/0x130 [ 1184.004222][ T1418] ? tx+0xa4/0x130 [ 1184.005334][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1184.006666][ T1418] ? __pfx_tx+0x10/0x10 [ 1184.007997][ T1418] tx+0xc4/0x130 [ 1184.009094][ T1418] kthread+0x1d8/0x3c0 [ 1184.010253][ T1418] ? __kthread_parkme+0xbb/0x230 [ 1184.011618][ T1418] ? __pfx_kthread+0x10/0x10 [ 1184.012923][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1184.014249][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 1184.015873][ T1418] ? __kthread_parkme+0x18c/0x230 [ 1184.017275][ T1418] ? __pfx_kthread+0x10/0x10 [ 1184.018611][ T1418] kthread+0x3b3/0x730 [ 1184.019863][ T1418] ? __pfx_kthread+0x10/0x10 [ 1184.021204][ T1418] ? ret_from_fork+0x79/0xaf0 [ 1184.022559][ T1418] ? ret_from_fork+0x79/0xaf0 [ 1184.023923][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1184.025293][ T1418] ? __pfx_kthread+0x10/0x10 [ 1184.026617][ T1418] ret_from_fork+0x754/0xaf0 [ 1184.027947][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.029407][ T1418] ? __switch_to+0x7b9/0x10c0 [ 1184.030741][ T1418] ? __pfx_kthread+0x10/0x10 [ 1184.032079][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1184.033407][ T1418] [ 1184.035091][ T1418] Kernel Offset: disabled [ 1184.036372][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:57:12 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ddea4 RBX=0000000000000003 RCX=0000000000000004 RDX=0000000000000000 RSI=ffffffff8dc419ff RDI=ffffffff8bfa3320 RBP=ffff8880552b9d40 RSP=ffffc90004bbf620 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b23bd00 R15=0000000000000000 RIP=ffffffff8b73fe1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc59214f4c0 CR3=0000000029945000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff84ee255c RDX=ffff88802531c980 RSI=ffffffff8bfa5900 RDI=0000000000000002 RBP=0000000000000002 RSP=ffffc90002cef1a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8bfa5e27 R13=0000000000000000 R14=0000000000000003 R15=0000000000000002 RIP=ffffffff820645d0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f32ce167300 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055aeb36fc000 CR3=00000000240ad000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000013a3 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69636d762f766564 2f01ffffffffffff ffffeb081d80031e 00000a6500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030208000608003e 0800060474a602f0 08007f8002010000 0208060601088a07 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002000800040276 8a0074656e01ffff fffffffffffff708 07800300021ec008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 011b840008000803 0008000003028002 1ece080001000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080606011b965880 8008000280030004 000408001d800201 c7080008004bd200 ZMM24=954409ed954409ed 954409ed954409ed 954409ed954409ed 954409ed954409ed 954409ed954409ed 954409ed954409ed 954409ed954409ed 954409ed954409ed ZMM25=236c171e236c171e 236c171e236c171e 236c171e236c171e 236c171e236c171e 236c171e236c171e 236c171e236c171e 236c171e236c171e 236c171e236c171e ZMM26=865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 865c6fc8865c6fc8 ZMM27=4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a 4ab4e02a4ab4e02a ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8443000084430000 8443000084430000 8443000084430000 8443000084430000 8443000084430000 8443000084430000 8443000084430000 8443000084430000 info registers vcpu 2 CPU#2 RAX=0000000001ed79a1 RBX=ffff88801decc980 RCX=ffffffff8b7414b5 RDX=0000000000000000 RSI=ffffffff8dc419ff RDI=ffffffff8bfa3320 RBP=0000000000000002 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed100568673d R10=ffff88802b4339eb R11=0000000000000000 R12=ffffed1003bd9930 R13=0000000000000002 R14=ffffffff90b76fd0 R15=0000000000000000 RIP=ffffffff8b73fe1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f7a24 CR3=000000006f900000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559e9e638c50 0000559e9e638c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde98cfdf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746f6e2079616d 20736e6f69746361 20776f6c46203a6b 6e696c74656e203a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e72657669726420 65687420666f206e 6f6974617a696c69 6261747320726568 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7472756620687469 7720706c6568206f 7420726f68747561 2072657669726420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65687420676e6974 6361746e6f632072 656469736e6f6320 657361656c50203a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3262737572767020 5d3439323931545b 5d3232313733372e 31383131205b203a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673c35 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc9000751f3a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff85673bd0 RIP=ffffffff85673c5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c311c71 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ac00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000