last executing test programs: 12m32.18260783s ago: executing program 32 (id=5110): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400), &(0x7f0000000080)=0x8) 12m5.189280073s ago: executing program 33 (id=5384): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 9m24.016567384s ago: executing program 34 (id=7039): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100)={0xea, 0xffffffffffffffff, 0x8, 0x5afc5b76, 0x0, 0xfffffffffffff30c, 0x5}, 0x0, 0x0, 0x0, 0x0) 9m13.356229843s ago: executing program 0 (id=7107): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000540)=""/246) 9m12.636826494s ago: executing program 0 (id=7114): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 9m12.545282567s ago: executing program 0 (id=7116): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000280)={0x980903, 0x9, @value=0x7}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9m11.617465258s ago: executing program 35 (id=7122): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x2014) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x103, 0x2, 0x4}, 0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 9m10.784623685s ago: executing program 0 (id=7129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 9m10.59411899s ago: executing program 0 (id=7131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x0, 0x2a, 0x4, 0xfc}, 0x9c) 9m8.419349278s ago: executing program 0 (id=7145): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x2808c2000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f0000001e80)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1) 9m7.991612484s ago: executing program 36 (id=7145): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x2808c2000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f0000001e80)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1) 8m10.529138598s ago: executing program 9 (id=7656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 8m10.390977528s ago: executing program 9 (id=7657): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x11001}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 8m9.481599645s ago: executing program 9 (id=7661): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8m9.246374842s ago: executing program 9 (id=7665): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 8m9.059390554s ago: executing program 9 (id=7667): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r2, 0x0, 0x1000, 0x200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m8.814613297s ago: executing program 9 (id=7669): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x403, 0x78bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xb0646, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004690}, 0x0) 8m8.161319036s ago: executing program 37 (id=7669): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x403, 0x78bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xb0646, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004690}, 0x0) 6m9.179247575s ago: executing program 6 (id=8663): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x1f7, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/247, 0xf7}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 6m8.231025657s ago: executing program 6 (id=8672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x7, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000140)=""/105, 0x69, 0x40000102, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 6m7.986805011s ago: executing program 6 (id=8675): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 6m5.445197883s ago: executing program 6 (id=8685): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m4.447219827s ago: executing program 6 (id=8701): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) 6m4.157398867s ago: executing program 6 (id=8704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x48, 0x64, 0xf31, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 6m3.607161353s ago: executing program 38 (id=8704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x48, 0x64, 0xf31, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3m16.725422045s ago: executing program 3 (id=9962): creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x101121) r2 = dup(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m15.532588058s ago: executing program 3 (id=9968): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) ptrace$cont(0x18, r0, 0x4, 0x2) 3m13.851764174s ago: executing program 3 (id=9978): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000032d000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0xad) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f00003c6000/0x2000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m12.829283978s ago: executing program 3 (id=9994): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m11.855258079s ago: executing program 3 (id=9999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3e, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x2, 0xffffffffc8110f4f, 0xd, 0xffff, 0x1ff, 0xffeffffa, 0x0, 0x0, 0x10, 0xffff}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m11.483447433s ago: executing program 3 (id=10001): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m11.032083385s ago: executing program 39 (id=10001): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m4.11544013s ago: executing program 5 (id=10419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0x4, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m3.651456062s ago: executing program 5 (id=10422): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2m0.949235697s ago: executing program 5 (id=10441): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="401403"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m56.930888843s ago: executing program 5 (id=10468): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) 1m56.771623906s ago: executing program 5 (id=10469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.576887575s ago: executing program 5 (id=10474): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffdfe08000140000000040900010073797a30000000003c000000060a010400000000000000000100000208000b40000000000900010073797a30000000001400048010000180090001006c617374000000001400000011000100"/193], 0xc4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m55.313340364s ago: executing program 40 (id=10474): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffdfe08000140000000040900010073797a30000000003c000000060a010400000000000000000100000208000b40000000000900010073797a30000000001400048010000180090001006c617374000000001400000011000100"/193], 0xc4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 8.637686182s ago: executing program 2 (id=11016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004040) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) 7.067195632s ago: executing program 4 (id=11026): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) 6.135668293s ago: executing program 2 (id=11029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e20, 0x800000f, @private1, 0x14}, 0x1c, 0x0, 0x50}, 0x4044000) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 5.401694833s ago: executing program 2 (id=11030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) close_range(r0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 5.341671844s ago: executing program 4 (id=11031): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffcd6) syz_usb_ep_write(r0, 0x81, 0x82, &(0x7f00000001c0)="1000000a00380ed4be7eee21e65ff8e81a12e3b45f9b05654ea4d3e4dab8c2c5c963667e91c1219a4ef405d2d3f85bb59c65ab2e0861afa338b3a7e4e999386fd1a54ff511e3352c9d4d3e9cdc53ee11629368e577dbd77ceee3bda0b9a94c408c2b7960c0ebac193210d73524183084e33a0a2b16ad53fc8f5a313eae74aa624ac7") 4.984913031s ago: executing program 2 (id=11034): timer_create(0xfffffffc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x7800, 0x2, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(0x0, &(0x7f0000000200)) 4.054908119s ago: executing program 2 (id=11036): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.811335475s ago: executing program 2 (id=11038): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 3.714958407s ago: executing program 7 (id=11041): close(0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 3.421130164s ago: executing program 8 (id=11043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x16}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3.395231564s ago: executing program 1 (id=11044): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0xff, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x80101, 0x8c) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) dup2(r4, r0) pwrite64(r0, &(0x7f00000003c0)='@', 0x1, 0x100001) write$FUSE_ENTRY(r4, &(0x7f0000000400)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x3, 0x8, 0x2, 0x6, 0x8, {0x3, 0xc, 0x5, 0xe, 0x7, 0x3ff, 0x9, 0x0, 0x6, 0x4000, 0xa20000, r2, r3, 0xffffffff, 0xe2ef}}}, 0x90) 3.231167735s ago: executing program 8 (id=11045): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0, r2, 0x1}}, 0x18) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000000100)={0x3, 0x1, [0x4, 0x9, 0xffffffff, 0x9, 0x8001, 0x5, 0xa720, 0xb2b]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 3.098964733s ago: executing program 1 (id=11046): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 3.026094054s ago: executing program 8 (id=11047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.816546713s ago: executing program 1 (id=11048): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_clone3(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001300)) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) 2.201908446s ago: executing program 8 (id=11049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 2.200323572s ago: executing program 1 (id=11050): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x4000000000002f1, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.965820546s ago: executing program 4 (id=11051): open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4f32}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040081}, 0x24000801) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x3, 0xfe, 0xf7, 0xfa, 0x5, 0x85, 0x2, 0x1, 0x7, 0x83, 0x0, 0x8, 0x2, 0x2, 0x7d, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.782039459s ago: executing program 7 (id=11052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x8}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 1.642249611s ago: executing program 7 (id=11053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) write$P9_RAUTH(r1, &(0x7f0000001040)={0x14, 0x67, 0x1, {0x4, 0x4}}, 0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.524338822s ago: executing program 7 (id=11054): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) syz_io_uring_setup(0x846, 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1.175445971s ago: executing program 4 (id=11055): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.099578501s ago: executing program 1 (id=11056): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) gettid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x8000001, 0x2, 0x1}) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 957.019498ms ago: executing program 8 (id=11057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb519864", 0x67}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135", 0x21}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3c", 0x28}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 663.039292ms ago: executing program 8 (id=11058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 407.417947ms ago: executing program 1 (id=11059): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 278.488511ms ago: executing program 7 (id=11060): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:C@-\x00', &(0x7f0000000940)='\n\xf0\xa0\xecuM\xa6w\xc4\x0f?>J\xf9\xbb Z\xe73\xd7\x10b>`p\x8f\x12\x0e\xda\x83\x81\xde\xfd$\\3\x14q\x89\\r&\xf3\xbd\xbf\xa2\xdcbDw\x99p;L]\x8d\xe1\xcb\xa5\x96\xc4\xca&\xa8\xd7\xce\x9c\x05I\x1bB\xea\xbe\x02\xe2}\x8a\xd3\xbf\x05\xd1\xb4\xff(\xbe\x06\x01Y\xa6%\r&~\xf9\x1eX\xaf_=,\xfd\xf8\xd4\x1a\x127\x9b\x87\x95\x9f\xddW\x10z\x865r\xadv\xc6\\\xef\xa7\xabK|K\b\x8c\x104:\xa0R0\xc5\xf8\xc1\x06\x8eZ_;PT\x81\x1f\x15\xd7\x90\xf3\x88\xc7\x0f\x95\xd6\xa3{5\xa9\x1c\xa8\x0fO\xc4\xa67\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG HID v0.00 Device [syz1] on syz0 [ 1160.207768][ T1550] fido_id[1550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1160.509191][T26319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1160.526585][T26319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.535929][T26319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.548147][T26319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.557376][T26319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1160.632198][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1160.647417][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.656903][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.664308][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.689849][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.699309][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.019300][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10484'. [ 1161.061703][T20043] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1161.218826][ T1568] chnl_net:caif_netlink_parms(): no params data found [ 1161.237206][T20043] usb 5-1: Using ep0 maxpacket: 16 [ 1161.252290][T20043] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1161.277072][T20043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1161.307509][T20043] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1161.323064][T20043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.331949][T20043] usb 5-1: Product: syz [ 1161.336231][T20043] usb 5-1: Manufacturer: syz [ 1161.340883][T20043] usb 5-1: SerialNumber: syz [ 1161.357637][T20043] usb 5-1: config 0 descriptor?? [ 1161.374886][T20043] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1161.384465][T20043] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1161.411480][ T29] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1161.442290][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.461500][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.468825][ T1568] bridge_slave_0: entered allmulticast mode [ 1161.478324][ T1568] bridge_slave_0: entered promiscuous mode [ 1161.496449][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.504017][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.520689][ T1568] bridge_slave_1: entered allmulticast mode [ 1161.538774][ T1568] bridge_slave_1: entered promiscuous mode [ 1161.563827][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.576299][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.586723][ T29] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1161.600942][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.637176][ T29] usb 9-1: config 0 descriptor?? [ 1161.695025][ T1568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.711661][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.737096][ T1568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.823011][ T1568] team0: Port device team_slave_0 added [ 1161.838547][ T1568] team0: Port device team_slave_1 added [ 1161.898459][ T1568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.905768][ T1568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.934053][ T1568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.006397][T20043] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1162.020840][T20043] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1162.070179][ T1568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.078046][ T1568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.106777][ T29] lenovo 0003:17EF:6047.00BA: unknown main item tag 0x0 [ 1162.114800][ T29] lenovo 0003:17EF:6047.00BA: unknown main item tag 0x0 [ 1162.131971][ T29] lenovo 0003:17EF:6047.00BA: unknown main item tag 0x0 [ 1162.177148][ T1568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.199555][ T29] lenovo 0003:17EF:6047.00BA: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 1162.334586][ T29] usb 9-1: USB disconnect, device number 54 [ 1162.405262][ T1593] fido_id[1593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1162.483085][ T1568] hsr_slave_0: entered promiscuous mode [ 1162.504817][ T1568] hsr_slave_1: entered promiscuous mode [ 1162.512791][ T1568] debugfs: 'hsr0' already exists in 'hsr' [ 1162.523114][ T1568] Cannot create hsr debugfs directory [ 1162.741596][ T5148] Bluetooth: hci3: command tx timeout [ 1162.748761][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.053019][T20043] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1163.260436][T20043] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1163.283699][T20043] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1163.300629][T20043] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1163.315515][T20043] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1163.325355][T20043] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1163.333240][T20043] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1163.352616][T20043] usb 5-1: USB disconnect, device number 107 [ 1163.713113][ C1] sd 0:0:1:0: [sda] tag#1673 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1163.723589][ C1] sd 0:0:1:0: [sda] tag#1673 CDB: Read(6) 08 00 00 00 00 00 [ 1163.759170][ C1] sd 0:0:1:0: [sda] tag#1674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1163.769597][ C1] sd 0:0:1:0: [sda] tag#1674 CDB: Read(6) 08 00 00 00 00 00 [ 1163.791468][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.810617][ C1] sd 0:0:1:0: [sda] tag#1675 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1163.821139][ C1] sd 0:0:1:0: [sda] tag#1675 CDB: Read(6) 08 00 00 00 00 00 [ 1163.841848][ C1] sd 0:0:1:0: [sda] tag#1676 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1163.852288][ C1] sd 0:0:1:0: [sda] tag#1676 CDB: Read(6) 08 00 00 00 00 00 [ 1164.027915][ C1] sd 0:0:1:0: [sda] tag#1677 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1164.038377][ C1] sd 0:0:1:0: [sda] tag#1677 CDB: Read(6) 08 00 00 00 00 00 [ 1164.822281][ T5148] Bluetooth: hci3: command tx timeout [ 1164.822291][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.916482][ T1568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1164.933794][ T1568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1164.950569][ T1568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1164.984543][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.995640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.010163][ T1568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1165.044817][ T1568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1165.098021][ T1568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.127106][ T1642] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10497'. [ 1165.135465][ T1568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1165.184075][ T1568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.223250][ T1642] batman_adv: batadv0: Interface deactivated: dummy0 [ 1165.303472][ T1642] batman_adv: batadv0: Removing interface: dummy0 [ 1165.621901][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.630148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.862034][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.891847][ T1568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.070098][ T1568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.178345][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.185535][ T975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.320652][T21261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.327855][T21261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.621409][T20037] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1166.718400][ T1568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.814064][T20037] usb 9-1: config 0 has no interfaces? [ 1166.840150][T20037] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1166.902398][ T5148] Bluetooth: hci3: command tx timeout [ 1166.904442][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.916154][T20037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.940121][ T1568] veth0_vlan: entered promiscuous mode [ 1166.987987][T20037] usb 9-1: config 0 descriptor?? [ 1167.025551][ T1568] veth1_vlan: entered promiscuous mode [ 1167.160694][ T1568] veth0_macvtap: entered promiscuous mode [ 1167.213538][ T1568] veth1_macvtap: entered promiscuous mode [ 1167.338329][T20037] usb 9-1: USB disconnect, device number 55 [ 1167.346250][ T1568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.425426][ T1568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.475367][ T975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.535629][ T975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.576645][ T975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.607696][ T975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.928316][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.951794][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.974641][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.137387][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.187042][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.508595][ T1699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1168.574558][ T1699] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1168.981604][ T5148] Bluetooth: hci3: command tx timeout [ 1168.989808][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.880661][ T1749] kvm: pic: single mode not supported [ 1169.880683][ T1749] kvm: pic: level sensitive irq not supported [ 1169.899282][ T1749] kvm: pic: non byte write [ 1170.021468][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.106652][T19579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.115120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.744554][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.753026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.068066][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.101650][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.153155][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.284125][ T1871] loop7: detected capacity change from 0 to 16384 [ 1174.188433][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.041705][ T1900] netlink: 10 bytes leftover after parsing attributes in process `syz.7.10547'. [ 1175.223135][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.231538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.265903][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.652110][T19839] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1175.701430][ T2160] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1175.851469][T19839] usb 8-1: Using ep0 maxpacket: 8 [ 1175.863215][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.871588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.884327][T19839] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1175.896746][ T2160] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.908357][T19839] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1175.932909][T19839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1175.934952][ T2160] usb 2-1: config 0 has no interfaces? [ 1175.979434][ T2160] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1175.993257][T19839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.000932][ T2160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.033824][ T2160] usb 2-1: config 0 descriptor?? [ 1176.052112][T19839] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.067541][T19839] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1176.080454][T19839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.288525][ T2160] usb 2-1: USB disconnect, device number 83 [ 1176.343665][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.357890][T19839] usb 8-1: GET_CAPABILITIES returned 0 [ 1176.378169][T19839] usbtmc 8-1:16.0: can't read capabilities [ 1176.583529][T19842] usb 8-1: USB disconnect, device number 48 [ 1177.146576][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.153254][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.209727][ T30] audit: type=1326 audit(1776550965.394:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1955 comm="syz.7.10557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f360879c819 code=0x0 [ 1177.231718][T19842] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1177.391502][T19842] usb 2-1: Using ep0 maxpacket: 16 [ 1177.399178][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.407859][T19842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.418500][T19842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1177.442831][T19842] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1177.452182][T19842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.461051][T19842] usb 2-1: Product: syz [ 1177.466273][T19842] usb 2-1: Manufacturer: syz [ 1177.470944][T19842] usb 2-1: SerialNumber: syz [ 1177.483362][T19842] usb 2-1: 0:2 : does not exist [ 1177.687401][T19842] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1177.763979][T19842] usb 2-1: USB disconnect, device number 84 [ 1178.433747][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.354248][ T1926] syzkaller0: entered promiscuous mode [ 1179.359740][ T1926] syzkaller0: entered allmulticast mode [ 1179.463040][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.511943][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.984387][T19579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.992985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.001838][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.010454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.556934][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.711471][T20038] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1181.869576][T20038] usb 3-1: Using ep0 maxpacket: 8 [ 1181.895262][T20038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.905477][T20038] usb 3-1: config 0 has no interfaces? [ 1181.960592][T20038] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1181.969890][T20038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1181.978408][T20038] usb 3-1: Product: syz [ 1181.982708][T20038] usb 3-1: Manufacturer: syz [ 1181.997460][T20038] usb 3-1: SerialNumber: syz [ 1182.018004][T20038] usb 3-1: config 0 descriptor?? [ 1182.241755][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10565'. [ 1182.264668][ T5917] kworker/1:5 (5917) used greatest stack depth: 16344 bytes left [ 1182.591670][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.689471][ T1980] bridge0: entered promiscuous mode [ 1182.714585][ T1980] bridge0: left promiscuous mode [ 1182.849118][T20038] usb 3-1: USB disconnect, device number 105 [ 1182.883023][ T1985] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1182.912295][ T1985] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1182.951698][ T1987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1183.281361][T20037] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1183.442427][T20037] usb 8-1: Using ep0 maxpacket: 32 [ 1183.459995][T20037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.491415][T20037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.512635][T20037] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1183.541594][T20037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.571435][T20037] usb 8-1: config 0 descriptor?? [ 1183.622270][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.027848][T20037] ft260 0003:0403:6030.00BB: unknown main item tag 0x0 [ 1184.053887][T20037] ft260 0003:0403:6030.00BB: unknown main item tag 0x0 [ 1184.123989][ T2019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10574'. [ 1184.209193][T20037] ft260 0003:0403:6030.00BB: chip code: 0000 0000 [ 1184.268780][ T2024] binder: 2022:2024 ioctl c0306201 200000000180 returned -14 [ 1184.417306][T20037] ft260 0003:0403:6030.00BB: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1184.618126][T20037] ft260 0003:0403:6030.00BB: failed to retrieve status: -32, no wakeup [ 1184.661769][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.944551][T20038] usb 8-1: USB disconnect, device number 49 [ 1185.528569][ T2070] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1185.712284][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.786535][ T2075] syzkaller0: entered promiscuous mode [ 1185.808955][ T2075] syzkaller0: entered allmulticast mode [ 1186.046135][ T2080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10592'. [ 1186.055422][ T2080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10592'. [ 1186.101971][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.102130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.641887][T20038] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1186.741490][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.751434][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.759706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.871763][T20038] usb 2-1: Using ep0 maxpacket: 16 [ 1186.921739][T20038] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1186.944251][T20038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.971430][T20038] usb 2-1: Product: syz [ 1186.991462][T20038] usb 2-1: Manufacturer: syz [ 1187.009960][T20038] usb 2-1: SerialNumber: syz [ 1187.039611][T20038] usb 2-1: config 0 descriptor?? [ 1187.478877][T20038] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1187.515562][T20038] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1187.557564][T20038] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1187.598386][T20038] usb 2-1: media controller created [ 1187.720878][T20038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1187.783358][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.871859][T20038] zl10353_read_register: readreg error (reg=127, ret==0) [ 1187.895447][T20038] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1187.921496][T20038] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1187.945616][T20038] usb 2-1: USB disconnect, device number 85 [ 1188.043554][T20038] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1188.141379][T20037] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1188.332756][T20037] usb 9-1: Using ep0 maxpacket: 32 [ 1188.379817][T20037] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1188.432575][T20037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.482507][T20037] usb 9-1: Product: syz [ 1188.509970][T20037] usb 9-1: Manufacturer: syz [ 1188.528528][T20037] usb 9-1: SerialNumber: syz [ 1188.607727][T20037] usb 9-1: config 0 descriptor?? [ 1188.822262][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.338843][T20037] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1189.359238][T20037] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 1189.367880][T20037] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 1189.464023][T20037] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 1189.547056][T20037] usb 9-1: USB disconnect, device number 56 [ 1189.862210][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.888294][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.895863][ T2137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.409112][ T2137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.459650][ T2137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.862084][T19839] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1190.908406][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.081403][T19839] usb 8-1: Using ep0 maxpacket: 16 [ 1191.107318][T19839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.152857][T19839] usb 8-1: config 0 has no interfaces? [ 1191.182196][T19839] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1191.205060][ T1167] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.226847][T19839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.245944][ T1167] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.287168][ T1167] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.329130][T19839] usb 8-1: config 0 descriptor?? [ 1191.334302][ T1167] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.431405][ T2145] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10610'. [ 1191.862540][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.870940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.941546][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.293199][ T2168] random: crng reseeded on system resumption [ 1192.370483][ T2170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1192.460233][ T2168] Unrecognized hibernate image header format! [ 1192.501843][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.510267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.540135][ T2168] PM: hibernation: Image mismatch: architecture specific data [ 1192.604038][ T2168] Unrecognized hibernate image header format! [ 1192.650696][ T2168] PM: hibernation: Image mismatch: architecture specific data [ 1192.695455][ T2168] Unrecognized hibernate image header format! [ 1192.723501][ T2168] PM: hibernation: Image mismatch: architecture specific data [ 1192.981923][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.021531][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.410499][T20037] usb 8-1: USB disconnect, device number 50 [ 1194.735729][ T2203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1194.768495][ T2204] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 1194.789923][ T2204] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 1194.822504][ T2203] batman_adv: batadv0: Adding interface: macvtap1 [ 1194.829206][ T2203] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.862722][ T2203] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1194.958410][ T2206] syzkaller0: entered promiscuous mode [ 1194.971075][ T2206] syzkaller0: entered allmulticast mode [ 1195.062990][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.251627][T19842] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1195.327497][ T2221] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10633'. [ 1195.425604][T19842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.444576][T19842] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1195.454125][T19842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.473869][T19842] usb 2-1: config 0 descriptor?? [ 1195.497201][T19842] pwc: Askey VC010 type 2 USB webcam detected. [ 1195.664255][T20037] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1195.828433][T20037] usb 8-1: Using ep0 maxpacket: 8 [ 1195.859622][T20037] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1195.869012][T20037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.883983][T20037] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1195.891132][T20037] pvrusb2: ********** [ 1195.895820][T20037] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1195.906254][T20037] pvrusb2: Important functionality might not be entirely working. [ 1195.914418][T20037] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1195.926038][T20037] pvrusb2: ********** [ 1195.936536][T19842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1195.944753][T19842] pwc: recv_control_msg error -32 req 02 val 2700 [ 1195.965921][T19842] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1195.984263][T19842] pwc: recv_control_msg error -32 req 04 val 1000 [ 1196.003098][T19842] pwc: recv_control_msg error -32 req 04 val 1300 [ 1196.010420][T19842] pwc: recv_control_msg error -32 req 04 val 1400 [ 1196.029058][T19842] pwc: recv_control_msg error -32 req 02 val 2000 [ 1196.048030][T19842] pwc: recv_control_msg error -32 req 02 val 2100 [ 1196.085795][ T2353] pvrusb2: Invalid write control endpoint [ 1196.106981][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.218194][ T2353] pvrusb2: Invalid write control endpoint [ 1196.229846][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1196.239271][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1196.250046][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1196.272039][T19842] pwc: recv_control_msg error -71 req 02 val 2500 [ 1196.278644][ T2353] pvrusb2: Device being rendered inoperable [ 1196.284917][ T2353] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1196.292155][T19842] pwc: recv_control_msg error -71 req 02 val 2400 [ 1196.298809][ T2353] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1196.308104][T19842] pwc: recv_control_msg error -71 req 02 val 2600 [ 1196.316188][T19842] pwc: recv_control_msg error -71 req 02 val 2900 [ 1196.318780][T20037] usb 8-1: USB disconnect, device number 51 [ 1196.330187][ T2353] pvrusb2: Attached sub-driver cx25840 [ 1196.347386][T19842] pwc: recv_control_msg error -71 req 02 val 2800 [ 1196.358051][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1196.370769][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1196.380221][T19842] pwc: recv_control_msg error -71 req 04 val 1100 [ 1196.395199][T19842] pwc: recv_control_msg error -71 req 04 val 1200 [ 1196.437985][T19842] pwc: Registered as video103. [ 1196.460756][T19842] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input198 [ 1196.489448][T19842] usb 2-1: USB disconnect, device number 86 [ 1197.154561][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.621717][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.630122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.730657][ T2249] binder: 2248:2249 ioctl c0306201 2000000003c0 returned -14 [ 1198.191711][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.231530][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.605068][ T2251] syz.1.10645 (2251): drop_caches: 1 [ 1200.271537][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.286954][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.296165][T20037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.304997][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.683121][T19842] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1200.756323][ T2290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10657'. [ 1200.935783][T19842] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1200.945562][T19842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.954989][T19842] usb 3-1: Product: syz [ 1200.961063][ T2292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1200.969948][T19842] usb 3-1: Manufacturer: syz [ 1200.976535][T19842] usb 3-1: SerialNumber: syz [ 1201.217761][ T2299] input: syz0 as /devices/virtual/input/input199 [ 1201.396485][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.439050][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1201.492982][ T2309] fuse: Bad value for 'fd' [ 1201.520464][ T2309] usb usb8: usbfs: process 2309 (syz.4.10665) did not claim interface 0 before use [ 1201.681493][ T2160] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1201.832902][ T2160] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1201.851307][ T2160] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.865836][ T2160] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1201.876371][ T2160] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.889947][ T2160] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1201.899276][ T2160] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1201.907506][ T2160] usb 9-1: Product: syz [ 1201.912036][ T2160] usb 9-1: Manufacturer: syz [ 1201.925467][ T2160] cdc_wdm 9-1:1.0: skipping garbage [ 1201.932397][ T2160] cdc_wdm 9-1:1.0: skipping garbage [ 1201.939405][ T2160] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1201.955948][ T2160] cdc_wdm 9-1:1.0: Unknown control protocol [ 1202.129412][ T2160] usb 9-1: USB disconnect, device number 57 [ 1202.251552][T19839] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1202.433691][T19839] usb 8-1: Using ep0 maxpacket: 32 [ 1202.439307][ T29] net_ratelimit: 3 callbacks suppressed [ 1202.439322][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.454812][T19839] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1202.463117][T19839] usb 8-1: config 0 has no interface number 0 [ 1202.469314][T19839] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1202.482462][T19839] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1202.491967][T19839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.500417][T19839] usb 8-1: Product: syz [ 1202.504846][T19839] usb 8-1: Manufacturer: syz [ 1202.509535][T19839] usb 8-1: SerialNumber: syz [ 1202.520625][T19839] usb 8-1: config 0 descriptor?? [ 1202.529973][ T2314] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1202.572796][ T2160] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1202.664609][ T2323] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1202.704387][ T2323] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1202.713788][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1202.736201][ T2323] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1202.754838][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1202.757410][ T2160] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1202.766910][ T2314] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1202.786429][ T2323] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1202.799260][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1202.806817][ T2160] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.817678][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1202.836435][T19842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1202.848635][T19842] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1202.857901][ T2160] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1202.877803][T19842] usb 3-1: USB disconnect, device number 106 [ 1202.887282][ T2160] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.905882][ T2160] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1202.919434][ T2160] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1202.952151][ T2160] usb 9-1: Product: syz [ 1202.956348][ T2160] usb 9-1: Manufacturer: syz [ 1202.983873][ T2160] cdc_wdm 9-1:1.0: skipping garbage [ 1202.989350][ T2160] cdc_wdm 9-1:1.0: skipping garbage [ 1202.997226][ T2160] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1203.004059][ T2160] cdc_wdm 9-1:1.0: Unknown control protocol [ 1203.308993][ T30] audit: type=1326 audit(1776550991.494:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.336698][ T30] audit: type=1326 audit(1776550991.494:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.362907][ T30] audit: type=1326 audit(1776550991.524:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.385976][ T30] audit: type=1326 audit(1776550991.524:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.401200][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.416775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.433339][ T30] audit: type=1326 audit(1776550991.524:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.470293][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.544477][ T30] audit: type=1326 audit(1776550991.524:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.578786][ T30] audit: type=1326 audit(1776550991.524:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.611465][ T30] audit: type=1326 audit(1776550991.524:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.638703][ T30] audit: type=1326 audit(1776550991.524:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.668437][ T30] audit: type=1326 audit(1776550991.524:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2336 comm="syz.2.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd26f9c819 code=0x7ffc0000 [ 1203.769918][ T2348] syzkaller0: entered promiscuous mode [ 1203.789998][ T2348] syzkaller0: entered allmulticast mode [ 1203.843870][ C0] wdm_int_callback: 814 callbacks suppressed [ 1203.843892][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.856516][ C0] wdm_int_callback: 814 callbacks suppressed [ 1203.856535][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.869075][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.875705][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.882776][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.889422][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.895734][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.902351][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.908654][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.915273][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.921654][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.928282][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.934652][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.941275][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.947655][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.954268][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.964289][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.970924][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1203.977224][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1203.983848][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1204.007245][T20037] usb 9-1: USB disconnect, device number 58 [ 1204.013247][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1204.384677][ T2356] netlink: 'syz.4.10678': attribute type 4 has an invalid length. [ 1204.431333][ T2160] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1204.511872][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.605283][ T2160] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1204.629805][ T2160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.658051][ T2160] usb 2-1: Product: syz [ 1204.677317][ T2160] usb 2-1: Manufacturer: syz [ 1204.695093][ T2160] usb 2-1: SerialNumber: syz [ 1204.869013][T19839] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1204.882005][T19839] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1204.946277][T19839] asix 8-1:0.188: probe with driver asix failed with error -71 [ 1205.056051][T19839] usb 8-1: USB disconnect, device number 52 [ 1205.162637][ T2160] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1205.214339][ T2160] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1205.383174][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.674069][ T2160] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1206.720400][ T2160] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1206.747555][ T2160] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1206.804994][ T2160] usb 2-1: USB disconnect, device number 87 [ 1207.511891][T19839] net_ratelimit: 6 callbacks suppressed [ 1207.511910][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.831908][T20037] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1207.863538][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.871925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.008098][T20037] usb 8-1: Using ep0 maxpacket: 16 [ 1208.031977][T20037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1208.090611][T20037] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1208.152760][T20037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.186413][T20037] usb 8-1: Product: syz [ 1208.204610][T20037] usb 8-1: Manufacturer: syz [ 1208.220726][T20037] usb 8-1: SerialNumber: syz [ 1208.251501][T20037] usb 8-1: config 0 descriptor?? [ 1208.278773][T20037] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1208.308487][T20037] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1208.581747][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.895568][T20037] em28xx 8-1:0.0: chip ID is em2765 [ 1209.145631][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.154001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.247204][ T2435] tipc: Failed to remove unknown binding: 66,0,0/0:87345254/87345256 [ 1209.257311][ T2435] tipc: Failed to remove unknown binding: 66,0,0/0:87345254/87345255 [ 1209.265580][T19842] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1209.274668][ T2435] tipc: Failed to remove unknown binding: 66,0,0/0:87345254/87345256 [ 1209.283153][ T5837] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1209.283261][ T2435] tipc: Failed to remove unknown binding: 66,0,0/0:87345254/87345255 [ 1209.451402][T19842] usb 5-1: Using ep0 maxpacket: 32 [ 1209.463453][T19842] usb 5-1: config 0 has no interfaces? [ 1209.470866][ T5837] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1209.489198][ T5837] usb 2-1: config 0 has no interface number 0 [ 1209.497191][T19842] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1209.506753][T19842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.528899][ T5837] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1209.536397][T20037] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1209.546558][T19842] usb 5-1: Product: syz [ 1209.554876][T19842] usb 5-1: Manufacturer: syz [ 1209.568598][T19842] usb 5-1: SerialNumber: syz [ 1209.590898][ T5837] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1209.607262][T20037] em28xx 8-1:0.0: board has no eeprom [ 1209.622241][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.635155][T19842] usb 5-1: config 0 descriptor?? [ 1209.650042][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.690771][ T5837] usb 2-1: Product: syz [ 1209.722960][ T5837] usb 2-1: Manufacturer: syz [ 1209.765872][ T5837] usb 2-1: SerialNumber: syz [ 1209.841088][ T5837] usb 2-1: config 0 descriptor?? [ 1209.921582][T20037] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1209.945866][T20037] em28xx 8-1:0.0: dvb set to bulk mode. [ 1209.966033][T20038] em28xx 8-1:0.0: Binding DVB extension [ 1210.003542][T20037] usb 8-1: USB disconnect, device number 53 [ 1210.062728][T20037] em28xx 8-1:0.0: Disconnecting em28xx [ 1210.285374][T20038] em28xx 8-1:0.0: Registering input extension [ 1210.328720][T20037] em28xx 8-1:0.0: Closing input extension [ 1210.468826][T20037] em28xx 8-1:0.0: Freeing device [ 1210.661754][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.780217][ T5837] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1211.066048][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.083871][T20038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.451454][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1211.451471][ T30] audit: type=1800 audit(1776550999.634:1501): pid=2462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.10710" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1212.018248][T20037] usb 5-1: USB disconnect, device number 108 [ 1212.306164][ T5837] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1212.351795][ T5837] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1212.416905][ T5837] usb 2-1: USB disconnect, device number 88 [ 1212.841805][ T2506] loop6: detected capacity change from 0 to 2640 [ 1212.887265][ T2506] buffer_io_error: 11 callbacks suppressed [ 1212.887284][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1212.976848][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.003408][ T2508] loop6: detected capacity change from 2640 to 524288000 [ 1213.016746][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.068122][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.092018][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.122265][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.151435][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.176999][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.202951][ T2506] ldm_validate_partition_table(): Disk read failed. [ 1213.221485][T19842] net_ratelimit: 2 callbacks suppressed [ 1213.221500][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.231861][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.284214][ T2506] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.343133][ T2506] Dev loop6: unable to read RDB block 0 [ 1213.388796][ T2506] loop6: unable to read partition table [ 1213.426791][ T2506] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1213.494086][ T2512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.623484][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.631830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.261551][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.277323][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.285630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.309605][ T2535] binder: 2531:2535 ioctl c0306201 200000000240 returned -14 [ 1215.301622][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.406932][ T2563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1215.471865][ T2569] macvlan2: entered promiscuous mode [ 1215.488145][ T2569] macvlan2: entered allmulticast mode [ 1215.508001][ T2569] bond4: entered promiscuous mode [ 1215.534183][ T2569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1215.620841][ T2569] bond4: left promiscuous mode [ 1215.936975][ T2575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.341855][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.550055][ T2587] syzkaller0: entered promiscuous mode [ 1216.570590][ T2587] syzkaller0: entered allmulticast mode [ 1216.604877][ T2587] tipc: Started in network mode [ 1216.621378][ T2587] tipc: Node identity 8663a4ffb6fb, cluster identity 4711 [ 1216.649108][ T2587] tipc: Enabled bearer , priority 0 [ 1216.672616][ T2586] tipc: Resetting bearer [ 1216.774721][ T2586] tipc: Disabling bearer [ 1216.822643][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.832205][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.878356][ T2591] syzkaller0: entered promiscuous mode [ 1216.898362][ T2591] syzkaller0: entered allmulticast mode [ 1217.425989][ T5837] IPVS: starting estimator thread 0... [ 1217.511435][ T2621] IPVS: using max 29 ests per chain, 69600 per kthread [ 1217.940384][ T2638] kvm: pic: non byte write [ 1218.411431][ T29] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1218.651518][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1218.681057][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1218.718754][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 1218.743510][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.780037][ T29] usb 8-1: Product: syz [ 1218.805135][ T29] usb 8-1: Manufacturer: syz [ 1218.813276][ T2650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1218.837670][ T29] usb 8-1: SerialNumber: syz [ 1218.901871][T19839] net_ratelimit: 2 callbacks suppressed [ 1218.901886][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.043804][ T2653] kvm: pic: single mode not supported [ 1219.043824][ T2653] kvm: pic: level sensitive irq not supported [ 1219.076066][ T2653] kvm: pic: level sensitive irq not supported [ 1219.104666][ T29] usb 8-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1219.124900][ T2653] kvm: pic: single mode not supported [ 1219.165728][ T29] usb 8-1: found format II with max.bitrate = 4, frame size=65533 [ 1219.242596][ T29] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1219.279696][ T29] usb 8-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1219.314053][ T29] usb 8-1: found format II with max.bitrate = 4, frame size=65533 [ 1219.333489][ T29] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1219.359913][ T29] usb 8-1: failed to enable PITCH for EP 0x1 [ 1219.380551][ T29] usb 8-1: unit 8 not found! [ 1219.390692][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.399096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.565831][ T29] usb 8-1: USB disconnect, device number 54 [ 1219.634259][ T7273] udevd[7273]: setting mode of /dev/bus/usb/008/054 to 020664 failed: No such file or directory [ 1219.670583][ T7273] udevd[7273]: setting owner of /dev/bus/usb/008/054 to uid=0, gid=0 failed: No such file or directory [ 1219.758713][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1219.941758][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.030249][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.038672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.131656][ T29] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1220.182730][ T2686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10769'. [ 1220.298276][ T2696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1220.322969][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1220.334574][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1220.344891][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1220.365340][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1220.388353][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.412733][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1220.435020][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.659813][ T2704] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10775'. [ 1220.682282][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 1220.694267][ T29] usbtmc 8-1:16.0: can't read capabilities [ 1220.981592][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.101437][ T29] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1221.251557][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 1221.257022][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1221.278657][ T2722] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1221.289049][ T29] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1221.298748][ T2722] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1221.308545][ T29] usb 9-1: config 0 has no interface number 0 [ 1221.321490][ T29] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1221.322475][ T2722] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1221.344555][ T29] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1221.363201][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.371958][ T2722] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1221.377177][ T29] usb 9-1: Product: syz [ 1221.384113][ T29] usb 9-1: Manufacturer: syz [ 1221.395570][T19839] usb 8-1: USB disconnect, device number 55 [ 1221.416488][ T29] usb 9-1: SerialNumber: syz [ 1221.438216][ T29] usb 9-1: config 0 descriptor?? [ 1221.486480][ T2727] syzkaller0: entered promiscuous mode [ 1221.501479][ T2727] syzkaller0: entered allmulticast mode [ 1222.021812][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.205276][T20038] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1222.329810][ T30] audit: type=1326 audit(1776551010.514:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2753 comm="syz.7.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360879c819 code=0x7fc00000 [ 1222.387377][ T30] audit: type=1326 audit(1776551010.544:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2753 comm="syz.7.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f360879c819 code=0x7fc00000 [ 1222.434934][T20038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.455346][T20038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.478652][T20038] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1222.501200][T20038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.527012][T20038] usb 2-1: config 0 descriptor?? [ 1222.582392][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.591500][T20037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.944783][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1222.962529][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1222.981992][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1222.990550][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1223.009385][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1223.019490][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1223.039707][T20038] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1223.058166][T20038] cp2112 0003:10C4:EA90.00BC: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1223.142961][T20038] cp2112 0003:10C4:EA90.00BC: Part Number: 0x00 Device Version: 0x00 [ 1223.715604][ T29] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1223.766376][ T29] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1223.775078][T20038] cp2112 0003:10C4:EA90.00BC: error reading lock byte: -71 [ 1223.775991][ T29] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1223.791008][ T29] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1223.873872][T20038] usb 2-1: USB disconnect, device number 89 [ 1223.905663][ T29] usb 9-1: USB disconnect, device number 59 [ 1224.661684][ T29] net_ratelimit: 2 callbacks suppressed [ 1224.661704][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.094637][ T29] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1225.141752][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.150151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.313726][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1225.324531][ T29] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1225.346570][ T29] usb 2-1: config 0 has no interface number 0 [ 1225.372651][ T29] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1225.445051][ T29] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.491674][ T29] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1225.507531][ T29] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1225.526003][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.536181][ T29] usb 2-1: Product: syz [ 1225.540405][ T29] usb 2-1: Manufacturer: syz [ 1225.554348][ T29] usb 2-1: SerialNumber: syz [ 1225.571922][ T29] usb 2-1: config 0 descriptor?? [ 1225.590799][ T2793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1225.614167][ T29] sr9700 2-1:0.41: probe with driver sr9700 failed with error -22 [ 1225.701606][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.741360][T20038] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1225.782356][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.790688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.859454][ T2793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1225.912094][T20038] usb 5-1: Using ep0 maxpacket: 16 [ 1225.923214][T19839] usb 2-1: USB disconnect, device number 90 [ 1225.931359][ T29] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1225.937845][T20038] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1225.978493][T20038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1226.007114][T20038] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1226.017594][T20038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.050370][T20038] usb 5-1: Product: syz [ 1226.056442][T20038] usb 5-1: Manufacturer: syz [ 1226.063441][T20038] usb 5-1: SerialNumber: syz [ 1226.081374][ T2815] kvm: pic: non byte write [ 1226.093835][T20038] usb 5-1: config 0 descriptor?? [ 1226.112612][T20038] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1226.114367][ T29] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1226.123254][T20038] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1226.139405][ T29] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1226.152680][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.166117][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1226.175571][ T29] usb 9-1: config 1 has no interface number 0 [ 1226.182436][ T29] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1226.191952][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.220219][ T29] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1226.348229][ T2822] netlink: 'syz.7.10809': attribute type 1 has an invalid length. [ 1226.390508][ T2822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1226.439934][ T2827] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1226.503941][ T29] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 1226.523227][ T2822] bond6: (slave dummy0): making interface the new active one [ 1226.533165][ T29] snd_usb_pod 9-1:1.1: invalid control EP [ 1226.554115][ T29] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 1226.560929][ T2822] dummy0: entered promiscuous mode [ 1226.568104][ T2827] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10809'. [ 1226.577368][ T2822] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1226.577722][ T29] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1226.578240][ T29] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1226.677574][ T2827] bond6: (slave dummy0): Releasing active interface [ 1226.705169][ T2827] dummy0 (unregistering): left promiscuous mode [ 1226.724191][T20038] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1226.740101][ T29] usb 9-1: USB disconnect, device number 60 [ 1226.746149][T20038] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1226.753463][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.030382][ T2836] syzkaller0: entered promiscuous mode [ 1227.038876][ T2836] syzkaller0: entered allmulticast mode [ 1227.356907][T20038] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1227.501369][ T5837] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1227.673431][ T5837] usb 8-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1227.701701][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.704154][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.714252][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.733051][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.747753][ T5837] usb 8-1: Product: syz [ 1227.755973][ T5837] usb 8-1: Manufacturer: syz [ 1227.766092][ T5837] usb 8-1: SerialNumber: syz [ 1227.793500][T20038] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1227.822531][T20038] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1227.839563][T20038] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1227.855045][T20038] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1227.877834][T20038] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1227.898077][T20038] usb 5-1: USB disconnect, device number 109 [ 1228.026945][ T5837] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1228.042170][ T5837] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1228.069553][ T5837] usb 8-1: USB disconnect, device number 56 [ 1229.473592][ T2160] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 1229.643203][ T2160] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1229.657311][ T2160] usb 8-1: not running at top speed; connect to a high speed hub [ 1229.672976][ T2160] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1229.686745][ T2160] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1229.698012][ T2160] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1229.712438][ T2160] usb 8-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1229.722516][ T2160] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.730651][ T2160] usb 8-1: Product: syz [ 1229.736169][ T2160] usb 8-1: Manufacturer: syz [ 1229.743242][ T2160] usb 8-1: SerialNumber: syz [ 1229.781521][ T29] net_ratelimit: 1 callbacks suppressed [ 1229.781537][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.062778][ T2889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10827'. [ 1230.105276][ T2160] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1230.168907][ T2160] usb 8-1: USB disconnect, device number 57 [ 1230.234908][ T7273] udevd[7273]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.743961][ T2160] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1230.787662][ T2901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.821896][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.840692][ T2901] geneve2: entered promiscuous mode [ 1230.863770][T21257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.873418][T21257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.901637][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.910043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.924684][T21257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.957337][ T2160] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1230.968418][T21257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.991879][ T2160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.017258][ T2160] usb 3-1: Product: syz [ 1231.026684][ T2160] usb 3-1: Manufacturer: syz [ 1231.033130][ T2160] usb 3-1: SerialNumber: syz [ 1231.040507][ T2160] usb 3-1: config 0 descriptor?? [ 1231.083708][ T5837] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 1231.117428][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10835'. [ 1231.163788][ T2915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.253931][ T5837] usb 9-1: config 0 has an invalid interface number: 39 but max is 0 [ 1231.302531][ T5837] usb 9-1: config 0 has no interface number 0 [ 1231.344601][ T5837] usb 9-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1231.355411][ T2160] usb 3-1: USB disconnect, device number 107 [ 1231.366035][ T2912] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1231.394430][ T2912] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1231.414203][ T5837] usb 9-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1231.442630][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.465522][ T5837] usb 9-1: Product: syz [ 1231.473073][ T5837] usb 9-1: Manufacturer: syz [ 1231.474119][ T2919] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1231.483506][ T5837] usb 9-1: SerialNumber: syz [ 1231.514299][ T5837] usb 9-1: config 0 descriptor?? [ 1231.523512][ T2919] bond7 (unregistering): Released all slaves [ 1231.542074][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.550424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.861574][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.445353][ T2936] kvm: user requested TSC rate below hardware speed [ 1232.548124][ T2936] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1232.617331][ T5837] usb 9-1: USB disconnect, device number 61 [ 1232.669626][ T7273] udevd[7273]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.821432][ T2160] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1232.901816][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.991378][ T2160] usb 3-1: Using ep0 maxpacket: 32 [ 1233.014334][ T2160] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.048562][ T2160] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1233.082681][ T2160] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1233.104074][ T2160] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1233.137739][ T2160] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1233.154355][ T2160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.183437][ T2160] usb 3-1: Product: syz [ 1233.198734][ T2160] usb 3-1: Manufacturer: syz [ 1233.226377][ T2160] usb 3-1: SerialNumber: syz [ 1233.271223][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1233.291770][ T2160] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input201 [ 1233.463447][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.478415][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.531714][ T2160] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1233.546639][ T2160] (id 0x00) [ 1233.640758][ T5837] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 1233.656021][ T2160] rc_core: IR keymap rc-imon-pad not found [ 1233.663826][ T2160] Registered IR keymap rc-empty [ 1233.669313][ T5837] hid-generic 0000:0000:0000.00BD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1233.686602][ T2160] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1233.714390][ T2160] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1233.753386][ T2160] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1233.807402][ T2160] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input202 [ 1233.828857][ T2160] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:108> initialized [ 1233.868078][ T2957] fido_id[2957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1234.012373][ T5837] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1234.205826][ T5837] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1234.217938][ T5837] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.231373][ T5837] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1234.241542][ T5837] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.265628][ T5837] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1234.291995][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.317744][ T5837] usb 8-1: Product: syz [ 1234.341674][ T5837] usb 8-1: Manufacturer: syz [ 1234.368462][ T2970] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 1234.412722][ T5837] usb 8-1: SerialNumber: syz [ 1234.432996][ T2974] imon:send_packet: task interrupted [ 1234.438519][ T2974] imon:send_packet: packet tx failed (-512) [ 1234.493431][ T2974] imon:vfd_write: send packet #1 failed [ 1234.533374][ T2974] imon:send_packet: task interrupted [ 1234.554639][ T2974] imon:send_packet: packet tx failed (-512) [ 1234.584565][ T2974] imon:vfd_write: send packet #0 failed [ 1234.605792][ T2979] imon:display_open: display port is already open [ 1234.643236][ T2974] imon:send_packet: packet tx failed (-32) [ 1234.666653][ T2974] imon:vfd_write: send packet #0 failed [ 1234.677771][ T5837] usb 8-1: Can't get UAC3 power state for id 11 [ 1234.696000][ T29] usb 3-1: USB disconnect, device number 108 [ 1234.727712][ T5837] usb 8-1: 5:0: failed to get current value for ch 0 (-71) [ 1234.764805][ T5837] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1234.795978][ T5837] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1234.839454][ T5837] usb 8-1: [5] FU [Generic In Capture Volume] ch = 1, val = 0/1/1 [ 1235.059929][ T5837] usb 8-1: USB disconnect, device number 58 [ 1235.541920][T19839] net_ratelimit: 2 callbacks suppressed [ 1235.541939][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.626915][ T2992] loop5: detected capacity change from 0 to 7 [ 1235.656039][ T2992] Dev loop5: unable to read RDB block 7 [ 1235.667594][ T2992] loop5: unable to read partition table [ 1235.677845][ T2992] loop5: partition table beyond EOD, truncated [ 1235.691462][ T2992] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1235.712974][ T5837] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1235.902043][ T3002] syzkaller0: entered promiscuous mode [ 1235.912528][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.929285][ T3002] syzkaller0: entered allmulticast mode [ 1235.946547][ T5837] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1236.004571][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.050544][ T5837] usb 8-1: config 0 descriptor?? [ 1236.120578][ T5837] pwc: Askey VC010 type 2 USB webcam detected. [ 1236.437028][ T3006] binder: 3005:3006 ioctl c0306201 200000000180 returned -14 [ 1236.503793][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1236.530793][ T5837] pwc: recv_control_msg error -32 req 02 val 2700 [ 1236.571918][ T5837] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1236.588449][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.612031][ T5837] pwc: recv_control_msg error -32 req 04 val 1000 [ 1236.648050][ T5837] pwc: recv_control_msg error -32 req 04 val 1300 [ 1236.662707][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.671035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.709488][ T5837] pwc: recv_control_msg error -32 req 04 val 1400 [ 1236.740645][ T5837] pwc: recv_control_msg error -32 req 02 val 2000 [ 1236.777269][ T5837] pwc: recv_control_msg error -32 req 02 val 2100 [ 1237.009127][ T5837] pwc: recv_control_msg error -71 req 02 val 2500 [ 1237.031355][T19839] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1237.038170][ T5837] pwc: recv_control_msg error -71 req 02 val 2400 [ 1237.063424][ T5837] pwc: recv_control_msg error -71 req 02 val 2600 [ 1237.082205][ T5837] pwc: recv_control_msg error -71 req 02 val 2900 [ 1237.100043][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 1237.124197][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 1237.141948][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 1237.187122][ T5837] pwc: Registered as video103. [ 1237.213202][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input203 [ 1237.246424][T19839] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.267448][T19839] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.270294][ T5837] usb 8-1: USB disconnect, device number 59 [ 1237.289138][T19839] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1237.303676][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.312065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.328057][T19839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1237.360868][T19839] usb 9-1: SerialNumber: syz [ 1237.622797][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.642305][T19839] usb 9-1: 0:2 : does not exist [ 1237.804715][T19839] usb 9-1: USB disconnect, device number 62 [ 1237.936694][ T7273] udevd[7273]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.311792][ T5837] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1238.475523][ T5837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1238.487721][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.498571][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1238.508474][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10879'. [ 1238.509294][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1238.532669][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.560946][ T5837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1238.586903][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.594001][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.607005][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1238.642339][ T5837] usb 5-1: Product: syz [ 1238.658680][ T5837] usb 5-1: Manufacturer: syz [ 1238.674073][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.686289][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 1238.694767][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 1238.704630][ T5837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1238.710676][ T5837] cdc_wdm 5-1:1.0: Unknown control protocol [ 1238.918791][ T3036] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1238.947755][ T5837] usb 5-1: USB disconnect, device number 110 [ 1239.223360][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.235525][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.571467][ T5837] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1240.754186][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 1240.785979][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1240.817919][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.838293][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.855910][ T5837] usb 5-1: Product: syz [ 1240.866935][ T5837] usb 5-1: Manufacturer: syz [ 1240.877560][ T5837] usb 5-1: SerialNumber: syz [ 1240.897364][ T5837] usb 5-1: config 0 descriptor?? [ 1240.935378][ T5837] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1240.961155][ T5837] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1241.252635][ T3115] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10900'. [ 1241.266405][ T3115] bond0 (unregistering): Released all slaves [ 1241.311561][ T29] net_ratelimit: 2 callbacks suppressed [ 1241.311576][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.549435][ T5837] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1241.784853][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.793242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.965607][ T5837] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1241.994621][ T5837] em28xx 5-1:0.0: board has no eeprom [ 1242.311979][ T5837] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1242.341511][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.359419][ T5837] em28xx 5-1:0.0: dvb set to bulk mode. [ 1242.387575][T20038] em28xx 5-1:0.0: Binding DVB extension [ 1242.406403][ T5837] usb 5-1: USB disconnect, device number 111 [ 1242.448284][ T5837] em28xx 5-1:0.0: Disconnecting em28xx [ 1242.597911][T20038] em28xx 5-1:0.0: Registering input extension [ 1242.626561][ T5837] em28xx 5-1:0.0: Closing input extension [ 1242.788212][ T5837] em28xx 5-1:0.0: Freeing device [ 1242.903544][ T3147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.005205][ T3147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.055737][ T3147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.072169][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.080538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.391638][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.422872][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.641361][ T5837] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1244.812247][ T5837] usb 9-1: Using ep0 maxpacket: 16 [ 1244.833824][ T5837] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1244.863765][ T5837] usb 9-1: config 0 has no interface number 0 [ 1244.885878][ T5837] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1244.920836][ T5837] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1244.962678][ T5837] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1244.983180][T10757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.992305][ T2160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.002974][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.033377][ T5837] usb 9-1: Product: syz [ 1245.048889][ T5837] usb 9-1: Manufacturer: syz [ 1245.070867][ T5837] usb 9-1: SerialNumber: syz [ 1245.094938][ T5837] usb 9-1: config 0 descriptor?? [ 1245.110935][ T3128] syz.2.10903 (3128): drop_caches: 1 [ 1245.119386][ T3171] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1245.133055][ T3171] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1245.369192][ T3171] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1245.386274][ T3171] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1245.511412][ T2160] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1245.597628][ T5837] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1245.691813][ T3183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.703536][ T2160] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.721989][ T2160] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1245.764500][ T2160] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1245.793410][ T2160] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1245.829087][ T2160] usb 8-1: Manufacturer: syz [ 1245.866406][ T2160] usb 8-1: config 0 descriptor?? [ 1246.373815][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.405020][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.449095][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.477334][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.069291][ T29] net_ratelimit: 2 callbacks suppressed [ 1247.069310][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.220770][ T5837] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1247.257867][ T5837] asix 9-1:0.34: probe with driver asix failed with error -71 [ 1247.338171][ T5837] usb 9-1: USB disconnect, device number 63 [ 1247.541594][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.549943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.861345][ T29] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1248.035731][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1248.059306][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1248.073689][ T29] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 1248.094068][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.102523][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.131938][ T5837] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1248.168532][ T29] usb 2-1: config 0 descriptor?? [ 1248.182142][ T3214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1248.255792][T20043] usb 8-1: USB disconnect, device number 60 [ 1248.293745][ T5837] usb 9-1: Using ep0 maxpacket: 8 [ 1248.340408][ T5837] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1248.390399][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.453746][ T5837] usb 9-1: Product: syz [ 1248.469070][ T5837] usb 9-1: Manufacturer: syz [ 1248.489373][ T5837] usb 9-1: SerialNumber: syz [ 1248.515782][ T5837] usb 9-1: config 0 descriptor?? [ 1248.764791][ T5837] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1248.767556][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 1248.794470][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1248.822781][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.831060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.848853][ T29] usb 2-1: USB disconnect, device number 91 [ 1249.011773][T19842] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1249.141638][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.181397][T19842] usb 8-1: Using ep0 maxpacket: 16 [ 1249.200263][T19842] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1249.250534][T19842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1249.270225][T19842] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1249.279611][T19842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.288011][T19842] usb 8-1: Product: syz [ 1249.292502][T19842] usb 8-1: Manufacturer: syz [ 1249.297208][T19842] usb 8-1: SerialNumber: syz [ 1249.318875][T19842] usb 8-1: config 0 descriptor?? [ 1249.364687][T19842] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1249.376809][T19842] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1249.970180][T19842] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1249.990383][T19842] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1250.189824][ T5837] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1250.201678][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.239864][ T5837] usb 9-1: USB disconnect, device number 64 [ 1250.584908][ T3248] netlink: 'syz.4.10941': attribute type 1 has an invalid length. [ 1250.628939][T19842] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1250.640019][T19842] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1250.751846][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.762770][ T3252] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1250.772923][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.816324][ T3253] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 1250.851547][T19842] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1250.870468][T19842] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1250.900931][T19842] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1250.913904][T19842] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1250.936081][T19842] usb 8-1: USB disconnect, device number 61 [ 1251.062826][T20043] IPVS: starting estimator thread 0... [ 1251.096696][ T3258] binder: 3256:3258 ioctl c0306201 200000000540 returned -14 [ 1251.152446][ T3270] IPVS: using max 33 ests per chain, 79200 per kthread [ 1252.011605][T20043] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1252.213083][T20043] usb 9-1: Using ep0 maxpacket: 16 [ 1252.233793][T20043] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1252.269667][T20043] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1252.320452][T20043] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1252.352510][T19842] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1252.361082][T20043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.403444][T20043] usb 9-1: Product: syz [ 1252.415877][T20043] usb 9-1: Manufacturer: syz [ 1252.443998][T20043] usb 9-1: SerialNumber: syz [ 1252.474245][T20043] usb 9-1: config 0 descriptor?? [ 1252.502372][T20043] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1252.541359][T20043] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1252.556813][T19842] usb 3-1: Using ep0 maxpacket: 32 [ 1252.589598][T19842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.649557][T19842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.689226][ T3314] binder_alloc: 3313: pid 3313 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1252.704638][T19842] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1252.731602][T19842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.749086][ T3315] kvm: pic: non byte write [ 1252.767679][T19842] usb 3-1: config 0 descriptor?? [ 1252.901713][T18795] net_ratelimit: 2 callbacks suppressed [ 1252.901747][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.093074][ T3322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.133878][T20043] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1253.165321][T20043] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1253.215403][T19842] ft260 0003:0403:6030.00BE: unknown main item tag 0x0 [ 1253.237197][T19842] ft260 0003:0403:6030.00BE: unknown main item tag 0x0 [ 1253.302587][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.310958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.327648][ T2160] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1253.405450][T19842] ft260 0003:0403:6030.00BE: chip code: 0000 0000 [ 1253.491309][ T2160] usb 8-1: Using ep0 maxpacket: 8 [ 1253.513564][ T2160] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1253.547022][ T2160] usb 8-1: config 0 has no interface number 0 [ 1253.569545][ T2160] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.611461][ T2160] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1253.623046][T19842] ft260 0003:0403:6030.00BE: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1253.654812][ T2160] usb 8-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1253.688062][ T2160] usb 8-1: Product: syz [ 1253.719737][ T2160] usb 8-1: config 0 descriptor?? [ 1253.766848][ T2160] iowarrior 8-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 1253.816705][T19842] ft260 0003:0403:6030.00BE: failed to retrieve status: -32, no wakeup [ 1253.941910][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.950218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.977085][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.994467][T19842] usb 8-1: USB disconnect, device number 62 [ 1254.000499][ C1] iowarrior 8-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 1254.077058][T19839] usb 3-1: USB disconnect, device number 109 [ 1254.216783][T20043] em28xx 9-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1254.619840][T20043] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1254.637673][T20043] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1254.659151][T20043] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1254.681819][T20043] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1254.690618][T20043] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1254.698790][T20043] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1254.711424][T19842] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1254.721959][T20043] usb 9-1: USB disconnect, device number 65 [ 1254.863842][ T3336] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1254.884001][T19842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1254.911092][ T3336] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1254.932214][T19842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1254.984226][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.005357][T19842] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1255.032037][T19842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.048753][T19842] usb 5-1: Product: syz [ 1255.068559][T19842] usb 5-1: Manufacturer: syz [ 1255.076606][T19842] usb 5-1: SerialNumber: syz [ 1255.101113][T19842] usb 5-1: config 0 descriptor?? [ 1255.127597][ T3326] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1255.266140][ T3344] netlink: 'syz.7.10974': attribute type 2 has an invalid length. [ 1255.302615][ T3344] netlink: 'syz.7.10974': attribute type 2 has an invalid length. [ 1255.861745][T21261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.870508][T20043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.908281][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.123363][T19842] powermate: unknown product id 0240 [ 1256.193612][T19842] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1256.342378][T19842] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input206 [ 1256.551951][ T3358] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 1256.571288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1256.591253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1256.615123][ C1] powermate: config urb returned -71 [ 1256.621374][ C1] powermate: config urb returned -71 [ 1256.627288][ C1] powermate: config urb returned -71 [ 1256.634082][ C1] powermate: config urb returned -71 [ 1256.668689][ T3358] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 1256.729773][T19842] usb 5-1: USB disconnect, device number 112 [ 1256.729872][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1256.753672][ T3358] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 1256.829646][ T3358] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 1256.899522][ T3358] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 1256.994266][ T3358] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 1257.066732][ T3358] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1257.728596][ T3388] binder: 3387:3388 ioctl c0306201 200000000080 returned -14 [ 1257.746130][ T3388] binder: 3387:3388 ioctl c0306201 2000000003c0 returned -14 [ 1257.771401][T19839] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1257.904995][ T3397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.931433][T19839] usb 5-1: Using ep0 maxpacket: 32 [ 1257.962507][T19839] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1258.008149][T19839] usb 5-1: config 0 has no interface number 0 [ 1258.032218][T19842] net_ratelimit: 1 callbacks suppressed [ 1258.032235][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.050723][T19839] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1258.092395][T19839] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1258.131863][T19839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.169581][T19839] usb 5-1: Product: syz [ 1258.188412][T19839] usb 5-1: Manufacturer: syz [ 1258.205307][T19839] usb 5-1: SerialNumber: syz [ 1258.232514][T19839] usb 5-1: config 0 descriptor?? [ 1258.258287][ T3384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1258.525636][ T3384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1258.735998][ T3407] netlink: 'syz.1.10986': attribute type 1 has an invalid length. [ 1258.955524][ T3410] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1259.031996][ T3412] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 1259.061644][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.069807][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.078188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.209425][ T3405] kvm: pic: non byte write [ 1259.230070][ T3405] kvm: pic: non byte write [ 1259.249150][ T3405] kvm: pic: non byte write [ 1259.267511][ T3405] kvm: pic: non byte write [ 1259.284073][ T3405] kvm: pic: non byte write [ 1259.294317][ T3405] kvm: pic: non byte write [ 1259.306444][ T3405] kvm: pic: non byte write [ 1259.318086][ T3405] kvm: pic: non byte write [ 1259.328406][ T3405] kvm: pic: non byte write [ 1259.341500][ T3405] kvm: pic: non byte write [ 1259.354127][ T3405] kvm: pic: non byte read [ 1259.615974][ T3425] kvm: pic: level sensitive irq not supported [ 1259.701982][T19579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.716501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.101592][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.274888][ T3437] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10993'. [ 1260.298621][ T3437] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10993'. [ 1260.796146][T19839] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1260.839161][T19839] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1260.893844][T19839] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1260.962120][T19839] usb 5-1: USB disconnect, device number 113 [ 1261.141454][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.471380][ T29] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1261.624257][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.633382][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.693790][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 1261.729943][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1261.767082][ T29] usb 8-1: config 7 has an invalid interface number: 128 but max is 0 [ 1261.809192][ T29] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.863579][ T29] usb 8-1: config 7 has no interface number 0 [ 1261.896479][ T29] usb 8-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1261.956589][ T29] usb 8-1: config 7 interface 128 has no altsetting 0 [ 1262.005291][ T29] usb 8-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1262.067218][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.115440][ T29] usb 8-1: Product: syz [ 1262.147074][ T29] usb 8-1: Manufacturer: syz [ 1262.179272][ T29] usb 8-1: SerialNumber: syz [ 1262.479681][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1262.523951][ T29] usb 8-1: MIDIStreaming interface descriptor not found [ 1262.631543][T19839] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1262.766463][ T29] usb 8-1: USB disconnect, device number 63 [ 1262.841341][T19839] usb 5-1: Using ep0 maxpacket: 32 [ 1262.857173][T19839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1262.893395][T19839] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1262.912568][T19839] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1262.925748][T19839] usb 5-1: Product: syz [ 1262.935245][T19839] usb 5-1: Manufacturer: syz [ 1262.951667][T19839] usb 5-1: SerialNumber: syz [ 1262.974458][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.018276][T19839] usb 