last executing test programs: 15m9.47273545s ago: executing program 32 (id=1398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0xfc}], 0x0, 0x0, 0x0}) 13m10.874450451s ago: executing program 33 (id=2751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x4e22, 0x0, 0x0, 0xff, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x96c, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x7, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 12m12.246395032s ago: executing program 34 (id=3331): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r0 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c7}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0) 12m5.609367779s ago: executing program 35 (id=3382): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 11m42.853750029s ago: executing program 36 (id=3603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m47.84478738s ago: executing program 37 (id=4085): socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcc9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 10m12.262658358s ago: executing program 38 (id=4405): socket$packet(0x11, 0xa, 0x300) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 9m56.819237623s ago: executing program 39 (id=4525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 8m35.039411539s ago: executing program 8 (id=5215): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) 8m34.862826103s ago: executing program 8 (id=5219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xa, @loopback, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 8m34.469670848s ago: executing program 8 (id=5225): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 8m34.183679639s ago: executing program 8 (id=5231): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 8m33.876700082s ago: executing program 8 (id=5237): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4"], 0x9c}}, 0x0) 8m33.437724892s ago: executing program 8 (id=5239): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000380)={0x40, 0xe}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0xe}, 0x0}) 8m32.695907285s ago: executing program 40 (id=5239): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000380)={0x40, 0xe}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0xe}, 0x0}) 8m26.018021498s ago: executing program 7 (id=5292): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000c80)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x8400088) 8m25.737719396s ago: executing program 7 (id=5294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, 0x0, 0x0) 8m25.274017044s ago: executing program 7 (id=5297): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 8m24.322605984s ago: executing program 7 (id=5303): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 8m23.374487061s ago: executing program 7 (id=5312): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) 8m23.050303883s ago: executing program 7 (id=5315): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0xe5c7a000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 8m22.645889047s ago: executing program 41 (id=5315): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0xe5c7a000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4m16.82670013s ago: executing program 0 (id=6879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="f20f11dbba2100ed650f2015260f01c86ebaf80c66b802a3558e66efbafc0cec0fc77cecba4000b8e11fef0f0f87b300962e050000", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) 4m15.762891943s ago: executing program 0 (id=6883): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 4m14.837694264s ago: executing program 0 (id=6892): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000060, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 4m14.511329254s ago: executing program 0 (id=6895): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m14.290242589s ago: executing program 0 (id=6898): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 4m13.069867254s ago: executing program 0 (id=6901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4041080) 4m12.380650943s ago: executing program 42 (id=6901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4041080) 2m44.468489083s ago: executing program 3 (id=7338): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m41.222203749s ago: executing program 3 (id=7370): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f000000a780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r3, @ANYBLOB="1c000000000000000100000002000000ae41b292f6bdb1beee386c421ba749d26212381ec0d3a514b1017a7adb8e15cff3bd840b33d5de12961c63c0dc0d32a6f41c0f96e9f9d8138e4a40dc40d3aa12b53132cc1075ca9c74584ed60096e44374901bfa31baac04c01dd1c15fe207f5996a3f6cd6a9be7d334efd34feae208e3c7a44b9537d35672b027c51070ea7c07baeda23d7573e6c16376e9c3c920e50561a157af8e051764099a9ce258cec495a716a83d5c347a9c8bf08f3bbd50a8d48182b0b18a4ed1c5049f38a6610e818f60a8ac60b58ed58d4478214d4dacad94bf9f696a633036ca0052ced57cba7", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r4, @ANYRES32, @ANYRES32=r5], 0x100, 0x8000}}], 0x1, 0x4044814) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 2m40.502934076s ago: executing program 3 (id=7373): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xd13, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x111d1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.93393643s ago: executing program 3 (id=7375): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 2m39.658546182s ago: executing program 3 (id=7380): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x4) 2m39.330928085s ago: executing program 3 (id=7382): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) 2m38.615099554s ago: executing program 43 (id=7382): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) 52.745242721s ago: executing program 5 (id=7818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.486069549s ago: executing program 5 (id=7822): syz_open_dev$sg(0x0, 0x0, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xe8}, 0x0, 0x40815}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 50.865413874s ago: executing program 5 (id=7828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @remote}}}, &(0x7f00000000c0)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0xc, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) 50.514517275s ago: executing program 5 (id=7830): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x6}]}) openat$kvm(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 49.5202264s ago: executing program 5 (id=7833): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x40000006, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x2ba4, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) 47.057943444s ago: executing program 5 (id=7839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xab, 0x5, &(0x7f0000000200)={0x4, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 46.012756941s ago: executing program 44 (id=7839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xab, 0x5, &(0x7f0000000200)={0x4, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 12.420629095s ago: executing program 9 (id=7938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x5, 0xe, 0x1ff, 0x276, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x1, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x400d0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8.422415144s ago: executing program 2 (id=7953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xb95f21cbbdb8d258}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x1) 8.422067109s ago: executing program 9 (id=7954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x4, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xe1, 0x2, 0x0, 0x80000000, 0x25, 0xfffffff8, 0x10001, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 7.479937207s ago: executing program 2 (id=7958): socket$inet6(0xa, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x24004800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 7.385552538s ago: executing program 9 (id=7960): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000006e80)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004e80)="f06c71be9ea1e18b8ae22ed8926289f2dfe3916a56941f478ae8ca0aed14bc3991f195b27c7af06ebf182ccb3e2f2444bea100e2debf44795ed0ce5e49c83f903e6e70e21cb8e1aa750af8a3c61f8cade87d810c516dfd6b2c598002b4db7d7152500fa6e7b1ae59dfcf32b01a1a396da513a8da80ca4a99b720f13e611e3f360925089aa3efe5c80dbcf6ade9a5007320ea304c027db24d5f9b7ca847bf8a7a807190cd465d46ef14eafe74abbe48439ccd6cfa783d218c939977b209a4b593e942ee1b3f7b7174fcdf0ec6893200c2d04f34deb721909471281d1dc537629af23024a0d1ad89b9ded0a0ad575b5c49eb0ee0f19e3d691165bdbf277fde3488ce18bd38828b4c848343fb08f122691539eb607159b372aa2e2cc331650e7fce51d2d020d2d11d6a548facc605cd1dd1e0c8fd3725dde690e849fdf3cdf26fd65b6bc0077e17e73ad1a2c2edbd568146ddce9ec90b5fc2ae20d2b0f87d512f2ee46de31044e942e73540cad550cafb40df1530a429984467f87899cb7cca75170d5ca340571d568e8b6d35a64226c705561253ddaf01b3e042949d5cd9c249c9c593db8174501b7e257add090081144547a1559df490f1476d6b476a33d10b308553f8d2ddf02f291ec593b250d61b8804095ea87948bc09ba3905784a70e05cec13d77e3063de6bdfb6c42103701271ef623c7bdf2db92d01bd325d3fd3e86f54c26629bf15d4a294cdc5852825f224174d66fcaa582ecd40f61f616c3b64c21e26e23535dca6687c040f669609160d13a1d1eff44c6aec84ce1a10ea6f852eaf8535faec63865618d8564e136c986ee7de0aa6109a10f52cf28ea2a5919972b24f8d3c6aedea4c914fab435a07440e1176d839a56431cdcf004bb7ea0d038d3175c8ad1f190704802444d7faa10e34b90d3f81ff9b97b55f5acb7e6e81b60574c7f56f9590ac28eb3a37637b66703246479f2cee71bc47d8a57d91e47df2669657483d4fa3e9d117a01c62846c3eb1432e2e799c278ae74a1003f5d18f0c25ae0da401985f10cac6b1e6ef1e4ae400461c60d9fbe3b13e075b5e0ce08dea92e37f2f82d8261dce17ff32dd1c8817853dc0bdde67e0a2673b0b7fcf29deb9dc660568a5771ccc2aad4fbda9946cfd341252049a57c57017909922d59df8a3093e3842a29c7e0648bc247b716c46b8703d9077d3375674eb14d8ffd62c48f56686a5178c325c1f943928fb7fc40ea6d35d13c1e6f0dd97197855801151dad595e0e296aa0ac2ce855c7bc6508408dee3552eacee8a05a9ef4d7d1812ca69776a9f7914bd99e7d66957214788d4efc793d3129000cf573fccfb9c32b5b5ab94549f2a58e4163159f188a27bce5be0bed27cc6fc71d5940be14ab06b982dfa844c0ee76e8596f3b516547fb6451b9894633801ea53034b3f525e630dc0b26713a993219ed42a1761d6b9e4655e8df5d33134391d2412ca6d8b3a5e6965af27b99dd835939acf970ac02dcfbdd0a54566bee5c5ade1ed34258763b2c7071974c9e947ead135fe36304fce55ba2545af6a936b7ab321d055ac0706ee82bb4555b60d33a3b936e90cf809b8d95d28fc1f6c0cb3eca1c2e5602a608b588967ba28d1c4f94049f6c29645131e88bb161a67e7e937b1d18bf774af5253768cb1c009368d698a299951105bc2c7a4cc2b7e62d75e49aa202558aadd025ce5c3ed1a6e617ae3614ffbeebaa4d11ba6df8dbcf9b9a6ca7863fd4847fe28f2d35966db5e6df04745731b8adc988b068e8865393b2f3d594d686e202da8157020fd24c6d19e092a2d7180e4af732b8d96c78926229a5af1334e8c46e65e3a7c367549dc7f5c69897c766dc8fc9c852b56c0eed1edd9fccb06af30c15a7f54d130c48f5fb26b15cb89c74541fefeeb384aa2e652fe750f06a7c3cd18af7438ab2c619bb32f424d139bfd8c48ee24c30738cc9e435cdaf3cdf08121168b74341438a98707b5fbd3121b9219deb18ad7af48011dd4b85de317fddaa0bb32aed6ad405d590ebe71262179546d09fdbd6b77cfe8f9f8797a731de05e60efc6fc6f9bc77af87374c95e0360375382773f162b576587fcc041bf8ea4473fd886d31c279cb83167918f998861236dc017cd5aa4b924de6eb942c31ef433fe2034cce5091ea152cfb0a6cfb76e0b0155f6970036b8a9d2148e65711bbb2e40d8247c6ec7c04b7c34ba773984491864be9fd8e7dcf804d02a9b51d83085ed4c01d3dde63596efede95539e7e33a8c45237770d4d38776df27f415a316b6ddca9180515d4f460a544d65a70931a47cede47a862d1c108bef908761768631bf1057b6795e22709d7bc5fcf9b229618a50b8214ca103d2094ecc6d74e199c0fd804e0438ee8a77501b929da1a5cee932d8d7ec827c2b6766a3097852dca1d59b25c3b505c35af98a2e4eae86ad17d716476de7cfb549f8f07618e0817d4aa5221cb3acd7ca6eb4be20b0cd853affd79a09d61d9af1a4e2b2d2994f7bc74b5aec1ae26f6a21d1316ae4e7a447ab4e488d840f7cf7948ad6491fb5a70fef79d89463ac32f9f3e5faa6c341750948d36bb61dfb7cf59815a74d0776ee6142b2e74661acbcc8caba365edf2f988b991ea4a17828995fe374befc2829199393344ca9ac73cb8ce1f4d1ac3db0c5fd40d18836c27a04acdef316d03177e8bf993c7f31c2d443b40364915a686fedf0ebf3fd9e870df33ba5b4e35f6f699ff9c5b9d8914caa38751dd1c761690037833f6b60063e7e4cf071392c5da21908ada84c91b64b884b242ea98d021ad34bc665789f62e413e8790cfb2697ce8b28a2549d98f92dd2e11be3eef27ff72c14b49399ddbf01cd3e84871370d293d80db19c38d978563c85f34732023cc1910a759d40a0c7f6189fdae1f0b92a625d6218658caca97c4a0ceb925c04cebd947e05134fb12b16dbeb48244a4b81a284823497ed1aab8ea3ce981c34cdd8b4990587e9a3d555077879166d84df14cc99725caa8d52a2c1adf57f69011511ccd9cfe84b02404effa30accc2999ea3c0cb163719fbffc90ee6f773739e3e9305ebee2144e254e3ef62ac2a90fb69628504c0c62170e1499f5bead9713ca4d048c5a386dd00451eb5c31b0c49a447a7895d16db99f6492b97bfcfa93fb74481ab08c111de4cc97f9bc50f79403f357c93a134c24d9737b0ba9a8d469b7d99a25dcb85dbcbb528e9b24e1f821fb6f7404c65a0f54d53975d0d05062d0efe648b65307ab27f856bb25042bf021faf99a6453ae3e71673dcc58bab1d6235da7be87911e4102f3da2f416641ac1348a4c7be79e15fb50b872cddfc3b3b6b7d9096b327009bd346e882481ac3dc03dffe6a0710414ccd3438fef3776e29be79eeec3fc71e11eaaf21ad6b23da489093f4b35c673e9bf622397a4fa319dfdb2bc3f61e436d45f0a84b11cc48bdb8f881beb4609f34d30d42b29b690ab2a77e5c65a48921d8f5ae4c511597138bbce4e2f39cdfa625936bb29a9f291814ffc001a5084584f5b56ac222c0ba69b6bae9d568875f893c85a4e5d7e8b54de7912ded29a9eeb81921fb54a35bfbdadd633fb7edc090bfcc44a95a4477494eac43c54e617604183e8e060ad59d5db59f677663b5c07a56dde23ff113cb63b9c66eeacacb2b3799100495fb6d5c0d97324295e5c724973a2b338aec836d0c7f780fdb0270a44a8fb52a8942d78749b1d473aca27ab9c444021a6f60ee7de61079f84f3403ba8317c7ab20d730b8508d651c48ca1c951215e8a46aa579b9721be2936e50d0e09ca4478fc0e134ead7fe67ac247fd3ee2e5676b6b4c252f3fc09224f8c356f4a0e00f7b36d4a981302e0ac298fbc4db27e2047a3ae73668d30766b724d0644005a6ca4aa439fb78a8969c4d12969ebe11506e867552abeb3bf19d0fdf4cdbe98e61e6b50c3da3416dee00090a0e47351fa2ac47b3909693d41ba787476f9f4f25ceae83a24bdbc2fc38aff60de09b8ea0be585e82d6a9d9f095ab03362faabc080f677ebc70c991d77b4a15a72de1284554ad534de09766905b67bac0a7f8fed015f97d7feed6b1e81fe6799fb3a86756aa49f09ffc2b8a857aa14b56392eb310cdbff3a12b61c037212009be338ce681e215649125e93997312539869e078a4363056eba834d4bb2fc3b805ec13189f5a7df40c8b581e12d71339c329b50697152ef259fdad449b1ebfd5362f7aaf666a5f5dc4f7a6499b8a611a5aa37ea88d799c322242d010d1a11abf0c1641c9a06789089adc7d0a073da3399ffcfd600a34725cd91f903c8afc6cd2c97fb3822f381ae1789386659d1191877efd1698fc73d32062c78a2f0050dd675d676a86c4a8827e53eccf4ce547d88acf7283120e6ef1aaf0ba403b57f8c0159a08cb820b59cd7c2cc1aee55e5b6f55df47ac77f13c7e6cd08971557233e319ab53e840109cdda441323354b46d2e422cd86cb09a9da9229514d560166df7019b2919535597eabe3f2b36718fcd3880eb56ae53f5f12e25fc347faaa130a564f97e21151fde5163e1c82b91d12a97c393085cc7631f0fa88d4f52df57c4bb96d665a47edaeb174951badc2b3abb88b8246a2325228e21fa7eac286eaa18ff7d5314c003ca9362309cc7bc9992fd83ae2d5cf7225654bf08c98c1167e205955f6e1fc0eb8e60bb3911ab729438841ebc5f0eeefd80203fde5ec33b99787dbdbb073b3ac9072cbb76ced62e176f76cc5fb463bb7ae1315d2cc1f3a449d64f0cb9a4396e6427154768f01b68f3fa61c9be1a57c7646819c52e4ff6f5b5b43e6bfff6c3bafe722bf0e9a5e9f2bea72cac5780a548eaad0b8507c8feee63283f6c9f10269146cc801391500fb26469711e2a6495d4e9e45c0fc6753bb453f9347e92f3c97932b940d6530405aad8a057bc417f690e0e166f763962cf334a13df8231cedd9ed22207be09a850080b26f1d970fa6950e58ba6ea416c17d6efad4ccc14ab6d288b4343e46b0ccd4fc1d1cc7c87e7438d6449fafa5dd8d19c67b956a5898a4075867cd448bb94119a244f053f6889232667f0bd530526cef01da2f86944dbc9ae4557df8e04c6051cc723e988086e85d3b842935eddb9aee70fb87a35c865f62d6be26a39f8093efdbb777988aca6a1a968a8a96220888057f3f06734933dcde9e6ac82fb3db1c66c92d755c5eaed1d5cb762454c53a13008f30f749409cefb3c1d832f89d8f4983bd3ab00ba2c01a348afa5be2b144ba03b0a5d3986b8332017d033a1c82c98141102af589a4dda90417a6f27bda6ec856b2d0c836167a567a91eaaf413b76ba623e7a74211af0a3b8e296fcb3a432e7db01e691df3749a13cca67d6655197c929956ace5cda77b59b12e8c6179d0af7c77e102872166060858ad429b6eec25f4637d92412a4891d707d8a58c7cd5fae6f0f1f8fa9c15ce2d91f14317f6a4c002ea2ac92bb08dbefefed0c389d9fca0fe63b6d01366eb2d2e89ae5ba4d3eba5763889fd4c1853255d2873b0917303742a96efb11cd8e6bc778d37d953d283cbfb1480880f1383921ccb7a16dc514a00ed6fe5008500cd1627e663d41dbc1b39df477879dbc4586d8a661d4ee05c4bcca8d21212b7ba6e6560076fb4fd272b2fb4a4356c26f7a11ffa947fe9f8c018239dd9d5411b488101958eb39660115390df340249a8eaf20cee42561a2ffbdca65a095c2703d121d59b724aa9835c9a52d0e2298f8748580a6f0db1028d3cca4530e6829b1b78c170e48c7a6f52c47dd65a452838bed890df04167f1cb8c4c1ab594e874d1472e91620a929e05396152602f217e3d27b967f2f032da83d5952cca6f2977785405bead78a3214a7f4d6b9e0c045734c9b4e2eba82d39955f2bccd41ede1d0a2d5a2a39ae39558094d07151e4ee5f4f0755209e2ef8de52c590942bc18c788e153ef4d3062234994d1174f1db483ce989d6f42f9e0290722fb75ba20df0fe2afa43a5e9af6488778d8557aca54599bab5461100ed8b009271dbfab77a8949c90ba356ef9e130f2e53681de9020a12b06f635ae6e4ce0f8e2c3b283a9d24386edb2b9fd48fbd57593f8f064e23db45cd13fe2d51e4b2808d497983a9ddb3f53163f7b88123f3152dab9c4ee564395db25695361b25eeba21d09a0f3417741bbaa167df88822b16320603077df40e5d95ec38d14a45a18f51aa6b492e6115b35e74705ba4bd58093fd46c5f555fd9f7d453ccba5abf606939e88944321d1c2dca4b2a1567757d56ef83218b120bf7032faeb6789ab738911d4ef47fe160047e08106438fabe43295dbd1291c3ce6d1e3397f12de4c0125bd23818215b2d494973573ca9ddc983bcddb1e90fbe2aadc4c0b02c987771eb6e9fa7c4c7011aa1576649210d8ad36b203ebaae9aac00830a3a0244c522a64081d443f377f3e7521263bd40c5d84c2210eb4fdfd81db125c1f5b36204463664ab5c1dfc59946f4406c174f9552ec8df0253fffc74cdec337665ab74f762c92292a22e2dd52b83b84a123b67ae8e065f55bb3709a803743c0fa96ac236c4ade3ce16f0d169a712b67e9aa80992896ff03ac51a4f985750fa0d27e3f4164b7fcd80dc0c78c06dbd898bae606ada022266569581c6efe984a1a81b54581b56cf6648e33c9ed71ffb7fc94b5e4019832d553eca7fa154ae02df41a5c27856282c98c6fff3e9dc00ec45e67338569ea687e25dda1fa4b62d60847d13273a27520a02191c087dbe2e9d47b7f11ada6546b0c66b026f1916acf079f05ebc69bf3c82b1bee6ce4ed95b3978122078f717cb45dbd9cee6b8e5523b243c9c3ab27063dadc953fa3aa81e60daf4fbc38584cb3abbedc38e175a8feda09ffbb0785fa42b9c972742efab4ef5635fd810802649575d850e60b4b17d7359568b975954d935d15ed81f760434627adaaebd50996c681043d0ea5f61f8c8358849299d55b763cef7d833f9ef8750b462c711f9c763a3f95fa2c785a5e24a71b3be244968600f1dc87263090fa065d9f5b498333e19d82e5984fe7431ccb2d5815b5842f8b5f24bda6e835c8cfb6c3b63db5151e1c138135d89a6c523f3cdae319393ff3b05e07f11b456464d7d34a8e4ec93e3ca29dcf61f29d3e9390c925a17766a893751c7f42e3baf7eefa77b06e8200c2f4647e7fac0f7bf86012a7c957aca911a6dbd8dea0ad12e60813129b859794d8e38f39e797ba4729b269ac93d17000e8d1d0bd9e195d83fda977c3a0316f48dd150fcdaed9072c22c9a7b472616f00c5ce250ad6f6ad93da823ffe2a48f925fa3b6e9ab66d013d61cf7df56be9a25e4dda4fcc2a2d605a0aff8b8fd18a19f98bee0323563e427d80b46be5a981abd8e616fe3f5dd23828594e86e1dcf22d7749f3258c604798be30d9936e426d49c60bb9f88e8150fc892051eb2e82acf3bdbf16b9fa4f5e82c138ce201fb1d1de21aa2c699ce00212e4132cc0fcc665927aa41af5d2c45d879c0b534d5c74f2a9a2225993710318452f3c15b28c49efecd5a6c216a271bd0d625b4c9cfd56f2134578181d911645ab0265d560feedafcbe4ffaf4d63ba3b7bccb79d3574971998bfce00369a3c01b4c2c5e7e006f44ac38bdb4e1781830a1ccc9d1456673d90902cb29c51927f6cbfd67bfb24e02d8581e8f7dd996ae5afc5944bbfd57b2266e533d76a9f48774bada4e7e3b58aa5bba5dbb7998dfa8a076642d0b3fe6698d046217e8531bcecc8b2707834a4c21aa703b4da4aac7417adb843747125bb7744aba30d978782a24dc88f1e741fbb1ced581fd0a2807a93be5fa28040dd6f86063e8c931a8df6e9cde2c25f31432c65dd43fdbd2067a932da2e8a3f715067170248d7112a1ae7af4c84b72d065aaafcd03c2cd603f716579c682c7358e0e0e55ea5710531213b5f18a6432b2a0260b493a72863952b9fc7efe01855a4123ae206e90ad8b00e5454d681df308e718002e6e3d6fb709d06fc2f9ef25656b106a76bb06b1e506b97c367c413bb988b07d5c0915221161ad03e8fe8b8368da3ee38d92e928fd3b5780b93c2ac9c5fd27100bafabe1767a487e03192d756518f495c15bb8eac87572c14e88a64ec48769e98081923368e53df95f3f5d5391fe917238aa7c882ff55826ac54192c6b46f4f047069a6df7b313df0a38a2a5f9c6a8ba5be4ba6f91f6faba8f41969a10bcfaff9a000ca7a973ee4342c4b6377cb16edae11b52913bc5fc47b6a0388d8c5532c59457991ca36b77a2e480bb591c1759d17469748e6cf9278665425897d5f86638dd91c6487be2c719ae2d9de114c4ab33292b45255cd320ca1d9d3f34415a1d8a074818d24cd83d2b1db738d337deae672ab8805308fe2a11e415fda0709e2faf59440572e35f3dd54d1ca205f5896e2f9e905096b3fa73116ea914d8d968c909e03be2e42dc3670b4865f7949d2d4698b9979c9be4d02e08894f358be375784931fa097dcc408db3630b5287842b0b42e2835cbc08821d24b55ca71d15e00179ca4739fa61c6a3a32305a8d529c2f92b6e9a440117ec4a8889e47720d15260f464a990240871af9b20e36ea1da072688040c17f50ab532aade79dc3981b8d3194b1c58f74c030777233ae78f9fe81cb7005e9862951b95ac8f7d7292ab07d918a706567ea66492636c6f6a5c95bce0d6acb66af7f15b4153f7da539105578b090758f7272bc7664e7cf641365947db9dae84b92b83fb5321e3693a1938e28e7b6aed85f0927a5393e876ed233e8e9c8599a054689507053f5fb14f54a62b84a75a112699f97de6f20f602e7f2a0d16e97870e96de50308a4735669008bb53d64f6e6f753a5c53fe1027864aae703effef448bbfe7475bcc42fb4470c004498674bf7a56e1da596062330d00fe744d38f1ca3702725c9475cdf4dcf7ed250e2f4cb0a7bca8b506a5d91b759ec39d5e832502d9468a97b32fe13d722232933e0a709963f70da38be91ea2bdd7e38132b1bc3c7a488fc9439b3db3c6752c684d853cdaacc8025a8fa9fd532137c6943b2250d6165f875912f11a502f98b1990bc8ae6a96e146bdf9e9428ae01c04264327c2469fa32fd280f1cfea573dd8b8c1d7fe547a16c870bae47a29eb2462082b402d4df6be2f9b9f0c8d6310ec32b94b76a175ff8d04b5c10b35cfda26419515eadc2af36737d1a37f48f4ea46fc937871e3181533646122e266bbc3990ef3a1c582d873a0041cfd72406f028e53906a3494309cbaf4da24b09d0c1ba3c856e6436f7ac9e595890c6f4af4819b978a05eb3caff979dfa8cc48fb2d6e25cac18f99c9c57a6609aa968e39cd7334d61b22f1a3c599b50a9272e95f9765eb65e2486d32a56523802e76d63ee8138e36e399cf562fdb2064f90475cb974119115bfb036fe01bbd46c603184845c52f4ceda3826dead956e6a153c400513a4c3823018c086fe9e68d9ae7a6d1e04e78379258d7d888d61363604af3257e63503b598332dde7dba36881ca83db525315d5df9ab6b092b5e12578c2d6d28409da4801c7b64207257ea3b9cb0188db08ea7cba46a6606b9c6624ad368a4eac074fdb794c535a2eabce731a934119f95c572836da58745b387dc7aa563bfaaf4235773c58c3cf9a76260a652d1aabb202660581a05be481e3687c73f82d664ddb733b68f89d734b46d7c91033147e61be77e11d98de08393ab4c25da9a6b6c01721a4141b11362f8581fd655fb5e4a30726efaf68bc2dacfc47fed98ed8094ce91202831b8a998d324d7cf86fd26aa88e2e3e208b47b4179cc3724d6cdd33bde489cdaa70c884463063ee99d0350272746ce0772e72256c67f78a188405498eb731fa6a43141353d065dca6fb87a6ecf38fb989dfbf0c89afddfef72bc7d6fd8919a91002ea8dc7f13c3a376adc27021cbb7453c97520d9e86c3b9da30e8c68f70d11bfe108ecff0ecb38a59f0575a5eae0079c504ba8d445733e2efe0e6b051ebf60547707a66a19671867b7e49f0b9b74efc3b3fa39ce287bdccb7163ea85d944fb1b6c7c86d8e81a3a20f241215094d706b4dadbb6897eab38ecf399cf41fbcc6a82e21bb77cd93fd1bfd0e916b84f6ab20e48b041d3e97a5b2216fcc1ff47d07cd5f2d736f79291d00b49d9cc8ae8819d086f583a930612f549416bffd9cd58f0cdba540d2f7ea66d08dba5aba7f2bba5ef9c148e1efb3af6618230cc675ed94f28e560188a90e72500eec3ee5c1ced1493399a44ee74355fe11cc71fe80505eab48c4fa02746f6a4020f740d9c2dd5074d936fd4661ed8dd8efc6a2d614f55df76dfd2e509bf7506234474eedae12f9f6997ba90c213722c8298c583d8f6253a8bcf2d328378adf508b1d961be1af39efa0a279a5b4c3ee0da3e8a68a9e5e375b779f6015e4ccb34a8cdf93ff27055fe41c1cce8223e0dc870ab41ee299f6f515308340a6157f2c5cc2d0c932b98240345db5776eff9a0ea28fbca9858eec6a70bd2174ab8f9f3e0893cc1afc4664c511d31d7591a600f04c938af26a7fe24ea96a5e3a3806ad022295ebfccbe50af7688acc28d48e4400416af9266c3c996cfc101d243139ff8a0551667d3d48d4d88b7e5120d14d18fc1b4d9f80fd76f1f71301ed327773cf12eceb3866fad17442576fc41663cebb94310df4331f226fb80771618b504ca0c71aec3fedda1ce30cd0de8053f4c004a8d8b288d03a60bdb9ae27eab0d6028ef1928093fb17767afae194bdbb7e26176a521d088d7ead8c404a1e498ef8c9786764ab7658c856459373f2d99cfeaca8869d8b6596236008114df49aecbf7ee76b2687620e6d809a70ca29eb00950d49620c3db9911b2eaf9787a4d81c28f571208a10c9ad534cdde895b050be67333d6bf51ed264788086167bd99b7af42349a2ff70b5a00bb7f04d8c4715b6c222ba3bc15c32d00c88abb3159a3633e6687b500d400c54bb52e7ca5187143a62d8efa1ab652d8671aa40a237a8f1c099fa5a29a0a8ea683f7580c28e18958662e8a323a6f39b3603d060711dfcb0971e4e359c21fb68aeb24adcceb1c8ca436b03fc06ef4df90653b7b1d59b26d0090cf34264b7c4e17ea2093206fd37dc399819588d136ef2927b67c52633b69eb03fed90678b495de2504c0df129710b9fe0d64751572b4e5c6dcdb43cf171212a38f5fd1abad4ca53344669febac99d971df691af94a2dfaf9dcfd4332dbcfd03481feca9fd29d3c572ca589f383a2e7dc0ece37ed462b7543bb18439503510669323e687e8c4a2c19b8dd06a3298982daed4ffd0bdb38f9839f2bd058e1f97cbcc414f16fea22575999ed8d000cb01953380771defb9f991d397cd5877830bbfb9f206e845778029ccd67f5275552e83669afaa6cd3b9b54d811b42a2cdc42cd9d1ffac5b992e0671b1ec7c90bea258515525e76f72b21d4eb4ba7c8decefcfb8d5a9df16845cb264f38903d43ec47a15625ff5db24745dee593f05518da7a43ad672c35784bd5fd63efaa2c95f7dcf28eeb81c1758f7c7d04c00405728b0c5bdc81ad524d8719286940ca851b81d515ea3d9ed5cd43a504b3f2000826957a73a99cf83430289df71618cac5d7db787b3", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000003000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_LOCK(r3, 0xb) 6.700469954s ago: executing program 2 (id=7962): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.361899079s ago: executing program 9 (id=7963): r0 = socket(0x9, 0x1, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000004080009000b000000", 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() rt_tgsigqueueinfo(0x0, r1, 0xb, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) getrlimit(0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x76, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x944, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 5.927078999s ago: executing program 9 (id=7965): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) 5.579607629s ago: executing program 9 (id=7968): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0x6fc8, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 5.406310532s ago: executing program 6 (id=7970): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.307309774s ago: executing program 4 (id=7972): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x6}) close_range(r1, r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x80, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 5.19776023s ago: executing program 2 (id=7973): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000200)={0x1, 0x0, {0x4, 0x7, 0x100a, 0x2, 0xa, 0x7, 0x0, 0x7}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.817252631s ago: executing program 4 (id=7975): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000500)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0}) 4.578130389s ago: executing program 1 (id=7976): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 4.439190444s ago: executing program 6 (id=7977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 4.292486148s ago: executing program 1 (id=7978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.278157345s ago: executing program 2 (id=7979): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0xcde, 0x190, 0x1, 0x2, 0xdd9f83, 0x2, 0x9, 0x1, 0x7, 0x5, 0x4, 0x13, 0x7, 0x7f, 0x0, 0xb763599953cb092e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3.060251085s ago: executing program 1 (id=7980): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.42499593s ago: executing program 6 (id=7981): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.125573363s ago: executing program 6 (id=7982): io_uring_setup(0x67bb, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.870096269s ago: executing program 6 (id=7983): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x4}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0xfff, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0xdd30, {0x3, 0x2, 0x3, 0x1da, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfaff}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) close_range(r0, 0xffffffffffffffff, 0x0) 1.76666442s ago: executing program 6 (id=7984): openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x97, 0x40, 0xa4}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.498065853s ago: executing program 2 (id=7985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f026, 0x2}) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 1.458147281s ago: executing program 4 (id=7986): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 1.321748533s ago: executing program 1 (id=7987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x2000401, 0x5, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 1.30820726s ago: executing program 4 (id=7988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55f, 0x19fffe, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x300000000006, 0x794, 0xa, 0x40, 0xc976, 0x5], 0x8080000, 0x20200}) msgget$private(0x0, 0x3ac) ioctl$KVM_RUN(r2, 0xae80, 0x0) 993.989329ms ago: executing program 1 (id=7989): ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x79, 0x8, 0x5, 0x3, 0xa, 0x1, 0x9, 0xc, 0x0, 0x1, 0x6, 0xffffffff, 0xfffffffffffffffe, 0x1ff, 0x6], 0x7000, 0x10}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0x82, 0x4f, 0x40, 0x5d, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfe, 0x4, 0x87, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x392], 0xeeee8000, 0x400}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 976.926178ms ago: executing program 4 (id=7990): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) 150.830269ms ago: executing program 1 (id=7991): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 0s ago: executing program 4 (id=7992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x50, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): p0 maxpacket: 8 [ 902.750679][T27731] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 902.761666][ T5955] pwc: recv_control_msg error -71 req 02 val 2400 [ 902.775910][T27731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.797069][ T5955] pwc: recv_control_msg error -71 req 02 val 2600 [ 902.806206][T27731] usb 10-1: Product: syz [ 902.818393][T27731] usb 10-1: Manufacturer: syz [ 902.823111][T27731] usb 10-1: SerialNumber: syz [ 902.838822][ T5955] pwc: recv_control_msg error -71 req 02 val 2900 [ 902.851417][T28637] kvm: user requested TSC rate below hardware speed [ 902.858697][ T5955] pwc: recv_control_msg error -71 req 02 val 2800 [ 902.859227][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 902.958648][T27731] usb 10-1: config 0 descriptor?? [ 902.982291][T27731] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 902.998598][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 903.044417][ T5955] pwc: Registered as video103. [ 903.083350][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input117 [ 903.158831][ T5955] usb 6-1: USB disconnect, device number 41 [ 903.213873][ T5925] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 903.416660][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 903.435154][ T5925] usb 4-1: config 0 has no interfaces? [ 903.457394][ T5925] usb 4-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 903.473786][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.500007][ T5925] usb 4-1: Product: syz [ 903.510186][ T5925] usb 4-1: Manufacturer: syz [ 903.527547][ T5925] usb 4-1: SerialNumber: syz [ 903.569860][ T5925] usb 4-1: config 0 descriptor?? [ 903.775790][ T5925] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 903.938589][T28637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (67109412 ns). Using initial count to start timer. [ 903.991725][ T5955] usb 4-1: USB disconnect, device number 48 [ 904.106484][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.123916][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.167506][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.253114][ T5925] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.290552][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.316437][ T5925] usb 6-1: config 0 descriptor?? [ 904.358553][T27731] gspca_sonixj: reg_w1 err -71 [ 904.403799][T27731] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 904.418122][T27731] usb 10-1: USB disconnect, device number 39 [ 904.655772][T28658] syz_tun: entered allmulticast mode [ 904.670037][T28658] pimreg: entered allmulticast mode [ 904.683401][T28657] syz_tun: left allmulticast mode [ 904.796616][ T5925] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 905.303745][ T5955] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 905.371806][T28681] binder: BINDER_SET_CONTEXT_MGR already set [ 905.380063][T28681] binder: 28680:28681 ioctl 4018620d 200000000100 returned -16 [ 905.391350][T28681] binder: BINDER_SET_CONTEXT_MGR already set [ 905.397574][T28681] binder: 28680:28681 ioctl 4018620d 200000004a80 returned -16 [ 905.441248][T28683] lo: Caught tx_queue_len zero misconfig [ 905.459641][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 905.467526][ T5955] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 905.478524][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.504693][ T5955] usb 4-1: config 0 descriptor?? [ 905.772824][ T5955] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 905.802526][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 905.834574][ T5955] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 905.841851][ T5955] usb 4-1: media controller created [ 905.903586][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.096570][T28645] usb 6-1: string descriptor 0 read error: -71 [ 906.859328][ T5955] stb0899_attach: Driver disabled by Kconfig [ 906.955114][ T5955] az6027: no front-end attached [ 906.955114][ T5955] [ 906.978600][ T5955] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 906.982862][ T5925] usb 6-1: USB disconnect, device number 42 [ 907.013958][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input119 [ 907.072584][ T5955] dvb-usb: schedule remote query interval to 400 msecs. [ 907.096606][ T5955] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 907.241950][ T24] usb 4-1: USB disconnect, device number 49 [ 907.280754][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 907.299126][T28708] syz_tun: entered allmulticast mode [ 907.318313][T28708] pimreg: entered allmulticast mode [ 907.576801][T28707] syz_tun: left allmulticast mode [ 907.611877][ T5925] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 907.814686][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 907.832333][ T5925] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 907.851368][ T5925] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 907.880322][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 907.902595][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 907.918237][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 907.981986][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 908.028693][ T5925] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 908.049367][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.087749][ T5925] usb 6-1: config 0 descriptor?? [ 908.263758][ T24] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 908.441176][ T5925] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 908.467816][ T5925] usb 6-1: USB disconnect, device number 43 [ 908.494835][ T5908] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 908.520674][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.556562][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 908.569579][ T5925] usblp0: removed [ 908.579895][ T24] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 908.594788][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.613204][ T24] usb 10-1: config 0 descriptor?? [ 908.624611][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 908.632026][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 908.663877][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 908.673068][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 908.685405][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.700778][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.709868][ T24] usb 10-1: media controller created [ 908.717197][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.729418][ T5908] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.750030][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 908.763206][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 908.772945][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 908.780131][ T5908] usb 5-1: SerialNumber: syz [ 908.792841][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input120 [ 908.868490][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 908.892989][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 909.015376][ T5908] usb 5-1: 0:2 : does not exist [ 909.054210][ T5925] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 909.066555][ T5908] usb 5-1: USB disconnect, device number 87 [ 909.089363][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 909.096295][ T24] dvb-usb: error while querying for an remote control event. [ 909.131862][ T5955] usb 10-1: USB disconnect, device number 40 [ 909.175928][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 909.216471][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 909.240176][ T5925] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 909.270292][ T5925] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 909.286236][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 909.297061][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 909.306802][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 909.318999][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 909.340255][ T5925] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 909.350808][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.368603][ T5925] usb 6-1: config 0 descriptor?? [ 909.611649][ T5925] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 910.022344][T28750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 910.323734][ T5925] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 910.673706][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 910.685995][ T5925] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 910.713780][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.735898][ T5925] usb 5-1: config 0 descriptor?? [ 910.968039][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 910.984950][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.026091][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 911.046677][ T5925] usb 5-1: media controller created [ 911.109404][ T5957] usb 6-1: USB disconnect, device number 44 [ 911.117460][ T5957] usblp0: removed [ 911.193307][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.555019][T28772] binder: 28771:28772 ioctl c0306201 2000000003c0 returned -14 [ 912.143799][ T5925] stb0899_attach: Driver disabled by Kconfig [ 912.448194][ T5925] az6027: no front-end attached [ 912.448194][ T5925] [ 912.482321][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 912.490780][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input121 [ 912.564777][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 912.574671][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 913.141243][T27731] usb 5-1: USB disconnect, device number 88 [ 913.200684][T27731] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 914.034003][ T5834] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 914.183746][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 914.210046][ T5834] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 914.255907][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.290169][ T5834] usb 7-1: config 0 descriptor?? [ 914.331885][ T5834] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 915.576500][T28855] syzkaller0: entered promiscuous mode [ 915.596306][T28855] syzkaller0: entered allmulticast mode [ 915.766916][ T5834] gspca_sonixj: i2c_w8 err -71 [ 915.794354][ T5834] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 915.813096][ T5834] usb 7-1: USB disconnect, device number 37 [ 916.817367][T28880] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 916.817367][T28880] program syz.6.7241 not setting count and/or reply_len properly [ 917.874383][ T5834] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 917.992782][T28900] loop6: detected capacity change from 0 to 7 [ 918.000343][ T5831] Dev loop6: unable to read RDB block 7 [ 918.013228][ T5831] loop6: unable to read partition table [ 918.019251][ T5831] loop6: partition table beyond EOD, truncated [ 918.040502][T28900] Dev loop6: unable to read RDB block 7 [ 918.049161][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 918.054574][T28900] loop6: unable to read partition table [ 918.064235][T28900] loop6: partition table beyond EOD, truncated [ 918.071692][T28900] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 918.090599][ T5834] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 918.106087][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.125085][ T5834] usb 6-1: Product: syz [ 918.158618][ T5834] usb 6-1: Manufacturer: syz [ 918.175196][ T5834] usb 6-1: SerialNumber: syz [ 918.193727][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 918.204263][ T5834] usb 6-1: config 0 descriptor?? [ 918.225651][ T5834] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 920.281738][ T5834] gspca_sonixj: reg_w1 err -71 [ 920.286869][ T5834] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 920.310208][ T5834] usb 6-1: USB disconnect, device number 45 [ 921.040274][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7259'. [ 921.205096][T28938] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 921.205096][T28938] program syz.5.7257 not setting count and/or reply_len properly [ 921.316656][T28944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7260'. [ 922.904944][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7265'. [ 923.196000][T28966] loop4: detected capacity change from 0 to 2560 [ 923.392482][T28966] buffer_io_error: 27 callbacks suppressed [ 923.392499][T28966] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 923.411113][ T5831] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 923.437835][ T5831] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 923.450771][T28966] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 923.469196][ T5831] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 923.510275][ T5831] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 923.542380][ T5831] Buffer I/O error on dev loop4, logical block 260, lost async page write [ 923.554472][T28966] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 923.590284][ T5831] Buffer I/O error on dev loop4, logical block 261, lost async page write [ 923.700303][ T5831] Buffer I/O error on dev loop4, logical block 262, lost async page write [ 923.823841][T27731] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 923.991067][T27731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 924.005485][T27731] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 924.055761][T27731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 924.097419][T27731] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 924.146842][T27731] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 924.157897][T27731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.182376][T27731] usb 10-1: Product: syz [ 924.211481][T27731] usb 10-1: Manufacturer: syz [ 924.219640][T27731] usb 10-1: SerialNumber: syz [ 924.246615][T27731] usb 10-1: config 0 descriptor?? [ 924.284973][T27731] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 924.485586][ T30] audit: type=1326 audit(1767273858.221:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 924.533367][T27731] scsi host1: usb-storage 10-1:0.0 [ 924.655815][T27731] usb 10-1: USB disconnect, device number 41 [ 924.679951][ T30] audit: type=1326 audit(1767273858.261:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 924.763204][ T30] audit: type=1326 audit(1767273858.261:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 924.873837][ T30] audit: type=1326 audit(1767273858.261:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 924.995399][ T30] audit: type=1326 audit(1767273858.261:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.047642][ T30] audit: type=1326 audit(1767273858.261:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.130707][ T30] audit: type=1326 audit(1767273858.261:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.173859][ T5955] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 925.225166][ T30] audit: type=1326 audit(1767273858.261:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.312585][ T30] audit: type=1326 audit(1767273858.261:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.353730][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 925.382427][ T5955] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 925.398198][ T30] audit: type=1326 audit(1767273858.261:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.9.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d8f749 code=0x7ffc0000 [ 925.426659][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.449579][ T5955] usb 4-1: Product: syz [ 925.460648][ T5955] usb 4-1: Manufacturer: syz [ 925.478049][ T5955] usb 4-1: SerialNumber: syz [ 925.501489][ T5955] usb 4-1: config 0 descriptor?? [ 925.662098][T29021] loop9: detected capacity change from 0 to 7 [ 925.672744][T29021] loop9: [POWERTEC] p1 p2 p3 [ 925.680089][T29021] loop9: p1 size 65536 extends beyond EOD, truncated [ 925.709155][T29021] loop9: p2 size 32766 extends beyond EOD, truncated [ 925.834360][T29021] loop9: p3 start 1572864 is beyond EOD, truncated [ 925.956627][ T5955] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 925.988164][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 926.028905][ T5955] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 926.069612][ T5955] usb 4-1: media controller created [ 926.119351][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.193925][ T5908] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 926.236746][T29034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 926.253375][ T5955] zl10353_read_register: readreg error (reg=127, ret==0) [ 926.275730][ T5955] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 926.292590][T29038] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 926.313928][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 926.333013][ T5955] usb 4-1: USB disconnect, device number 50 [ 926.403695][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 926.425390][ T5908] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 926.451425][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7282'. [ 926.472654][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 926.481917][ T5908] usb 10-1: config 179 has no interface number 0 [ 926.481969][ T5908] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 926.519262][ T3572] vlan2: left promiscuous mode [ 926.529001][ T3572] bridge0: port 3(vlan2) entered disabled state [ 926.555849][ T5908] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 926.580394][ T3572] bridge_slave_1: left allmulticast mode [ 926.610675][ T5908] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 926.623917][ T3572] bridge_slave_1: left promiscuous mode [ 926.635015][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.644538][ T3572] bridge_slave_0: left promiscuous mode [ 926.650273][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.663802][ T5908] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 926.694171][ T5908] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 926.739303][ T5908] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 926.775375][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.794416][T29029] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 927.179515][ T5908] usb 10-1: USB disconnect, device number 42 [ 927.179576][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 927.179628][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 930.174370][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.229154][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.240187][ T3572] bond0 (unregistering): Released all slaves [ 930.259004][T29110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 930.402616][ T3572] tipc: Left network mode [ 930.844581][ T3572] hsr_slave_0: left promiscuous mode [ 930.913094][ T3572] hsr_slave_1: left promiscuous mode [ 930.935625][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.962058][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.479257][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.485719][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.634206][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 931.801310][ T5892] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 931.823972][ T5892] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 931.913707][ T5892] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 931.963547][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.986483][T29149] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 932.113541][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.741560][ T5892] usb 4-1: USB disconnect, device number 51 [ 933.478526][T29170] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7324'. [ 933.991435][T29192] tipc: Failed to remove unknown binding: 66,0,0/0:2519427512/2519427513 [ 934.004395][T29192] tipc: Failed to remove unknown binding: 66,0,0/0:2519427512/2519427513 [ 934.122903][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 934.196786][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 934.722755][T29211] binder: BINDER_SET_CONTEXT_MGR already set [ 934.730132][T29211] binder: 29210:29211 ioctl 4018620d 2000000000c0 returned -16 [ 934.742214][T29211] binder: BINDER_SET_CONTEXT_MGR already set [ 934.748811][T29211] binder: 29210:29211 ioctl 4018620d 200000000040 returned -16 [ 934.916420][ T5925] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 935.087055][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 935.124994][ T5925] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 935.140532][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.158174][ T5925] usb 4-1: Product: syz [ 935.164728][ T5925] usb 4-1: Manufacturer: syz [ 935.177545][ T5925] usb 4-1: SerialNumber: syz [ 935.209974][ T5925] usb 4-1: config 0 descriptor?? [ 935.248208][ T5925] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 935.360360][T29223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 935.398500][T29231] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.7346'. [ 935.406143][T29226] gretap1: entered promiscuous mode [ 935.476088][T29226] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 935.523405][T29233] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7347'. [ 935.569217][T29233] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7347'. [ 935.583691][T25670] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 935.750436][T29241] binder: BINDER_SET_CONTEXT_MGR already set [ 935.757430][ T3464] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 935.787953][T29241] binder: 29239:29241 ioctl 4018620d 200000000000 returned -16 [ 935.819245][T29241] binder: BINDER_SET_CONTEXT_MGR already set [ 935.839348][T29241] binder: 29239:29241 ioctl 4018620d 200000000040 returned -16 [ 935.866154][T29241] binder: 29239:29241 ioctl c0306201 2000000003c0 returned -14 [ 936.104095][ T5907] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 936.197795][T29255] tipc: Started in network mode [ 936.204934][T29255] tipc: Node identity ac1414aa, cluster identity 4711 [ 936.220922][T29255] tipc: Enabled bearer , priority 10 [ 936.313926][ T5907] usb 7-1: Using ep0 maxpacket: 32 [ 936.321082][ T5907] usb 7-1: config 0 has an invalid interface number: 248 but max is 0 [ 936.329915][ T5907] usb 7-1: config 0 has no interface number 0 [ 936.340548][ T5907] usb 7-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 936.349828][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.358434][ T5907] usb 7-1: Product: syz [ 936.362672][ T5907] usb 7-1: Manufacturer: syz [ 936.367812][ T5907] usb 7-1: SerialNumber: syz [ 936.377509][ T5907] usb 7-1: config 0 descriptor?? [ 936.387671][ T5907] ttusb_dec_send_command: command bulk message failed: error -22 [ 936.396309][ T5907] ttusb-dec 7-1:0.248: probe with driver ttusb-dec failed with error -22 [ 937.112464][ T9] usb 7-1: USB disconnect, device number 38 [ 937.214209][ T5892] tipc: Node number set to 2886997162 [ 937.325557][ T5925] gspca_ov534_9: reg_r err -71 [ 937.543738][ T5925] gspca_ov534_9: Unknown sensor 0000 [ 937.543851][ T5925] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 937.560299][ T5925] usb 4-1: USB disconnect, device number 52 [ 937.703717][ T5907] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 937.895450][ T5907] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 937.907358][ T5907] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 937.921303][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 937.930691][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 937.943131][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 937.956581][ T5907] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 937.967741][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 937.983236][ T5907] usb 5-1: Product: syz [ 937.992176][ T5907] usb 5-1: Manufacturer: syz [ 938.031281][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 938.044184][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 938.086219][ T5907] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 938.092231][ T5907] cdc_wdm 5-1:1.0: Unknown control protocol [ 938.331644][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.338285][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.344919][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.351508][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.357786][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.364368][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.370669][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.377248][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.383499][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.390076][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.396379][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.402956][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.409265][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.415846][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.422061][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.428633][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.434925][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.441505][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.447814][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 938.454389][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 938.474344][ T9] usb 5-1: USB disconnect, device number 89 [ 938.474426][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 939.779188][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7381'. [ 940.857581][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 940.866016][ T5892] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 940.875385][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.883389][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 940.891709][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 940.903262][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.093939][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 941.106791][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.117940][ T5892] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 941.127733][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.157209][ T5892] usb 10-1: config 0 descriptor?? [ 941.349484][T29349] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 941.414117][T29349] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 941.446370][T29349] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 941.497226][T29341] chnl_net:caif_netlink_parms(): no params data found [ 941.562322][T29349] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 941.586316][ T5892] mcp2221 0003:04D8:00DD.0061: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 941.611762][T29349] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 941.843052][T29341] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.877599][T29341] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.892022][T29341] bridge_slave_0: entered allmulticast mode [ 941.919869][T29341] bridge_slave_0: entered promiscuous mode [ 941.929438][T29341] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.937098][T29341] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.947349][T29341] bridge_slave_1: entered allmulticast mode [ 941.955938][T29341] bridge_slave_1: entered promiscuous mode [ 942.017255][ T5908] usb 10-1: USB disconnect, device number 43 [ 942.133435][T29341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.147315][T29341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.364774][T29341] team0: Port device team_slave_0 added [ 942.396953][T29341] team0: Port device team_slave_1 added [ 942.523859][ T5908] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 942.993717][T27453] Bluetooth: hci2: command tx timeout [ 943.159183][T29380] binder: BINDER_SET_CONTEXT_MGR already set [ 943.168179][T29341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.182618][T29380] binder: 29379:29380 ioctl 4018620d 200000000100 returned -16 [ 943.190359][T29341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.220702][T29380] binder: BINDER_SET_CONTEXT_MGR already set [ 943.233709][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 943.236015][T29380] binder: 29379:29380 ioctl 4018620d 2000000001c0 returned -16 [ 943.249409][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 943.260440][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.283788][T29341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.303580][ T5908] usb 5-1: Product: syz [ 943.308127][ T5908] usb 5-1: Manufacturer: syz [ 943.312726][ T5908] usb 5-1: SerialNumber: syz [ 943.328744][T29341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.330470][ T5908] usb 5-1: config 0 descriptor?? [ 943.349030][T29341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.376550][T29341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.552682][ T5908] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 943.572793][T29341] hsr_slave_0: entered promiscuous mode [ 943.579872][T29341] hsr_slave_1: entered promiscuous mode [ 945.073739][T27453] Bluetooth: hci2: command tx timeout [ 945.150281][ T5908] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 945.369243][ T5908] usb 5-1: USB disconnect, device number 90 [ 945.595484][ T990] bond3: (slave gretap1): link status up again after 0 ms [ 945.645793][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 945.883888][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 945.884070][ T5908] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 946.023746][T29341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.044842][T29341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.066738][T29341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 946.093548][T29341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 946.106914][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 946.113761][ T5907] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 946.127962][ T5908] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 946.166799][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.204450][ T5908] usb 7-1: Product: syz [ 946.213041][ T5908] usb 7-1: Manufacturer: syz [ 946.231677][ T5908] usb 7-1: SerialNumber: syz [ 946.236840][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 946.251873][ T5908] usb 7-1: config 0 descriptor?? [ 946.310014][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.343941][ T5907] usb 6-1: config 0 has no interfaces? [ 946.387166][ T5907] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 946.402424][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.422139][ T5907] usb 6-1: Product: syz [ 946.437371][ T5907] usb 6-1: Manufacturer: syz [ 946.442487][ T5907] usb 6-1: SerialNumber: syz [ 946.455531][ T5907] usb 6-1: config 0 descriptor?? [ 946.468899][ T5908] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 946.692628][T29341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.731032][T29341] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.746107][T22660] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.753315][T22660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.784123][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 946.784141][ T30] audit: type=1326 audit(1767273880.511:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29419 comm="syz.5.7407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54ea78f749 code=0x0 [ 946.815066][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 946.837481][T22660] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.844684][T22660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.889061][T29341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.976098][T29341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.004562][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 947.164194][T27453] Bluetooth: hci2: command tx timeout [ 947.229678][T29341] veth0_vlan: entered promiscuous mode [ 947.272230][T29341] veth1_vlan: entered promiscuous mode [ 947.320428][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 947.387077][T29341] veth0_macvtap: entered promiscuous mode [ 947.444992][T29341] veth1_macvtap: entered promiscuous mode [ 947.484826][T29341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.512639][T29341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.535546][ T990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.555290][ T990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.581809][T22660] bond3: (slave gretap1): failed to get link speed/duplex [ 947.600431][ T990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.678121][ T990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.732726][ T5908] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 947.743220][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.750353][ T5908] usb 7-1: USB disconnect, device number 39 [ 947.755102][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 947.787308][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.873088][T29077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.913776][T29077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.916601][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 948.131868][T29463] netlink: 'syz.2.7383': attribute type 13 has an invalid length. [ 948.503421][T29471] binder: 29470:29471 unknown command 0 [ 948.530828][T29471] binder: 29470:29471 ioctl c0306201 200000000080 returned -22 [ 949.130504][ T5908] usb 6-1: USB disconnect, device number 46 [ 949.235720][T27453] Bluetooth: hci2: command tx timeout [ 950.674524][T23634] net_ratelimit: 18 callbacks suppressed [ 950.674545][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 950.854084][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 950.973750][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 951.144678][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 951.264116][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 951.396075][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 951.524171][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 951.654982][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 952.016461][ T5892] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 952.044482][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 952.174060][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 952.199540][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.212713][T29534] netlink: 'syz.5.7424': attribute type 10 has an invalid length. [ 952.231743][ T5892] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 952.258033][T29534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7424'. [ 952.272583][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.309377][ T5892] usb 3-1: config 0 descriptor?? [ 952.334530][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 952.368742][T29534] team0: Failed to send options change via netlink (err -105) [ 952.406128][T29534] team0: Port device geneve0 added [ 952.791450][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 952.829469][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 952.865160][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 952.884528][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 952.907210][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 952.940690][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 953.170812][ T5892] pwc: recv_control_msg error -71 req 02 val 2100 [ 953.202659][ T5892] pwc: recv_control_msg error -71 req 04 val 1500 [ 953.243286][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 953.354616][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 953.367347][ T9] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 953.384847][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 953.402956][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 953.413675][ T9] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 953.433485][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 953.450899][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 953.481485][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 953.511141][ T5892] pwc: Registered as video103. [ 953.530181][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input122 [ 953.624860][ T5892] usb 3-1: USB disconnect, device number 51 [ 954.933850][ T5908] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 955.053882][ T5892] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 955.103825][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 955.114086][ T5908] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 955.114139][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.114162][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 955.114188][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 955.114213][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.114255][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 955.114279][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.218129][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 955.226706][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 955.330020][ T5908] usb 5-1: GET_CAPABILITIES returned 0 [ 955.356712][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 955.362882][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 955.366456][ T5908] usbtmc 5-1:16.0: can't read capabilities [ 955.366469][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.366490][ T5892] usb 3-1: Product: syz [ 955.366506][ T5892] usb 3-1: Manufacturer: syz [ 955.366520][ T5892] usb 3-1: SerialNumber: syz [ 955.372107][ T5892] usb 3-1: config 0 descriptor?? [ 955.376301][ T5892] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 955.376322][ T5892] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 955.723764][ T5908] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 955.765817][ T1156] net_ratelimit: 26 callbacks suppressed [ 955.765840][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 955.873773][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 955.880436][ T5908] usb 7-1: config 0 has no interfaces? [ 955.880475][ T5908] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 955.880519][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.880658][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 955.884316][ T5908] usb 7-1: config 0 descriptor?? [ 955.978457][ T5892] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 955.979020][ T5892] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 955.985340][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 956.096609][ T9] usb 7-1: USB disconnect, device number 40 [ 956.136260][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 956.248550][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 956.363787][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 956.484630][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 956.582703][ T5892] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 956.583252][ T5892] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 956.594532][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 956.706208][ T9561] bond3: (slave gretap1): failed to get link speed/duplex [ 956.785151][ T5892] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 956.787040][ T5892] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 956.787408][ T5892] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 956.787781][ T5892] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 956.796180][ T5892] usb 3-1: USB disconnect, device number 52 [ 956.814474][T11211] bond3: (slave gretap1): failed to get link speed/duplex [ 958.824746][ T5892] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 959.204482][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 959.211731][ T5892] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 959.243991][ T5892] usb 6-1: config 0 has no interface number 0 [ 959.250471][ T5892] usb 6-1: config 0 interface 12 has no altsetting 0 [ 959.346394][ T5892] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 959.377004][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.385663][ T5892] usb 6-1: Product: syz [ 959.389949][ T5892] usb 6-1: Manufacturer: syz [ 959.395511][ T5892] usb 6-1: SerialNumber: syz [ 959.404711][ T5892] usb 6-1: config 0 descriptor?? [ 960.007140][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 960.186129][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.215059][ T5907] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 960.243691][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 960.285507][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.318864][T29641] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 960.347869][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.606910][T29573] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 960.613316][ T5925] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 960.686009][ T5907] usb 5-1: USB disconnect, device number 91 [ 960.825742][ T5925] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.876405][ T1003] net_ratelimit: 30 callbacks suppressed [ 960.876426][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 960.907890][ T5925] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 960.988611][ T5925] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.074132][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 961.074156][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.102123][T29648] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 961.133581][ T5925] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.263963][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 961.424030][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 961.432836][ T5892] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 961.465498][ T5892] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 961.496838][ T5892] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 961.527234][ T5892] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 961.534251][ T5925] usb 3-1: USB disconnect, device number 53 [ 961.567165][ T5892] usb 6-1: USB disconnect, device number 47 [ 961.594703][T11211] bond3: (slave gretap1): failed to get link speed/duplex [ 961.704189][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 961.845995][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 961.971855][ T5908] usb 10-1: USB disconnect, device number 44 [ 962.004000][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 962.163734][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 962.273738][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 965.926681][T23748] net_ratelimit: 23 callbacks suppressed [ 965.926702][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 966.064291][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 966.203970][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 966.366160][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 966.499532][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 966.636858][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 966.828686][T11211] bond3: (slave gretap1): failed to get link speed/duplex [ 966.998144][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 967.219419][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 967.353773][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 969.035610][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7481'. [ 971.286716][ T1003] net_ratelimit: 101 callbacks suppressed [ 971.286739][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 971.434117][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 971.563723][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 971.664985][ T5908] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 971.707114][ T9561] bond3: (slave gretap1): failed to get link speed/duplex [ 971.853890][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 971.863792][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 971.885652][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 971.927290][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 971.972190][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 972.016092][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.033995][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 972.068118][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 972.095332][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.146986][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 972.312265][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 972.361354][ T5908] usb 6-1: GET_CAPABILITIES returned 0 [ 972.385134][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 972.467515][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 972.595583][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 972.864256][T29899] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 972.870816][T29899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.007603][ T5834] usb 6-1: USB disconnect, device number 48 [ 973.190890][T29899] vhci_hcd vhci_hcd.0: Device attached [ 973.453824][ T48] usb 38-1: SetAddress Request (2) to port 0 [ 973.462000][ T48] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 973.612535][T29900] vhci_hcd: connection closed [ 973.614881][T23748] vhci_hcd vhci_hcd.2: stop threads [ 973.650528][T23748] vhci_hcd vhci_hcd.2: release socket [ 973.659643][T23748] vhci_hcd vhci_hcd.2: disconnect device [ 975.175737][T29938] netlink: 'syz.5.7512': attribute type 11 has an invalid length. [ 976.417319][ T4561] net_ratelimit: 29 callbacks suppressed [ 976.417342][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 976.744606][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 976.893831][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 977.033844][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 977.254583][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 977.467016][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 977.619002][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 977.911048][T29975] syzkaller0: entered promiscuous mode [ 977.928922][T29975] syzkaller0: entered allmulticast mode [ 978.052633][T29981] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7522'. [ 978.290521][T29989] kvm: pic: level sensitive irq not supported [ 978.290624][T29989] kvm: pic: single mode not supported [ 978.298339][T29989] kvm: pic: single mode not supported [ 978.304051][T29989] kvm: pic: level sensitive irq not supported [ 978.325145][T29989] kvm: pic: single mode not supported [ 978.331324][T29989] kvm: pic: level sensitive irq not supported [ 978.361268][T29989] kvm: pic: level sensitive irq not supported [ 978.379587][T29989] kvm: pic: single mode not supported [ 978.403008][T29989] kvm: pic: single mode not supported [ 978.409888][T29989] kvm: pic: level sensitive irq not supported [ 978.415945][T29989] kvm: pic: single mode not supported [ 978.422157][T29989] kvm: pic: single mode not supported [ 978.427698][T29989] kvm: pic: level sensitive irq not supported [ 978.433386][T29989] kvm: pic: level sensitive irq not supported [ 978.447022][T29989] kvm: pic: level sensitive irq not supported [ 978.453160][T29989] kvm: pic: single mode not supported [ 978.459334][T29989] kvm: pic: level sensitive irq not supported [ 978.483138][T29989] kvm: pic: level sensitive irq not supported [ 978.489492][T29989] kvm: pic: single mode not supported [ 978.496098][T29989] kvm: pic: single mode not supported [ 978.675721][ T48] usb 38-1: device descriptor read/8, error -110 [ 979.084307][ T5834] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 979.084837][ T48] usb usb38-port1: attempt power cycle [ 979.320024][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 979.352452][ T5834] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 979.390549][ T5834] usb 10-1: config 0 has no interface number 0 [ 979.431458][ T5834] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 979.458811][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.493425][ T5834] usb 10-1: Product: syz [ 979.503661][ T5834] usb 10-1: Manufacturer: syz [ 979.531217][ T5834] usb 10-1: SerialNumber: syz [ 979.558097][ T5834] usb 10-1: config 0 descriptor?? [ 979.605289][ T5834] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 979.694911][ T48] usb usb38-port1: unable to enumerate USB device [ 979.798670][ T5834] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 979.860083][ T5834] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 980.209952][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 980.219617][ T5834] usb 10-1: USB disconnect, device number 45 [ 980.240229][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 980.274362][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 980.314318][ T5834] quatech2 10-1:0.51: device disconnected [ 983.732068][T30036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 984.404684][ T9561] bond3: (slave gretap1): failed to get link speed/duplex [ 984.523859][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 984.644173][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 984.986383][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 985.003818][ T5892] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 985.142256][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 985.234006][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 985.261529][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 985.275414][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 985.290858][ T5892] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 985.300825][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.303683][ T48] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 985.327669][ T5892] usb 6-1: Product: syz [ 985.337652][ T5892] usb 6-1: Manufacturer: syz [ 985.345851][ T5892] usb 6-1: SerialNumber: syz [ 985.362161][T30067] netlink: 'syz.2.7549': attribute type 10 has an invalid length. [ 985.363964][ T5892] usb 6-1: config 0 descriptor?? [ 985.408256][ T5892] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 985.419373][ T5892] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 985.615613][ T48] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.683200][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 985.716315][T30067] veth0_vlan: left promiscuous mode [ 985.723433][T30067] veth0_vlan: entered promiscuous mode [ 985.729180][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 985.766900][ T48] usb 10-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 985.777700][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.791786][ T48] usb 10-1: Product: syz [ 985.803737][ T48] usb 10-1: Manufacturer: syz [ 985.808605][ T48] usb 10-1: SerialNumber: syz [ 985.828506][ T48] usb 10-1: config 0 descriptor?? [ 985.837320][T30065] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 985.848253][T30067] team0: Device veth0_vlan failed to register rx_handler [ 985.926215][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 986.039757][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 986.075034][ T48] powermate: unknown product id 0240 [ 986.098255][ T48] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 986.132692][ T48] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input123 [ 986.144823][ T5892] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 986.166218][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 986.303717][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 986.567310][ T5892] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 986.584957][ T5892] em28xx 6-1:0.0: board has no eeprom [ 986.607294][T30081] pic_ioport_write: 7 callbacks suppressed [ 986.607313][T30081] kvm: pic: level sensitive irq not supported [ 986.613243][T30081] pic_ioport_write: 4 callbacks suppressed [ 986.613260][T30081] kvm: pic: single mode not supported [ 986.613698][ C1] powermate: config urb returned -71 [ 986.625106][T30081] kvm: pic: single mode not supported [ 986.631603][ C1] powermate: config urb returned -71 [ 986.635870][T30081] kvm: pic: level sensitive irq not supported [ 986.641622][ C1] powermate: config urb returned -71 [ 986.648777][T30081] kvm: pic: single mode not supported [ 986.657890][T30081] kvm: pic: level sensitive irq not supported [ 986.669959][T30081] kvm: pic: level sensitive irq not supported [ 986.673397][ T48] usb 10-1: USB disconnect, device number 46 [ 986.673451][ C1] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 986.707145][T30081] kvm: pic: single mode not supported [ 986.707186][T30081] kvm: pic: single mode not supported [ 986.754540][T30081] kvm: pic: level sensitive irq not supported [ 986.787553][T30081] kvm: pic: single mode not supported [ 986.824557][T30081] kvm: pic: single mode not supported [ 986.830038][T30081] kvm: pic: level sensitive irq not supported [ 986.876935][T30081] kvm: pic: level sensitive irq not supported [ 986.903383][T30081] kvm: pic: level sensitive irq not supported [ 986.931428][T30081] kvm: pic: single mode not supported [ 986.937602][T30081] kvm: pic: level sensitive irq not supported [ 986.951320][T30081] kvm: pic: level sensitive irq not supported [ 986.958448][ T5892] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 986.976640][ T5892] em28xx 6-1:0.0: dvb set to bulk mode. [ 986.982263][ T9] em28xx 6-1:0.0: Binding DVB extension [ 987.012596][T30081] kvm: pic: single mode not supported [ 987.012681][T30081] kvm: pic: single mode not supported [ 987.018758][ T5892] usb 6-1: USB disconnect, device number 49 [ 987.036275][ T5892] em28xx 6-1:0.0: Disconnecting em28xx [ 987.148968][ T9] em28xx 6-1:0.0: Registering input extension [ 987.168701][ T5892] em28xx 6-1:0.0: Closing input extension [ 987.216572][ T5892] em28xx 6-1:0.0: Freeing device [ 987.528175][T30099] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 988.938600][T30135] netlink: 'syz.9.7571': attribute type 13 has an invalid length. [ 989.041679][T30135] gretap0: refused to change device tx_queue_len [ 989.486597][ T1099] net_ratelimit: 20 callbacks suppressed [ 989.487430][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 989.618163][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 989.773702][ T5892] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 989.775431][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 989.903775][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 990.011613][ T5892] usb 7-1: not running at top speed; connect to a high speed hub [ 990.013779][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 990.046782][ T5892] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 990.070097][ T5892] usb 7-1: config 1 has no interface number 1 [ 990.086254][ T5892] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 990.130804][ T5892] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 990.145515][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.155752][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 990.160099][ T5892] usb 7-1: Product: syz [ 990.174471][ T5892] usb 7-1: Manufacturer: syz [ 990.179392][ T5892] usb 7-1: SerialNumber: syz [ 990.294303][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 990.480504][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 990.531569][ T5892] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 990.575840][ T5892] usb 7-1: failed to enable PITCH for EP 0x82 [ 990.798887][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 990.952801][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 991.024585][ T5892] usb 7-1: USB disconnect, device number 41 [ 991.286793][T25101] udevd[25101]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.323980][ T5907] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 991.543934][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 991.555162][ T5907] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 991.578368][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.613038][ T5907] usb 3-1: Product: syz [ 991.622107][ T5907] usb 3-1: Manufacturer: syz [ 991.636385][ T5907] usb 3-1: SerialNumber: syz [ 991.652262][ T5907] usb 3-1: config 0 descriptor?? [ 991.684601][ T5907] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 992.927178][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.933769][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.108509][T30208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7595'. [ 994.217765][ T5907] gspca_sonixj: reg_w1 err -71 [ 994.222624][ T5907] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 994.317317][ T5907] usb 3-1: USB disconnect, device number 54 [ 994.348323][T30210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7595'. [ 994.402889][T30208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.563725][T29077] net_ratelimit: 24 callbacks suppressed [ 994.563746][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 994.763814][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 994.974794][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 995.083801][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 995.206375][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 995.313765][ T5907] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 995.326748][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 995.456397][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 995.489883][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 995.524805][ T5907] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 995.551678][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.581531][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.601826][T30224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 995.623697][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 995.643506][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 995.757929][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 996.020973][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 996.097267][ T9] usb 3-1: USB disconnect, device number 55 [ 996.137963][T30234] syzkaller0: entered promiscuous mode [ 996.143487][T30234] syzkaller0: entered allmulticast mode [ 996.183237][T30235] binder: 30232:30235 unknown command 0 [ 996.209821][T30235] binder: 30232:30235 ioctl c0306201 200000004a40 returned -22 [ 996.289057][T30237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 996.448333][T30244] Context (ID=0x4dd) not attached to queue pair (handle=0x2:0x2) [ 996.584072][ T9] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 996.734126][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 996.741075][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 996.753046][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 996.767198][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 996.776697][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.785066][ T9] usb 10-1: Product: syz [ 996.789484][ T9] usb 10-1: Manufacturer: syz [ 996.795940][ T9] usb 10-1: SerialNumber: syz [ 996.799702][T30248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7607'. [ 996.805508][ T9] usb 10-1: config 0 descriptor?? [ 996.824890][ T9] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 996.834900][ T9] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 997.341687][T30259] binder: 30258:30259 ioctl c0306201 200000000280 returned -14 [ 997.431640][ T9] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 997.449197][ T9] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 998.091274][ T9] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 998.644420][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 998.666397][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 998.732465][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 998.801484][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 998.869504][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 998.906664][ T9] usb 10-1: USB disconnect, device number 47 [ 999.653044][T23634] net_ratelimit: 26 callbacks suppressed [ 999.653065][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 999.997300][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1000.136880][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1000.374599][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1000.485380][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1000.685088][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1001.081411][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1001.247054][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 1001.427179][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 1001.595155][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1002.062685][T30329] syzkaller0: entered promiscuous mode [ 1002.313821][T30329] syzkaller0: entered allmulticast mode [ 1002.657767][T30333] binder: 30332:30333 ioctl c0306201 0 returned -14 [ 1002.763732][ T5908] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1002.939869][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 1002.949625][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1002.971146][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1003.002816][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.028367][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.043227][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1003.062276][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.341529][ T5908] usb 5-1: GET_CAPABILITIES returned 0 [ 1003.645029][ T5908] usbtmc 5-1:16.0: can't read capabilities [ 1003.678297][ T5908] usb 5-1: USB disconnect, device number 92 [ 1004.553757][T30355] program syz.5.7642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.581968][T30355] xt_hashlimit: size too large, truncated to 1048576 [ 1006.797529][ T1156] net_ratelimit: 5 callbacks suppressed [ 1006.797545][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1006.977369][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.114047][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.243734][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.354406][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.503712][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.639584][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.783900][ T48] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 1007.788240][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.933954][T15396] bond3: (slave gretap1): failed to get link speed/duplex [ 1007.945078][ T48] usb 10-1: not running at top speed; connect to a high speed hub [ 1007.969140][ T48] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1007.993046][ T48] usb 10-1: config 1 has no interface number 1 [ 1008.011879][ T48] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1008.063814][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1008.084051][ T48] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.093271][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.119758][ T48] usb 10-1: Product: syz [ 1008.121683][ T30] audit: type=1800 audit(1767273941.851:1468): pid=30395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7651" name="bus" dev="ramfs" ino=158338 res=0 errno=0 [ 1008.126997][ T48] usb 10-1: Manufacturer: syz [ 1008.150027][ T48] usb 10-1: SerialNumber: syz [ 1008.386221][ T48] usb 10-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1008.411014][ T48] usb 10-1: failed to enable PITCH for EP 0x82 [ 1008.508901][ T48] usb 10-1: USB disconnect, device number 48 [ 1008.543246][ T5907] IPVS: starting estimator thread 0... [ 1008.628849][T25102] udevd[25102]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.653772][T30411] IPVS: using max 33 ests per chain, 79200 per kthread [ 1009.293822][ T30] audit: type=1326 audit(1767273943.031:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30422 comm="syz.2.7663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc6f8f749 code=0x0 [ 1010.707540][T30444] batman_adv: batadv0: Adding interface: vlan3 [ 1010.734567][T30444] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.827840][T30444] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1011.255484][T30455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1011.833890][ T1003] net_ratelimit: 21 callbacks suppressed [ 1011.833906][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.228111][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.411042][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.526963][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.643879][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.773775][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.899479][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1013.058894][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1013.971365][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1014.104038][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1015.214304][ T5907] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1015.225545][T30511] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 1015.233551][T30511] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 1015.252319][T30511] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1015.392754][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1015.422374][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.445281][ T5907] usb 3-1: Product: syz [ 1015.461748][ T5907] usb 3-1: Manufacturer: syz [ 1015.472349][ T5907] usb 3-1: SerialNumber: syz [ 1015.748187][T30507] syz_tun: entered promiscuous mode [ 1015.783671][T27728] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1015.821756][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1015.849132][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1015.915772][ T5907] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1015.949203][ T5907] usb 3-1: USB disconnect, device number 56 [ 1015.965962][T27728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.002810][T27728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.032954][T27728] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1016.049702][T27728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1016.091564][T27728] usb 5-1: SerialNumber: syz [ 1016.326071][T27728] usb 5-1: 0:2 : does not exist [ 1016.389632][T27728] usb 5-1: USB disconnect, device number 93 [ 1016.450775][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.895670][ T1099] net_ratelimit: 24 callbacks suppressed [ 1016.895954][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.033927][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.144190][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.253697][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.518825][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.645992][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.790315][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.904678][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.935200][ T48] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1018.065955][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1018.143663][ T48] usb 10-1: Using ep0 maxpacket: 8 [ 1018.186626][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1018.196271][ T48] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1018.212500][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.231328][ T48] usb 10-1: Product: syz [ 1018.235858][ T48] usb 10-1: Manufacturer: syz [ 1018.240579][ T48] usb 10-1: SerialNumber: syz [ 1018.290031][ T48] usb 10-1: config 0 descriptor?? [ 1018.301580][ T48] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1018.943727][ T5907] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1019.093705][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 1019.101316][ T5907] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1019.113648][ T5907] usb 6-1: config 0 has no interface number 0 [ 1019.121902][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.153050][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1019.165089][ T5907] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.178870][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.202322][ T5907] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1019.219421][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.241077][ T5907] usb 6-1: config 0 descriptor?? [ 1019.270583][ T5907] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1019.540200][ T5892] usb 6-1: USB disconnect, device number 50 [ 1019.548031][T30595] kvm: kvm [30594]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc1) = 0x60100000000 [ 1019.560379][ T5892] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1019.573381][T30595] kvm: kvm [30594]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60500000000 [ 1020.679988][ T48] gspca_sonixj: reg_r err -110 [ 1020.794032][ T48] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1021.731519][ T48] usb 10-1: USB disconnect, device number 49 [ 1022.027342][ T3464] net_ratelimit: 26 callbacks suppressed [ 1022.027364][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1022.173933][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1022.293706][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1022.423741][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1022.576180][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1022.966594][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.094379][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.235267][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.385463][ T4525] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.501427][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.011942][T30672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7742'. [ 1026.190380][T30688] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1026.451157][T30695] syzkaller0: entered promiscuous mode [ 1026.482434][T30695] syzkaller0: entered allmulticast mode [ 1030.593688][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1030.985656][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1031.003957][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.035626][ T24] usb 7-1: config 0 descriptor?? [ 1031.050381][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1032.754282][ T24] gspca_stv06xx: I2C: Read error writing address: -71 [ 1032.765634][ T24] usb 7-1: USB disconnect, device number 42 [ 1034.195575][T30782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1036.264641][T30773] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7768'. [ 1036.293494][T30773] net_ratelimit: 20 callbacks suppressed [ 1036.293514][T30773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1036.337382][T30779] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 1036.354921][T30779] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 1036.396256][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1036.429810][T30803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1036.513961][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1036.666840][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1036.804117][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1036.946495][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1037.101119][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 1037.239552][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1037.715138][T11211] bond3: (slave gretap1): failed to get link speed/duplex [ 1037.833796][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1038.072189][T30834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1039.478243][ T5908] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1039.683643][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 1039.695836][ T5908] usb 10-1: config 0 has an invalid interface number: 246 but max is 0 [ 1039.704668][ T5908] usb 10-1: config 0 has no interface number 0 [ 1039.717120][ T5908] usb 10-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1039.726601][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.774574][ T5908] usb 10-1: Product: syz [ 1039.778982][ T5908] usb 10-1: Manufacturer: syz [ 1039.784051][ T5908] usb 10-1: SerialNumber: syz [ 1039.814861][ T5908] usb 10-1: config 0 descriptor?? [ 1039.940188][ T5908] msi2500 10-1:0.246: Registered as swradio24 [ 1039.955932][ T5908] msi2500 10-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1040.279904][ T5908] usb 10-1: USB disconnect, device number 50 [ 1041.267438][T30878] kvm: kvm [30875]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc1) = 0x60100000000 [ 1041.335695][T29077] net_ratelimit: 21 callbacks suppressed [ 1041.335717][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.388076][T30878] kvm: kvm [30875]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60500000000 [ 1041.523725][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.654037][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.850216][T18595] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.973677][T11211] bond3: (slave gretap1): failed to get link speed/duplex [ 1042.083996][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1042.198551][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1042.343765][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1042.580246][T30902] cgroup: fork rejected by pids controller in /syz2 [ 1042.632506][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1042.767474][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1044.730829][T30958] xt_CT: No such helper "pptp" [ 1045.297756][T30965] netlink: 'syz.5.7814': attribute type 1 has an invalid length. [ 1045.359038][T30968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7814'. [ 1045.365553][T30965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1045.868333][T30975] pim6reg: entered allmulticast mode [ 1045.875560][T30975] netlink: 'syz.5.7816': attribute type 10 has an invalid length. [ 1046.112937][T30975] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1046.142895][T30975] team0: Failed to send options change via netlink (err -105) [ 1046.164561][T30975] team0: Port device netdevsim0 added [ 1046.396960][ T3572] net_ratelimit: 24 callbacks suppressed [ 1046.396981][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 1046.449020][T30979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1046.558812][T15396] bond3: (slave gretap1): failed to get link speed/duplex [ 1046.684021][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1046.793691][T15396] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.240219][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.371206][ T30] audit: type=1800 audit(1767273981.031:1470): pid=30992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7821" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1047.412908][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.435323][T31001] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.441404][T31001] binder: 31000:31001 ioctl 4018620d 200000000100 returned -16 [ 1047.460158][T31001] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.528405][T31003] binder: 31000:31003 ioctl c0306201 200000000680 returned -14 [ 1047.563836][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.574062][T31001] binder: 31000:31001 ioctl 4018620d 2000000002c0 returned -16 [ 1047.779701][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.913718][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1048.053931][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1048.702365][ T30] audit: type=1326 audit(1767273982.431:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31018 comm="syz.5.7830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x0 [ 1050.060655][ T4041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.385550][ T4041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.434106][T27728] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1050.653715][T27728] usb 10-1: Using ep0 maxpacket: 16 [ 1050.886474][T27728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1050.908129][ T4041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.919376][T27728] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1050.943675][T27728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.951831][T27728] usb 10-1: Product: syz [ 1050.985498][T27728] usb 10-1: Manufacturer: syz [ 1050.990206][T27728] usb 10-1: SerialNumber: syz [ 1051.035856][T27728] usb 10-1: config 0 descriptor?? [ 1051.109919][T27728] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1051.125486][ T4041] team0: Port device netdevsim0 removed [ 1051.149812][ T4041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.163118][T27728] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1051.465786][ T12] net_ratelimit: 18 callbacks suppressed [ 1051.465850][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1051.842828][T27728] em28xx 10-1:0.0: chip ID is em2765 [ 1051.854005][T18595] bond3: (slave gretap1): failed to get link speed/duplex [ 1052.555560][T27728] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1052.579947][T27728] em28xx 10-1:0.0: board has no eeprom [ 1052.893937][T27728] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1052.908865][T27728] em28xx 10-1:0.0: dvb set to bulk mode. [ 1052.954409][ T5955] em28xx 10-1:0.0: Binding DVB extension [ 1053.020224][T27728] usb 10-1: USB disconnect, device number 51 [ 1053.057012][T27728] em28xx 10-1:0.0: Disconnecting em28xx [ 1053.176227][ T5955] em28xx 10-1:0.0: Registering input extension [ 1053.206511][T27728] em28xx 10-1:0.0: Closing input extension [ 1053.330434][T27728] em28xx 10-1:0.0: Freeing device [ 1053.494707][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1053.507276][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1053.516930][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1053.525330][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1053.534136][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1054.478341][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.494169][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.914629][ T4041] team0: Port device geneve0 removed [ 1054.968350][ T4041] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1054.976962][ T4041] bridge1 (unregistering): left promiscuous mode [ 1054.984591][T31084] loop4: detected capacity change from 0 to 2560 [ 1055.018919][ T5831] buffer_io_error: 317 callbacks suppressed [ 1055.018932][ T5831] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.062790][ T5831] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.072001][T31084] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.099977][ T5831] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.109586][ T5831] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.120303][ T5831] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.130846][T31084] Buffer I/O error on dev loop4, logical block 0, async page read [ 1055.579997][ T4041] bond1 (unregistering): Released all slaves [ 1055.643039][T27453] Bluetooth: hci4: command tx timeout [ 1056.185117][ T4041] bond0 (unregistering): Released all slaves [ 1056.565469][ T4041] bond2 (unregistering): Released all slaves [ 1057.144353][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1057.244348][ T5907] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1057.413768][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1057.429306][ T5907] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1057.468751][T31066] chnl_net:caif_netlink_parms(): no params data found [ 1057.480765][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.511758][ T5907] usb 5-1: Product: syz [ 1057.526165][ T5907] usb 5-1: Manufacturer: syz [ 1057.536442][ T5907] usb 5-1: SerialNumber: syz [ 1057.551494][ T5907] usb 5-1: config 0 descriptor?? [ 1057.571915][ T5907] hub 5-1:0.0: bad descriptor, ignoring hub [ 1057.584236][ T5907] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1057.692171][T31066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.711005][T31066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.721200][T31066] bridge_slave_0: entered allmulticast mode [ 1057.727626][T27453] Bluetooth: hci4: command tx timeout [ 1057.746177][T31066] bridge_slave_0: entered promiscuous mode [ 1057.766798][T31066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.807582][ T5907] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1057.822345][T31066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.835635][T31066] bridge_slave_1: entered allmulticast mode [ 1057.846654][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1057.872784][T31066] bridge_slave_1: entered promiscuous mode [ 1057.884134][ T5907] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1057.913939][T25670] bond3: (slave gretap1): failed to get link speed/duplex [ 1057.921475][ T5907] usb 5-1: media controller created [ 1057.978799][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1058.023880][T31066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.050769][T31066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.087542][T31129] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.112851][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 1058.113232][T31129] binder: 31127:31129 ioctl 4018620d 200000000100 returned -16 [ 1058.143928][ T5907] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1058.156993][T31066] team0: Port device team_slave_0 added [ 1058.163818][T31129] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.173918][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1058.193098][T31129] binder: 31127:31129 ioctl 4018620d 200000004a80 returned -16 [ 1058.215996][T31066] team0: Port device team_slave_1 added [ 1058.220441][T31129] binder: 31127:31129 ioctl c018620c 200000000240 returned -1 [ 1058.237002][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 1058.243112][ T5907] Registered IR keymap rc-empty [ 1058.271205][ T5907] dvb-usb: could not initialize remote control. [ 1058.284099][ T5907] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1058.463764][T31066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.481241][T31066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.522112][T31066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.761578][T31066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.190677][T31066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.260528][T31066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.399722][ T4041] hsr_slave_0: left promiscuous mode [ 1059.415194][ T4041] hsr_slave_1: left promiscuous mode [ 1059.431819][ T4041] batman_adv: batadv0: Removing interface: vlan3 [ 1059.564295][ T4041] veth1_macvtap: left promiscuous mode [ 1059.608174][ T4041] veth0_macvtap: left promiscuous mode [ 1059.646740][ T4041] veth1_vlan: left promiscuous mode [ 1059.669946][ T4041] veth0_vlan: left promiscuous mode [ 1059.830802][T27453] Bluetooth: hci4: command tx timeout [ 1059.985275][ T4041] pim6reg (unregistering): left allmulticast mode [ 1060.053055][T27728] usb 5-1: USB disconnect, device number 94 [ 1060.154928][ T4041] pimreg (unregistering): left allmulticast mode [ 1060.190590][T27728] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1061.875671][T27453] Bluetooth: hci4: command tx timeout [ 1062.174694][ C0] hrtimer: interrupt took 18212 ns [ 1063.113668][ T5907] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1063.287258][ T5907] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.303715][ T5907] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1063.326002][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1063.360877][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1063.417321][ T5907] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1063.503198][ T5907] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1063.512777][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1063.553220][ T5907] usb 7-1: Product: syz [ 1063.562201][ T5907] usb 7-1: Manufacturer: syz [ 1063.571973][ T5907] usb 7-1: SerialNumber: syz [ 1063.586524][ T5907] usb 7-1: config 0 descriptor?? [ 1064.095832][ T5907] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1064.163711][ T5907] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1064.294504][ T5907] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1064.302157][ T5907] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1064.321180][ T5907] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1064.617732][ T5907] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1065.399386][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7870'. [ 1065.526381][ T48] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1065.705595][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.717105][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.728650][ T48] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1065.739983][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.752333][ T48] usb 10-1: config 0 descriptor?? [ 1065.961549][T31066] hsr_slave_0: entered promiscuous mode [ 1065.982986][T31066] hsr_slave_1: entered promiscuous mode [ 1066.015341][T31066] debugfs: 'hsr0' already exists in 'hsr' [ 1066.033471][T31066] Cannot create hsr debugfs directory [ 1066.317352][ T5955] usb 7-1: USB disconnect, device number 43 [ 1066.332324][ T48] cp2112 0003:10C4:EA90.0063: unknown main item tag 0x0 [ 1066.561370][ T48] cp2112 0003:10C4:EA90.0063: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1066.674579][ T48] cp2112 0003:10C4:EA90.0063: Part Number: 0x82 Device Version: 0xFE [ 1066.683890][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.803764][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1067.211580][ T48] cp2112 0003:10C4:EA90.0063: error setting SMBus config [ 1067.248035][ T48] cp2112 0003:10C4:EA90.0063: probe with driver cp2112 failed with error -71 [ 1067.299447][ T48] usb 10-1: USB disconnect, device number 52 [ 1067.386409][T31230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1067.404729][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1067.673694][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1067.875838][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1068.103716][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 1068.363885][ T5892] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1068.371452][T31246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1068.422847][ T3572] bond3: (slave gretap1): failed to get link speed/duplex [ 1068.637172][ T5892] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1068.665221][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.721146][ T5892] usb 10-1: Product: syz [ 1068.734505][ T5892] usb 10-1: Manufacturer: syz [ 1068.784379][ T5892] usb 10-1: SerialNumber: syz [ 1068.793982][T31252] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1068.821242][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1068.945141][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1069.023361][T31258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1069.135526][T31258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1069.271694][ T3464] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.301077][ T3464] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.367952][T31066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1069.409096][ T5892] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1069.445835][ T5892] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1069.452067][T31066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1069.557619][T31066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1069.598345][T31066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1069.647026][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1070.007533][T31066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.116131][T31066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.155230][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.162448][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.213334][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.220591][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.364615][ T5907] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1070.402125][T31066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.533690][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1070.539974][T31066] veth0_vlan: entered promiscuous mode [ 1070.555735][ T5907] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1070.568844][ T5907] usb 3-1: config 0 has no interface number 0 [ 1070.583336][T31066] veth1_vlan: entered promiscuous mode [ 1070.592728][ T5907] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1070.617063][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1070.622389][T31066] veth0_macvtap: entered promiscuous mode [ 1070.633160][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.653111][ T5907] usb 3-1: Product: syz [ 1070.658236][ T5907] usb 3-1: Manufacturer: syz [ 1070.660783][T31066] veth1_macvtap: entered promiscuous mode [ 1070.662927][ T5907] usb 3-1: SerialNumber: syz [ 1070.685364][ T5907] usb 3-1: config 0 descriptor?? [ 1070.696944][ T5907] smsc75xx v1.0.0 [ 1070.712721][T31066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.747819][T31066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.795237][ T3572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.817517][ T3572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.861720][ T3572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.896831][ T3572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.032335][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.059842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.128907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.142794][ T5892] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1071.163503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.179195][ T5892] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1071.271966][ T5892] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1071.300256][ T5892] usb 10-1: USB disconnect, device number 53 [ 1071.348518][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1071.379383][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1071.399240][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7840'. [ 1071.853911][T15396] net_ratelimit: 15 callbacks suppressed [ 1071.853930][T15396] bond3: (slave gretap1): failed to get link speed/duplex [ 1071.990946][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.153849][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.213673][ T5892] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1072.278113][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.301808][T31334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1072.387755][ T5892] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1072.404504][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.411815][ T5892] usb 10-1: config 0 has no interface number 0 [ 1072.430342][ T5892] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1072.457485][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.478576][ T5892] usb 10-1: Product: syz [ 1072.486035][ T5892] usb 10-1: Manufacturer: syz [ 1072.490803][ T5892] usb 10-1: SerialNumber: syz [ 1072.499870][ T5892] usb 10-1: config 0 descriptor?? [ 1072.513915][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.527640][ T5892] yurex 10-1:0.50: Could not find endpoints [ 1072.634737][ T1003] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.768015][T31321] kvm: kvm [31320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1072.776892][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.847429][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1072.851795][T31321] kvm: kvm [31320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1072.869404][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1072.883864][ T4561] bond3: (slave gretap1): failed to get link speed/duplex [ 1072.909524][ T5907] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1072.931802][ T5907] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1072.974054][ T5907] usb 3-1: USB disconnect, device number 57 [ 1072.997408][ T5892] usb 10-1: USB disconnect, device number 54 [ 1073.006293][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1073.685408][ T30] audit: type=1326 audit(1767274007.411:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.2.7899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc6f8f749 code=0x0 [ 1075.308284][T31404] kvm: pic: non byte write [ 1075.354893][ T24] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1075.660064][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1075.682210][ T24] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.702617][ T24] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1075.778592][ T24] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.801087][ T24] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1075.842419][ T24] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1075.863899][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.900388][ T24] usb 10-1: Product: syz [ 1075.919529][ T24] usb 10-1: Manufacturer: syz [ 1075.933592][ T24] usb 10-1: SerialNumber: syz [ 1075.986936][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1076.047273][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input127 [ 1076.189538][ T24] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1076.224084][ T24] (id 0x00) [ 1076.423649][ T24] rc_core: IR keymap rc-imon-pad not found [ 1076.459931][ T24] Registered IR keymap rc-empty [ 1076.487826][ T24] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1076.521976][ T24] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1076.575531][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1076.601228][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input128 [ 1076.652215][ T24] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:55> initialized [ 1076.912018][ T990] net_ratelimit: 29 callbacks suppressed [ 1076.912036][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.073839][ T4053] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.234008][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.373881][ T4053] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.553969][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.683925][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1077.717502][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.852830][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.871288][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.874063][ T5892] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1077.907792][ T24] usb 2-1: config 0 has no interfaces? [ 1077.913513][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1077.922865][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.994602][ T24] usb 2-1: config 0 descriptor?? [ 1078.004568][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.105909][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.137384][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.145855][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1078.170980][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1078.212596][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1078.233589][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.273970][T18595] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.295485][T31445] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1078.311226][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 1078.370588][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1078.396434][T31453] imon:send_packet: packet tx failed (-71) [ 1078.405914][ T5955] usb 10-1: USB disconnect, device number 55 [ 1078.435146][T31453] imon:vfd_write: send packet #5 failed [ 1078.456703][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 1078.461951][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 1078.471766][ T24] usb 2-1: string descriptor 0 read error: -71 [ 1078.492642][ T5892] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1078.497094][ T24] usb 2-1: USB disconnect, device number 35 [ 1078.505479][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 1078.714980][T31468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1078.754744][T27728] usb 3-1: USB disconnect, device number 58 [ 1079.093650][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1079.134009][ T5907] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1079.262435][T31483] loop9: detected capacity change from 0 to 7 [ 1079.272695][T31483] Dev loop9: unable to read RDB block 7 [ 1079.275204][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.291641][T31483] loop9: AHDI p1 p2 [ 1079.301137][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1079.321716][T31483] loop9: partition table partially beyond EOD, truncated [ 1079.344634][T27728] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1079.345958][ T5907] usb 5-1: config 0 has no interfaces? [ 1079.352635][T31483] loop9: p1 size 4227858431 extends beyond EOD, [ 1079.363771][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1079.369043][T31483] truncated [ 1079.384052][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1079.396025][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1079.426462][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.434912][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.468905][T31445] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1079.487862][ T5907] usb 5-1: config 0 descriptor?? [ 1079.508570][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 1079.533823][T27728] usb 2-1: Using ep0 maxpacket: 32 [ 1079.543600][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1079.556682][T27728] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1079.572249][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 1079.579476][T27728] usb 2-1: config 0 has no interface number 0 [ 1079.591084][ T5831] udevd[5831]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1079.592305][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 1079.601028][T27728] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1079.631854][T27728] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1079.647743][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1079.669216][T27728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.708318][T27728] usb 2-1: Product: syz [ 1079.712561][T27728] usb 2-1: Manufacturer: syz [ 1079.738417][T27728] usb 2-1: SerialNumber: syz [ 1079.764574][T27728] usb 2-1: config 0 descriptor?? [ 1079.833926][ T5907] usb 3-1: USB disconnect, device number 59 [ 1079.880737][ T5955] usb 5-1: USB disconnect, device number 95 [ 1079.915324][ T5892] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1080.086452][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.112804][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.146900][ T5892] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1080.163689][ T5892] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1080.182070][ T5892] usb 10-1: Manufacturer: syz [ 1080.195131][ T5892] usb 10-1: config 0 descriptor?? [ 1080.646277][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.653160][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.690702][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.720408][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.751101][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.780816][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.799476][ T5892] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1080.854250][ T5892] pyra 0003:1E7D:2CF6.0064: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1081.945776][T17297] net_ratelimit: 31 callbacks suppressed [ 1081.945825][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.238624][ T5892] pyra 0003:1E7D:2CF6.0064: couldn't init struct pyra_device [ 1082.302348][ T5892] pyra 0003:1E7D:2CF6.0064: couldn't install mouse [ 1082.376528][ T5892] pyra 0003:1E7D:2CF6.0064: probe with driver pyra failed with error -32 [ 1082.424367][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.450044][T27728] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 1082.483178][T27728] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1082.499893][T27728] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1082.530916][T27728] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1082.728116][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.742520][T27728] usb 2-1: USB disconnect, device number 36 [ 1082.805740][ T48] usb 10-1: USB disconnect, device number 56 [ 1082.863703][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.952207][T31537] fido_id[31537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1083.013993][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1083.226031][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1083.919401][T31554] syzkaller0: entered promiscuous mode [ 1083.964293][T31554] syzkaller0: entered allmulticast mode [ 1084.251287][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1085.283669][ T48] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1085.504120][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.514795][ T48] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1085.524149][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.540026][ T48] usb 3-1: config 0 descriptor?? [ 1085.549233][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 1085.963694][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1085.971197][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 1085.980058][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1086.007182][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 1086.018288][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 1086.038012][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 1086.055558][ T48] pwc: recv_control_msg error -32 req 02 val 2000 [ 1086.066324][ T48] pwc: recv_control_msg error -32 req 02 val 2100 [ 1086.291647][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 1086.299403][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 1086.316824][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 1086.332064][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 1086.339507][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 1086.348122][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 1086.355533][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 1086.365649][ T48] pwc: Registered as video103. [ 1086.374979][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input129 [ 1086.390050][ T48] usb 3-1: USB disconnect, device number 60 [ 1086.483927][ T5892] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1086.669184][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.702159][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1086.719051][ T5892] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1086.744816][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.764905][ T5892] usb 7-1: config 0 descriptor?? [ 1086.983289][T31584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.009457][T31584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.059695][ T5892] usb 7-1: USB disconnect, device number 44 [ 1090.144126][T31593] syzkaller0: entered promiscuous mode [ 1090.149992][T31593] syzkaller0: entered allmulticast mode [ 1090.403667][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1090.553494][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1090.663706][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1090.729241][T31647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1090.735797][T31647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1090.752012][T31649] syzkaller0: entered promiscuous mode [ 1090.757703][T31649] syzkaller0: entered allmulticast mode [ 1090.769642][T31647] vhci_hcd vhci_hcd.0: Device attached [ 1090.880639][T31651] vhci_hcd: connection closed [ 1090.882777][ T1156] vhci_hcd vhci_hcd.2: stop threads [ 1090.923675][ T1156] vhci_hcd vhci_hcd.2: release socket [ 1090.961345][ T1156] vhci_hcd vhci_hcd.2: disconnect device [ 1091.020720][ T5907] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1091.522242][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.676526][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.822829][ T60] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.953726][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1092.536109][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1092.663756][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 1092.793686][ T4041] bond3: (slave gretap1): failed to get link speed/duplex [ 1093.419890][T31705] warning: `syz.1.7966' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1093.844882][T31716] loop2: detected capacity change from 0 to 7 [ 1093.866918][T31716] Dev loop2: unable to read RDB block 7 [ 1093.900696][T31716] loop2: unable to read partition table [ 1093.920970][T31716] loop2: partition table beyond EOD, truncated [ 1093.942758][T31716] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1093.995087][T31719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1094.183124][T31726] syzkaller0: entered promiscuous mode [ 1094.281870][T31726] syzkaller0: entered allmulticast mode [ 1094.614461][ T5955] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1094.706085][T18595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.812298][ T5955] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1094.855571][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.874675][ T5955] usb 5-1: Product: syz [ 1094.889135][ T5955] usb 5-1: Manufacturer: syz [ 1095.184794][ T5955] usb 5-1: SerialNumber: syz [ 1095.220004][ T5955] usb 5-1: config 0 descriptor?? [ 1095.484061][ T5955] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1095.495737][ T12] net_ratelimit: 19 callbacks suppressed [ 1095.495764][ T12] bond3: (slave gretap1): failed to get link speed/duplex [ 1095.706185][T18595] bond3: (slave gretap1): failed to get link speed/duplex [ 1095.859077][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1095.974164][ T990] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.104254][ T5907] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1096.110759][ T4053] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.232078][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.493667][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.646861][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.774007][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.885636][T23748] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.945954][ T5955] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1096.972394][ T5955] usb 5-1: USB disconnect, device number 96 [ 1097.643629][ T5907] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1097.817804][ T5907] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1097.855724][ T5907] usb 7-1: config 0 has no interface number 0 [ 1097.895097][ T5907] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1097.910015][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.928804][ T5907] usb 7-1: Product: syz [ 1097.938020][ T5907] usb 7-1: Manufacturer: syz [ 1097.942767][ T5907] usb 7-1: SerialNumber: syz [ 1097.977563][ T5907] usb 7-1: config 0 descriptor?? [ 1097.985856][T31785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1097.991592][ T5907] yurex 7-1:0.50: Could not find endpoints [ 1098.211260][T31775] kvm: kvm [31774]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1098.235692][T31775] kvm: kvm [31774]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1098.562535][ T5907] usb 7-1: USB disconnect, device number 45 [ 1099.209706][T31802] [ 1099.212072][T31802] ===================================================== [ 1099.218999][T31802] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1099.226461][T31802] syzkaller #0 Tainted: G L [ 1099.232436][T31802] ----------------------------------------------------- [ 1099.239360][T31802] syz.1.7991/31802 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1099.247089][T31802] ffff888055d90b40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1099.255824][T31802] [ 1099.255824][T31802] and this task is already holding: [ 1099.263187][T31802] ffff888053fce468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1099.271749][T31802] which would create a new lock dependency: [ 1099.277642][T31802] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1099.285327][T31802] [ 1099.285327][T31802] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1099.294769][T31802] (kbd_event_lock){..-.}-{3:3} [ 1099.294799][T31802] [ 1099.294799][T31802] ... which became SOFTIRQ-irq-safe at: [ 1099.307319][T31802] lock_acquire+0x107/0x340 [ 1099.311909][T31802] _raw_spin_lock+0x2e/0x40 [ 1099.316495][T31802] kbd_event+0xd2/0x3fa0 [ 1099.320816][T31802] input_handle_events_default+0xd4/0x1a0 [ 1099.326611][T31802] input_pass_values+0x288/0x890 [ 1099.331629][T31802] input_event_dispose+0x3e5/0x6b0 [ 1099.336818][T31802] input_event+0x89/0xe0 [ 1099.341136][T31802] hidinput_hid_event+0x145e/0x1e50 [ 1099.346412][T31802] hid_process_event+0x4be/0x620 [ 1099.351430][T31802] hid_input_array_field+0x41c/0x5f0 [ 1099.356793][T31802] hid_report_raw_event+0xdd9/0x1720 [ 1099.362156][T31802] hid_input_report+0x44b/0x580 [ 1099.367081][T31802] hid_irq_in+0x47e/0x6d0 [ 1099.371482][T31802] __usb_hcd_giveback_urb+0x376/0x540 [ 1099.376935][T31802] dummy_timer+0x85f/0x45b0 [ 1099.381515][T31802] __hrtimer_run_queues+0x51c/0xc30 [ 1099.386791][T31802] hrtimer_run_softirq+0x187/0x2b0 [ 1099.391980][T31802] handle_softirqs+0x22b/0x7c0 [ 1099.396817][T31802] __irq_exit_rcu+0x60/0x150 [ 1099.401484][T31802] irq_exit_rcu+0x9/0x30 [ 1099.405798][T31802] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1099.411503][T31802] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.417570][T31802] rcu_is_watching+0x0/0xb0 [ 1099.422154][T31802] filemap_map_pages+0x1b1f/0x1fd0 [ 1099.427342][T31802] do_pte_missing+0x20b0/0x3330 [ 1099.432270][T31802] handle_mm_fault+0x1b26/0x32b0 [ 1099.437291][T31802] do_user_addr_fault+0xa7c/0x1380 [ 1099.442474][T31802] exc_page_fault+0x71/0xd0 [ 1099.447050][T31802] asm_exc_page_fault+0x26/0x30 [ 1099.451973][T31802] [ 1099.451973][T31802] to a SOFTIRQ-irq-unsafe lock: [ 1099.458975][T31802] (tasklist_lock){.+.+}-{3:3} [ 1099.459003][T31802] [ 1099.459003][T31802] ... which became SOFTIRQ-irq-unsafe at: [ 1099.471610][T31802] ... [ 1099.471620][T31802] lock_acquire+0x107/0x340 [ 1099.478765][T31802] _raw_read_lock+0x36/0x50 [ 1099.483351][T31802] __do_wait+0xde/0x740 [ 1099.487587][T31802] do_wait+0x1e8/0x4f0 [ 1099.491742][T31802] kernel_wait+0xab/0x170 [ 1099.496151][T31802] call_usermodehelper_exec_work+0xbe/0x230 [ 1099.502117][T31802] process_scheduled_works+0xad1/0x1770 [ 1099.507736][T31802] worker_thread+0x8a0/0xda0 [ 1099.512401][T31802] kthread+0x711/0x8a0 [ 1099.516548][T31802] ret_from_fork+0x510/0xa50 [ 1099.521210][T31802] ret_from_fork_asm+0x1a/0x30 [ 1099.526058][T31802] [ 1099.526058][T31802] other info that might help us debug this: [ 1099.526058][T31802] [ 1099.536267][T31802] Chain exists of: [ 1099.536267][T31802] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1099.536267][T31802] [ 1099.549036][T31802] Possible interrupt unsafe locking scenario: [ 1099.549036][T31802] [ 1099.557340][T31802] CPU0 CPU1 [ 1099.562692][T31802] ---- ---- [ 1099.568043][T31802] lock(tasklist_lock); [ 1099.572273][T31802] local_irq_disable(); [ 1099.579010][T31802] lock(kbd_event_lock); [ 1099.585849][T31802] lock(&tty->flow.lock); [ 1099.592772][T31802] [ 1099.596209][T31802] lock(kbd_event_lock); [ 1099.600698][T31802] [ 1099.600698][T31802] *** DEADLOCK *** [ 1099.600698][T31802] [ 1099.608825][T31802] 6 locks held by syz.1.7991/31802: [ 1099.614005][T31802] #0: ffff888053fce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1099.623756][T31802] #1: ffff888053fce2e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1099.634027][T31802] #2: ffff888053fce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1099.643337][T31802] #3: ffff888053fce468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1099.652298][T31802] #4: ffff888053fce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1099.661608][T31802] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1099.670654][T31802] [ 1099.670654][T31802] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1099.681040][T31802] -> (kbd_event_lock){..-.}-{3:3} { [ 1099.686331][T31802] IN-SOFTIRQ-W at: [ 1099.690387][T31802] lock_acquire+0x107/0x340 [ 1099.696704][T31802] _raw_spin_lock+0x2e/0x40 [ 1099.703025][T31802] kbd_event+0xd2/0x3fa0 [ 1099.709076][T31802] input_handle_events_default+0xd4/0x1a0 [ 1099.716606][T31802] input_pass_values+0x288/0x890 [ 1099.723364][T31802] input_event_dispose+0x3e5/0x6b0 [ 1099.730289][T31802] input_event+0x89/0xe0 [ 1099.736347][T31802] hidinput_hid_event+0x145e/0x1e50 [ 1099.743363][T31802] hid_process_event+0x4be/0x620 [ 1099.750115][T31802] hid_input_array_field+0x41c/0x5f0 [ 1099.757214][T31802] hid_report_raw_event+0xdd9/0x1720 [ 1099.764311][T31802] hid_input_report+0x44b/0x580 [ 1099.770976][T31802] hid_irq_in+0x47e/0x6d0 [ 1099.777112][T31802] __usb_hcd_giveback_urb+0x376/0x540 [ 1099.784301][T31802] dummy_timer+0x85f/0x45b0 [ 1099.790624][T31802] __hrtimer_run_queues+0x51c/0xc30 [ 1099.797639][T31802] hrtimer_run_softirq+0x187/0x2b0 [ 1099.804572][T31802] handle_softirqs+0x22b/0x7c0 [ 1099.811149][T31802] __irq_exit_rcu+0x60/0x150 [ 1099.817549][T31802] irq_exit_rcu+0x9/0x30 [ 1099.823607][T31802] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1099.831053][T31802] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.838845][T31802] rcu_is_watching+0x0/0xb0 [ 1099.845164][T31802] filemap_map_pages+0x1b1f/0x1fd0 [ 1099.852086][T31802] do_pte_missing+0x20b0/0x3330 [ 1099.858744][T31802] handle_mm_fault+0x1b26/0x32b0 [ 1099.865513][T31802] do_user_addr_fault+0xa7c/0x1380 [ 1099.872459][T31802] exc_page_fault+0x71/0xd0 [ 1099.878792][T31802] asm_exc_page_fault+0x26/0x30 [ 1099.885466][T31802] INITIAL USE at: [ 1099.889439][T31802] lock_acquire+0x107/0x340 [ 1099.895668][T31802] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.902600][T31802] vt_reset_unicode+0x2b/0x1a0 [ 1099.909085][T31802] reset_vc+0x68/0x1b0 [ 1099.914882][T31802] vc_init+0x70/0x4a0 [ 1099.920592][T31802] con_init+0x385/0x9c0 [ 1099.926479][T31802] console_init+0xfc/0x3f0 [ 1099.932623][T31802] start_kernel+0x227/0x3d0 [ 1099.938846][T31802] x86_64_start_reservations+0x24/0x30 [ 1099.946032][T31802] x86_64_start_kernel+0x143/0x1c0 [ 1099.952868][T31802] common_startup_64+0x13e/0x147 [ 1099.959535][T31802] } [ 1099.962113][T31802] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1099.969998][T31802] -> (&tty->flow.lock){....}-{3:3} { [ 1099.975287][T31802] INITIAL USE at: [ 1099.979168][T31802] lock_acquire+0x107/0x340 [ 1099.985221][T31802] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.991977][T31802] start_tty+0x20/0x70 [ 1099.997603][T31802] n_tty_set_termios+0xa7c/0x10c0 [ 1100.004183][T31802] tty_set_termios+0xda4/0x17e0 [ 1100.010588][T31802] set_termios+0x516/0x6c0 [ 1100.016556][T31802] tty_mode_ioctl+0x47e/0x740 [ 1100.022788][T31802] tty_ioctl+0x9c6/0xde0 [ 1100.028585][T31802] __se_sys_ioctl+0xfc/0x170 [ 1100.034726][T31802] do_syscall_64+0xec/0xf80 [ 1100.040782][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.048226][T31802] } [ 1100.050711][T31802] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1100.059373][T31802] ... acquired at: [ 1100.063160][T31802] _raw_spin_lock_irqsave+0x40/0x60 [ 1100.068525][T31802] start_tty+0x20/0x70 [ 1100.072766][T31802] kbd_event+0x2b9f/0x3fa0 [ 1100.077340][T31802] input_handle_events_default+0xd4/0x1a0 [ 1100.083222][T31802] input_pass_values+0x288/0x890 [ 1100.088329][T31802] input_event_dispose+0x330/0x6b0 [ 1100.093602][T31802] input_inject_event+0x1dd/0x340 [ 1100.098791][T31802] evdev_write+0x2fc/0x480 [ 1100.103367][T31802] vfs_write+0x27e/0xb30 [ 1100.107767][T31802] ksys_write+0x145/0x250 [ 1100.112254][T31802] do_syscall_64+0xec/0xf80 [ 1100.116917][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.122969][T31802] [ 1100.125279][T31802] [ 1100.125279][T31802] the dependencies between the lock to be acquired [ 1100.125289][T31802] and SOFTIRQ-irq-unsafe lock: [ 1100.138769][T31802] -> (tasklist_lock){.+.+}-{3:3} { [ 1100.144060][T31802] HARDIRQ-ON-R at: [ 1100.148200][T31802] lock_acquire+0x107/0x340 [ 1100.154698][T31802] _raw_read_lock+0x36/0x50 [ 1100.161190][T31802] __do_wait+0xde/0x740 [ 1100.167337][T31802] do_wait+0x1e8/0x4f0 [ 1100.173395][T31802] kernel_wait+0xab/0x170 [ 1100.179712][T31802] call_usermodehelper_exec_work+0xbe/0x230 [ 1100.187588][T31802] process_scheduled_works+0xad1/0x1770 [ 1100.195119][T31802] worker_thread+0x8a0/0xda0 [ 1100.201692][T31802] kthread+0x711/0x8a0 [ 1100.207748][T31802] ret_from_fork+0x510/0xa50 [ 1100.214322][T31802] ret_from_fork_asm+0x1a/0x30 [ 1100.221077][T31802] SOFTIRQ-ON-R at: [ 1100.225217][T31802] lock_acquire+0x107/0x340 [ 1100.231707][T31802] _raw_read_lock+0x36/0x50 [ 1100.238204][T31802] __do_wait+0xde/0x740 [ 1100.244356][T31802] do_wait+0x1e8/0x4f0 [ 1100.250415][T31802] kernel_wait+0xab/0x170 [ 1100.256733][T31802] call_usermodehelper_exec_work+0xbe/0x230 [ 1100.264613][T31802] process_scheduled_works+0xad1/0x1770 [ 1100.272140][T31802] worker_thread+0x8a0/0xda0 [ 1100.278713][T31802] kthread+0x711/0x8a0 [ 1100.284768][T31802] ret_from_fork+0x510/0xa50 [ 1100.291341][T31802] ret_from_fork_asm+0x1a/0x30 [ 1100.298116][T31802] INITIAL USE at: [ 1100.302188][T31802] lock_acquire+0x107/0x340 [ 1100.308609][T31802] _raw_write_lock_irq+0x3d/0x50 [ 1100.315448][T31802] copy_process+0x2185/0x3950 [ 1100.322027][T31802] kernel_clone+0x21e/0x820 [ 1100.328430][T31802] user_mode_thread+0xdd/0x140 [ 1100.335108][T31802] rest_init+0x23/0x300 [ 1100.341186][T31802] start_kernel+0x381/0x3d0 [ 1100.347607][T31802] x86_64_start_reservations+0x24/0x30 [ 1100.354981][T31802] x86_64_start_kernel+0x143/0x1c0 [ 1100.362000][T31802] common_startup_64+0x13e/0x147 [ 1100.368839][T31802] INITIAL READ USE at: [ 1100.373331][T31802] lock_acquire+0x107/0x340 [ 1100.380164][T31802] _raw_read_lock+0x36/0x50 [ 1100.387006][T31802] __do_wait+0xde/0x740 [ 1100.393502][T31802] do_wait+0x1e8/0x4f0 [ 1100.399912][T31802] kernel_wait+0xab/0x170 [ 1100.406582][T31802] call_usermodehelper_exec_work+0xbe/0x230 [ 1100.414806][T31802] process_scheduled_works+0xad1/0x1770 [ 1100.422683][T31802] worker_thread+0x8a0/0xda0 [ 1100.429603][T31802] kthread+0x711/0x8a0 [ 1100.436011][T31802] ret_from_fork+0x510/0xa50 [ 1100.442940][T31802] ret_from_fork_asm+0x1a/0x30 [ 1100.450043][T31802] } [ 1100.452703][T31802] ... key at: [] tasklist_lock+0x18/0x40 [ 1100.460585][T31802] ... acquired at: [ 1100.464545][T31802] _raw_read_lock+0x36/0x50 [ 1100.469217][T31802] send_sigurg+0x12b/0x420 [ 1100.473801][T31802] sk_send_sigurg+0x6c/0x2e0 [ 1100.478562][T31802] queue_oob+0x420/0x4f0 [ 1100.482964][T31802] unix_stream_sendmsg+0xc32/0xde0 [ 1100.488242][T31802] __sock_sendmsg+0x21c/0x270 [ 1100.493097][T31802] ____sys_sendmsg+0x52d/0x820 [ 1100.498026][T31802] ___sys_sendmsg+0x21f/0x2a0 [ 1100.502874][T31802] __sys_sendmmsg+0x227/0x430 [ 1100.507719][T31802] __x64_sys_sendmmsg+0xa0/0xc0 [ 1100.512740][T31802] do_syscall_64+0xec/0xf80 [ 1100.517408][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.523467][T31802] [ 1100.525777][T31802] -> (&f_owner->lock){....}-{3:3} { [ 1100.531065][T31802] INITIAL USE at: [ 1100.535032][T31802] lock_acquire+0x107/0x340 [ 1100.541260][T31802] _raw_write_lock_irq+0x3d/0x50 [ 1100.547919][T31802] __f_setown+0x67/0x370 [ 1100.553891][T31802] generic_setlease+0xe1e/0x1280 [ 1100.560554][T31802] do_fcntl_add_lease+0x34d/0x460 [ 1100.567302][T31802] fcntl_setlease+0x123/0x180 [ 1100.573702][T31802] do_fcntl+0x867/0x1a50 [ 1100.579674][T31802] __se_sys_fcntl+0xc8/0x150 [ 1100.585991][T31802] do_syscall_64+0xec/0xf80 [ 1100.592216][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.599834][T31802] INITIAL READ USE at: [ 1100.604240][T31802] lock_acquire+0x107/0x340 [ 1100.610903][T31802] _raw_read_lock_irqsave+0x48/0x60 [ 1100.618264][T31802] send_sigio+0x38/0x370 [ 1100.624673][T31802] dnotify_handle_event+0x169/0x440 [ 1100.632029][T31802] fsnotify+0x1668/0x1ab0 [ 1100.638519][T31802] __fsnotify_parent+0x4c9/0x5d0 [ 1100.645620][T31802] vfs_readv+0x6e2/0x850 [ 1100.652024][T31802] do_readv+0x14d/0x2d0 [ 1100.658338][T31802] do_syscall_64+0xec/0xf80 [ 1100.664998][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.673047][T31802] } [ 1100.675619][T31802] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1100.684549][T31802] ... acquired at: [ 1100.688421][T31802] _raw_read_lock_irqsave+0x48/0x60 [ 1100.693785][T31802] send_sigio+0x38/0x370 [ 1100.698191][T31802] kill_fasync+0x24d/0x4d0 [ 1100.702771][T31802] sock_wake_async+0x137/0x160 [ 1100.707701][T31802] sk_send_sigurg+0x1f1/0x2e0 [ 1100.712543][T31802] queue_oob+0x420/0x4f0 [ 1100.716948][T31802] unix_stream_sendmsg+0xc32/0xde0 [ 1100.722219][T31802] __sock_sendmsg+0x21c/0x270 [ 1100.727060][T31802] ____sys_sendmsg+0x52d/0x820 [ 1100.731984][T31802] ___sys_sendmsg+0x21f/0x2a0 [ 1100.736822][T31802] __sys_sendmmsg+0x227/0x430 [ 1100.741661][T31802] __x64_sys_sendmmsg+0xa0/0xc0 [ 1100.746675][T31802] do_syscall_64+0xec/0xf80 [ 1100.751344][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.757395][T31802] [ 1100.759703][T31802] -> (&new->fa_lock){....}-{3:3} { [ 1100.764821][T31802] INITIAL USE at: [ 1100.768698][T31802] lock_acquire+0x107/0x340 [ 1100.774757][T31802] _raw_write_lock_irq+0x3d/0x50 [ 1100.781243][T31802] fasync_remove_entry+0xf1/0x1c0 [ 1100.787822][T31802] pipe_fasync+0xff/0x1e0 [ 1100.793704][T31802] __fput+0x8a2/0xa70 [ 1100.799239][T31802] task_work_run+0x1d4/0x260 [ 1100.805385][T31802] exit_to_user_mode_loop+0xef/0x4e0 [ 1100.812219][T31802] do_syscall_64+0x2b7/0xf80 [ 1100.818358][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.825798][T31802] INITIAL READ USE at: [ 1100.830112][T31802] lock_acquire+0x107/0x340 [ 1100.836596][T31802] _raw_read_lock_irqsave+0x48/0x60 [ 1100.843788][T31802] kill_fasync+0x199/0x4d0 [ 1100.850194][T31802] do_splice+0xf79/0x1660 [ 1100.856512][T31802] __se_sys_splice+0x2e1/0x460 [ 1100.863265][T31802] do_syscall_64+0xec/0xf80 [ 1100.869755][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.877630][T31802] } [ 1100.880116][T31802] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1100.888786][T31802] ... acquired at: [ 1100.892570][T31802] _raw_read_lock_irqsave+0x48/0x60 [ 1100.897935][T31802] kill_fasync+0x199/0x4d0 [ 1100.902519][T31802] __start_tty+0x18c/0x220 [ 1100.907100][T31802] start_tty+0x2b/0x70 [ 1100.911335][T31802] n_tty_set_termios+0xa7c/0x10c0 [ 1100.916522][T31802] tty_set_termios+0xda4/0x17e0 [ 1100.921536][T31802] set_termios+0x516/0x6c0 [ 1100.926114][T31802] tty_mode_ioctl+0x47e/0x740 [ 1100.930957][T31802] tty_ioctl+0x9c6/0xde0 [ 1100.935354][T31802] __se_sys_ioctl+0xfc/0x170 [ 1100.940100][T31802] do_syscall_64+0xec/0xf80 [ 1100.944764][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.950817][T31802] [ 1100.953123][T31802] [ 1100.953123][T31802] stack backtrace: [ 1100.959000][T31802] CPU: 0 UID: 0 PID: 31802 Comm: syz.1.7991 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.959024][T31802] Tainted: [L]=SOFTLOCKUP [ 1100.959031][T31802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1100.959043][T31802] Call Trace: [ 1100.959049][T31802] [ 1100.959058][T31802] dump_stack_lvl+0xe8/0x150 [ 1100.959079][T31802] __lock_acquire+0x2a95/0x2cf0 [ 1100.959104][T31802] ? kill_fasync+0x199/0x4d0 [ 1100.959128][T31802] lock_acquire+0x107/0x340 [ 1100.959144][T31802] ? kill_fasync+0x199/0x4d0 [ 1100.959169][T31802] ? ldsem_down_read_trylock+0x137/0x1a0 [ 1100.959189][T31802] ? tty_ldisc_ref+0x1c/0x90 [ 1100.959214][T31802] _raw_read_lock_irqsave+0x48/0x60 [ 1100.959240][T31802] ? kill_fasync+0x199/0x4d0 [ 1100.959262][T31802] kill_fasync+0x199/0x4d0 [ 1100.959285][T31802] ? kill_fasync+0x53/0x4d0 [ 1100.959309][T31802] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1100.959328][T31802] __start_tty+0x18c/0x220 [ 1100.959351][T31802] start_tty+0x2b/0x70 [ 1100.959373][T31802] n_tty_set_termios+0xa7c/0x10c0 [ 1100.959395][T31802] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1100.959414][T31802] tty_set_termios+0xda4/0x17e0 [ 1100.959438][T31802] ? __pfx_tty_set_termios+0x10/0x10 [ 1100.959470][T31802] set_termios+0x516/0x6c0 [ 1100.959494][T31802] ? __pfx_set_termios+0x10/0x10 [ 1100.959517][T31802] ? tty_ldisc_ref_wait+0x25/0x70 [ 1100.959541][T31802] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 1100.959569][T31802] tty_mode_ioctl+0x47e/0x740 [ 1100.959592][T31802] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1100.959614][T31802] ? tty_ldisc_ref_wait+0x25/0x70 [ 1100.959638][T31802] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1100.959663][T31802] ? n_tty_ioctl_helper+0x8e/0x340 [ 1100.959686][T31802] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1100.959705][T31802] tty_ioctl+0x9c6/0xde0 [ 1100.959720][T31802] ? __pfx_tty_ioctl+0x10/0x10 [ 1100.959734][T31802] __se_sys_ioctl+0xfc/0x170 [ 1100.959749][T31802] do_syscall_64+0xec/0xf80 [ 1100.959767][T31802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.959783][T31802] ? clear_bhb_loop+0x60/0xb0 [ 1100.959801][T31802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.959818][T31802] RIP: 0033:0x7f505c98f749 [ 1100.959833][T31802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.959849][T31802] RSP: 002b:00007f505abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.959867][T31802] RAX: ffffffffffffffda RBX: 00007f505cbe6090 RCX: 00007f505c98f749 [ 1100.959880][T31802] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1100.959892][T31802] RBP: 00007f505ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1100.959903][T31802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.959914][T31802] R13: 00007f505cbe6128 R14: 00007f505cbe6090 R15: 00007f505cd0fa28 [ 1100.959932][T31802] [ 1101.333650][T17297] net_ratelimit: 18 callbacks suppressed [ 1101.333671][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.883633][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.995316][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.103676][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.213772][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.323640][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.433712][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.543660][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.663877][T29077] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.773682][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.374201][ T1156] net_ratelimit: 31 callbacks suppressed [ 1106.374224][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.493692][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.603663][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.713755][T17297] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.823660][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.933742][ T3464] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.043920][ T1099] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.153774][ T1156] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.264111][T23634] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.374590][ T3464] bond3: (slave gretap1): failed to get link speed/duplex