5-1: config 0 descriptor?? [ 1263.028455][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11000'. [ 1263.048151][ T3450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1263.073302][T19839] hub 5-1:0.0: bad descriptor, ignoring hub [ 1263.085781][T19839] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1263.701514][ T29] net_ratelimit: 2 callbacks suppressed [ 1263.701532][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.893682][ T3468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.081393][ T29] usb 9-1: new low-speed USB device number 66 using dummy_hcd [ 1264.092334][T19579] raw-gadget.1 gadget.4: failed to queue suspend event [ 1264.177034][ T3460] raw-gadget.1 gadget.4: failed to queue disconnect event [ 1264.273311][ T29] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1264.289398][ T29] usb 9-1: config 0 has no interface number 0 [ 1264.302893][ T29] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1264.323311][ T29] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1264.351455][ T29] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1264.369867][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.391015][ T29] usb 9-1: config 0 descriptor?? [ 1264.405719][ T3467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1264.421492][ T2160] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1264.436830][ T29] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1264.581349][ T2160] usb 3-1: Using ep0 maxpacket: 16 [ 1264.593642][ T2160] usb 3-1: config 0 has no interfaces? [ 1264.600113][ T2160] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1264.612315][ T2160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.620692][ T3472] netlink: 'syz.7.11005': attribute type 1 has an invalid length. [ 1264.634590][ T2160] usb 3-1: config 0 descriptor?? [ 1264.667277][ T3472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.691978][ T3474] veth13: entered promiscuous mode [ 1264.702610][ T3474] bond0: (slave veth13): Enslaving as an active interface with a down link [ 1264.727675][ T3472] erspan0: entered allmulticast mode [ 1264.736738][ T3472] bond0: (slave erspan0): making interface the new active one [ 1264.746495][ T3472] erspan0: entered promiscuous mode [ 1264.751855][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.760539][ T3472] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 1264.836309][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.844825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.859828][ T3470] kvm: kvm [3469]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1264.868874][ T3470] kvm: kvm [3469]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1264.899863][ T29] usb 3-1: USB disconnect, device number 110 [ 1265.462356][T19579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.470718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.781491][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.822391][T19841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.383901][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.394472][ T2160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.490198][T19839] usb 5-1: USB disconnect, device number 114 [ 1267.631285][T20043] usb 9-1: USB disconnect, device number 66 [ 1268.431805][T20043] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1268.601424][T20043] usb 9-1: Using ep0 maxpacket: 32 [ 1268.624515][T20043] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.648753][ T3534] binder: 3532:3534 ioctl c0306201 200000000440 returned -14 [ 1268.664946][T20043] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.699198][T20043] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1268.730594][T20043] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1268.766961][T20043] usb 9-1: Product: syz [ 1268.793674][T20043] usb 9-1: Manufacturer: syz [ 1268.829882][T20043] hub 9-1:4.0: USB hub found [ 1269.069907][T20043] hub 9-1:4.0: 2 ports detected [ 1269.542263][T19839] net_ratelimit: 2 callbacks suppressed [ 1269.542279][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.112415][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.129163][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.377854][T20043] hub 9-1:4.0: activate --> -90 [ 1270.584700][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.592898][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.601027][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.609413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.617710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.637020][T19839] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1270.800189][ T29] usb 9-1: USB disconnect, device number 67 [ 1270.841029][T19839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.880778][T19839] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1270.923378][T19839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.968245][T19839] usb 5-1: config 0 descriptor?? [ 1271.210888][T19839] usbhid 5-1:0.0: can't add hid device: -71 [ 1271.235955][T19839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1271.283747][T19839] usb 5-1: USB disconnect, device number 115 [ 1271.647580][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.781798][T19839] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1271.918672][ T3578] binder_alloc: 3577: binder_alloc_buf, no vma [ 1271.944210][T19839] usb 5-1: Using ep0 maxpacket: 16 [ 1271.960426][T19839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.008482][T19839] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1272.046131][T19839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.097746][T19839] usb 5-1: config 0 descriptor?? [ 1272.503714][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.515701][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.529375][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.570014][T19839] kye 0003:0458:5016.00BF: control desc unexpectedly large [ 1272.609891][T19839] kye 0003:0458:5016.00BF: control desc unexpectedly large [ 1272.693042][T19839] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.00BF/input/input207 [ 1273.062514][T19839] kye 0003:0458:5016.00BF: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 1273.282887][T19839] usb 5-1: USB disconnect, device number 116 [ 1273.543882][ T3607] fido_id[3607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1273.817954][ T3616] kvm: pic: single mode not supported [ 1273.817977][ T3616] kvm: pic: level sensitive irq not supported [ 1273.848361][ T3616] kvm: pic: non byte read [ 1273.898629][ T3616] kvm: pic: single mode not supported [ 1273.898647][ T3616] kvm: pic: level sensitive irq not supported [ 1273.962637][ T3616] kvm: pic: non byte read [ 1274.010141][ T3616] kvm: pic: non byte read [ 1274.025698][ T3616] kvm: pic: non byte read [ 1274.048343][ T3616] kvm: pic: non byte read [ 1274.065422][ T3616] kvm: pic: non byte read [ 1274.089230][ T3616] kvm: pic: non byte read [ 1274.104325][ T3616] kvm: pic: single mode not supported [ 1274.104342][ T3616] kvm: pic: level sensitive irq not supported [ 1274.122612][ T3616] kvm: pic: non byte read [ 1274.166847][ T3616] kvm: pic: level sensitive irq not supported [ 1274.166911][ T3616] kvm: pic: non byte read [ 1274.197674][T19839] hid-generic 0000:0000:0000.00C0: unknown main item tag 0x0 [ 1274.214350][ T3616] kvm: pic: non byte read [ 1274.242562][ T3616] kvm: pic: single mode not supported [ 1274.245358][T19839] hid-generic 0000:0000:0000.00C0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1274.581582][T19839] net_ratelimit: 1 callbacks suppressed [ 1274.581601][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.461516][T19839] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 1275.631694][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.661261][ T3648] [ 1275.663619][ T3648] ===================================================== [ 1275.670567][ T3648] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1275.678058][ T3648] syzkaller #0 Tainted: G L [ 1275.684054][ T3648] ----------------------------------------------------- [ 1275.691010][ T3648] syz.1.11059/3648 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1275.698750][ T3648] ffff888057113b40 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1275.707493][ T3648] [ 1275.707493][ T3648] and this task is already holding: [ 1275.714876][ T3648] ffff88802b181440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50 [ 1275.723483][ T3648] which would create a new lock dependency: [ 1275.729390][ T3648] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1275.737094][ T3648] [ 1275.737094][ T3648] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1275.746555][ T3648] (kbd_event_lock){..-.}-{3:3} [ 1275.746590][ T3648] [ 1275.746590][ T3648] ... which became SOFTIRQ-irq-safe at: [ 1275.759152][ T3648] lock_acquire+0x106/0x350 [ 1275.763757][ T3648] _raw_spin_lock+0x2e/0x40 [ 1275.768353][ T3648] kbd_event+0xd6/0x4080 [ 1275.772699][ T3648] input_handle_events_default+0xd4/0x1a0 [ 1275.778513][ T3648] input_pass_values+0x288/0x890 [ 1275.783538][ T3648] input_event_dispose+0x330/0x6b0 [ 1275.788757][ T3648] input_event+0x84/0xc0 [ 1275.793098][ T3648] imon_incoming_packet+0x1ccf/0x31c0 [ 1275.798573][ T3648] usb_rx_callback_intf0+0xba/0x210 [ 1275.803884][ T3648] __usb_hcd_giveback_urb+0x376/0x540 [ 1275.809373][ T3648] dummy_timer+0xbc0/0x4650 [ 1275.813967][ T3648] __hrtimer_run_queues+0x3c0/0xa20 [ 1275.819256][ T3648] hrtimer_run_softirq+0x17a/0x240 [ 1275.824459][ T3648] handle_softirqs+0x22a/0x840 [ 1275.829339][ T3648] __irq_exit_rcu+0xca/0x220 [ 1275.834025][ T3648] irq_exit_rcu+0x9/0x30 [ 1275.838366][ T3648] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1275.844098][ T3648] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1275.850195][ T3648] __sanitizer_cov_trace_pc+0x0/0x70 [ 1275.855582][ T3648] is_bpf_text_address+0x210/0x2b0 [ 1275.860795][ T3648] kernel_text_address+0xa5/0xe0 [ 1275.865832][ T3648] __kernel_text_address+0xd/0x30 [ 1275.870952][ T3648] unwind_get_return_address+0x4d/0x90 [ 1275.876499][ T3648] arch_stack_walk+0xfb/0x150 [ 1275.881268][ T3648] stack_trace_save+0xa9/0x100 [ 1275.886143][ T3648] kasan_save_track+0x3e/0x80 [ 1275.890915][ T3648] __kasan_slab_alloc+0x6c/0x80 [ 1275.895876][ T3648] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1275.901860][ T3648] __alloc_skb+0x1d0/0x7d0 [ 1275.906366][ T3648] alloc_skb_with_frags+0xc8/0x760 [ 1275.911571][ T3648] sock_alloc_send_pskb+0x878/0x990 [ 1275.916859][ T3648] __ip_append_data+0x29ba/0x3d30 [ 1275.921976][ T3648] ip_make_skb+0x22e/0x450 [ 1275.926494][ T3648] udp_sendmsg+0x18fd/0x21a0 [ 1275.931177][ T3648] ____sys_sendmsg+0x80a/0x9f0 [ 1275.936033][ T3648] ___sys_sendmsg+0x2a5/0x360 [ 1275.940813][ T3648] __sys_sendmmsg+0x27c/0x4e0 [ 1275.945583][ T3648] __x64_sys_sendmmsg+0xa0/0xc0 [ 1275.950532][ T3648] do_syscall_64+0x15f/0xf80 [ 1275.955231][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.961226][ T3648] [ 1275.961226][ T3648] to a SOFTIRQ-irq-unsafe lock: [ 1275.968247][ T3648] (tasklist_lock){.+.+}-{3:3} [ 1275.968272][ T3648] [ 1275.968272][ T3648] ... which became SOFTIRQ-irq-unsafe at: [ 1275.980905][ T3648] ... [ 1275.980913][ T3648] lock_acquire+0x106/0x350 [ 1275.988097][ T3648] _raw_read_lock+0x36/0x50 [ 1275.992701][ T3648] __do_wait+0xde/0x740 [ 1275.996964][ T3648] do_wait+0x1e7/0x510 [ 1276.001136][ T3648] kernel_wait+0xd6/0x1c0 [ 1276.005583][ T3648] call_usermodehelper_exec_work+0xbe/0x230 [ 1276.011580][ T3648] process_scheduled_works+0xb5d/0x1860 [ 1276.017223][ T3648] worker_thread+0xa53/0xfc0 [ 1276.021910][ T3648] kthread+0x388/0x470 [ 1276.026083][ T3648] ret_from_fork+0x514/0xb70 [ 1276.030807][ T3648] ret_from_fork_asm+0x1a/0x30 [ 1276.035662][ T3648] [ 1276.035662][ T3648] other info that might help us debug this: [ 1276.035662][ T3648] [ 1276.045900][ T3648] Chain exists of: [ 1276.045900][ T3648] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1276.045900][ T3648] [ 1276.058688][ T3648] Possible interrupt unsafe locking scenario: [ 1276.058688][ T3648] [ 1276.067005][ T3648] CPU0 CPU1 [ 1276.072373][ T3648] ---- ---- [ 1276.077736][ T3648] lock(tasklist_lock); [ 1276.081987][ T3648] local_irq_disable(); [ 1276.088752][ T3648] lock(kbd_event_lock); [ 1276.095609][ T3648] lock(&tty->flow.lock); [ 1276.102555][ T3648] [ 1276.106023][ T3648] lock(kbd_event_lock); [ 1276.110574][ T3648] [ 1276.110574][ T3648] *** DEADLOCK *** [ 1276.110574][ T3648] [ 1276.118746][ T3648] 6 locks held by syz.1.11059/3648: [ 1276.123946][ T3648] #0: ffff88802b1810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1276.133710][ T3648] #1: ffff88802b1812c8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x147/0x1800 [ 1276.143994][ T3648] #2: ffff88802b1810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1276.153321][ T3648] #3: ffff88802b181440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50 [ 1276.162299][ T3648] #4: ffff88802b1810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1276.171627][ T3648] #5: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1276.180689][ T3648] [ 1276.180689][ T3648] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1276.191094][ T3648] -> (kbd_event_lock){..-.}-{3:3} { [ 1276.196403][ T3648] IN-SOFTIRQ-W at: [ 1276.200484][ T3648] lock_acquire+0x106/0x350 [ 1276.206822][ T3648] _raw_spin_lock+0x2e/0x40 [ 1276.213154][ T3648] kbd_event+0xd6/0x4080 [ 1276.219231][ T3648] input_handle_events_default+0xd4/0x1a0 [ 1276.226784][ T3648] input_pass_values+0x288/0x890 [ 1276.233549][ T3648] input_event_dispose+0x330/0x6b0 [ 1276.240499][ T3648] input_event+0x84/0xc0 [ 1276.246576][ T3648] imon_incoming_packet+0x1ccf/0x31c0 [ 1276.253785][ T3648] usb_rx_callback_intf0+0xba/0x210 [ 1276.260826][ T3648] __usb_hcd_giveback_urb+0x376/0x540 [ 1276.268034][ T3648] dummy_timer+0xbc0/0x4650 [ 1276.274371][ T3648] __hrtimer_run_queues+0x3c0/0xa20 [ 1276.281419][ T3648] hrtimer_run_softirq+0x17a/0x240 [ 1276.288377][ T3648] handle_softirqs+0x22a/0x840 [ 1276.294981][ T3648] __irq_exit_rcu+0xca/0x220 [ 1276.301423][ T3648] irq_exit_rcu+0x9/0x30 [ 1276.307505][ T3648] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1276.314973][ T3648] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1276.322809][ T3648] __sanitizer_cov_trace_pc+0x0/0x70 [ 1276.329927][ T3648] is_bpf_text_address+0x210/0x2b0 [ 1276.336879][ T3648] kernel_text_address+0xa5/0xe0 [ 1276.343651][ T3648] __kernel_text_address+0xd/0x30 [ 1276.350511][ T3648] unwind_get_return_address+0x4d/0x90 [ 1276.357795][ T3648] arch_stack_walk+0xfb/0x150 [ 1276.364301][ T3648] stack_trace_save+0xa9/0x100 [ 1276.370911][ T3648] kasan_save_track+0x3e/0x80 [ 1276.377418][ T3648] __kasan_slab_alloc+0x6c/0x80 [ 1276.384103][ T3648] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1276.391823][ T3648] __alloc_skb+0x1d0/0x7d0 [ 1276.398067][ T3648] alloc_skb_with_frags+0xc8/0x760 [ 1276.405052][ T3648] sock_alloc_send_pskb+0x878/0x990 [ 1276.412096][ T3648] __ip_append_data+0x29ba/0x3d30 [ 1276.418952][ T3648] ip_make_skb+0x22e/0x450 [ 1276.425203][ T3648] udp_sendmsg+0x18fd/0x21a0 [ 1276.431626][ T3648] ____sys_sendmsg+0x80a/0x9f0 [ 1276.438216][ T3648] ___sys_sendmsg+0x2a5/0x360 [ 1276.444722][ T3648] __sys_sendmmsg+0x27c/0x4e0 [ 1276.451233][ T3648] __x64_sys_sendmmsg+0xa0/0xc0 [ 1276.457917][ T3648] do_syscall_64+0x15f/0xf80 [ 1276.464339][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.472082][ T3648] INITIAL USE at: [ 1276.476068][ T3648] lock_acquire+0x106/0x350 [ 1276.482320][ T3648] _raw_spin_lock_irqsave+0x40/0x60 [ 1276.489270][ T3648] vt_reset_unicode+0x2b/0x160 [ 1276.495780][ T3648] reset_vc+0x68/0x1b0 [ 1276.501598][ T3648] vc_init+0x70/0x4a0 [ 1276.507328][ T3648] con_init+0x377/0x6a0 [ 1276.513233][ T3648] console_init+0x10b/0x4a0 [ 1276.519482][ T3648] start_kernel+0x230/0x3e0 [ 1276.525730][ T3648] x86_64_start_reservations+0x24/0x30 [ 1276.532969][ T3648] x86_64_start_kernel+0x143/0x1c0 [ 1276.539835][ T3648] common_startup_64+0x13e/0x147 [ 1276.546512][ T3648] } [ 1276.549123][ T3648] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1276.557034][ T3648] -> (&tty->flow.lock){....}-{3:3} { [ 1276.562341][ T3648] INITIAL USE at: [ 1276.566254][ T3648] lock_acquire+0x106/0x350 [ 1276.572333][ T3648] _raw_spin_lock_irqsave+0x40/0x60 [ 1276.579100][ T3648] start_tty+0x1b/0x50 [ 1276.584744][ T3648] n_tty_set_termios+0xa7c/0x10a0 [ 1276.591357][ T3648] tty_set_termios+0xdb3/0x1800 [ 1276.597778][ T3648] set_termios+0x566/0x710 [ 1276.603770][ T3648] tty_mode_ioctl+0x4a6/0x7d0 [ 1276.610025][ T3648] tty_ioctl+0x9c5/0xde0 [ 1276.615836][ T3648] __se_sys_ioctl+0xfc/0x170 [ 1276.621998][ T3648] do_syscall_64+0x15f/0xf80 [ 1276.628165][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.635625][ T3648] } [ 1276.638124][ T3648] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1276.646813][ T3648] ... acquired at: [ 1276.650618][ T3648] _raw_spin_lock_irqsave+0x40/0x60 [ 1276.655997][ T3648] stop_tty+0x2f/0x140 [ 1276.660287][ T3648] kbd_event+0x2e80/0x4080 [ 1276.664881][ T3648] input_handle_events_default+0xd4/0x1a0 [ 1276.670780][ T3648] input_pass_values+0x288/0x890 [ 1276.675899][ T3648] input_event_dispose+0x330/0x6b0 [ 1276.681210][ T3648] input_inject_event+0x1dc/0x330 [ 1276.686422][ T3648] evdev_write+0x325/0x4c0 [ 1276.691015][ T3648] vfs_write+0x29a/0xb90 [ 1276.695435][ T3648] ksys_write+0x150/0x270 [ 1276.699943][ T3648] do_syscall_64+0x15f/0xf80 [ 1276.704722][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.710790][ T3648] [ 1276.713115][ T3648] [ 1276.713115][ T3648] the dependencies between the lock to be acquired [ 1276.713124][ T3648] and SOFTIRQ-irq-unsafe lock: [ 1276.726640][ T3648] -> (tasklist_lock){.+.+}-{3:3} { [ 1276.731959][ T3648] HARDIRQ-ON-R at: [ 1276.736120][ T3648] lock_acquire+0x106/0x350 [ 1276.742635][ T3648] _raw_read_lock+0x36/0x50 [ 1276.749146][ T3648] __do_wait+0xde/0x740 [ 1276.755309][ T3648] do_wait+0x1e7/0x510 [ 1276.761401][ T3648] kernel_wait+0xd6/0x1c0 [ 1276.767734][ T3648] call_usermodehelper_exec_work+0xbe/0x230 [ 1276.775631][ T3648] process_scheduled_works+0xb5d/0x1860 [ 1276.783185][ T3648] worker_thread+0xa53/0xfc0 [ 1276.789781][ T3648] kthread+0x388/0x470 [ 1276.795862][ T3648] ret_from_fork+0x514/0xb70 [ 1276.802481][ T3648] ret_from_fork_asm+0x1a/0x30 [ 1276.809275][ T3648] SOFTIRQ-ON-R at: [ 1276.813455][ T3648] lock_acquire+0x106/0x350 [ 1276.819973][ T3648] _raw_read_lock+0x36/0x50 [ 1276.826483][ T3648] __do_wait+0xde/0x740 [ 1276.832644][ T3648] do_wait+0x1e7/0x510 [ 1276.838721][ T3648] kernel_wait+0xd6/0x1c0 [ 1276.845067][ T3648] call_usermodehelper_exec_work+0xbe/0x230 [ 1276.852974][ T3648] process_scheduled_works+0xb5d/0x1860 [ 1276.860532][ T3648] worker_thread+0xa53/0xfc0 [ 1276.867130][ T3648] kthread+0x388/0x470 [ 1276.873200][ T3648] ret_from_fork+0x514/0xb70 [ 1276.879804][ T3648] ret_from_fork_asm+0x1a/0x30 [ 1276.886600][ T3648] INITIAL USE at: [ 1276.890673][ T3648] lock_acquire+0x106/0x350 [ 1276.897127][ T3648] _raw_write_lock_irq+0x3d/0x50 [ 1276.903994][ T3648] copy_process+0x2b5e/0x4450 [ 1276.910599][ T3648] kernel_clone+0x284/0x8f0 [ 1276.917027][ T3648] user_mode_thread+0x110/0x180 [ 1276.923794][ T3648] rest_init+0x23/0x300 [ 1276.929870][ T3648] start_kernel+0x38a/0x3e0 [ 1276.936292][ T3648] x86_64_start_reservations+0x24/0x30 [ 1276.943677][ T3648] x86_64_start_kernel+0x143/0x1c0 [ 1276.950715][ T3648] common_startup_64+0x13e/0x147 [ 1276.957657][ T3648] INITIAL READ USE at: [ 1276.962167][ T3648] lock_acquire+0x106/0x350 [ 1276.969043][ T3648] _raw_read_lock+0x36/0x50 [ 1276.975899][ T3648] __do_wait+0xde/0x740 [ 1276.982433][ T3648] do_wait+0x1e7/0x510 [ 1276.988868][ T3648] kernel_wait+0xd6/0x1c0 [ 1276.995560][ T3648] call_usermodehelper_exec_work+0xbe/0x230 [ 1277.003823][ T3648] process_scheduled_works+0xb5d/0x1860 [ 1277.011734][ T3648] worker_thread+0xa53/0xfc0 [ 1277.018684][ T3648] kthread+0x388/0x470 [ 1277.025109][ T3648] ret_from_fork+0x514/0xb70 [ 1277.032085][ T3648] ret_from_fork_asm+0x1a/0x30 [ 1277.039203][ T3648] } [ 1277.041875][ T3648] ... key at: [] tasklist_lock+0x18/0x40 [ 1277.049777][ T3648] ... acquired at: [ 1277.053756][ T3648] _raw_read_lock+0x36/0x50 [ 1277.058444][ T3648] send_sigurg+0x12b/0x420 [ 1277.063043][ T3648] sk_send_sigurg+0x6c/0x2e0 [ 1277.067813][ T3648] queue_oob+0x42c/0x4f0 [ 1277.072238][ T3648] unix_stream_sendmsg+0xcb1/0xe80 [ 1277.077539][ T3648] ____sys_sendmsg+0x972/0x9f0 [ 1277.082477][ T3648] ___sys_sendmsg+0x2a5/0x360 [ 1277.087328][ T3648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1277.092443][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.097219][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.103301][ T3648] [ 1277.105628][ T3648] -> (&f_owner->lock){...-}-{3:3} { [ 1277.110944][ T3648] IN-SOFTIRQ-R at: [ 1277.115026][ T3648] lock_acquire+0x106/0x350 [ 1277.121372][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.128412][ T3648] send_sigio+0x38/0x370 [ 1277.134483][ T3648] kill_fasync+0x24d/0x4d0 [ 1277.140744][ T3648] sock_wake_async+0x137/0x160 [ 1277.147338][ T3648] sock_def_readable+0x3c1/0x550 [ 1277.154108][ T3648] tcp_data_queue+0x1e6f/0x5ea0 [ 1277.160796][ T3648] tcp_rcv_established+0xf86/0x2800 [ 1277.167825][ T3648] tcp_v4_do_rcv+0x964/0x13c0 [ 1277.174342][ T3648] tcp_v4_rcv+0x2681/0x2ff0 [ 1277.180679][ T3648] ip_protocol_deliver_rcu+0x221/0x440 [ 1277.187975][ T3648] ip_local_deliver_finish+0x3bb/0x6f0 [ 1277.195267][ T3648] NF_HOOK+0x336/0x3c0 [ 1277.201173][ T3648] NF_HOOK+0x336/0x3c0 [ 1277.207074][ T3648] process_backlog+0xaa3/0x1950 [ 1277.213762][ T3648] __napi_poll+0xae/0x340 [ 1277.219928][ T3648] net_rx_action+0x627/0xf70 [ 1277.226358][ T3648] handle_softirqs+0x22a/0x840 [ 1277.232968][ T3648] do_softirq+0x76/0xd0 [ 1277.238963][ T3648] __local_bh_enable_ip+0xf8/0x130 [ 1277.245939][ T3648] sk_stream_wait_memory+0x72b/0xf80 [ 1277.253063][ T3648] tcp_sendmsg_locked+0x238a/0x5360 [ 1277.260092][ T3648] tcp_sendmsg+0x2f/0x50 [ 1277.266180][ T3648] __sys_sendto+0x5de/0x710 [ 1277.272529][ T3648] __x64_sys_sendto+0xde/0x100 [ 1277.279119][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.285538][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.293256][ T3648] INITIAL USE at: [ 1277.297248][ T3648] lock_acquire+0x106/0x350 [ 1277.303498][ T3648] _raw_write_lock_irq+0x3d/0x50 [ 1277.310176][ T3648] __f_setown+0x67/0x370 [ 1277.316169][ T3648] generic_setlease+0xacf/0xfd0 [ 1277.322761][ T3648] do_fcntl_add_lease+0x35e/0x470 [ 1277.329533][ T3648] fcntl_setlease+0x123/0x180 [ 1277.335956][ T3648] do_fcntl+0x8b3/0x1a20 [ 1277.341956][ T3648] __se_sys_fcntl+0xc8/0x150 [ 1277.348284][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.354618][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.362249][ T3648] INITIAL READ USE at: [ 1277.366670][ T3648] lock_acquire+0x106/0x350 [ 1277.373365][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.380755][ T3648] send_sigio+0x38/0x370 [ 1277.387200][ T3648] kill_fasync+0x24d/0x4d0 [ 1277.393793][ T3648] sock_wake_async+0x137/0x160 [ 1277.400741][ T3648] sk_wake_async+0x184/0x280 [ 1277.407520][ T3648] unix_release_sock+0x74f/0xc80 [ 1277.414635][ T3648] unix_release+0x92/0xd0 [ 1277.421140][ T3648] sock_close+0xc3/0x240 [ 1277.427569][ T3648] __fput+0x44f/0xa60 [ 1277.433734][ T3648] task_work_run+0x1d9/0x270 [ 1277.440503][ T3648] exit_to_user_mode_loop+0xed/0x480 [ 1277.447975][ T3648] do_syscall_64+0x33e/0xf80 [ 1277.454747][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.462817][ T3648] } [ 1277.465419][ T3648] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1277.474370][ T3648] ... acquired at: [ 1277.478264][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.483644][ T3648] send_sigio+0x38/0x370 [ 1277.488068][ T3648] kill_fasync+0x24d/0x4d0 [ 1277.492664][ T3648] sock_wake_async+0x137/0x160 [ 1277.497619][ T3648] sk_wake_async+0x184/0x280 [ 1277.502388][ T3648] unix_release_sock+0x74f/0xc80 [ 1277.507699][ T3648] unix_release+0x92/0xd0 [ 1277.512210][ T3648] sock_close+0xc3/0x240 [ 1277.516660][ T3648] __fput+0x44f/0xa60 [ 1277.520823][ T3648] task_work_run+0x1d9/0x270 [ 1277.525592][ T3648] exit_to_user_mode_loop+0xed/0x480 [ 1277.531072][ T3648] do_syscall_64+0x33e/0xf80 [ 1277.535848][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.541945][ T3648] [ 1277.544272][ T3648] -> (&new->fa_lock){...-}-{3:3} { [ 1277.549405][ T3648] IN-SOFTIRQ-R at: [ 1277.553394][ T3648] lock_acquire+0x106/0x350 [ 1277.559555][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.566410][ T3648] kill_fasync+0x199/0x4d0 [ 1277.572481][ T3648] sock_wake_async+0x137/0x160 [ 1277.578940][ T3648] sock_def_readable+0x3c1/0x550 [ 1277.585542][ T3648] tcp_data_queue+0x1e6f/0x5ea0 [ 1277.592067][ T3648] tcp_rcv_established+0xf86/0x2800 [ 1277.598926][ T3648] tcp_v4_do_rcv+0x964/0x13c0 [ 1277.605285][ T3648] tcp_v4_rcv+0x2681/0x2ff0 [ 1277.611465][ T3648] ip_protocol_deliver_rcu+0x221/0x440 [ 1277.618582][ T3648] ip_local_deliver_finish+0x3bb/0x6f0 [ 1277.625703][ T3648] NF_HOOK+0x336/0x3c0 [ 1277.631434][ T3648] NF_HOOK+0x336/0x3c0 [ 1277.637171][ T3648] process_backlog+0xaa3/0x1950 [ 1277.643686][ T3648] __napi_poll+0xae/0x340 [ 1277.649675][ T3648] net_rx_action+0x627/0xf70 [ 1277.655937][ T3648] handle_softirqs+0x22a/0x840 [ 1277.662369][ T3648] do_softirq+0x76/0xd0 [ 1277.668191][ T3648] __local_bh_enable_ip+0xf8/0x130 [ 1277.674968][ T3648] sk_stream_wait_memory+0x72b/0xf80 [ 1277.681932][ T3648] tcp_sendmsg_locked+0x238a/0x5360 [ 1277.688793][ T3648] tcp_sendmsg+0x2f/0x50 [ 1277.694692][ T3648] __sys_sendto+0x5de/0x710 [ 1277.700844][ T3648] __x64_sys_sendto+0xde/0x100 [ 1277.707263][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.713517][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.721110][ T3648] INITIAL USE at: [ 1277.725054][ T3648] lock_acquire+0x106/0x350 [ 1277.731134][ T3648] _raw_write_lock_irq+0x3d/0x50 [ 1277.737642][ T3648] fasync_remove_entry+0xf1/0x1c0 [ 1277.744239][ T3648] __fput+0x890/0xa60 [ 1277.749801][ T3648] task_work_run+0x1d9/0x270 [ 1277.755964][ T3648] exit_to_user_mode_loop+0xed/0x480 [ 1277.762825][ T3648] do_syscall_64+0x33e/0xf80 [ 1277.768986][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.776443][ T3648] INITIAL READ USE at: [ 1277.780778][ T3648] lock_acquire+0x106/0x350 [ 1277.787287][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.794500][ T3648] kill_fasync+0x199/0x4d0 [ 1277.800921][ T3648] sock_wake_async+0x137/0x160 [ 1277.807691][ T3648] sk_wake_async+0x184/0x280 [ 1277.814285][ T3648] unix_release_sock+0x74f/0xc80 [ 1277.821235][ T3648] unix_release+0x92/0xd0 [ 1277.827569][ T3648] sock_close+0xc3/0x240 [ 1277.833816][ T3648] __fput+0x44f/0xa60 [ 1277.839809][ T3648] task_work_run+0x1d9/0x270 [ 1277.846416][ T3648] exit_to_user_mode_loop+0xed/0x480 [ 1277.853710][ T3648] do_syscall_64+0x33e/0xf80 [ 1277.860312][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.868207][ T3648] } [ 1277.870705][ T3648] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1277.879388][ T3648] ... acquired at: [ 1277.883193][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.888613][ T3648] kill_fasync+0x199/0x4d0 [ 1277.893211][ T3648] __start_tty+0x18c/0x220 [ 1277.897820][ T3648] start_tty+0x26/0x50 [ 1277.902073][ T3648] n_tty_set_termios+0xa7c/0x10a0 [ 1277.907282][ T3648] tty_set_termios+0xdb3/0x1800 [ 1277.912313][ T3648] set_termios+0x566/0x710 [ 1277.916910][ T3648] tty_mode_ioctl+0x4a6/0x7d0 [ 1277.921768][ T3648] tty_ioctl+0x9c5/0xde0 [ 1277.926189][ T3648] __se_sys_ioctl+0xfc/0x170 [ 1277.930962][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.935733][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.941808][ T3648] [ 1277.944137][ T3648] [ 1277.944137][ T3648] stack backtrace: [ 1277.950043][ T3648] CPU: 1 UID: 0 PID: 3648 Comm: syz.1.11059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.950081][ T3648] Tainted: [L]=SOFTLOCKUP [ 1277.950087][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1277.950104][ T3648] Call Trace: [ 1277.950114][ T3648] [ 1277.950122][ T3648] dump_stack_lvl+0xe8/0x150 [ 1277.950148][ T3648] __lock_acquire+0x2a94/0x2cf0 [ 1277.950198][ T3648] ? kill_fasync+0x199/0x4d0 [ 1277.950215][ T3648] lock_acquire+0x106/0x350 [ 1277.950239][ T3648] ? kill_fasync+0x199/0x4d0 [ 1277.950258][ T3648] ? ldsem_down_read_trylock+0x13d/0x1b0 [ 1277.950279][ T3648] ? tty_ldisc_ref+0x1c/0x90 [ 1277.950303][ T3648] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1277.950325][ T3648] _raw_read_lock_irqsave+0x48/0x60 [ 1277.950346][ T3648] ? kill_fasync+0x199/0x4d0 [ 1277.950363][ T3648] kill_fasync+0x199/0x4d0 [ 1277.950380][ T3648] ? kill_fasync+0x53/0x4d0 [ 1277.950398][ T3648] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1277.950418][ T3648] __start_tty+0x18c/0x220 [ 1277.950443][ T3648] start_tty+0x26/0x50 [ 1277.950466][ T3648] n_tty_set_termios+0xa7c/0x10a0 [ 1277.950489][ T3648] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1277.950509][ T3648] tty_set_termios+0xdb3/0x1800 [ 1277.950534][ T3648] ? __pfx_tty_set_termios+0x10/0x10 [ 1277.950559][ T3648] ? __sanitizer_cov_trace_pc+0x42/0x70 [ 1277.950580][ T3648] set_termios+0x566/0x710 [ 1277.950605][ T3648] ? __pfx_set_termios+0x10/0x10 [ 1277.950628][ T3648] ? tty_ldisc_ref_wait+0x25/0x70 [ 1277.950653][ T3648] ? __ia32_sys_rt_sigreturn+0x7dc/0x8e0 [ 1277.950681][ T3648] tty_mode_ioctl+0x4a6/0x7d0 [ 1277.950705][ T3648] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1277.950729][ T3648] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1277.950755][ T3648] ? n_tty_ioctl_helper+0x84/0x4d0 [ 1277.950779][ T3648] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1277.950798][ T3648] tty_ioctl+0x9c5/0xde0 [ 1277.950813][ T3648] ? __pfx_tty_ioctl+0x10/0x10 [ 1277.950827][ T3648] __se_sys_ioctl+0xfc/0x170 [ 1277.950847][ T3648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.950863][ T3648] do_syscall_64+0x15f/0xf80 [ 1277.950892][ T3648] ? clear_bhb_loop+0x40/0x90 [ 1277.950910][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.950927][ T3648] RIP: 0033:0x7f8b6539c819 [ 1277.950943][ T3648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.950958][ T3648] RSP: 002b:00007f8b661f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.950976][ T3648] RAX: ffffffffffffffda RBX: 00007f8b65616090 RCX: 00007f8b6539c819 [ 1277.950989][ T3648] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1277.951001][ T3648] RBP: 00007f8b65432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1277.951011][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.951022][ T3648] R13: 00007f8b65616128 R14: 00007f8b65616090 R15: 00007f8b6573fa48 [ 1277.951040][ T3648] [ 1277.979083][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.246395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.432021][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.462431][T21260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.470775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.512133][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.520833][T20043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.529460][ T3377] erspan0: left promiscuous mode [ 1278.543513][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.901346][T20043] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1279.071462][T20043] usb 5-1: Using ep0 maxpacket: 8 [ 1279.092590][T20043] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.111314][T20043] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1279.131301][T20043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.143325][T20043] usb 5-1: config 0 descriptor?? [ 1279.163585][T20043] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1279.451370][T20043] usb 5-1: USB disconnect, device number 117 [ 1279.621538][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.661838][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.701920][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.742544][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.781521][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.021970][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.030156][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.038308][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.046626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.054950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.141454][T18795] net_ratelimit: 2 callbacks suppressed [ 1285.141473][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog